Infekce : URL:Mal

Zpráva

CookyCortez · #1 Příspěvek od **CookyCortez** » 15 čer 2015 13:50

Dobrý den, na mém notebooku se dnes začalo vyskytovat toto hlášení, kdykoliv prohlížím internet, vyskakuje to velmi často a nevím si s tím rady. Prosím o pomoc.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by kadle_000 (administrator) on JAMAILL on 15-06-2015 14:30:53
Running from C:\Users\kadle_000\Desktop
Loaded Profiles: kadle_000 (Available Profiles: kadle_000)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Company) C:\Windows\SysWOW64\flcdlock.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dropbox, Inc.) C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(BitTorrent, Inc.) C:\Users\kadle_000\AppData\Roaming\uTorrent\utorrent.exe
(OldTimer Tools) C:\Users\kadle_000\Desktop\OTL.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(forum.viry.cz) C:\Users\kadle_000\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-30] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1702912 2013-02-04] (IDT, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285832 2013-01-02] (Intel Corporation)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [683656 2013-02-07] (PDF Complete Inc)
HKLM-x32\...\Run: [BtTray] => c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [379904 2013-01-10] (IVT Corporation)
HKLM-x32\...\Run: [CLWCSM] => c:\Program Files (x86)\CyberLink\Webcam Sharing Manager\StreamProvider.exe [249096 2013-02-20] (cyberlink)
HKLM-x32\...\Run: [File Sanitizer] => c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [13685464 2013-03-06] (Hewlett-Packard)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2013-02-01] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-02-01] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111136 2012-11-21] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [493088 2012-11-21] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3499896 2014-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-14] (Avast Software s.r.o.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [T-Mobile CManager] => C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2166552 2013-10-31] (Gemfor s.r.o.)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Google Update] => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-08-25] (Google Inc.)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Spotify Web Helper] => C:\Users\kadle_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-04-30] (Spotify Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Spotify] => C:\Users\kadle_000\AppData\Roaming\Spotify\Spotify.exe [7168568 2015-04-30] (Spotify Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {3e552b6f-8e99-11e4-bef2-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4812704a-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {48127630-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4d0d18eb-8f6d-11e4-bef3-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {aec6b1f5-8703-11e4-bedf-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {faf170ae-8162-11e4-bec5-0c84dcca53cc} - "G:\Autorun.exe"
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\kadle_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-10]
ShortcutTarget: Dropbox.lnk -> C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-14] (Avast Software s.r.o.)
BootExecute: autocheck autochk * sh4native Sh4RemovalaswBoot.exe /M:46e5e8c665 /wow /dir:"C:\Program Files\AVAST Software\Avast"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-17] (Avast Software s.r.o.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-18] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO: PriceLesS -> {FDA97D91-E5D2-4B48-BDB8-0D6AEE6EA989} -> C:\Program Files (x86)\PriceLesS\jHY4cyUOEEaaY6.x64.dll [2015-06-15] ()
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-02-25] (Eyeo GmbH)
BHO-x32: HP File Sanitizer -> {3134413B-49B4-425C-98A5-893C1F195601} -> c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2013-03-06] (Hewlett-Packard)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-18] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-17] (Avast Software s.r.o.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-18] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO-x32: PriceLesS -> {FDA97D91-E5D2-4B48-BDB8-0D6AEE6EA989} -> C:\Program Files (x86)\PriceLesS\jHY4cyUOEEaaY6.dll [2015-06-15] ()
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH)
Toolbar: HKLM - No Name - {31264A33-A653-46C4-AF49-1232C59A7DA5} - No File
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll [2015-06-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-18] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2013-02-27] (DigitalPersona, Inc.)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @talk.google.com/GoogleTalkPlugin -> C:\Users\kadle_000\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @talk.google.com/O1DPlugin -> C:\Users\kadle_000\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @tools.google.com/Google Update;version=3 -> C:\Users\kadle_000\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @tools.google.com/Google Update;version=9 -> C:\Users\kadle_000\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\kadle_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-09-05] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\kadle_000\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\kadle_000\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2013-08-22]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-08-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-17]

