
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
nějaký viry ..
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
nějaký viry ..
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:23-09-2015
Ran by ASUS (administrator) on PC (25-09-2015 10:59:47)
Running from C:\Users\ASUS\Desktop
Loaded Profiles: ASUS (Available Profiles: UpdatusUser & ASUS)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
() C:\WINDOWS\SysWOW64\PnkBstrA.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Microsoft Corporation) C:\WINDOWS\System32\GWX\GWX.exe
() C:\Users\ASUS\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\ASUS\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(GameRanger Technologies) C:\Users\ASUS\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\vnsaE8A0.tmp
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\knsfF424.tmpfs
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\jnsuCB3.tmp
(OB) C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-10.exe
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\hnsy2379.tmp
() C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A\snse7DA0.tmp
(OB) C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-6.exe
() C:\Users\ASUS\AppData\Local\Ancode.exe
() C:\Program Files\Concom\Concom.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe
() C:\Users\ASUS\AppData\Local\Temp\Font__7226_il92329.exe
() C:\ProgramData\ApplicationHosting\ApplicationHosting.exe
() C:\ProgramData\Airron\Airron.exe
(Cinema PlusV24.09) C:\Users\ASUS\AppData\Local\Temp\nsx965E.tmp\Jhlvegevzuc.exe
() C:\ProgramData\Airron\Airron.exe
(OB) C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-64.exe
(CMI Limited) C:\Users\ASUS\AppData\Local\Temp\nsw559A.tmp
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-10.exe
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.exe
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-64.exe
(DTools LIMITED) C:\ProgramData\UWdsManProU\WdsManPro.exe
() C:\Users\ASUS\AppData\Local\Temp\nstBE7A.tmp
(MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe
(MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe
(TODO: <公司名>) C:\Program Files (x86)\SFK\SSFK.exe
(CMI Limited) C:\Users\ASUS\AppData\Local\Temp\nso248D.tmp
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\System32\msiexec.exe
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\ASUS\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13197456 2012-09-28] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2916584 2010-08-12] (ESET)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\ASUS\AppData\Roaming\VOPackage\VOPackage.exe [931805 2015-09-25] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [EvolveClient] => C:\Program Files\Echobit\Evolve\EvolveClient.exe [3334016 2015-07-23] (Echobit LLC)
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [cz.seznam.software.autoupdate] => C:\Users\ASUS\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [cz.seznam.software.szndesktop] => C:\Users\ASUS\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [GoogleChromeAutoLaunch_5F00D79597A684C35D384C6669E057DF] => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe [636928 2015-08-29] (MyBrowser)
AppInit_DLLs: C:\ProgramData\Airron\Haykix.dll => C:\ProgramData\Airron\Haykix.dll [883200 2015-09-25] ()
AppInit_DLLs-x32: C:\ProgramData\Airron\Kantom.dll => C:\ProgramData\Airron\Kantom.dll [738816 2015-09-25] ()
Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2015-07-09]
ShortcutTarget: GameRanger.lnk -> C:\Users\ASUS\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{56EE1D7F-67FF-4DA8-AF0F-643A1D516CE3}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{FC31EF48-E3C3-4A48-ABC5-1B2F6B3CB9A1}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpvqjMZMi5Vt-ap3r-nQH3vbz0x9zJA2HaS43JCDjXLYAp_sPFDbslysQS_zZmSxSOvP7ArKRgobZCX9
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {060B046C-71E8-4393-B42C-F6E213AC19E1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {0BBA08A4-3430-4924-BBD8-987539D419CE} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {28FB04F3-498F-4FC4-BB59-56790F44FF2C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {356A085D-E3AB-460C-A3F1-3874890869B1} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {60CD57CE-8ED8-4F14-B488-39DCE95BEC7E} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {78CF3F94-9144-427E-92C5-1B51230A2B0A} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {828F1FDD-72DA-483B-9599-4F5386202733} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {B6A4C9EB-A25A-4496-87E1-35432DD113C9} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {FF057E0F-007F-4814-ABBD-5083D7857366} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=14431696 ... RYDDZ8RYDX
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-09-25] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-09-25] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-1447694392-248528962-4126827209-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\ASUS\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1447694392-248528962-4126827209-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ASUS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS)
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: No Name - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2015-06-16]
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeDYPKh1k8l7ChCjf7-OeNDChoByk3k4CticzKuceTJz3Lms4Uu0d8z_0sjkad4ODVqOaz0noIKCHT9
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14431 ... RYDDZ8RYDX"
CHR DefaultSearchURL: Default -> hxxp://www.mystartsearch.com/web/?type=ds&ts=1 ... earchTerms}
CHR DefaultSearchKeyword: Default -> mystartsearch
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-03]
CHR Extension: (Dokumenty Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-03]
CHR Extension: (Disk Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-03]
CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-03]
CHR Extension: (Vyhledávání Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-03]
CHR Extension: (Tabulky Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-02]
CHR Extension: (Skype Click to Call) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-08-05]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-03]
CHR Extension: (Gmail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-03]
CHR Extension: () - C:\Users\ASUS\AppData\Local\Virtual Bus\Component [2015-09-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/?type=sc&t ... RYDDZ8RYDX
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Airron; C:\ProgramData\\Airron\\Airron.exe [441856 2015-09-20] () [File not signed]
R2 ApplicationHosting; C:\ProgramData\\ApplicationHosting\\ApplicationHosting.exe [441856 2015-09-21] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 Concom; C:\Program Files\Concom\Concom.exe [379904 2015-09-24] () [File not signed]
R2 dipubibu; C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A\snse7DA0.tmp [303616 2015-09-25] () [File not signed]
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2010-08-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [810144 2010-08-12] (ESET)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2015-07-13] (Echobit LLC)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-25] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-25] (globalUpdate) [File not signed] <==== ATTENTION
S2 gupdate1d0a83d726de062; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-08-03] (Google Inc.)
S3 gupdatem1d0a83d728293cb; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-08-03] (Google Inc.)
R2 gyvixodu; C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\hnsy2379.tmp [203776 2015-09-25] () [File not signed]
R2 lehicewu; C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\jnsuCB3.tmp [181760 2015-09-25] () [File not signed]
R2 nowuedctepupdateama; C:\Users\ASUS\AppData\Local\Ancode.exe [77312 2015-09-25] () [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75064 2015-08-09] ()
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [458400 2015-09-25] (TODO: <公司名>)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WdsManPro; C:\ProgramData\UWdsManProU\WdsManPro.exe [442504 2015-09-25] (DTools LIMITED)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 junikigy; C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\knsfF424.tmpfs [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
S3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107328 2012-10-01] (Intel Corporation)
S3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [42816 2012-10-01] (Intel Corporation)
S3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [64832 2012-10-01] (Intel Corporation)
S3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [96576 2012-10-01] (Intel Corporation)
S3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229184 2012-10-01] (Intel Corporation)
S3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363328 2012-10-01] (Intel Corporation)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [168544 2010-07-29] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [141264 2010-07-29] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [126320 2010-07-29] (ESET)
S3 IntcDAud; C:\Windows\system32\DRIVERS\IntcDAud.sys [342528 2012-10-08] (Intel(R) Corporation) [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-25 10:59 - 2015-09-25 11:00 - 00023963 _____ C:\Users\ASUS\Desktop\FRST.txt
2015-09-25 10:59 - 2015-09-25 10:58 - 00112640 _____ (forum.viry.cz) C:\Users\ASUS\Desktop\FRSTLauncher.exe
2015-09-25 10:58 - 2015-09-25 10:58 - 00112640 _____ (forum.viry.cz) C:\Users\ASUS\Downloads\FRSTLauncher.exe
2015-09-25 10:58 - 2015-09-25 10:58 - 00004008 _____ C:\WINDOWS\System32\Tasks\IisaTUcvyNpQTZEHP0tG
2015-09-25 10:58 - 2015-09-25 10:58 - 00001014 _____ C:\WINDOWS\Tasks\IisaTUcvyNpQTZEHP0tG.job
2015-09-25 10:56 - 2015-09-25 10:57 - 00000000 ____D C:\ProgramData\UWdsManProU
2015-09-25 10:54 - 2015-09-25 10:54 - 02192384 _____ (Farbar) C:\Users\ASUS\Downloads\FRST64.exe
2015-09-25 10:37 - 2015-09-25 10:58 - 00002450 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5_user.job
2015-09-25 10:37 - 2015-09-25 10:37 - 00004012 _____ C:\WINDOWS\System32\Tasks\ccKE7KWDPeDYPanKq2PM9f
2015-09-25 10:37 - 2015-09-25 10:37 - 00001018 _____ C:\WINDOWS\Tasks\ccKE7KWDPeDYPanKq2PM9f.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00008526 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-7