Chrome:
=======
CHR Profile: C:\Users\kadle_000\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-05-08]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-17]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-17]
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2013-02-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-14] (Avast Software s.r.o.)
S4 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1626872 2013-01-31] (IVT Corporation)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-19] (BitRaider, LLC)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-10-14] (BitRaider, LLC)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2013-01-10] (IVT Corporation) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [491320 2013-03-12] (DigitalPersona, Inc.)
R2 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [556856 2013-03-04] (Hewlett-Packard Company)
S3 HotSpotSrv; C:\Program Files (x86)\Hewlett-Packard\HP Wireless Hotspot\HotSpotSrv.exe [372920 2013-09-18] (Hewlett-Packard Development Company, L.P.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-10-16] (Hewlett-Packard Company)
R3 hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1006424 2013-01-23] (Hewlett-Packard Company) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2015-02-08] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [130592 2012-10-22] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166432 2012-10-22] (Intel Corporation)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\MbnExt.dll [417128 2013-12-02] (Gemfor s.r.o.)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1135752 2013-02-07] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [332800 2013-02-04] (IDT, Inc.) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-08-26] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-14] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-14] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-14] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-14] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-14] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-14] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-14] ()
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-10-14] (BitRaider)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49632 2012-12-05] (Ralink Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 clwcsm; C:\Windows\system32\DRIVERS\clwcsm.sys [42944 2013-02-19] (CyberLink Corporation)
R3 DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [65752 2013-02-18] (Hewlett-Packard Company)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-08-11] (Disc Soft Ltd)
S3 h647906; C:\Windows\System32\drivers\h647906.sys [63856 2008-08-08] (Your Corporation)
S3 h648101; C:\Windows\System32\drivers\h648101.sys [65776 2008-08-08] (Your Corporation)
S3 h648103; C:\Windows\System32\drivers\h648103.sys [62960 2008-08-08] (Your Corporation)
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [41272 2008-08-08] (Your Corporation)
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [43192 2008-08-08] (Your Corporation)
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [40856 2008-08-08] (Your Corporation)
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2013-03-18] (WinMagic, Inc.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-23] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [448072 2013-02-01] (RTS Corporation)
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [212672 2013-03-27] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131928 2013-01-07] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28400 2013-01-11] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [32496 2013-01-11] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1446904 2013-02-22] (Sunplus)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-02-08] (Hewlett-Packard Development Company, L.P.)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-15 14:30 - 2015-06-15 14:31 - 00030912 _____ C:\Users\kadle_000\Desktop\FRST.txt
2015-06-15 14:30 - 2015-06-15 14:30 - 00000000 ____D C:\FRST
2015-06-15 14:29 - 2015-06-15 14:29 - 00112640 _____ (forum.viry.cz) C:\Users\kadle_000\Desktop\FRSTLauncher.exe
2015-06-15 14:26 - 2015-06-15 14:26 - 02109952 _____ (Farbar) C:\Users\kadle_000\Desktop\FRST64.exe
2015-06-15 14:25 - 2015-06-15 14:30 - 00000000 ____D C:\Users\kadle_000\Desktop\Očista
2015-06-15 14:24 - 2015-06-15 14:24 - 00000512 _____ C:\PhysicalMBR.bin
2015-06-15 14:14 - 2015-06-15 14:14 - 00602112 _____ (OldTimer Tools) C:\Users\kadle_000\Desktop\OTL.exe
2015-06-15 13:59 - 2015-06-15 14:24 - 00000000 ____D C:\Users\kadle_000\Downloads\[R.G. Mechanics] Dishonored - Game of the Year Edition
2015-06-15 13:19 - 2015-06-15 13:19 - 00001089 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-06-15 13:19 - 2015-06-15 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-06-15 13:16 - 2015-06-15 13:17 - 00000000 ____D C:\ProgramData\{fc80dbf6-26fb-1807-fc80-0dbf626f6fd8}
2015-06-15 13:16 - 2015-06-15 13:16 - 00000000 ____D C:\ProgramData\2929631597531327231
2015-06-15 13:16 - 2015-06-15 13:16 - 00000000 ____D C:\Program Files (x86)\PriceLesS
2015-06-15 12:49 - 2015-06-15 12:49 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-06-15 12:49 - 2015-06-15 12:49 - 00000000 _____ C:\WINDOWS\setupact.log
2015-06-15 12:02 - 2015-06-15 12:02 - 00000000 ____D C:\Users\kadle_000\Downloads\Port Royale 2 (September 13, 2004)
2015-06-15 11:33 - 2015-06-15 11:34 - 07568457 _____ (Bethesda Softworks ) C:\Users\kadle_000\Desktop\Dishonored-čeština--(Up-By-WeZZi-CZ).exe
2015-06-14 23:53 - 2015-06-15 00:49 - 00000000 ____D C:\Users\kadle_000\Downloads\Red 2 (2013) [1080p]
2015-06-14 22:04 - 2015-05-25 16:47 - 968937472 _____ C:\Users\kadle_000\Desktop\Red-2-cz-dabing-2013.avi
2015-06-14 21:25 - 2015-06-14 21:30 - 00000000 ____D C:\Users\kadle_000\Downloads\Super 8 (2011)
2015-06-14 21:18 - 2015-06-14 21:21 - 00009113 _____ C:\Users\kadle_000\Desktop\Filmy whishlist.xlsx
2015-06-14 16:51 - 2015-06-14 16:51 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-06-14 16:51 - 2015-06-14 16:51 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-06-12 10:09 - 2015-06-12 10:27 - 00010453 _____ C:\Users\kadle_000\Desktop\Nábytek.xlsx
2015-06-11 19:05 - 2015-06-15 14:32 - 00001078 _____ C:\WINDOWS\system32dbgraw.bmp
2015-06-11 15:12 - 2015-06-11 15:17 - 366761256 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E05.HDTV.XviD-LOL.avi
2015-06-11 15:11 - 2015-06-11 15:18 - 366789692 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E03.HDTV.XviD-LOL.avi
2015-06-11 15:11 - 2015-06-11 15:16 - 366861222 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E04.HDTV.XviD-LOL.avi
2015-06-11 14:59 - 2015-06-11 15:04 - 366734654 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E02.HDTV.XviD-LOL.avi
2015-06-11 14:13 - 2015-06-11 15:19 - 00000000 ____D C:\Users\kadle_000\Downloads\Subs
2015-06-11 14:13 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-06-11 14:13 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-06-11 14:13 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-06-11 14:13 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-06-11 14:13 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-06-11 14:13 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-06-11 14:13 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-06-11 14:12 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-06-11 14:12 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-06-11 14:12 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-06-11 14:12 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-06-11 14:12 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-06-11 14:09 - 2015-06-11 14:12 - 366800676 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E01.HDTV.XviD-LOL.avi
2015-06-11 13:23 - 2011-05-14 12:05 - 00000000 ____D C:\Users\Public\Documents\The Witcher
2015-06-11 13:04 - 2015-06-11 13:04 - 00000000 ____D C:\Program Files (x86)\R.G. Catalyst
2015-06-10 22:23 - 2015-06-10 22:23 - 00000000 ____D C:\Users\kadle_000\AppData\Local\GWX
2015-06-10 18:30 - 2015-06-03 18:18 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-06-10 18:30 - 2015-06-03 18:18 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-10 16:33 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-06-10 16:33 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-06-10 16:33 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-06-10 16:33 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-06-10 16:33 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-06-10 16:33 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-06-10 16:33 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-06-10 16:33 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-06-10 16:33 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-06-10 16:33 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-06-10 16:33 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-06-10 16:33 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-06-10 16:33 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-06-10 16:33 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-06-10 16:33 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-06-10 16:33 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-06-10 16:33 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-06-10 16:33 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-06-10 16:33 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-06-10 16:33 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-06-10 16:33 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-06-10 16:33 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-06-10 16:33 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-06-10 16:33 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-06-10 16:33 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-06-10 16:33 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-06-10 16:33 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-06-10 16:33 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-06-10 16:33 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-06-10 16:33 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-06-10 16:33 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-06-10 16:33 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-06-10 16:33 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-06-10 16:33 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-06-10 16:33 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-06-10 16:33 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-06-10 16:33 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-06-10 16:33 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-06-10 16:33 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-06-10 16:33 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-06-10 16:33 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-06-10 16:33 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-06-10 16:33 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-06-10 16:33 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-06-10 16:33 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-06-10 16:33 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-10 16:33 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-06-10 16:33 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-10 16:33 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-06-10 16:33 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-06-10 16:33 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-06-10 16:33 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-06-10 16:33 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-06-10 16:33 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-06-10 16:33 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-06-10 16:33 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-06-10 16:33 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-06-10 16:33 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-06-10 16:33 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-06-10 16:33 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-06-10 16:32 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-06-10 11:40 - 2015-06-10 14:46 - 00000023 _____ C:\WINDOWS\BlendSettings.ini
2015-06-10 11:31 - 2015-06-10 11:31 - 00000000 ____D C:\Users\kadle_000\AppData\Local\Oblivion
2015-06-10 10:50 - 2015-06-10 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oblivion
2015-06-10 10:40 - 2015-06-10 10:40 - 00000000 ____D C:\Steam
2015-06-08 14:21 - 2015-06-15 13:40 - 01303691 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-08 13:16 - 2015-06-08 13:16 - 00002796 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-06-08 13:16 - 2015-06-08 13:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-06-06 14:34 - 2015-06-06 15:14 - 731426816 _____ C:\Users\kadle_000\Downloads\Red(2010)cz(BY-THEBLOD).avi
2015-06-06 00:04 - 2015-06-06 00:04 - 00000000 ____D C:\Users\kadle_000\AppData\Local\FLT
2015-06-05 23:38 - 2015-06-05 23:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XCOM Enemy Unknown
2015-06-05 23:17 - 2015-06-05 23:18 - 00000000 ____D C:\Program Files (x86)\XCOM Enemy Unknown
2015-06-05 22:08 - 2015-06-05 22:08 - 00000000 ____D C:\Users\kadle_000\Documents\Klei
2015-06-05 22:01 - 2015-06-05 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Invisible Inc
2015-06-05 16:25 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-06-05 16:25 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-06-04 18:57 - 2015-06-04 19:36 - 00000000 ____D C:\Users\kadle_000\Downloads\Kingsman The Secret Service (2014) [1080p]
2015-06-02 23:25 - 2015-06-02 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carmageddon_Reincarnation