2015-09-25 10:36 - 2015-09-25 10:58 - 00008526 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-6
2015-09-25 10:36 - 2015-09-25 10:58 - 00007166 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-3
2015-09-25 10:36 - 2015-09-25 10:58 - 00006146 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7
2015-09-25 10:36 - 2015-09-25 10:58 - 00006146 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6
2015-09-25 10:36 - 2015-09-25 10:58 - 00005522 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-7.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00005522 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-6.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00005454 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5
2015-09-25 10:36 - 2015-09-25 10:58 - 00004162 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-3.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00003142 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00003142 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00002450 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5.job
2015-09-25 10:36 - 2015-09-25 10:57 - 00002116 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-10_user.job
2015-09-25 10:36 - 2015-09-25 10:37 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV24.09
2015-09-25 10:36 - 2015-09-25 10:36 - 00000000 ____D C:\Program Files (x86)\963c382f-8ddd-4cf1-9fa0-d87507a907e9
2015-09-25 10:35 - 2015-09-25 10:56 - 00004038 _____ C:\WINDOWS\System32\Tasks\MyBrowser
2015-09-25 10:35 - 2015-09-25 10:56 - 00002322 _____ C:\Users\Public\Desktop\MyBrowser.lnk
2015-09-25 10:35 - 2015-09-25 10:56 - 00001052 _____ C:\WINDOWS\Tasks\MyBrowser.job
2015-09-25 10:35 - 2015-09-25 10:36 - 00000000 ____D C:\ProgramData\3WdsManPro3
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 __SHD C:\Users\ASUS\AppData\Roaming\AnyProtectEx
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\mystartsearch
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\Users\ASUS\AppData\Local\MyBrowser
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
2015-09-25 10:34 - 2015-09-25 10:34 - 00000292 _____ C:\task.vbs
2015-09-25 10:34 - 2015-09-25 10:34 - 00000000 ____D C:\Program Files (x86)\MyBrowser
2015-09-25 10:30 - 2015-09-25 10:51 - 00000000 ____D C:\ProgramData\Airron
2015-09-25 10:30 - 2015-09-25 10:30 - 00003560 _____ C:\WINDOWS\System32\Tasks\snp
2015-09-25 10:30 - 2015-09-25 10:30 - 00002385 _____ C:\WINDOWS\SysWOW64\findit.xml
2015-09-25 10:30 - 2015-09-25 10:30 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Mozilla
2015-09-25 10:30 - 2015-09-25 10:30 - 00000000 ____D C:\ProgramData\ApplicationHosting
2015-09-25 10:30 - 2015-09-25 10:30 - 00000000 ____D C:\ProgramData\Airrons
2015-09-25 10:29 - 2015-09-25 10:29 - 00004154 _____ C:\WINDOWS\System32\Tasks\amiupdaterExi
2015-09-25 10:29 - 2015-09-25 10:29 - 00003372 _____ C:\WINDOWS\System32\Tasks\amiupdaterExd
2015-09-25 10:28 - 2015-09-25 10:28 - 00001002 _____ C:\Users\UpdatusUser\Desktop\Liveistream.lnk
2015-09-25 10:28 - 2015-09-25 10:28 - 00001002 _____ C:\Users\ASUS\Desktop\Liveistream.lnk
2015-09-25 10:28 - 2015-09-25 10:28 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Liveistream
2015-09-25 10:28 - 2015-09-25 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Liveistream
2015-09-25 10:28 - 2015-09-25 10:28 - 00000000 ____D C:\Program Files (x86)\Liveistream
2015-09-25 10:27 - 2015-09-25 10:57 - 00000000 ____D C:\Program Files (x86)\SFK
2015-09-25 10:27 - 2015-09-25 10:56 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-09-25 10:27 - 2015-09-25 10:28 - 00000000 ____D C:\ProgramData\aWdsManProa
2015-09-25 10:27 - 2015-09-25 10:27 - 00058765 _____ () C:\Users\ASUS\Desktop\PlayerStubWrapper1.exe
2015-09-25 10:27 - 2015-09-25 10:27 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\istartsurf
2015-09-25 10:25 - 2015-09-25 10:30 - 00000000 ____D C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A
2015-09-25 10:25 - 2015-09-25 10:25 - 00077312 _____ C:\Users\ASUS\AppData\Local\Ancode.exe
2015-09-25 10:25 - 2015-09-25 10:25 - 00006128 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-7
2015-09-25 10:25 - 2015-09-25 10:25 - 00005784 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-6
2015-09-25 10:25 - 2015-09-25 10:25 - 00005436 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5
2015-09-25 10:25 - 2015-09-25 10:25 - 00003124 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-7.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00003042 _____ C:\WINDOWS\System32\Tasks\Virtual Bus
2015-09-25 10:25 - 2015-09-25 10:25 - 00002780 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-6.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00002432 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5_user.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00002432 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00000000 ____D C:\Users\ASUS\AppData\Local\Virtual Bus
2015-09-25 10:25 - 2015-09-25 10:25 - 00000000 ____D C:\Program Files\Concom
2015-09-25 10:24 - 2015-09-25 10:58 - 00003950 _____ C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-09-25 10:24 - 2015-09-25 10:58 - 00003714 _____ C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-09-25 10:24 - 2015-09-25 10:58 - 00000978 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-09-25 10:24 - 2015-09-25 10:58 - 00000974 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-09-25 10:24 - 2015-09-25 10:36 - 00000000 ____D C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A
2015-09-25 10:24 - 2015-09-25 10:25 - 00000000 ____D C:\Program Files (x86)\SavePass 1.1
2015-09-25 10:24 - 2015-09-25 10:24 - 00008508 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-7
2015-09-25 10:24 - 2015-09-25 10:24 - 00008508 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-6
2015-09-25 10:24 - 2015-09-25 10:24 - 00007148 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-3
2015-09-25 10:24 - 2015-09-25 10:24 - 00005504 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-7.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00005504 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-6.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00004144 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-3.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00002098 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-10_user.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\VOPackage
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Users\ASUS\AppData\Local\globalUpdate
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Program Files (x86)\ba0c937c-4d5b-4ea1-8941-e9e2cff32790
2015-09-25 10:24 - 2015-08-02 21:51 - 00000753 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-09-25 10:23 - 2015-09-25 10:23 - 01661679 _____ C:\Users\ASUS\Downloads\Keygen_v7.rar
2015-09-25 10:21 - 2015-09-25 10:21 - 02007912 _____ (Gianpaolo Bottin ) C:\Users\ASUS\Downloads\MouseSpeedSetup (2).exe
2015-09-25 10:21 - 2015-09-25 10:21 - 02007912 _____ (Gianpaolo Bottin ) C:\Users\ASUS\Downloads\MouseSpeedSetup (1).exe
2015-09-25 10:21 - 2015-09-25 10:21 - 00001061 _____ C:\Users\ASUS\Desktop\Mouse Speed Switcher.lnk
2015-09-25 10:21 - 2015-09-25 10:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mouse Speed Switcher
2015-09-25 10:21 - 2015-09-25 10:21 - 00000000 ____D C:\Program Files (x86)\MouseSpeedSwitcher
2015-09-24 23:09 - 2015-09-24 23:09 - 00000594 _____ C:\WINDOWS\PFRO.log
2015-09-24 20:34 - 2015-09-24 23:10 - 00003270 _____ C:\WINDOWS\setupact.log
2015-09-24 20:34 - 2015-09-24 20:34 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-24 20:21 - 2015-09-24 20:21 - 00633886 _____ C:\Users\ASUS\Desktop\wawa_3daim_tdm.iwd
2015-09-24 16:57 - 2015-09-24 16:57 - 00000981 _____ C:\Users\ASUS\Desktop\GSC.lnk
2015-09-24 16:57 - 2015-09-24 16:57 - 00000000 ____D C:\Users\ASUS\Documents\GSC
2015-09-24 16:57 - 2015-09-24 16:57 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GSC 2.00
2015-09-24 16:56 - 2015-09-24 17:41 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\GSC 2.00
2015-09-24 16:56 - 2015-09-24 16:57 - 00000000 ____D C:\Program Files (x86)\GSC 2.00
2015-09-24 16:56 - 2015-09-24 16:56 - 00209144 _____ C:\Users\ASUS\Downloads\GSCSetup.exe
2015-09-23 20:41 - 2015-09-23 22:23 - 1803217814 _____ C:\Users\ASUS\Downloads\Obávaný-bojovník-(2006)-(CZ)-(Akční,-Drama,-Životopisný).avi.crdownload
2015-09-23 17:59 - 2015-09-23 17:59 - 07620921 _____ C:\Users\ASUS\Desktop\mp_disco.iwd
2015-09-23 15:52 - 2015-09-23 15:52 - 00000038 _____ C:\Users\ASUS\Desktop\flm dwlnd.txt
2015-09-23 11:08 - 2015-09-23 11:08 - 00047537 _____ C:\Users\ASUS\Desktop\399.ass
2015-09-23 10:50 - 2012-04-13 00:22 - 171182616 _____ C:\Users\ASUS\Desktop\400 - Rhapsody In Drew.avi
2015-09-21 17:22 - 2015-09-21 17:33 - 189493248 _____ C:\Users\ASUS\Downloads\Pokemon-08x393-Bobulí-dobrodružství.avi.crdownload
2015-09-21 13:05 - 2015-09-21 14:03 - 1047527424 _____ C:\Users\ASUS\Downloads\Přískra8.part06.rar
2015-09-20 19:55 - 2015-09-20 19:55 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Canneverbe Limited
2015-09-20 19:55 - 2015-09-20 19:55 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2015-09-20 19:54 - 2015-09-20 19:55 - 05650560 _____ (Canneverbe Limited ) C:\Users\ASUS\Downloads\cdbxp_setup_4.5.6.5844.exe
2015-09-20 19:48 - 2015-09-20 19:50 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Nero
2015-09-20 19:47 - 2015-09-24 18:15 - 00000000 ____D C:\ProgramData\Nero
2015-09-20 19:44 - 2015-09-20 19:44 - 59902132 _____ (Oleg N. Scherbakov) C:\Users\ASUS\Downloads\Nero-9.4.12.3_free-notoolbar.exe
2015-09-19 15:31 - 2015-09-19 15:31 - 00010457 _____ C:\Users\ASUS\Downloads\macro-sakura.lua
2015-09-19 13:04 - 2015-09-19 13:15 - 202790912 _____ C:\Users\ASUS\Downloads\Pokemon-08x392-Pacifidlogská-šance.avi.crdownload
2015-09-19 12:51 - 2015-09-19 13:50 - 1047527424 _____ C:\Users\ASUS\Downloads\Přískra8.part05.rar
2015-09-19 12:29 - 2015-09-19 12:39 - 188651520 _____ C:\Users\ASUS\Downloads\Pokemon-08x397-Zahájení-Velkých-slavností.avi
2015-09-19 11:40 - 2015-09-19 11:40 - 00045616 _____ C:\Users\ASUS\Desktop\398 red col.ass
2015-09-19 09:50 - 2015-09-19 09:50 - 00000488 _____ C:\Users\ASUS\Desktop\398.lnk
2015-09-19 09:46 - 2015-09-19 09:46 - 00001930 _____ C:\Users\ASUS\Downloads\Fonty.ass
2015-09-18 18:56 - 2015-09-18 19:06 - 161701888 _____ C:\Users\ASUS\Downloads\Pokemon-08x391-Chaotická-bitka-o-stuhu.avi