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-15 14:29 - 2014-10-30 00:31 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\uTorrent
2015-06-15 14:18 - 2014-08-25 10:51 - 00000994 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job
2015-06-15 14:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-15 13:48 - 2014-08-11 01:15 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-06-15 13:25 - 2014-11-20 14:25 - 00001368 _____ C:\WINDOWS\Tasks\HQWGC.job
2015-06-15 13:25 - 2014-08-07 22:11 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3245855052-3897587913-387116647-1005
2015-06-15 13:17 - 2014-03-24 19:11 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-06-15 09:14 - 2014-09-19 13:59 - 00003982 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{14C38F50-E96F-4085-B3A5-E59C0A732B8D}
2015-06-14 22:14 - 2014-03-18 17:33 - 01938474 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-14 22:14 - 2014-03-18 16:54 - 00803244 _____ C:\WINDOWS\system32\perfh005.dat
2015-06-14 22:14 - 2014-03-18 16:54 - 00184236 _____ C:\WINDOWS\system32\perfc005.dat
2015-06-14 20:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-14 20:18 - 2014-08-25 10:51 - 00000942 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job
2015-06-14 17:31 - 2014-08-11 10:15 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\DAEMON Tools Lite
2015-06-14 17:27 - 2015-01-23 14:08 - 00000000 ____D C:\Program Files (x86)\4PLAY60
2015-06-14 17:23 - 2014-08-11 01:15 - 00003802 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-06-14 17:08 - 2015-03-04 13:24 - 00000000 ___RD C:\Users\kadle_000\Dropbox
2015-06-14 17:08 - 2015-03-04 13:20 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\Dropbox
2015-06-14 17:07 - 2014-08-26 23:09 - 00000000 ___DO C:\Users\kadle_000\OneDrive
2015-06-14 17:02 - 2013-05-09 12:50 - 00000000 ____D C:\ProgramData\PDFC
2015-06-14 17:01 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-14 16:54 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-06-14 16:52 - 2015-04-17 10:58 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-06-14 16:51 - 2015-04-17 10:58 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00272248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00137288 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00089944 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00065736 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00029168 _____ C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-06-12 13:36 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-06-12 12:46 - 2014-11-20 15:30 - 00000000 ____D C:\Games
2015-06-12 12:46 - 2014-08-26 17:39 - 00000000 ___RD C:\Users\kadle_000\Desktop\Herní koutek
2015-06-11 19:14 - 2015-04-08 12:10 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\MediaMonkey
2015-06-11 19:06 - 2015-02-19 19:55 - 00000000 ___RD C:\Users\kadle_000\Desktop\Nemazat
2015-06-11 15:09 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-11 15:01 - 2014-08-31 19:58 - 00003186 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForkadle_000
2015-06-11 15:01 - 2014-08-31 19:58 - 00000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job
2015-06-11 13:36 - 2014-12-22 17:36 - 00000000 ____D C:\Program Files\CCleaner
2015-06-11 02:05 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-06-11 00:30 - 2014-11-20 14:29 - 00000000 __SHD C:\Users\kadle_000\AppData\Local\EmieBrowserModeList
2015-06-11 00:30 - 2014-09-19 13:59 - 00000000 __SHD C:\Users\kadle_000\AppData\Local\EmieUserList
2015-06-11 00:30 - 2014-09-19 13:59 - 00000000 __SHD C:\Users\kadle_000\AppData\Local\EmieSiteList
2015-06-10 18:27 - 2013-08-22 16:44 - 00494600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-10 18:16 - 2015-04-04 23:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-06-10 18:16 - 2015-04-04 23:10 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-06-10 18:16 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-06-10 16:46 - 2014-08-11 20:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 16:46 - 2014-05-04 14:50 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-06-10 16:39 - 2014-05-04 14:50 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-10 16:39 - 2012-07-26 07:26 - 00000269 _____ C:\WINDOWS\win.ini
2015-06-10 11:31 - 2014-08-13 20:54 - 00000000 ____D C:\Users\kadle_000\Documents\My Games
2015-06-09 18:58 - 2015-04-08 11:56 - 00000000 ____D C:\Users\kadle_000\AppData\Local\Spotify
2015-06-09 18:47 - 2015-04-08 11:56 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\Spotify
2015-06-08 13:30 - 2014-08-10 17:13 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-08 12:43 - 2014-12-11 20:22 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-06-08 12:43 - 2014-07-20 13:39 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-06-07 14:10 - 2014-08-27 00:23 - 00000052 _____ C:\WINDOWS\SysWOW64\DOErrors.log
2015-06-05 20:01 - 2015-02-15 18:45 - 00000000 ____D C:\WarThunder
2015-06-05 19:53 - 2015-04-12 20:44 - 00000000 ____D C:\Program Files (x86)\Freelancer
2015-06-05 19:46 - 2014-10-30 01:34 - 00000000 ____D C:\R.G. Catalyst
2015-06-04 18:44 - 2014-09-03 23:26 - 00006290 _____ C:\Users\kadle_000\AppData\Local\MRDownloader.err
2015-06-04 18:44 - 2014-08-11 08:41 - 00001168 _____ C:\Users\kadle_000\AppData\Local\MRDownloader.nast
2015-06-03 22:01 - 2015-03-09 12:55 - 00000000 ____D C:\Users\kadle_000\AppData\Local\BlackHole
2015-05-29 20:13 - 2014-08-25 10:51 - 00003948 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA
2015-05-29 20:13 - 2014-08-25 10:51 - 00003568 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core
2015-05-26 22:53 - 2014-08-26 18:22 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\BSplayer
2015-05-26 07:21 - 2014-08-26 21:48 - 00000000 ____D C:\Users\kadle_000
2015-05-19 13:30 - 2015-01-09 17:41 - 00000000 ____D C:\Program Files (x86)\FTL
2015-05-18 23:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-05-16 11:37 - 2014-11-14 10:29 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\CDisplayEx

==================== Files in the root of some directories =======

2014-10-30 01:52 - 2014-10-30 01:52 - 0000029 _____ () C:\Users\kadle_000\AppData\Roaming\msbdjd.dat
2014-10-30 01:52 - 2014-10-30 01:52 - 0009116 _____ () C:\Users\kadle_000\AppData\Roaming\msglfs.dat
2014-09-21 12:23 - 2014-09-21 12:23 - 0003584 _____ () C:\Users\kadle_000\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-03 23:26 - 2015-06-04 18:44 - 0006290 _____ () C:\Users\kadle_000\AppData\Local\MRDownloader.err
2014-08-11 08:41 - 2015-06-04 18:44 - 0001168 _____ () C:\Users\kadle_000\AppData\Local\MRDownloader.nast

Some files in TEMP:
====================
C:\Users\kadle_000\AppData\Local\Temp\181318.exe
C:\Users\kadle_000\AppData\Local\Temp\191319.exe
C:\Users\kadle_000\AppData\Local\Temp\4296C9AD.exe
C:\Users\kadle_000\AppData\Local\Temp\amd-catalyst-14-9-win7-win8.1-64bit-dd-ccc-whql.exe
C:\Users\kadle_000\AppData\Local\Temp\AtpTimerInfo.dll
C:\Users\kadle_000\AppData\Local\Temp\bassmod.dll
C:\Users\kadle_000\AppData\Local\Temp\Bb975D.exe
C:\Users\kadle_000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp_alneg.dll
C:\Users\kadle_000\AppData\Local\Temp\Extract.exe
C:\Users\kadle_000\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\kadle_000\AppData\Local\Temp\MediaPlayer__8491_il57.exe
C:\Users\kadle_000\AppData\Local\Temp\raptrpatch.exe
C:\Users\kadle_000\AppData\Local\Temp\raptr_stub.exe
C:\Users\kadle_000\AppData\Local\Temp\res.dll
C:\Users\kadle_000\AppData\Local\Temp\setupmgr.dll
C:\Users\kadle_000\AppData\Local\Temp\SIntf16.dll
C:\Users\kadle_000\AppData\Local\Temp\SIntf32.dll
C:\Users\kadle_000\AppData\Local\Temp\SIntfNT.dll
C:\Users\kadle_000\AppData\Local\Temp\SP62675.exe
C:\Users\kadle_000\AppData\Local\Temp\SP63798.exe
C:\Users\kadle_000\AppData\Local\Temp\SP63852.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64043.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64136.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64639.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64934.exe
C:\Users\kadle_000\AppData\Local\Temp\SP65461.exe
C:\Users\kadle_000\AppData\Local\Temp\SP67429.exe
C:\Users\kadle_000\AppData\Local\Temp\SP70001.exe
C:\Users\kadle_000\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\kadle_000\AppData\Local\Temp\ULFTZ.exe
C:\Users\kadle_000\AppData\Local\Temp\Uninstall.exe
C:\Users\kadle_000\AppData\Local\Temp\xuninst.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HQWGC.job => C:\Users\kadle_000\AppData\Roaming\HQWGC.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\kadle_000\Desktop" je 51332 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

Předem děkuji za odpověď, s pozdravem

Kamil

#2 Příspěvek od **altrok** » 15 čer 2015 15:17

Krasny den Vam preju

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

CookyCortez · #3 Příspěvek od **CookyCortez** » 15 čer 2015 16:02

Dobrý den,
zde zasílám požadovaný log :

í system : Windows 8.1 (x64)
# Uživatelské jméno : kadle_000 - JAMAILL
# Spuštěno z : C:\Users\kadle_000\Desktop\adwcleaner_4.206.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Google Chrome v

-\\ Chromium v

*************************

AdwCleaner[R0].txt - [5899 bytů] - [15/06/2015 16:42:14]
AdwCleaner[R1].txt - [865 bytů] - [15/06/2015 16:45:44]
AdwCleaner[S0].txt - [4779 bytů] - [15/06/2015 16:44:45]
AdwCleaner[S1].txt - [791 bytů] - [15/06/2015 16:46:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [848 bytů] ##########

#4 Příspěvek od **altrok** » 15 čer 2015 16:05

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

CookyCortez · #5 Příspěvek od **CookyCortez** » 15 čer 2015 16:13

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by kadle_000 (administrator) on JAMAILL on 15-06-2015 17:09:09
Running from C:\Users\kadle_000\Desktop
Loaded Profiles: kadle_000 (Available Profiles: kadle_000)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Company) C:\Windows\SysWOW64\flcdlock.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dropbox, Inc.) C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\livecomm.exe
(forum.viry.cz) C:\Users\kadle_000\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-30] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1702912 2013-02-04] (IDT, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285832 2013-01-02] (Intel Corporation)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [683656 2013-02-07] (PDF Complete Inc)
HKLM-x32\...\Run: [BtTray] => c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [379904 2013-01-10] (IVT Corporation)
HKLM-x32\...\Run: [CLWCSM] => c:\Program Files (x86)\CyberLink\Webcam Sharing Manager\StreamProvider.exe [249096 2013-02-20] (cyberlink)
HKLM-x32\...\Run: [File Sanitizer] => c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [13685464 2013-03-06] (Hewlett-Packard)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2013-02-01] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-02-01] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111136 2012-11-21] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [493088 2012-11-21] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3499896 2014-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-14] (Avast Software s.r.o.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [T-Mobile CManager] => C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2166552 2013-10-31] (Gemfor s.r.o.)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Google Update] => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-08-25] (Google Inc.)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Spotify Web Helper] => C:\Users\kadle_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-04-30] (Spotify Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Spotify] => C:\Users\kadle_000\AppData\Roaming\Spotify\Spotify.exe [7168568 2015-04-30] (Spotify Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {3e552b6f-8e99-11e4-bef2-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4812704a-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {48127630-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4d0d18eb-8f6d-11e4-bef3-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {aec6b1f5-8703-11e4-bedf-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {faf170ae-8162-11e4-bec5-0c84dcca53cc} - "G:\Autorun.exe"
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\kadle_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-10]
ShortcutTarget: Dropbox.lnk -> C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kadle_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-14] (Avast Software s.r.o.)
BootExecute: autocheck autochk * sh4native Sh4Removal

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-17] (Avast Software s.r.o.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-18] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-02-25] (Eyeo GmbH)
BHO-x32: HP File Sanitizer -> {3134413B-49B4-425C-98A5-893C1F195601} -> c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2013-03-06] (Hewlett-Packard)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-18] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-17] (Avast Software s.r.o.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-18] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll [2015-06-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-18] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2013-02-27] (DigitalPersona, Inc.)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @talk.google.com/GoogleTalkPlugin -> C:\Users\kadle_000\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @talk.google.com/O1DPlugin -> C:\Users\kadle_000\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @tools.google.com/Google Update;version=3 -> C:\Users\kadle_000\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @tools.google.com/Google Update;version=9 -> C:\Users\kadle_000\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3245855052-3897587913-387116647-1005: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\kadle_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-09-05] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\kadle_000\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\kadle_000\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2013-08-22]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-08-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-17]