2015-09-18 18:09 - 2015-09-18 18:20 - 199135232 _____ C:\Users\ASUS\Downloads\Pokemon-08x390-Zamilovaní-Donphani.avi.crdownload
2015-09-18 18:03 - 2015-09-19 21:06 - 00005712 _____ C:\Users\ASUS\Desktop\PKMN files.txt
2015-09-17 21:46 - 2015-09-17 21:58 - 203270144 _____ C:\Users\ASUS\Downloads\Pokemon-08x389-Wynautí-spřežení.avi
2015-09-17 14:43 - 2015-09-17 14:54 - 199258112 _____ C:\Users\ASUS\Downloads\Pokemon-08x388-Zloděj-Linoone.avi.crdownload
2015-09-17 14:01 - 2015-09-17 14:12 - 200376320 _____ C:\Users\ASUS\Downloads\Pokemon-08x387-Osm-nestačí.avi.crdownload
2015-09-17 13:28 - 2015-09-17 13:39 - 200065024 _____ C:\Users\ASUS\Downloads\Pokemon-08x386-Důležitý-osmý-zápas.avi.crdownload
2015-09-17 12:44 - 2015-09-17 12:56 - 202438656 _____ C:\Users\ASUS\Downloads\Pokemon-08x385-Slyším-Raltse.avi
2015-09-17 10:28 - 2015-09-17 10:39 - 199852032 _____ C:\Users\ASUS\Downloads\Pokemon-08x384-Ledový-Snorunt.avi
2015-09-17 09:06 - 2015-09-17 09:20 - 191805440 _____ C:\Users\ASUS\Downloads\Pokemon-08x383-Absol-utní-pohroma.avi
2015-09-16 21:18 - 2015-09-16 21:29 - 191229952 _____ C:\Users\ASUS\Downloads\Pokemon-08x382-Tajemné-Trapinchí-jezero.avi
2015-09-16 18:35 - 2015-09-16 18:46 - 201375744 _____ C:\Users\ASUS\Downloads\Pokemon-08x381-Jedna-Mawile.avi
2015-09-16 16:07 - 2015-09-16 16:18 - 188633088 _____ C:\Users\ASUS\Downloads\Pokemon-08x380-Horem-dolem-Claydolem.avi
2015-09-16 09:25 - 2015-09-16 09:35 - 189833216 _____ C:\Users\ASUS\Downloads\Pokemon-08x378-Kde-je-Armaldo.avi
2015-09-16 08:51 - 2015-09-16 08:51 - 00046365 _____ C:\Users\ASUS\Desktop\398 (1).ass
2015-09-15 22:37 - 2015-09-15 22:47 - 186136576 _____ C:\Users\ASUS\Downloads\Pokemon-08x377-Drake-z-Elitní-čtyřky.avi
2015-09-15 17:16 - 2015-09-15 17:27 - 187629568 _____ C:\Users\ASUS\Downloads\Pokemon-08x376-Silný-jako-Solrock.avi.crdownload
2015-09-15 16:54 - 2015-09-15 17:05 - 186451968 _____ C:\Users\ASUS\Downloads\Pokemon-08x375-Zápas-ve-vesmírném-středisku!.avi.crdownload
2015-09-15 15:13 - 2015-09-15 15:13 - 00015788 _____ C:\Users\ASUS\Downloads\[kat.cr]pokemon.battle.frontier.47.end.of.a.journey.yet.beginning.of.a.journey.jap.eng.subs (1).torrent
2015-09-15 15:07 - 2015-09-15 15:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\dvdcss
2015-09-15 14:48 - 2015-09-15 15:02 - 00000000 ____D C:\Users\ASUS\Downloads\Pokemon Season 9 - Battle Frontier
2015-09-15 14:48 - 2015-09-15 14:48 - 00073454 _____ C:\Users\ASUS\Downloads\Pokemon_Season_9_-_Battle_Frontier.torrent
2015-09-15 14:43 - 2015-09-15 14:43 - 00015788 _____ C:\Users\ASUS\Downloads\[kat.cr]pokemon.battle.frontier.47.end.of.a.journey.yet.beginning.of.a.journey.jap.eng.subs.torrent
2015-09-15 14:40 - 2015-09-15 14:40 - 00040379 _____ C:\Users\ASUS\Downloads\C797E8D33B4334BC6B36F8B6AC4AFCAE64748013.torrent
2015-09-15 14:27 - 2015-09-15 15:22 - 00000000 ____D C:\Users\ASUS\Downloads\9 - Battle Frontier
2015-09-15 14:27 - 2015-09-15 15:02 - 250513050 _____ C:\Users\ASUS\Desktop\426 - Battle Arena! Kakutou taiketsu! (Jap+Eng).ogm
2015-09-15 14:24 - 2015-09-15 14:24 - 00062625 _____ C:\Users\ASUS\Downloads\39617053076DB50B3B86746541507B45439F2FDA.torrent
2015-09-15 14:17 - 2015-09-15 15:37 - 00000000 ____D C:\Users\ASUS\Downloads\Pokemon Season 9 Battle Frontier Complete 323-468 Episods Salman Sk Silver RG
2015-09-15 14:15 - 2015-09-15 14:15 - 00015438 _____ C:\Users\ASUS\Downloads\71A2A0DEF6097275389ED15CF67D66349FC31E25.torrent
2015-09-15 14:00 - 2015-09-15 14:00 - 00520376 _____ C:\Users\ASUS\Downloads\subrip_0.96b.zip
2015-09-15 12:59 - 2015-09-15 13:09 - 00000000 ____D C:\Users\ASUS\Desktop\SK
2015-09-15 12:14 - 2015-09-20 10:40 - 00672015 _____ C:\Users\ASUS\Downloads\Anglické titulky pro AB.rar
2015-09-15 12:04 - 2015-09-15 12:04 - 00315558 _____ C:\Users\ASUS\Downloads\Titulky.zip
2015-09-15 10:47 - 2015-09-15 10:53 - 00047875 _____ C:\Users\ASUS\Downloads\398.ass
2015-09-14 20:28 - 2015-09-14 20:38 - 188598272 _____ C:\Users\ASUS\Downloads\Pokemon-08x374-Souboj-titánů.avi
2015-09-14 20:05 - 2015-09-14 20:15 - 185581568 _____ C:\Users\ASUS\Downloads\Pokemon-08x373-Vzestup-Groudona.avi.crdownload
2015-09-14 17:24 - 2015-09-14 17:35 - 190349312 _____ C:\Users\ASUS\Downloads\Pokemon-08x372-Zápas-svalů.avi.crdownload
2015-09-14 16:58 - 2015-09-14 17:09 - 174955520 _____ C:\Users\ASUS\Downloads\PA3GKO7AMH1SN.avi.crdownload
2015-09-14 16:18 - 2015-09-14 16:29 - 178276352 _____ C:\Users\ASUS\Downloads\PA3GKO7AMH0SN.avi.crdownload
2015-09-14 14:35 - 2015-09-14 14:35 - 00000702 _____ C:\Users\ASUS\Desktop\legit_scoperifle_bySubversion2.ass
2015-09-14 14:01 - 2015-09-14 14:11 - 179212288 _____ C:\Users\ASUS\Downloads\PA3GKO6AMH9SN.avi.crdownload
2015-09-14 12:37 - 2015-09-14 12:37 - 00498420 _____ C:\Users\ASUS\Downloads\codehook.rar
2015-09-14 11:57 - 2015-09-14 11:57 - 00000039 _____ C:\Users\ASUS\Desktop\legit_scoperifle_bySubversion2.txt
2015-09-14 11:36 - 2015-09-14 12:11 - 630777134 _____ C:\Users\ASUS\Downloads\Poketo7.part8.rar
2015-09-14 09:17 - 2015-09-14 09:17 - 01233137 _____ C:\Users\ASUS\Downloads\GoT-ss.rar
2015-09-13 22:55 - 2015-09-13 22:55 - 10774603 _____ C:\Users\ASUS\Desktop\tdm bur.rar
2015-09-13 22:47 - 2015-09-20 12:12 - 00000000 ____D C:\Users\ASUS\Desktop\tdm bur
2015-09-13 11:27 - 2015-09-13 11:27 - 02007912 _____ (Gianpaolo Bottin ) C:\Users\ASUS\Downloads\MouseSpeedSetup.exe
2015-09-13 11:27 - 2015-09-13 11:27 - 00000000 ____D C:\ProgramData\Licenses
2015-09-13 10:18 - 2015-09-13 10:18 - 00324319 _____ C:\Users\ASUS\Downloads\buttons_default.cfg
2015-09-12 13:15 - 2015-09-12 13:15 - 06839982 _____ C:\Users\ASUS\Desktop\mp_shipment.iwd
2015-09-12 13:15 - 2015-09-12 13:15 - 01243997 _____ C:\Users\ASUS\Desktop\mp_jojo.iwd
2015-09-12 13:15 - 2015-09-12 13:15 - 00589187 _____ C:\Users\ASUS\Desktop\mp_glassarena.iwd
2015-09-12 12:12 - 2015-09-12 12:12 - 00042054 _____ C:\Users\ASUS\Downloads\ZuRoMoDZ Ultimate Patch V1.1 With Real Aimbot(2).zip
2015-09-11 22:45 - 2015-09-11 22:46 - 00722432 _____ C:\Users\ASUS\Downloads\Console Variable Unlocker_[www.unknowncheats.me]_.exe
2015-09-11 12:58 - 2015-09-11 13:57 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo7.part7.rar
2015-09-10 16:24 - 2015-09-10 16:35 - 188651520 _____ C:\Users\ASUS\Downloads\Pokemon-08x397-Zahájení-Velkých-slavností.avi.crdownload
2015-09-10 13:14 - 2015-09-16 09:35 - 00007153 _____ C:\Users\ASUS\Desktop\ep1 fear factor phony.srt
2015-09-10 10:33 - 2015-09-10 10:43 - 181393110 _____ C:\Users\ASUS\Downloads\Episode-396---Ash-and-May!-Heated-Battles-in-Hoenn!-(not-aired-in-english).avi
2015-09-09 20:47 - 2015-09-09 20:47 - 00000925 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASSDraw3.lnk
2015-09-09 20:47 - 2015-09-09 20:47 - 00000896 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aegisub.lnk
2015-09-09 20:40 - 2015-09-09 20:40 - 00053375 _____ C:\Users\ASUS\Desktop\UTF-8.txt
2015-09-09 19:43 - 2015-09-09 19:43 - 00053375 _____ C:\Users\ASUS\Desktop\UFT-8.ass
2015-09-09 19:32 - 2015-09-09 19:32 - 00053375 _____ C:\Users\ASUS\Downloads\398_tmp_ff98.ass
2015-09-09 19:32 - 2015-09-09 19:32 - 00053375 _____ C:\Users\ASUS\Downloads\398_tmp_faed.ass
2015-09-09 19:27 - 2015-09-09 19:40 - 182687402 _____ C:\Users\ASUS\Desktop\Episode-398---Deceit-And-Assist.avi
2015-09-09 18:31 - 2015-09-09 18:31 - 00000710 _____ C:\Users\ASUS\Downloads\Plocha – zástupce.lnk
2015-09-09 18:14 - 2015-09-09 18:14 - 00003447 _____ C:\Users\ASUS\Downloads\PKMN---WG.ass
2015-09-09 17:26 - 2015-09-09 17:30 - 73404416 _____ C:\Users\ASUS\Downloads\Pocket_Monsters._Pikachu_no_Fuyuyasumi_(2000)_-_1_-_Winter_Games_-_[JDS](6bf190a1)(dub_en).avi
2015-09-09 12:03 - 2015-09-09 13:01 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo7.part6.rar
2015-09-09 10:49 - 2015-09-03 04:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-09-09 10:49 - 2015-09-03 04:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-09-09 10:49 - 2015-09-02 20:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-09-09 10:49 - 2015-09-02 19:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-09-09 10:49 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-09-09 10:49 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-09-09 10:49 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-09-09 10:49 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-09-09 10:49 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-09-09 10:49 - 2015-07-03 16:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-09-09 10:49 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-09-09 10:48 - 2015-07-13 21:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-09-09 10:48 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-09-09 10:48 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-09-09 10:44 - 2015-07-10 21:06 - 00118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2015-09-09 10:32 - 2015-09-09 11:11 - 594912904 _____ C:\Users\ASUS\Downloads\Pokemon_-_Film_6_-_Jirachi_co_plni_prani.avi.crdownload
2015-09-09 10:24 - 2015-09-09 11:23 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo7.part5.rar