Chrome:
=======
CHR Profile: C:\Users\kadle_000\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-05-08]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-17]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-17]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-14] (Avast Software s.r.o.)
S4 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1626872 2013-01-31] (IVT Corporation)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-19] (BitRaider, LLC)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-10-14] (BitRaider, LLC)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2013-01-10] (IVT Corporation) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [491320 2013-03-12] (DigitalPersona, Inc.)
R2 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [556856 2013-03-04] (Hewlett-Packard Company)
S3 HotSpotSrv; C:\Program Files (x86)\Hewlett-Packard\HP Wireless Hotspot\HotSpotSrv.exe [372920 2013-09-18] (Hewlett-Packard Development Company, L.P.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-10-16] (Hewlett-Packard Company)
R3 hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1006424 2013-01-23] (Hewlett-Packard Company) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2015-02-08] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [130592 2012-10-22] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166432 2012-10-22] (Intel Corporation)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\MbnExt.dll [417128 2013-12-02] (Gemfor s.r.o.)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1135752 2013-02-07] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [332800 2013-02-04] (IDT, Inc.) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-08-26] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-14] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-14] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-14] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-14] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-14] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-14] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-14] ()
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-10-14] (BitRaider)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49632 2012-12-05] (Ralink Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 clwcsm; C:\Windows\system32\DRIVERS\clwcsm.sys [42944 2013-02-19] (CyberLink Corporation)
R3 DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [65752 2013-02-18] (Hewlett-Packard Company)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-08-11] (Disc Soft Ltd)
S3 h647906; C:\Windows\System32\drivers\h647906.sys [63856 2008-08-08] (Your Corporation)
S3 h648101; C:\Windows\System32\drivers\h648101.sys [65776 2008-08-08] (Your Corporation)
S3 h648103; C:\Windows\System32\drivers\h648103.sys [62960 2008-08-08] (Your Corporation)
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [41272 2008-08-08] (Your Corporation)
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [43192 2008-08-08] (Your Corporation)
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [40856 2008-08-08] (Your Corporation)
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2013-03-18] (WinMagic, Inc.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-23] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [448072 2013-02-01] (RTS Corporation)
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [212672 2013-03-27] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131928 2013-01-07] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28400 2013-01-11] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [32496 2013-01-11] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1446904 2013-02-22] (Sunplus)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-02-08] (Hewlett-Packard Development Company, L.P.)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-15 17:09 - 2015-06-15 17:09 - 00029019 _____ C:\Users\kadle_000\Desktop\FRST.txt
2015-06-15 17:07 - 2015-06-15 17:07 - 02109952 _____ (Farbar) C:\Users\kadle_000\Desktop\FRST64.exe
2015-06-15 17:07 - 2015-06-15 17:07 - 00112640 _____ (forum.viry.cz) C:\Users\kadle_000\Desktop\FRSTLauncher.exe
2015-06-15 16:42 - 2015-06-15 17:06 - 00000000 ____D C:\AdwCleaner
2015-06-15 16:41 - 2015-06-15 16:41 - 02231296 _____ C:\Users\kadle_000\Desktop\adwcleaner_4.206.exe
2015-06-15 16:27 - 2015-06-15 16:37 - 00001938 _____ C:\Users\kadle_000\Desktop\Dishonored CZ.lnk
2015-06-15 16:27 - 2015-06-15 16:27 - 00000000 ____D C:\Program Files (x86)\Bethesda Softworks
2015-06-15 16:21 - 2015-06-15 16:21 - 00001655 _____ C:\Users\kadle_000\Desktop\Dishonored - Game of the Year Edition.lnk
2015-06-15 16:21 - 2015-06-15 16:21 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\Dishonored - Game of the Year Edition
2015-06-15 16:21 - 2015-06-15 16:21 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-06-15 16:21 - 2015-06-15 16:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2015-06-15 16:20 - 2015-06-15 16:20 - 00000386 _____ C:\WINDOWS\DirectX.log
2015-06-15 14:30 - 2015-06-15 17:09 - 00000000 ____D C:\FRST
2015-06-15 14:25 - 2015-06-15 17:08 - 00000000 ____D C:\Users\kadle_000\Desktop\Očista
2015-06-15 14:24 - 2015-06-15 14:24 - 00000512 _____ C:\PhysicalMBR.bin
2015-06-15 14:14 - 2015-06-15 14:14 - 00602112 _____ (OldTimer Tools) C:\Users\kadle_000\Desktop\OTL.exe
2015-06-15 13:59 - 2015-06-15 14:24 - 00000000 ____D C:\Users\kadle_000\Downloads\[R.G. Mechanics] Dishonored - Game of the Year Edition
2015-06-15 13:19 - 2015-06-15 13:19 - 00001089 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-06-15 13:19 - 2015-06-15 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-06-15 12:49 - 2015-06-15 16:53 - 00000077 _____ C:\WINDOWS\setupact.log
2015-06-15 12:49 - 2015-06-15 12:49 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-06-15 12:02 - 2015-06-15 12:02 - 00000000 ____D C:\Users\kadle_000\Downloads\Port Royale 2 (September 13, 2004)
2015-06-15 11:33 - 2015-06-15 11:34 - 07568457 _____ (Bethesda Softworks ) C:\Users\kadle_000\Desktop\Dishonored-čeština--(Up-By-WeZZi-CZ).exe
2015-06-14 23:53 - 2015-06-15 00:49 - 00000000 ____D C:\Users\kadle_000\Downloads\Red 2 (2013) [1080p]
2015-06-14 22:04 - 2015-05-25 16:47 - 968937472 _____ C:\Users\kadle_000\Desktop\Red-2-cz-dabing-2013.avi
2015-06-14 21:25 - 2015-06-14 21:30 - 00000000 ____D C:\Users\kadle_000\Downloads\Super 8 (2011)
2015-06-14 21:18 - 2015-06-14 21:21 - 00009113 _____ C:\Users\kadle_000\Desktop\Filmy whishlist.xlsx
2015-06-14 16:51 - 2015-06-14 16:51 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-06-14 16:51 - 2015-06-14 16:51 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-06-12 10:09 - 2015-06-12 10:27 - 00010453 _____ C:\Users\kadle_000\Desktop\Nábytek.xlsx
2015-06-11 19:05 - 2015-06-15 17:09 - 01598518 _____ C:\WINDOWS\system32dbgraw.bmp
2015-06-11 15:12 - 2015-06-11 15:17 - 366761256 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E05.HDTV.XviD-LOL.avi
2015-06-11 15:11 - 2015-06-11 15:18 - 366789692 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E03.HDTV.XviD-LOL.avi
2015-06-11 15:11 - 2015-06-11 15:16 - 366861222 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E04.HDTV.XviD-LOL.avi
2015-06-11 14:59 - 2015-06-11 15:04 - 366734654 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E02.HDTV.XviD-LOL.avi
2015-06-11 14:13 - 2015-06-11 15:19 - 00000000 ____D C:\Users\kadle_000\Downloads\Subs
2015-06-11 14:13 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-06-11 14:13 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-06-11 14:13 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-06-11 14:13 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-06-11 14:13 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-06-11 14:13 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-06-11 14:13 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-06-11 14:12 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-06-11 14:12 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-06-11 14:12 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-06-11 14:12 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-06-11 14:12 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-06-11 14:09 - 2015-06-11 14:12 - 366800676 _____ C:\Users\kadle_000\Downloads\Once.Upon.a.Time.S01E01.HDTV.XviD-LOL.avi
2015-06-11 13:23 - 2011-05-14 12:05 - 00000000 ____D C:\Users\Public\Documents\The Witcher
2015-06-11 13:04 - 2015-06-11 13:04 - 00000000 ____D C:\Program Files (x86)\R.G. Catalyst
2015-06-10 22:23 - 2015-06-10 22:23 - 00000000 ____D C:\Users\kadle_000\AppData\Local\GWX
2015-06-10 18:30 - 2015-06-03 18:18 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-06-10 18:30 - 2015-06-03 18:18 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-10 16:33 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-06-10 16:33 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-06-10 16:33 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-06-10 16:33 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-06-10 16:33 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-06-10 16:33 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-06-10 16:33 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-06-10 16:33 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-06-10 16:33 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-06-10 16:33 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-06-10 16:33 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-06-10 16:33 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-06-10 16:33 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-06-10 16:33 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-06-10 16:33 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-06-10 16:33 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-06-10 16:33 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-06-10 16:33 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-06-10 16:33 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-06-10 16:33 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-06-10 16:33 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-06-10 16:33 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-06-10 16:33 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-06-10 16:33 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-06-10 16:33 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-06-10 16:33 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-06-10 16:33 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-06-10 16:33 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-06-10 16:33 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-06-10 16:33 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-06-10 16:33 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-06-10 16:33 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-06-10 16:33 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-06-10 16:33 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-06-10 16:33 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-06-10 16:33 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-06-10 16:33 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-06-10 16:33 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-06-10 16:33 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-06-10 16:33 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-06-10 16:33 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-06-10 16:33 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-06-10 16:33 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-06-10 16:33 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-06-10 16:33 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-06-10 16:33 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-10 16:33 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-06-10 16:33 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-10 16:33 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-06-10 16:33 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-06-10 16:33 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-06-10 16:33 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-06-10 16:33 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-06-10 16:33 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-06-10 16:33 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-06-10 16:33 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-06-10 16:33 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-06-10 16:33 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-06-10 16:33 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-06-10 16:33 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-06-10 16:32 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-06-10 11:40 - 2015-06-10 14:46 - 00000023 _____ C:\WINDOWS\BlendSettings.ini
2015-06-10 11:31 - 2015-06-10 11:31 - 00000000 ____D C:\Users\kadle_000\AppData\Local\Oblivion
2015-06-10 10:50 - 2015-06-10 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oblivion
2015-06-10 10:40 - 2015-06-10 10:40 - 00000000 ____D C:\Steam
2015-06-08 14:21 - 2015-06-15 17:02 - 01407767 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-08 13:16 - 2015-06-08 13:16 - 00002796 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-06-08 13:16 - 2015-06-08 13:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-06-06 14:34 - 2015-06-06 15:14 - 731426816 _____ C:\Users\kadle_000\Downloads\Red(2010)cz(BY-THEBLOD).avi
2015-06-06 00:04 - 2015-06-06 00:04 - 00000000 ____D C:\Users\kadle_000\AppData\Local\FLT
2015-06-05 23:38 - 2015-06-05 23:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XCOM Enemy Unknown
2015-06-05 23:17 - 2015-06-05 23:18 - 00000000 ____D C:\Program Files (x86)\XCOM Enemy Unknown
2015-06-05 22:08 - 2015-06-05 22:08 - 00000000 ____D C:\Users\kadle_000\Documents\Klei
2015-06-05 22:01 - 2015-06-05 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Invisible Inc
2015-06-05 16:25 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-06-05 16:25 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-06-05 16:25 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-06-04 18:57 - 2015-06-04 19:36 - 00000000 ____D C:\Users\kadle_000\Downloads\Kingsman The Secret Service (2014) [1080p]
2015-06-02 23:25 - 2015-06-02 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carmageddon_Reincarnation