2015-09-09 06:30 - 2015-08-27 04:48 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-09-09 06:30 - 2015-08-26 20:00 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-09-09 06:30 - 2015-08-26 20:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-09-09 06:30 - 2015-08-26 20:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-09-09 06:30 - 2015-08-26 20:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-09-09 06:30 - 2015-08-26 16:46 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-09-09 06:30 - 2015-08-26 16:29 - 02240512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-09-09 06:30 - 2015-08-26 16:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-09-09 06:30 - 2015-08-26 16:27 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-09-09 06:30 - 2015-08-26 16:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-09-09 06:30 - 2015-08-26 16:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-09-09 06:30 - 2015-08-26 16:26 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-09-09 06:28 - 2015-08-22 20:19 - 25188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-09 06:28 - 2015-08-22 19:35 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-09 06:28 - 2015-08-22 19:34 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-09 06:28 - 2015-08-22 19:22 - 19856384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-09 06:28 - 2015-08-22 19:21 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-09 06:28 - 2015-08-22 19:20 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-09-09 06:28 - 2015-08-22 18:55 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-09 06:28 - 2015-08-22 18:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-09 06:28 - 2015-08-22 18:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-09-09 06:28 - 2015-08-22 18:45 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-09 06:28 - 2015-08-22 18:44 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-09-09 06:28 - 2015-08-22 18:41 - 14451712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-09 06:28 - 2015-08-22 18:41 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-09-09 06:28 - 2015-08-22 18:41 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-09-09 06:28 - 2015-08-22 18:41 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-09-09 06:28 - 2015-08-22 18:39 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-09-09 06:28 - 2015-08-22 18:28 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-09-09 06:28 - 2015-08-22 18:26 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-09-09 06:28 - 2015-08-22 18:23 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-09-09 06:28 - 2015-08-22 18:22 - 12857344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-09 06:28 - 2015-08-22 18:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-09-09 06:28 - 2015-08-22 18:18 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-09-09 06:28 - 2015-08-22 18:18 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-09-09 06:28 - 2015-08-22 18:18 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-09-09 06:28 - 2015-08-22 18:14 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-09-09 06:28 - 2015-08-22 18:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-09-09 06:28 - 2015-08-22 18:00 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-09-09 06:28 - 2015-08-22 17:56 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-09-09 06:28 - 2015-08-22 17:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-09-09 06:28 - 2015-07-30 19:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-09-09 06:28 - 2015-07-30 18:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-09-09 06:27 - 2015-09-02 04:56 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-09-09 06:27 - 2015-09-02 04:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-09 06:27 - 2015-09-02 04:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-09 06:27 - 2015-09-02 04:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-09 06:27 - 2015-09-02 04:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-09 06:27 - 2015-08-03 23:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2015-09-09 06:27 - 2015-08-03 23:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2015-09-09 06:27 - 2015-08-01 16:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2015-09-09 06:27 - 2015-08-01 05:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-09-09 06:27 - 2015-08-01 05:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-09-09 06:27 - 2015-08-01 05:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-09 06:27 - 2015-08-01 05:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-09-09 06:27 - 2015-08-01 05:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-09-09 06:27 - 2015-07-22 16:34 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-09 06:27 - 2015-07-22 16:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 06:27 - 2015-07-22 16:25 - 02461184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-09 06:27 - 2015-07-22 16:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 06:27 - 2015-07-18 20:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-09 06:27 - 2015-07-18 20:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-09 06:27 - 2015-07-18 20:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-09 06:27 - 2015-07-18 20:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-09 06:27 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe
2015-09-08 17:18 - 2015-09-08 17:28 - 183238656 _____ C:\Users\ASUS\Downloads\348-the-bicker-the-better---Uploaded-for-AGoA.super-forum.net-by-Sedlois.avi.crdownload
2015-09-07 18:08 - 2015-09-07 18:51 - 725458305 _____ C:\Users\ASUS\Downloads\PK5H.rar
2015-09-07 14:25 - 2015-09-07 14:25 - 00149666 _____ C:\Users\ASUS\Desktop\Trainwreck.2015.V2.READNFO.HDRip.XviD.AC3-EVO.srt
2015-09-06 16:54 - 2015-09-06 17:02 - 130061469 _____ C:\Users\ASUS\Downloads\Pokemon-Chronicles-03---Povest-o-hromu.mp4
2015-09-06 16:47 - 2015-09-06 16:54 - 129596952 _____ C:\Users\ASUS\Downloads\Pokemon-Chronicles-02---Povest-o-hromu.mp4
2015-09-05 18:17 - 2015-09-05 19:15 - 00000000 ____D C:\Users\ASUS\Downloads\Trainwreck.2015.V2.READNFO.HDRip.XviD.AC3-EVO
2015-09-05 18:16 - 2015-09-05 18:16 - 00118629 _____ C:\Users\ASUS\Downloads\Trainwreck2015V2READNFOHDRipXviDAC3-EVO - ThePirateBay.TO.torrent
2015-09-05 18:14 - 2015-09-05 18:14 - 00059246 _____ C:\Users\ASUS\Downloads\trainwreck.(2015).cze.1cd.(6282764).zip
2015-09-04 19:01 - 2015-09-04 19:01 - 00000898 _____ C:\Users\ASUS\Documents\Obrázky – zástupce.lnk
2015-09-04 17:00 - 2015-09-04 17:00 - 00010032 _____ C:\Users\ASUS\Downloads\317.rar
2015-09-04 15:41 - 2013-01-09 22:57 - 230241234 _____ C:\Users\ASUS\Desktop\314- Budiž světlo!.avi
2015-09-04 15:40 - 2013-01-09 22:35 - 00036414 _____ C:\Users\ASUS\Desktop\314- Budiž světlo!.ass
2015-09-04 14:12 - 2015-09-04 14:12 - 00056207 _____ C:\Users\ASUS\Desktop\orig397(2).ass
2015-09-03 16:33 - 2015-09-03 16:33 - 00001839 _____ C:\Users\ASUS\Downloads\config (1).zip
2015-09-03 16:31 - 2015-09-03 16:31 - 00013439 _____ C:\Users\ASUS\Downloads\config.zip
2015-09-02 11:57 - 2015-09-02 11:57 - 09547376 _____ C:\Users\ASUS\Downloads\[Akaname] Pokemon SPECIAL v01ch14.zip
2015-09-02 09:02 - 2015-09-02 09:02 - 00056743 _____ C:\Users\ASUS\Downloads\397 (1).ass
2015-09-02 08:20 - 2015-09-02 08:20 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aegisub
2015-09-02 08:19 - 2015-09-23 11:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Aegisub
2015-09-02 08:19 - 2015-09-09 20:47 - 00000000 ____D C:\Program Files\Aegisub
2015-09-02 08:19 - 2015-09-02 08:19 - 00000000 ____D C:\ProgramData\Package Cache
2015-09-02 08:18 - 2015-09-02 08:18 - 20891980 _____ (Aegisub Team ) C:\Users\ASUS\Downloads\Aegisub-3.2.2-64.exe
2015-09-02 08:17 - 2015-09-02 08:18 - 19602087 _____ (Aegisub Team ) C:\Users\ASUS\Downloads\Aegisub-3.2.2-32.exe
2015-09-02 08:16 - 2015-09-02 08:16 - 00041535 _____ C:\Users\ASUS\Desktop\orig397.srt
2015-09-01 20:12 - 2015-09-01 22:42 - 00042035 _____ C:\Users\ASUS\Desktop\39777777777.srt
2015-09-01 19:41 - 2015-09-01 20:11 - 00042243 _____ C:\Users\ASUS\Desktop\39777.srt
2015-09-01 19:26 - 2015-09-01 19:37 - 183511040 _____ C:\Users\ASUS\Downloads\Episode-397---Hi-Ho-Silver-Wind!.avi
2015-09-01 16:18 - 2015-09-01 19:40 - 00056268 _____ C:\Users\ASUS\Downloads\397.ass
2015-09-01 13:43 - 2012-04-13 16:28 - 150499062 _____ C:\Users\ASUS\Desktop\423 - Fear Factor Phony.avi
2015-09-01 12:58 - 2015-09-01 12:58 - 01087682 _____ C:\Users\ASUS\Downloads\subtitleworkshop251.zip
2015-09-01 12:58 - 2015-09-01 12:58 - 00002150 _____ C:\Users\UpdatusUser\Desktop\Subtitle Workshop.lnk
2015-09-01 12:58 - 2015-09-01 12:58 - 00002150 _____ C:\Users\ASUS\Desktop\Subtitle Workshop.lnk
2015-09-01 12:58 - 2004-03-19 13:53 - 01107022 _____ C:\Users\ASUS\Desktop\SubtitleWorkshop251.exe
2015-09-01 12:40 - 2015-09-01 13:40 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo9.part1.rar
2015-09-01 11:58 - 2015-09-01 12:39 - 731164987 _____ C:\Users\ASUS\Downloads\Poketo6.part09.rar
2015-09-01 10:33 - 2015-09-01 11:13 - 732954624 _____ C:\Users\ASUS\Downloads\Pokémon navždy (2001).avi.crdownload
2015-09-01 10:19 - 2015-09-01 10:19 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-09-01 10:19 - 2015-09-01 10:19 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-01 10:17 - 2015-09-01 11:16 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part08.rar
2015-08-30 13:23 - 2015-08-30 14:14 - 908635796 _____ C:\Users\ASUS\Downloads\Kód-Enigmy-CZ-dub.avi.crdownload
2015-08-29 17:17 - 2015-08-29 18:17 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part06.rar
2015-08-29 09:36 - 2015-08-29 10:34 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part05.rar
2015-08-28 15:18 - 2015-08-28 15:18 - 00010224 _____ C:\Users\ASUS\Downloads\291.rar
2015-08-28 15:05 - 2015-08-28 15:06 - 244375198 _____ C:\Users\ASUS\Desktop\290- Wurmple cimprcampr.avi
2015-08-28 15:05 - 2013-01-08 00:24 - 226804242 _____ C:\Users\ASUS\Desktop\288- Loudavý Lotad.avi
2015-08-28 15:05 - 2013-01-07 12:10 - 240023604 _____ C:\Users\ASUS\Desktop\289- Jde o to být nejhezčí!.avi
2015-08-28 15:04 - 2015-08-28 16:03 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part04.rar
2015-08-28 15:04 - 2013-01-07 23:43 - 217555186 _____ C:\Users\ASUS\Desktop\287- Kousanec na pamětnou.avi
2015-08-28 15:04 - 2013-01-07 13:15 - 248700596 _____ C:\Users\ASUS\Desktop\284- Příběh se zápletkou.avi
2015-08-28 15:04 - 2013-01-07 13:03 - 221495792 _____ C:\Users\ASUS\Desktop\286- Nemluv s plnou pusou.avi
2015-08-28 15:04 - 2013-01-07 12:03 - 246806712 _____ C:\Users\ASUS\Desktop\283- Stromové ghetto.avi
2015-08-28 15:04 - 2013-01-07 11:21 - 233419278 _____ C:\Users\ASUS\Desktop\285- Mámo, táto, v komoře je Shroomish.avi
2015-08-28 15:03 - 2013-01-08 00:14 - 234978692 _____ C:\Users\ASUS\Desktop\280- Nezdolný Taillow.avi
2015-08-28 15:03 - 2013-01-08 00:04 - 217723210 _____ C:\Users\ASUS\Desktop\277- Tak ať Vám to šlape, chlape!.avi
2015-08-28 15:03 - 2013-01-07 12:52 - 222937772 _____ C:\Users\ASUS\Desktop\278- Ruiny s výhledem.avi
2015-08-28 15:03 - 2013-01-07 12:29 - 233586638 _____ C:\Users\ASUS\Desktop\282- Ukradená osobnost.avi
2015-08-28 15:03 - 2013-01-07 11:50 - 231638226 _____ C:\Users\ASUS\Desktop\281- Život v trenýrkách.avi
2015-08-28 15:03 - 2013-01-07 11:28 - 224424752 _____ C:\Users\ASUS\Desktop\279- Všude dobře, v Hoennu nejlépe.avi
2015-08-28 13:52 - 2015-08-28 13:52 - 00009079 _____ C:\Users\ASUS\Downloads\Chronicles 6.zip
2015-08-28 13:52 - 2015-08-28 13:52 - 00009079 _____ C:\Users\ASUS\Downloads\Chronicles 6 (1).zip
2015-08-28 13:51 - 2015-08-28 13:59 - 158361600 _____ C:\Users\ASUS\Downloads\06-Cerulean-Blues.avi.crdownload
2015-08-28 13:48 - 2015-08-28 14:50 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part04.crdownload
2015-08-28 12:39 - 2015-08-28 12:46 - 135249920 _____ C:\Users\ASUS\Downloads\05-a-family-that-battles-together-stays-together_nový.avi.crdownload
2015-08-28 10:37 - 2015-08-28 11:40 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part07.rar
2015-08-27 16:25 - 2015-08-27 17:07 - 735705088 _____ C:\Users\ASUS\Downloads\TEORIE VŠEHO - 2014 CZ dabing.avi
2015-08-27 15:28 - 2015-08-27 16:27 - 1047527424 _____ C:\Users\ASUS\Downloads\poketo6.part03.rar
2015-08-27 11:51 - 2015-08-27 12:03 - 226090340 _____ C:\Users\ASUS\Downloads\Pokemon-Chronicles-01---Povest-o-hromu.mpg
2015-08-26 12:40 - 2015-08-26 13:43 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part02.rar
2015-08-26 11:10 - 2015-08-26 12:08 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part01.rar
2015-08-26 09:28 - 2015-08-26 10:10 - 732407808 _____ C:\Users\ASUS\Downloads\Pokémon 3 (2000).avi.crdownload
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-25 11:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-25 10:59 - 2015-06-16 16:30 - 00000000 ____D C:\FRST
2015-09-25 10:54 - 2015-08-02 13:12 - 02192384 _____ (Farbar) C:\Users\ASUS\Desktop\FRST64.exe
2015-09-25 10:44 - 2015-06-16 16:05 - 00000966 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-25 10:43 - 2014-12-23 13:52 - 00214520 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-09-25 10:43 - 2014-10-22 14:30 - 00214520 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-09-25 10:36 - 2015-08-02 12:48 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-09-25 10:33 - 2014-08-05 17:38 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1447694392-248528962-4126827209-1002
2015-09-25 10:30 - 2014-10-03 16:30 - 00001436 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-25 10:25 - 2015-07-03 17:06 - 01204884 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-25 10:25 - 2014-07-28 18:18 - 00000000 ____D C:\ProgramData\Temp
2015-09-25 10:12 - 2014-10-17 20:06 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-25 10:09 - 2015-02-11 13:15 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Seznam.cz
2015-09-25 10:07 - 2014-10-06 16:38 - 00003798 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{F961BA38-6AD9-450B-9D20-5BD9C5795238}
2015-09-25 10:04 - 2015-06-16 16:05 - 00000962 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-25 10:04 - 2014-10-03 16:32 - 00000000 __RDO C:\Users\ASUS\OneDrive
2015-09-24 23:42 - 2014-09-05 12:37 - 00000930 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002UA.job
2015-09-24 23:10 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-24 22:45 - 2014-10-11 11:22 - 08551424 ___SH C:\Users\ASUS\Desktop\Thumbs.db
2015-09-24 21:28 - 2014-03-18 17:33 - 01745984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-24 21:28 - 2014-03-18 16:54 - 00739924 _____ C:\WINDOWS\system32\perfh005.dat
2015-09-24 21:28 - 2014-03-18 16:54 - 00151610 _____ C:\WINDOWS\system32\perfc005.dat
2015-09-24 20:27 - 2015-02-11 14:12 - 00000000 ____D C:\Users\ASUS\Desktop\Filmy
2015-09-24 18:17 - 2015-03-03 13:59 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\TS3Client
2015-09-24 18:12 - 2015-08-13 18:40 - 00000000 ____D C:\Program Files (x86)\Vitware
2015-09-24 15:42 - 2015-03-13 19:44 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\vlc
2015-09-24 11:42 - 2014-09-05 12:37 - 00000908 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002Core.job
2015-09-23 19:14 - 2015-08-14 10:30 - 00000124 _____ C:\Users\ASUS\Downloads\gammacfg.ini
2015-09-22 22:11 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-22 14:12 - 2014-10-17 20:06 - 00003666 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-09-22 11:16 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-20 09:48 - 2014-10-05 17:39 - 00836096 ___SH C:\Users\ASUS\Downloads\Thumbs.db
2015-09-19 17:35 - 2014-10-19 11:15 - 00000000 ____D C:\Users\ASUS\Desktop\Fotky
2015-09-18 13:21 - 2014-10-03 16:04 - 00000000 ____D C:\Users\ASUS
2015-09-16 20:39 - 2015-06-16 16:05 - 00003938 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-16 20:39 - 2015-06-16 16:05 - 00003702 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-15 15:37 - 2014-09-02 13:11 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\uTorrent
2015-09-15 10:19 - 2014-09-05 12:37 - 00003054 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002UA
2015-09-15 10:19 - 2014-09-05 12:37 - 00002704 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002Core
2015-09-15 10:19 - 2014-08-05 14:04 - 00000000 ____D C:\Users\ASUS\AppData\Local\Google
2015-09-15 03:18 - 2014-12-11 09:56 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-09-15 03:18 - 2014-12-11 09:56 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-12 08:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-09 17:55 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-09-09 14:58 - 2013-08-22 16:44 - 00346512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-09 14:46 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-09-09 14:45 - 2014-08-05 17:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-09 06:35 - 2014-03-18 17:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-01 12:58 - 2015-03-06 14:52 - 00000000 ____D C:\Program Files (x86)\URUSoft
2015-09-01 10:22 - 2014-07-28 18:09 - 00000000 ____D C:\Program Files\Intel
2015-09-01 10:22 - 2014-07-28 18:03 - 00000000 ____D C:\ProgramData\Intel
2015-09-01 10:13 - 2014-10-29 17:51 - 00000000 ____D C:\ProgramData\ASUS
2015-08-27 09:06 - 2014-08-05 19:03 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype
2015-08-26 18:37 - 2014-08-05 17:30 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories =======
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG.exe
2015-09-25 10:25 - 2015-09-25 10:25 - 0077312 _____ () C:\Users\ASUS\AppData\Local\Ancode.exe
2015-09-25 10:25 - 2015-09-25 10:25 - 0000187 _____ () C:\Users\ASUS\AppData\Local\Ancode.exe.config
2015-06-13 23:07 - 2015-06-13 23:07 - 0000000 _____ () C:\Users\ASUS\AppData\Local\Temp.dat
2013-05-01 13:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-05-01 13:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2015-09-25 10:27 - 2015-09-25 10:56 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Some files in TEMP:
====================
C:\Users\ASUS\AppData\Local\Temp\1024.exe
C:\Users\ASUS\AppData\Local\Temp\5232.exe
C:\Users\ASUS\AppData\Local\Temp\6789.exe
C:\Users\ASUS\AppData\Local\Temp\7830.exe
C:\Users\ASUS\AppData\Local\Temp\Font__7226_il92329.exe
C:\Users\ASUS\AppData\Local\Temp\fsd6AD4.exe
C:\Users\ASUS\AppData\Local\Temp\fsdA7EE.exe
C:\Users\ASUS\AppData\Local\Temp\nsbC3FE.exe
C:\Users\ASUS\AppData\Local\Temp\playerfile.exe
C:\Users\ASUS\AppData\Local\Temp\serial.exe
C:\Users\ASUS\AppData\Local\Temp\setup.exe
C:\Users\ASUS\AppData\Local\Temp\setup2.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-6.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-7.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-10_user.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-10.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-3.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5_user.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-6.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-7.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-10.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-3.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\ccKE7KWDPeDYPanKq2PM9f.job => C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002Core.job => C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002UA.job => C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\IisaTUcvyNpQTZEHP0tG.job => C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\MyBrowser.job => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\utility.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET NOD32 Antivirus 4.2 (Enabled - Out of date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 4.2 (Enabled - Out of date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\ASUS\Desktop" je 60946 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by ASUS (administrator) on PC (25-09-2015 10:59:47)
Running from C:\Users\ASUS\Desktop
Loaded Profiles: ASUS (Available Profiles: UpdatusUser & ASUS)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
() C:\WINDOWS\SysWOW64\PnkBstrA.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Microsoft Corporation) C:\WINDOWS\System32\GWX\GWX.exe
() C:\Users\ASUS\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\ASUS\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(GameRanger Technologies) C:\Users\ASUS\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\vnsaE8A0.tmp
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\knsfF424.tmpfs
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\jnsuCB3.tmp
(OB) C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-10.exe
() C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\hnsy2379.tmp
() C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A\snse7DA0.tmp
(OB) C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-6.exe
() C:\Users\ASUS\AppData\Local\Ancode.exe
() C:\Program Files\Concom\Concom.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe
() C:\Users\ASUS\AppData\Local\Temp\Font__7226_il92329.exe
() C:\ProgramData\ApplicationHosting\ApplicationHosting.exe
() C:\ProgramData\Airron\Airron.exe
(Cinema PlusV24.09) C:\Users\ASUS\AppData\Local\Temp\nsx965E.tmp\Jhlvegevzuc.exe
() C:\ProgramData\Airron\Airron.exe
(OB) C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-64.exe
(CMI Limited) C:\Users\ASUS\AppData\Local\Temp\nsw559A.tmp
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-10.exe
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.exe
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-64.exe
(DTools LIMITED) C:\ProgramData\UWdsManProU\WdsManPro.exe
() C:\Users\ASUS\AppData\Local\Temp\nstBE7A.tmp
(MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe
(MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe
(TODO: <公司名>) C:\Program Files (x86)\SFK\SSFK.exe
(CMI Limited) C:\Users\ASUS\AppData\Local\Temp\nso248D.tmp
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\System32\msiexec.exe
(Cinema PlusV24.09) C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\ASUS\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13197456 2012-09-28] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2916584 2010-08-12] (ESET)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\ASUS\AppData\Roaming\VOPackage\VOPackage.exe [931805 2015-09-25] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [EvolveClient] => C:\Program Files\Echobit\Evolve\EvolveClient.exe [3334016 2015-07-23] (Echobit LLC)