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-15 17:02 - 2015-04-17 10:58 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-06-15 17:01 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-15 16:59 - 2015-03-04 13:24 - 00000000 ___RD C:\Users\kadle_000\Dropbox
2015-06-15 16:59 - 2015-03-04 13:20 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\Dropbox
2015-06-15 16:58 - 2014-08-26 23:09 - 00000000 ___DO C:\Users\kadle_000\OneDrive
2015-06-15 16:56 - 2014-11-20 14:25 - 00001368 _____ C:\WINDOWS\Tasks\HQWGC.job
2015-06-15 16:55 - 2013-05-09 12:50 - 00000000 ____D C:\ProgramData\PDFC
2015-06-15 16:53 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-15 16:47 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-06-15 16:36 - 2015-02-19 00:04 - 00000000 ____D C:\ProgramData\RELOADED
2015-06-15 16:34 - 2014-08-13 20:54 - 00000000 ____D C:\Users\kadle_000\Documents\My Games
2015-06-15 16:24 - 2014-08-07 22:11 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3245855052-3897587913-387116647-1005
2015-06-15 16:21 - 2015-04-02 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-06-15 16:18 - 2014-08-25 10:51 - 00000994 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job
2015-06-15 15:54 - 2015-04-02 20:14 - 00000000 ____D C:\Program Files (x86)\R.G. Mechanics
2015-06-15 15:51 - 2014-08-11 01:15 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-06-15 15:28 - 2014-09-19 13:59 - 00003982 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{14C38F50-E96F-4085-B3A5-E59C0A732B8D}
2015-06-15 15:01 - 2014-08-31 19:58 - 00003186 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForkadle_000
2015-06-15 15:01 - 2014-08-31 19:58 - 00000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job
2015-06-15 14:51 - 2014-10-30 00:31 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\uTorrent
2015-06-15 13:17 - 2014-03-24 19:11 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-06-14 22:14 - 2014-03-18 17:33 - 01938474 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-14 22:14 - 2014-03-18 16:54 - 00803244 _____ C:\WINDOWS\system32\perfh005.dat
2015-06-14 22:14 - 2014-03-18 16:54 - 00184236 _____ C:\WINDOWS\system32\perfc005.dat
2015-06-14 20:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-14 20:18 - 2014-08-25 10:51 - 00000942 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job
2015-06-14 17:31 - 2014-08-11 10:15 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\DAEMON Tools Lite
2015-06-14 17:27 - 2015-01-23 14:08 - 00000000 ____D C:\Program Files (x86)\4PLAY60
2015-06-14 17:23 - 2014-08-11 01:15 - 00003802 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-06-14 16:51 - 2015-04-17 10:58 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00272248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00137288 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00089944 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00065736 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-06-14 16:51 - 2015-04-17 10:58 - 00029168 _____ C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-06-12 13:36 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-06-12 12:46 - 2014-11-20 15:30 - 00000000 ____D C:\Games
2015-06-12 12:46 - 2014-08-26 17:39 - 00000000 ___RD C:\Users\kadle_000\Desktop\Herní koutek
2015-06-11 19:14 - 2015-04-08 12:10 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\MediaMonkey
2015-06-11 19:06 - 2015-02-19 19:55 - 00000000 ___RD C:\Users\kadle_000\Desktop\Nemazat
2015-06-11 15:09 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-11 13:36 - 2014-12-22 17:36 - 00000000 ____D C:\Program Files\CCleaner
2015-06-11 02:05 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-06-11 00:30 - 2014-11-20 14:29 - 00000000 __SHD C:\Users\kadle_000\AppData\Local\EmieBrowserModeList
2015-06-11 00:30 - 2014-09-19 13:59 - 00000000 __SHD C:\Users\kadle_000\AppData\Local\EmieUserList
2015-06-11 00:30 - 2014-09-19 13:59 - 00000000 __SHD C:\Users\kadle_000\AppData\Local\EmieSiteList
2015-06-10 18:27 - 2013-08-22 16:44 - 00494600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-10 18:16 - 2015-04-04 23:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-06-10 18:16 - 2015-04-04 23:10 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-06-10 18:16 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-06-10 16:46 - 2014-08-11 20:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 16:46 - 2014-05-04 14:50 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-06-10 16:39 - 2014-05-04 14:50 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-10 16:39 - 2012-07-26 07:26 - 00000269 _____ C:\WINDOWS\win.ini
2015-06-09 18:58 - 2015-04-08 11:56 - 00000000 ____D C:\Users\kadle_000\AppData\Local\Spotify
2015-06-09 18:47 - 2015-04-08 11:56 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\Spotify
2015-06-08 13:30 - 2014-08-10 17:13 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-08 12:43 - 2014-12-11 20:22 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-06-08 12:43 - 2014-07-20 13:39 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-06-07 14:10 - 2014-08-27 00:23 - 00000052 _____ C:\WINDOWS\SysWOW64\DOErrors.log
2015-06-05 20:01 - 2015-02-15 18:45 - 00000000 ____D C:\WarThunder
2015-06-05 19:53 - 2015-04-12 20:44 - 00000000 ____D C:\Program Files (x86)\Freelancer
2015-06-05 19:46 - 2014-10-30 01:34 - 00000000 ____D C:\R.G. Catalyst
2015-06-04 18:44 - 2014-09-03 23:26 - 00006290 _____ C:\Users\kadle_000\AppData\Local\MRDownloader.err
2015-06-04 18:44 - 2014-08-11 08:41 - 00001168 _____ C:\Users\kadle_000\AppData\Local\MRDownloader.nast
2015-06-03 22:01 - 2015-03-09 12:55 - 00000000 ____D C:\Users\kadle_000\AppData\Local\BlackHole
2015-05-29 20:13 - 2014-08-25 10:51 - 00003948 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA
2015-05-29 20:13 - 2014-08-25 10:51 - 00003568 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core
2015-05-26 22:53 - 2014-08-26 18:22 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\BSplayer
2015-05-26 07:21 - 2014-08-26 21:48 - 00000000 ____D C:\Users\kadle_000
2015-05-19 13:30 - 2015-01-09 17:41 - 00000000 ____D C:\Program Files (x86)\FTL
2015-05-18 23:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-05-16 11:37 - 2014-11-14 10:29 - 00000000 ____D C:\Users\kadle_000\AppData\Roaming\CDisplayEx

==================== Files in the root of some directories =======

2014-10-30 01:52 - 2014-10-30 01:52 - 0000029 _____ () C:\Users\kadle_000\AppData\Roaming\msbdjd.dat
2014-10-30 01:52 - 2014-10-30 01:52 - 0009116 _____ () C:\Users\kadle_000\AppData\Roaming\msglfs.dat
2014-09-21 12:23 - 2014-09-21 12:23 - 0003584 _____ () C:\Users\kadle_000\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-03 23:26 - 2015-06-04 18:44 - 0006290 _____ () C:\Users\kadle_000\AppData\Local\MRDownloader.err
2014-08-11 08:41 - 2015-06-04 18:44 - 0001168 _____ () C:\Users\kadle_000\AppData\Local\MRDownloader.nast

Some files in TEMP:
====================
C:\Users\kadle_000\AppData\Local\Temp\181318.exe
C:\Users\kadle_000\AppData\Local\Temp\191319.exe
C:\Users\kadle_000\AppData\Local\Temp\4296C9AD.exe
C:\Users\kadle_000\AppData\Local\Temp\amd-catalyst-14-9-win7-win8.1-64bit-dd-ccc-whql.exe
C:\Users\kadle_000\AppData\Local\Temp\AtpTimerInfo.dll
C:\Users\kadle_000\AppData\Local\Temp\bassmod.dll
C:\Users\kadle_000\AppData\Local\Temp\Bb975D.exe
C:\Users\kadle_000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuuurgp.dll
C:\Users\kadle_000\AppData\Local\Temp\Extract.exe
C:\Users\kadle_000\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\kadle_000\AppData\Local\Temp\MediaPlayer__8491_il57.exe
C:\Users\kadle_000\AppData\Local\Temp\raptrpatch.exe
C:\Users\kadle_000\AppData\Local\Temp\raptr_stub.exe
C:\Users\kadle_000\AppData\Local\Temp\res.dll
C:\Users\kadle_000\AppData\Local\Temp\setupmgr.dll
C:\Users\kadle_000\AppData\Local\Temp\SIntf16.dll
C:\Users\kadle_000\AppData\Local\Temp\SIntf32.dll
C:\Users\kadle_000\AppData\Local\Temp\SIntfNT.dll
C:\Users\kadle_000\AppData\Local\Temp\SP62675.exe
C:\Users\kadle_000\AppData\Local\Temp\SP63798.exe
C:\Users\kadle_000\AppData\Local\Temp\SP63852.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64043.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64136.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64639.exe
C:\Users\kadle_000\AppData\Local\Temp\SP64934.exe
C:\Users\kadle_000\AppData\Local\Temp\SP65461.exe
C:\Users\kadle_000\AppData\Local\Temp\SP67429.exe
C:\Users\kadle_000\AppData\Local\Temp\SP70001.exe
C:\Users\kadle_000\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\kadle_000\AppData\Local\Temp\ULFTZ.exe
C:\Users\kadle_000\AppData\Local\Temp\Uninstall.exe
C:\Users\kadle_000\AppData\Local\Temp\xuninst.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HQWGC.job => C:\Users\kadle_000\AppData\Roaming\HQWGC.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\kadle_000\Desktop" je 51334 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#6 Příspěvek od **altrok** » 15 čer 2015 16:26

Velikost plochy by nemela presahovat 200 MB. Zpomaluje se pak start i samotny chod celeho PC. Doporucuji hlavne velke soubory a slozky premistit napr. do Dokumentu a na plochu umistit pouze zastupce.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:
File: C:\Users\kadle_000\AppData\Roaming\msbdjd.dat
File: C:\Users\kadle_000\AppData\Roaming\msglfs.dat
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3499896 2014-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Google Update] => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-08-25] (Google Inc.)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {3e552b6f-8e99-11e4-bef2-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4812704a-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {48127630-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4d0d18eb-8f6d-11e4-bef3-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {aec6b1f5-8703-11e4-bedf-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {faf170ae-8162-11e4-bec5-0c84dcca53cc} - "G:\Autorun.exe" 
BootExecute: autocheck autochk * sh4native Sh4Removal

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

U4 BthAvrcpTg; No ImagePath
U4 bthhfhid; No ImagePath
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [X]
C:\Program Files (x86)\Enigma Software Group

2015-06-15 17:09 - 2015-06-15 17:09 - 00029019 _____ C:\Users\kadle_000\Desktop\FRST.txt
2015-06-15 17:07 - 2015-06-15 17:07 - 00112640 _____ (forum.viry.cz) C:\Users\kadle_000\Desktop\FRSTLauncher.exe
2015-06-15 16:42 - 2015-06-15 17:06 - 00000000 ____D C:\AdwCleaner
2015-06-15 16:41 - 2015-06-15 16:41 - 02231296 _____ C:\Users\kadle_000\Desktop\adwcleaner_4.206.exe

Task: {01C50751-FEB8-4531-B139-B7EBB3FFE0FD} - \HQWGC No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HQWGC.job => C:\Users\kadle_000\AppData\Roaming\HQWGC.exe <==== ATTENTION
C:\Users\kadle_000\AppData\Roaming\HQWGC.exe
Hosts:
EmptyTemp:
End