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [cz.seznam.software.autoupdate] => C:\Users\ASUS\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [cz.seznam.software.szndesktop] => C:\Users\ASUS\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\...\Run: [GoogleChromeAutoLaunch_5F00D79597A684C35D384C6669E057DF] => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe [636928 2015-08-29] (MyBrowser)
AppInit_DLLs: C:\ProgramData\Airron\Haykix.dll => C:\ProgramData\Airron\Haykix.dll [883200 2015-09-25] ()
AppInit_DLLs-x32: C:\ProgramData\Airron\Kantom.dll => C:\ProgramData\Airron\Kantom.dll [738816 2015-09-25] ()
Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2015-07-09]
ShortcutTarget: GameRanger.lnk -> C:\Users\ASUS\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{56EE1D7F-67FF-4DA8-AF0F-643A1D516CE3}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{FC31EF48-E3C3-4A48-ABC5-1B2F6B3CB9A1}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpvqjMZMi5Vt-ap3r-nQH3vbz0x9zJA2HaS43JCDjXLYAp_sPFDbslysQS_zZmSxSOvP7ArKRgobZCX9
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {060B046C-71E8-4393-B42C-F6E213AC19E1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {0BBA08A4-3430-4924-BBD8-987539D419CE} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {28FB04F3-498F-4FC4-BB59-56790F44FF2C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {356A085D-E3AB-460C-A3F1-3874890869B1} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {60CD57CE-8ED8-4F14-B488-39DCE95BEC7E} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {78CF3F94-9144-427E-92C5-1B51230A2B0A} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {828F1FDD-72DA-483B-9599-4F5386202733} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {B6A4C9EB-A25A-4496-87E1-35432DD113C9} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {FF057E0F-007F-4814-ABBD-5083D7857366} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1447694392-248528962-4126827209-1002 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeY_JU6b_6EXZYM7HcHroknzRy_g0JFTeO4ABl7KG_RBoXrLNFjepdC8A12ONhPdGm2_5LngoPhfswJ&q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=14431696 ... RYDDZ8RYDX
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-09-25] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-09-25] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-1447694392-248528962-4126827209-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\ASUS\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1447694392-248528962-4126827209-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ASUS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS)
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: No Name - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2015-06-16]
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2OVvqpTxFp_mf8596oJ0raYPS2lBR3JnibuQMfA_mb-rAreTX0THRAcx_1LRKClLpeDYPKh1k8l7ChCjf7-OeNDChoByk3k4CticzKuceTJz3Lms4Uu0d8z_0sjkad4ODVqOaz0noIKCHT9
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14431 ... RYDDZ8RYDX"
CHR DefaultSearchURL: Default -> hxxp://www.mystartsearch.com/web/?type=ds&ts=1 ... earchTerms}
CHR DefaultSearchKeyword: Default -> mystartsearch
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-03]
CHR Extension: (Dokumenty Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-03]
CHR Extension: (Disk Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-03]
CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-03]
CHR Extension: (Vyhledávání Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-03]
CHR Extension: (Tabulky Google) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-02]
CHR Extension: (Skype Click to Call) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-08-05]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-03]
CHR Extension: (Gmail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-03]
CHR Extension: () - C:\Users\ASUS\AppData\Local\Virtual Bus\Component [2015-09-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/?type=sc&t ... RYDDZ8RYDX
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Airron; C:\ProgramData\\Airron\\Airron.exe [441856 2015-09-20] () [File not signed]
R2 ApplicationHosting; C:\ProgramData\\ApplicationHosting\\ApplicationHosting.exe [441856 2015-09-21] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 Concom; C:\Program Files\Concom\Concom.exe [379904 2015-09-24] () [File not signed]
R2 dipubibu; C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A\snse7DA0.tmp [303616 2015-09-25] () [File not signed]
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2010-08-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [810144 2010-08-12] (ESET)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2015-07-13] (Echobit LLC)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-25] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-25] (globalUpdate) [File not signed] <==== ATTENTION
S2 gupdate1d0a83d726de062; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-08-03] (Google Inc.)
S3 gupdatem1d0a83d728293cb; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-08-03] (Google Inc.)
R2 gyvixodu; C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\hnsy2379.tmp [203776 2015-09-25] () [File not signed]
R2 lehicewu; C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\jnsuCB3.tmp [181760 2015-09-25] () [File not signed]
R2 nowuedctepupdateama; C:\Users\ASUS\AppData\Local\Ancode.exe [77312 2015-09-25] () [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75064 2015-08-09] ()
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [458400 2015-09-25] (TODO: <公司名>)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WdsManPro; C:\ProgramData\UWdsManProU\WdsManPro.exe [442504 2015-09-25] (DTools LIMITED)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 junikigy; C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\knsfF424.tmpfs [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
S3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107328 2012-10-01] (Intel Corporation)
S3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [42816 2012-10-01] (Intel Corporation)
S3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [64832 2012-10-01] (Intel Corporation)
S3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [96576 2012-10-01] (Intel Corporation)
S3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229184 2012-10-01] (Intel Corporation)
S3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363328 2012-10-01] (Intel Corporation)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [168544 2010-07-29] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [141264 2010-07-29] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [126320 2010-07-29] (ESET)
S3 IntcDAud; C:\Windows\system32\DRIVERS\IntcDAud.sys [342528 2012-10-08] (Intel(R) Corporation) [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-25 10:59 - 2015-09-25 11:00 - 00023963 _____ C:\Users\ASUS\Desktop\FRST.txt
2015-09-25 10:59 - 2015-09-25 10:58 - 00112640 _____ (forum.viry.cz) C:\Users\ASUS\Desktop\FRSTLauncher.exe
2015-09-25 10:58 - 2015-09-25 10:58 - 00112640 _____ (forum.viry.cz) C:\Users\ASUS\Downloads\FRSTLauncher.exe
2015-09-25 10:58 - 2015-09-25 10:58 - 00004008 _____ C:\WINDOWS\System32\Tasks\IisaTUcvyNpQTZEHP0tG
2015-09-25 10:58 - 2015-09-25 10:58 - 00001014 _____ C:\WINDOWS\Tasks\IisaTUcvyNpQTZEHP0tG.job
2015-09-25 10:56 - 2015-09-25 10:57 - 00000000 ____D C:\ProgramData\UWdsManProU
2015-09-25 10:54 - 2015-09-25 10:54 - 02192384 _____ (Farbar) C:\Users\ASUS\Downloads\FRST64.exe
2015-09-25 10:37 - 2015-09-25 10:58 - 00002450 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5_user.job
2015-09-25 10:37 - 2015-09-25 10:37 - 00004012 _____ C:\WINDOWS\System32\Tasks\ccKE7KWDPeDYPanKq2PM9f
2015-09-25 10:37 - 2015-09-25 10:37 - 00001018 _____ C:\WINDOWS\Tasks\ccKE7KWDPeDYPanKq2PM9f.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00008526 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-7
2015-09-25 10:36 - 2015-09-25 10:58 - 00008526 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-6
2015-09-25 10:36 - 2015-09-25 10:58 - 00007166 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-3
2015-09-25 10:36 - 2015-09-25 10:58 - 00006146 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7
2015-09-25 10:36 - 2015-09-25 10:58 - 00006146 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6
2015-09-25 10:36 - 2015-09-25 10:58 - 00005522 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-7.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00005522 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-6.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00005454 _____ C:\WINDOWS\System32\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5
2015-09-25 10:36 - 2015-09-25 10:58 - 00004162 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-3.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00003142 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00003142 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.job
2015-09-25 10:36 - 2015-09-25 10:58 - 00002450 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5.job
2015-09-25 10:36 - 2015-09-25 10:57 - 00002116 _____ C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-10_user.job
2015-09-25 10:36 - 2015-09-25 10:37 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV24.09
2015-09-25 10:36 - 2015-09-25 10:36 - 00000000 ____D C:\Program Files (x86)\963c382f-8ddd-4cf1-9fa0-d87507a907e9
2015-09-25 10:35 - 2015-09-25 10:56 - 00004038 _____ C:\WINDOWS\System32\Tasks\MyBrowser
2015-09-25 10:35 - 2015-09-25 10:56 - 00002322 _____ C:\Users\Public\Desktop\MyBrowser.lnk
2015-09-25 10:35 - 2015-09-25 10:56 - 00001052 _____ C:\WINDOWS\Tasks\MyBrowser.job
2015-09-25 10:35 - 2015-09-25 10:36 - 00000000 ____D C:\ProgramData\3WdsManPro3
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 __SHD C:\Users\ASUS\AppData\Roaming\AnyProtectEx
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\mystartsearch
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\Users\ASUS\AppData\Local\MyBrowser
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
2015-09-25 10:35 - 2015-09-25 10:35 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
2015-09-25 10:34 - 2015-09-25 10:34 - 00000292 _____ C:\task.vbs
2015-09-25 10:34 - 2015-09-25 10:34 - 00000000 ____D C:\Program Files (x86)\MyBrowser
2015-09-25 10:30 - 2015-09-25 10:51 - 00000000 ____D C:\ProgramData\Airron
2015-09-25 10:30 - 2015-09-25 10:30 - 00003560 _____ C:\WINDOWS\System32\Tasks\snp
2015-09-25 10:30 - 2015-09-25 10:30 - 00002385 _____ C:\WINDOWS\SysWOW64\findit.xml
2015-09-25 10:30 - 2015-09-25 10:30 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Mozilla
2015-09-25 10:30 - 2015-09-25 10:30 - 00000000 ____D C:\ProgramData\ApplicationHosting
2015-09-25 10:30 - 2015-09-25 10:30 - 00000000 ____D C:\ProgramData\Airrons
2015-09-25 10:29 - 2015-09-25 10:29 - 00004154 _____ C:\WINDOWS\System32\Tasks\amiupdaterExi
2015-09-25 10:29 - 2015-09-25 10:29 - 00003372 _____ C:\WINDOWS\System32\Tasks\amiupdaterExd
2015-09-25 10:28 - 2015-09-25 10:28 - 00001002 _____ C:\Users\UpdatusUser\Desktop\Liveistream.lnk
2015-09-25 10:28 - 2015-09-25 10:28 - 00001002 _____ C:\Users\ASUS\Desktop\Liveistream.lnk
2015-09-25 10:28 - 2015-09-25 10:28 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Liveistream
2015-09-25 10:28 - 2015-09-25 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Liveistream
2015-09-25 10:28 - 2015-09-25 10:28 - 00000000 ____D C:\Program Files (x86)\Liveistream
2015-09-25 10:27 - 2015-09-25 10:57 - 00000000 ____D C:\Program Files (x86)\SFK
2015-09-25 10:27 - 2015-09-25 10:56 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-09-25 10:27 - 2015-09-25 10:28 - 00000000 ____D C:\ProgramData\aWdsManProa
2015-09-25 10:27 - 2015-09-25 10:27 - 00058765 _____ () C:\Users\ASUS\Desktop\PlayerStubWrapper1.exe
2015-09-25 10:27 - 2015-09-25 10:27 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\istartsurf
2015-09-25 10:25 - 2015-09-25 10:30 - 00000000 ____D C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A
2015-09-25 10:25 - 2015-09-25 10:25 - 00077312 _____ C:\Users\ASUS\AppData\Local\Ancode.exe
2015-09-25 10:25 - 2015-09-25 10:25 - 00006128 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-7
2015-09-25 10:25 - 2015-09-25 10:25 - 00005784 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-6
2015-09-25 10:25 - 2015-09-25 10:25 - 00005436 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5
2015-09-25 10:25 - 2015-09-25 10:25 - 00003124 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-7.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00003042 _____ C:\WINDOWS\System32\Tasks\Virtual Bus
2015-09-25 10:25 - 2015-09-25 10:25 - 00002780 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-6.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00002432 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5_user.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00002432 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5.job
2015-09-25 10:25 - 2015-09-25 10:25 - 00000000 ____D C:\Users\ASUS\AppData\Local\Virtual Bus
2015-09-25 10:25 - 2015-09-25 10:25 - 00000000 ____D C:\Program Files\Concom
2015-09-25 10:24 - 2015-09-25 10:58 - 00003950 _____ C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-09-25 10:24 - 2015-09-25 10:58 - 00003714 _____ C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-09-25 10:24 - 2015-09-25 10:58 - 00000978 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-09-25 10:24 - 2015-09-25 10:58 - 00000974 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-09-25 10:24 - 2015-09-25 10:36 - 00000000 ____D C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A
2015-09-25 10:24 - 2015-09-25 10:25 - 00000000 ____D C:\Program Files (x86)\SavePass 1.1
2015-09-25 10:24 - 2015-09-25 10:24 - 00008508 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-7
2015-09-25 10:24 - 2015-09-25 10:24 - 00008508 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-6
2015-09-25 10:24 - 2015-09-25 10:24 - 00007148 _____ C:\WINDOWS\System32\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-3
2015-09-25 10:24 - 2015-09-25 10:24 - 00005504 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-7.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00005504 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-6.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00004144 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-3.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00002098 _____ C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-10_user.job
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\VOPackage
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Users\ASUS\AppData\Local\globalUpdate
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-09-25 10:24 - 2015-09-25 10:24 - 00000000 ____D C:\Program Files (x86)\ba0c937c-4d5b-4ea1-8941-e9e2cff32790
2015-09-25 10:24 - 2015-08-02 21:51 - 00000753 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-09-25 10:23 - 2015-09-25 10:23 - 01661679 _____ C:\Users\ASUS\Downloads\Keygen_v7.rar
2015-09-25 10:21 - 2015-09-25 10:21 - 02007912 _____ (Gianpaolo Bottin ) C:\Users\ASUS\Downloads\MouseSpeedSetup (2).exe
2015-09-25 10:21 - 2015-09-25 10:21 - 02007912 _____ (Gianpaolo Bottin ) C:\Users\ASUS\Downloads\MouseSpeedSetup (1).exe
2015-09-25 10:21 - 2015-09-25 10:21 - 00001061 _____ C:\Users\ASUS\Desktop\Mouse Speed Switcher.lnk
2015-09-25 10:21 - 2015-09-25 10:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mouse Speed Switcher
2015-09-25 10:21 - 2015-09-25 10:21 - 00000000 ____D C:\Program Files (x86)\MouseSpeedSwitcher
2015-09-24 23:09 - 2015-09-24 23:09 - 00000594 _____ C:\WINDOWS\PFRO.log
2015-09-24 20:34 - 2015-09-24 23:10 - 00003270 _____ C:\WINDOWS\setupact.log
2015-09-24 20:34 - 2015-09-24 20:34 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-24 20:21 - 2015-09-24 20:21 - 00633886 _____ C:\Users\ASUS\Desktop\wawa_3daim_tdm.iwd
2015-09-24 16:57 - 2015-09-24 16:57 - 00000981 _____ C:\Users\ASUS\Desktop\GSC.lnk
2015-09-24 16:57 - 2015-09-24 16:57 - 00000000 ____D C:\Users\ASUS\Documents\GSC
2015-09-24 16:57 - 2015-09-24 16:57 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GSC 2.00
2015-09-24 16:56 - 2015-09-24 17:41 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\GSC 2.00
2015-09-24 16:56 - 2015-09-24 16:57 - 00000000 ____D C:\Program Files (x86)\GSC 2.00
2015-09-24 16:56 - 2015-09-24 16:56 - 00209144 _____ C:\Users\ASUS\Downloads\GSCSetup.exe
2015-09-23 20:41 - 2015-09-23 22:23 - 1803217814 _____ C:\Users\ASUS\Downloads\Obávaný-bojovník-(2006)-(CZ)-(Akční,-Drama,-Životopisný).avi.crdownload
2015-09-23 17:59 - 2015-09-23 17:59 - 07620921 _____ C:\Users\ASUS\Desktop\mp_disco.iwd
2015-09-23 15:52 - 2015-09-23 15:52 - 00000038 _____ C:\Users\ASUS\Desktop\flm dwlnd.txt
2015-09-23 11:08 - 2015-09-23 11:08 - 00047537 _____ C:\Users\ASUS\Desktop\399.ass
2015-09-23 10:50 - 2012-04-13 00:22 - 171182616 _____ C:\Users\ASUS\Desktop\400 - Rhapsody In Drew.avi
2015-09-21 17:22 - 2015-09-21 17:33 - 189493248 _____ C:\Users\ASUS\Downloads\Pokemon-08x393-Bobulí-dobrodružství.avi.crdownload
2015-09-21 13:05 - 2015-09-21 14:03 - 1047527424 _____ C:\Users\ASUS\Downloads\Přískra8.part06.rar
2015-09-20 19:55 - 2015-09-20 19:55 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Canneverbe Limited
2015-09-20 19:55 - 2015-09-20 19:55 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2015-09-20 19:54 - 2015-09-20 19:55 - 05650560 _____ (Canneverbe Limited ) C:\Users\ASUS\Downloads\cdbxp_setup_4.5.6.5844.exe
2015-09-20 19:48 - 2015-09-20 19:50 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Nero
2015-09-20 19:47 - 2015-09-24 18:15 - 00000000 ____D C:\ProgramData\Nero
2015-09-20 19:44 - 2015-09-20 19:44 - 59902132 _____ (Oleg N. Scherbakov) C:\Users\ASUS\Downloads\Nero-9.4.12.3_free-notoolbar.exe
2015-09-19 15:31 - 2015-09-19 15:31 - 00010457 _____ C:\Users\ASUS\Downloads\macro-sakura.lua
2015-09-19 13:04 - 2015-09-19 13:15 - 202790912 _____ C:\Users\ASUS\Downloads\Pokemon-08x392-Pacifidlogská-šance.avi.crdownload
2015-09-19 12:51 - 2015-09-19 13:50 - 1047527424 _____ C:\Users\ASUS\Downloads\Přískra8.part05.rar
2015-09-19 12:29 - 2015-09-19 12:39 - 188651520 _____ C:\Users\ASUS\Downloads\Pokemon-08x397-Zahájení-Velkých-slavností.avi
2015-09-19 11:40 - 2015-09-19 11:40 - 00045616 _____ C:\Users\ASUS\Desktop\398 red col.ass
2015-09-19 09:50 - 2015-09-19 09:50 - 00000488 _____ C:\Users\ASUS\Desktop\398.lnk
2015-09-19 09:46 - 2015-09-19 09:46 - 00001930 _____ C:\Users\ASUS\Downloads\Fonty.ass
2015-09-18 18:56 - 2015-09-18 19:06 - 161701888 _____ C:\Users\ASUS\Downloads\Pokemon-08x391-Chaotická-bitka-o-stuhu.avi
2015-09-18 18:09 - 2015-09-18 18:20 - 199135232 _____ C:\Users\ASUS\Downloads\Pokemon-08x390-Zamilovaní-Donphani.avi.crdownload
2015-09-18 18:03 - 2015-09-19 21:06 - 00005712 _____ C:\Users\ASUS\Desktop\PKMN files.txt
2015-09-17 21:46 - 2015-09-17 21:58 - 203270144 _____ C:\Users\ASUS\Downloads\Pokemon-08x389-Wynautí-spřežení.avi
2015-09-17 14:43 - 2015-09-17 14:54 - 199258112 _____ C:\Users\ASUS\Downloads\Pokemon-08x388-Zloděj-Linoone.avi.crdownload
2015-09-17 14:01 - 2015-09-17 14:12 - 200376320 _____ C:\Users\ASUS\Downloads\Pokemon-08x387-Osm-nestačí.avi.crdownload
2015-09-17 13:28 - 2015-09-17 13:39 - 200065024 _____ C:\Users\ASUS\Downloads\Pokemon-08x386-Důležitý-osmý-zápas.avi.crdownload
2015-09-17 12:44 - 2015-09-17 12:56 - 202438656 _____ C:\Users\ASUS\Downloads\Pokemon-08x385-Slyším-Raltse.avi
2015-09-17 10:28 - 2015-09-17 10:39 - 199852032 _____ C:\Users\ASUS\Downloads\Pokemon-08x384-Ledový-Snorunt.avi
2015-09-17 09:06 - 2015-09-17 09:20 - 191805440 _____ C:\Users\ASUS\Downloads\Pokemon-08x383-Absol-utní-pohroma.avi
2015-09-16 21:18 - 2015-09-16 21:29 - 191229952 _____ C:\Users\ASUS\Downloads\Pokemon-08x382-Tajemné-Trapinchí-jezero.avi
2015-09-16 18:35 - 2015-09-16 18:46 - 201375744 _____ C:\Users\ASUS\Downloads\Pokemon-08x381-Jedna-Mawile.avi
2015-09-16 16:07 - 2015-09-16 16:18 - 188633088 _____ C:\Users\ASUS\Downloads\Pokemon-08x380-Horem-dolem-Claydolem.avi
2015-09-16 09:25 - 2015-09-16 09:35 - 189833216 _____ C:\Users\ASUS\Downloads\Pokemon-08x378-Kde-je-Armaldo.avi
2015-09-16 08:51 - 2015-09-16 08:51 - 00046365 _____ C:\Users\ASUS\Desktop\398 (1).ass
2015-09-15 22:37 - 2015-09-15 22:47 - 186136576 _____ C:\Users\ASUS\Downloads\Pokemon-08x377-Drake-z-Elitní-čtyřky.avi
2015-09-15 17:16 - 2015-09-15 17:27 - 187629568 _____ C:\Users\ASUS\Downloads\Pokemon-08x376-Silný-jako-Solrock.avi.crdownload
2015-09-15 16:54 - 2015-09-15 17:05 - 186451968 _____ C:\Users\ASUS\Downloads\Pokemon-08x375-Zápas-ve-vesmírném-středisku!.avi.crdownload
2015-09-15 15:13 - 2015-09-15 15:13 - 00015788 _____ C:\Users\ASUS\Downloads\[kat.cr]pokemon.battle.frontier.47.end.of.a.journey.yet.beginning.of.a.journey.jap.eng.subs (1).torrent