CookyCortez · #7 Příspěvek od **CookyCortez** » 15 čer 2015 16:53

Fix result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by kadle_000 at 2015-06-15 17:37:18 Run:2
Running from C:\Users\kadle_000\Desktop
Loaded Profiles: kadle_000 (Available Profiles: kadle_000)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
File: C:\Users\kadle_000\AppData\Roaming\msbdjd.dat
File: C:\Users\kadle_000\AppData\Roaming\msglfs.dat
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3499896 2014-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [Google Update] => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-08-25] (Google Inc.)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {3e552b6f-8e99-11e4-bef2-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4812704a-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {48127630-5a6f-11e4-beae-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {4d0d18eb-8f6d-11e4-bef3-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {aec6b1f5-8703-11e4-bedf-0c84dcca53cc} - "G:\Autorun.exe"
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\...\MountPoints2: {faf170ae-8162-11e4-bec5-0c84dcca53cc} - "G:\Autorun.exe"
BootExecute: autocheck autochk * sh4native Sh4Removal

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3245855052-3897587913-387116647-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =

U4 BthAvrcpTg; No ImagePath
U4 bthhfhid; No ImagePath
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [X]
C:\Program Files (x86)\Enigma Software Group

2015-06-15 17:09 - 2015-06-15 17:09 - 00029019 _____ C:\Users\kadle_000\Desktop\FRST.txt
2015-06-15 17:07 - 2015-06-15 17:07 - 00112640 _____ (forum.viry.cz) C:\Users\kadle_000\Desktop\FRSTLauncher.exe
2015-06-15 16:42 - 2015-06-15 17:06 - 00000000 ____D C:\AdwCleaner
2015-06-15 16:41 - 2015-06-15 16:41 - 02231296 _____ C:\Users\kadle_000\Desktop\adwcleaner_4.206.exe

Task: {01C50751-FEB8-4531-B139-B7EBB3FFE0FD} - \HQWGC No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job => C:\Users\kadle_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HQWGC.job => C:\Users\kadle_000\AppData\Roaming\HQWGC.exe <==== ATTENTION
C:\Users\kadle_000\AppData\Roaming\HQWGC.exe
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========================= File: C:\Users\kadle_000\AppData\Roaming\msbdjd.dat ========================

MD5: FF8A712198C53DB6D8C4BEA621371478
Creation and modification date: 2014-10-30 01:52 - 2014-10-30 01:52
Size: 0000029
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright$creamod:

====== End of File: ======

========================= File: C:\Users\kadle_000\AppData\Roaming\msglfs.dat ========================

MD5: 6F055F401B672E32C724D5CAF93E69F7
Creation and modification date: 2014-10-30 01:52 - 2014-10-30 01:52
Size: 0009116
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright$creamod:

====== End of File: ======

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Acrobat Assistant 8.0 => value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e552b6f-8e99-11e4-bef2-0c84dcca53cc} => key not found.
HKCR\CLSID\{3e552b6f-8e99-11e4-bef2-0c84dcca53cc} => key not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4812704a-5a6f-11e4-beae-0c84dcca53cc} => key not found.
HKCR\CLSID\{4812704a-5a6f-11e4-beae-0c84dcca53cc} => key not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{48127630-5a6f-11e4-beae-0c84dcca53cc} => key not found.
HKCR\CLSID\{48127630-5a6f-11e4-beae-0c84dcca53cc} => key not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4d0d18eb-8f6d-11e4-bef3-0c84dcca53cc} => key not found.
HKCR\CLSID\{4d0d18eb-8f6d-11e4-bef3-0c84dcca53cc} => key not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{aec6b1f5-8703-11e4-bedf-0c84dcca53cc} => key not found.
HKCR\CLSID\{aec6b1f5-8703-11e4-bedf-0c84dcca53cc} => key not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{faf170ae-8162-11e4-bec5-0c84dcca53cc} => key not found.
HKCR\CLSID\{faf170ae-8162-11e4-bec5-0c84dcca53cc} => key not found.
hklm\System\CurrentControlSet\Control\Session Manager\\BootExecute => value restored successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-21-3245855052-3897587913-387116647-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
BthAvrcpTg => Service not found.
bthhfhid => Service not found.
BRDriver64_1_3_3_E02B25FC => Service not found.
esgiguard => Service not found.
"C:\Program Files (x86)\Enigma Software Group" => File/Folder not found.
"C:\Users\kadle_000\Desktop\FRST.txt" => File/Folder not found.
C:\Users\kadle_000\Desktop\FRSTLauncher.exe => moved successfully.
"C:\AdwCleaner" => File/Folder not found.
"C:\Users\kadle_000\Desktop\adwcleaner_4.206.exe" => File/Folder not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01C50751-FEB8-4531-B139-B7EBB3FFE0FD}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HQWGC" => key removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005Core.job => moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3245855052-3897587913-387116647-1005UA.job => moved successfully.
C:\WINDOWS\Tasks\HPCeeScheduleForkadle_000.job => moved successfully.
C:\WINDOWS\Tasks\HQWGC.job => moved successfully.
"C:\Users\kadle_000\AppData\Roaming\HQWGC.exe" => File/Folder not found.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 1.1 GB temporary data Removed.

The system needed a reboot..

==== End of Fixlog 17:38:09 ====

#8 Příspěvek od **altrok** » 15 čer 2015 16:57

Napodruhe vse probehlo, jak melo. Otestujte chovani PC a pokud nebudou zadne problemy, uz jen uklidime pouzite nastroje.

CookyCortez · #9 Příspěvek od **CookyCortez** » 15 čer 2015 17:30

Ano děkuji, je to o mnoho lepší, nicméně jeden problém přetrvává už dlouhou dobu a vlastně ani nevím, jestli se to dá takhle vyřešit. Každopádně, stále nemůžu používat prohlížeč Opera ve svém ntb, po spuštění se neobjeví nic jiného než prázdná stránka about;blank a nereaguje na nic, dokud neukončím proces ve správci úloh. Nevím jestli tento problém nějak souvisí s možností zavirovaného systému. Ale ostatní problémy jsou pravděpodobně vyřešeny.

#10 Příspěvek od **altrok** » 15 čer 2015 17:35

Toto vypada spis na chybu samotne Opery, nikoliv virovy problem. Zazalohujte zalozky z Opery napr. pomoci http://www.stahuj.centrum.cz/utility_a_ ... ra-backup/ a nasledne Operu preinstalujte (kompletni odinstalace vcetne profilu).

CookyCortez · #11 Příspěvek od **CookyCortez** » 16 čer 2015 08:34

Bohužel i po kompletní odinstalaci a nové instalaci nereaguje Opera nadále, to je ale ten nejmenší problém. Ale jinak vše funguje v naprostém pořádku, tak mockrát děkuji za Váš čas a trpělivost.

#12 Příspěvek od **altrok** » 16 čer 2015 08:45

Napada me jeste nekolik zpusobu, ktere by mohly pomoct, ale k Opere Vam nejlepe poradi na jejich specializovanem foru.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

Nemate zac, rad jsem s odvirovanim pomohl

VIRY.CZ

Infekce : URL:Mal

Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal

Re: Infekce : URL:Mal