2015-09-15 15:07 - 2015-09-15 15:07 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\dvdcss
2015-09-15 14:48 - 2015-09-15 15:02 - 00000000 ____D C:\Users\ASUS\Downloads\Pokemon Season 9 - Battle Frontier
2015-09-15 14:48 - 2015-09-15 14:48 - 00073454 _____ C:\Users\ASUS\Downloads\Pokemon_Season_9_-_Battle_Frontier.torrent
2015-09-15 14:43 - 2015-09-15 14:43 - 00015788 _____ C:\Users\ASUS\Downloads\[kat.cr]pokemon.battle.frontier.47.end.of.a.journey.yet.beginning.of.a.journey.jap.eng.subs.torrent
2015-09-15 14:40 - 2015-09-15 14:40 - 00040379 _____ C:\Users\ASUS\Downloads\C797E8D33B4334BC6B36F8B6AC4AFCAE64748013.torrent
2015-09-15 14:27 - 2015-09-15 15:22 - 00000000 ____D C:\Users\ASUS\Downloads\9 - Battle Frontier
2015-09-15 14:27 - 2015-09-15 15:02 - 250513050 _____ C:\Users\ASUS\Desktop\426 - Battle Arena! Kakutou taiketsu! (Jap+Eng).ogm
2015-09-15 14:24 - 2015-09-15 14:24 - 00062625 _____ C:\Users\ASUS\Downloads\39617053076DB50B3B86746541507B45439F2FDA.torrent
2015-09-15 14:17 - 2015-09-15 15:37 - 00000000 ____D C:\Users\ASUS\Downloads\Pokemon Season 9 Battle Frontier Complete 323-468 Episods Salman Sk Silver RG
2015-09-15 14:15 - 2015-09-15 14:15 - 00015438 _____ C:\Users\ASUS\Downloads\71A2A0DEF6097275389ED15CF67D66349FC31E25.torrent
2015-09-15 14:00 - 2015-09-15 14:00 - 00520376 _____ C:\Users\ASUS\Downloads\subrip_0.96b.zip
2015-09-15 12:59 - 2015-09-15 13:09 - 00000000 ____D C:\Users\ASUS\Desktop\SK
2015-09-15 12:14 - 2015-09-20 10:40 - 00672015 _____ C:\Users\ASUS\Downloads\Anglické titulky pro AB.rar
2015-09-15 12:04 - 2015-09-15 12:04 - 00315558 _____ C:\Users\ASUS\Downloads\Titulky.zip
2015-09-15 10:47 - 2015-09-15 10:53 - 00047875 _____ C:\Users\ASUS\Downloads\398.ass
2015-09-14 20:28 - 2015-09-14 20:38 - 188598272 _____ C:\Users\ASUS\Downloads\Pokemon-08x374-Souboj-titánů.avi
2015-09-14 20:05 - 2015-09-14 20:15 - 185581568 _____ C:\Users\ASUS\Downloads\Pokemon-08x373-Vzestup-Groudona.avi.crdownload
2015-09-14 17:24 - 2015-09-14 17:35 - 190349312 _____ C:\Users\ASUS\Downloads\Pokemon-08x372-Zápas-svalů.avi.crdownload
2015-09-14 16:58 - 2015-09-14 17:09 - 174955520 _____ C:\Users\ASUS\Downloads\PA3GKO7AMH1SN.avi.crdownload
2015-09-14 16:18 - 2015-09-14 16:29 - 178276352 _____ C:\Users\ASUS\Downloads\PA3GKO7AMH0SN.avi.crdownload
2015-09-14 14:35 - 2015-09-14 14:35 - 00000702 _____ C:\Users\ASUS\Desktop\legit_scoperifle_bySubversion2.ass
2015-09-14 14:01 - 2015-09-14 14:11 - 179212288 _____ C:\Users\ASUS\Downloads\PA3GKO6AMH9SN.avi.crdownload
2015-09-14 12:37 - 2015-09-14 12:37 - 00498420 _____ C:\Users\ASUS\Downloads\codehook.rar
2015-09-14 11:57 - 2015-09-14 11:57 - 00000039 _____ C:\Users\ASUS\Desktop\legit_scoperifle_bySubversion2.txt
2015-09-14 11:36 - 2015-09-14 12:11 - 630777134 _____ C:\Users\ASUS\Downloads\Poketo7.part8.rar
2015-09-14 09:17 - 2015-09-14 09:17 - 01233137 _____ C:\Users\ASUS\Downloads\GoT-ss.rar
2015-09-13 22:55 - 2015-09-13 22:55 - 10774603 _____ C:\Users\ASUS\Desktop\tdm bur.rar
2015-09-13 22:47 - 2015-09-20 12:12 - 00000000 ____D C:\Users\ASUS\Desktop\tdm bur
2015-09-13 11:27 - 2015-09-13 11:27 - 02007912 _____ (Gianpaolo Bottin ) C:\Users\ASUS\Downloads\MouseSpeedSetup.exe
2015-09-13 11:27 - 2015-09-13 11:27 - 00000000 ____D C:\ProgramData\Licenses
2015-09-13 10:18 - 2015-09-13 10:18 - 00324319 _____ C:\Users\ASUS\Downloads\buttons_default.cfg
2015-09-12 13:15 - 2015-09-12 13:15 - 06839982 _____ C:\Users\ASUS\Desktop\mp_shipment.iwd
2015-09-12 13:15 - 2015-09-12 13:15 - 01243997 _____ C:\Users\ASUS\Desktop\mp_jojo.iwd
2015-09-12 13:15 - 2015-09-12 13:15 - 00589187 _____ C:\Users\ASUS\Desktop\mp_glassarena.iwd
2015-09-12 12:12 - 2015-09-12 12:12 - 00042054 _____ C:\Users\ASUS\Downloads\ZuRoMoDZ Ultimate Patch V1.1 With Real Aimbot(2).zip
2015-09-11 22:45 - 2015-09-11 22:46 - 00722432 _____ C:\Users\ASUS\Downloads\Console Variable Unlocker_[www.unknowncheats.me]_.exe
2015-09-11 12:58 - 2015-09-11 13:57 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo7.part7.rar
2015-09-10 16:24 - 2015-09-10 16:35 - 188651520 _____ C:\Users\ASUS\Downloads\Pokemon-08x397-Zahájení-Velkých-slavností.avi.crdownload
2015-09-10 13:14 - 2015-09-16 09:35 - 00007153 _____ C:\Users\ASUS\Desktop\ep1 fear factor phony.srt
2015-09-10 10:33 - 2015-09-10 10:43 - 181393110 _____ C:\Users\ASUS\Downloads\Episode-396---Ash-and-May!-Heated-Battles-in-Hoenn!-(not-aired-in-english).avi
2015-09-09 20:47 - 2015-09-09 20:47 - 00000925 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASSDraw3.lnk
2015-09-09 20:47 - 2015-09-09 20:47 - 00000896 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aegisub.lnk
2015-09-09 20:40 - 2015-09-09 20:40 - 00053375 _____ C:\Users\ASUS\Desktop\UTF-8.txt
2015-09-09 19:43 - 2015-09-09 19:43 - 00053375 _____ C:\Users\ASUS\Desktop\UFT-8.ass
2015-09-09 19:32 - 2015-09-09 19:32 - 00053375 _____ C:\Users\ASUS\Downloads\398_tmp_ff98.ass
2015-09-09 19:32 - 2015-09-09 19:32 - 00053375 _____ C:\Users\ASUS\Downloads\398_tmp_faed.ass
2015-09-09 19:27 - 2015-09-09 19:40 - 182687402 _____ C:\Users\ASUS\Desktop\Episode-398---Deceit-And-Assist.avi
2015-09-09 18:31 - 2015-09-09 18:31 - 00000710 _____ C:\Users\ASUS\Downloads\Plocha – zástupce.lnk
2015-09-09 18:14 - 2015-09-09 18:14 - 00003447 _____ C:\Users\ASUS\Downloads\PKMN---WG.ass
2015-09-09 17:26 - 2015-09-09 17:30 - 73404416 _____ C:\Users\ASUS\Downloads\Pocket_Monsters._Pikachu_no_Fuyuyasumi_(2000)_-_1_-_Winter_Games_-_[JDS](6bf190a1)(dub_en).avi
2015-09-09 12:03 - 2015-09-09 13:01 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo7.part6.rar
2015-09-09 10:49 - 2015-09-03 04:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-09-09 10:49 - 2015-09-03 04:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-09-09 10:49 - 2015-09-02 20:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-09-09 10:49 - 2015-09-02 19:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-09-09 10:49 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-09-09 10:49 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-09-09 10:49 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-09-09 10:49 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-09-09 10:49 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-09-09 10:49 - 2015-07-03 16:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-09-09 10:49 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-09-09 10:48 - 2015-07-13 21:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-09-09 10:48 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-09-09 10:48 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-09-09 10:44 - 2015-07-10 21:06 - 00118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2015-09-09 10:32 - 2015-09-09 11:11 - 594912904 _____ C:\Users\ASUS\Downloads\Pokemon_-_Film_6_-_Jirachi_co_plni_prani.avi.crdownload
2015-09-09 10:24 - 2015-09-09 11:23 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo7.part5.rar
2015-09-09 06:30 - 2015-08-27 04:48 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-09-09 06:30 - 2015-08-26 20:00 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-09-09 06:30 - 2015-08-26 20:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-09-09 06:30 - 2015-08-26 20:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-09-09 06:30 - 2015-08-26 20:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-09-09 06:30 - 2015-08-26 16:46 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-09-09 06:30 - 2015-08-26 16:29 - 02240512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-09-09 06:30 - 2015-08-26 16:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-09-09 06:30 - 2015-08-26 16:27 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-09-09 06:30 - 2015-08-26 16:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-09-09 06:30 - 2015-08-26 16:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-09-09 06:30 - 2015-08-26 16:26 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-09-09 06:28 - 2015-08-22 20:19 - 25188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-09 06:28 - 2015-08-22 19:35 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-09 06:28 - 2015-08-22 19:34 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-09 06:28 - 2015-08-22 19:22 - 19856384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-09 06:28 - 2015-08-22 19:21 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-09 06:28 - 2015-08-22 19:20 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-09-09 06:28 - 2015-08-22 18:55 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-09 06:28 - 2015-08-22 18:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-09 06:28 - 2015-08-22 18:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-09-09 06:28 - 2015-08-22 18:45 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-09 06:28 - 2015-08-22 18:44 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-09-09 06:28 - 2015-08-22 18:41 - 14451712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-09 06:28 - 2015-08-22 18:41 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-09-09 06:28 - 2015-08-22 18:41 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-09-09 06:28 - 2015-08-22 18:41 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-09-09 06:28 - 2015-08-22 18:39 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-09-09 06:28 - 2015-08-22 18:28 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-09-09 06:28 - 2015-08-22 18:26 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-09-09 06:28 - 2015-08-22 18:23 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-09-09 06:28 - 2015-08-22 18:22 - 12857344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-09 06:28 - 2015-08-22 18:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-09-09 06:28 - 2015-08-22 18:18 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-09-09 06:28 - 2015-08-22 18:18 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-09-09 06:28 - 2015-08-22 18:18 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-09-09 06:28 - 2015-08-22 18:14 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-09-09 06:28 - 2015-08-22 18:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-09-09 06:28 - 2015-08-22 18:00 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-09-09 06:28 - 2015-08-22 17:56 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-09-09 06:28 - 2015-08-22 17:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-09-09 06:28 - 2015-07-30 19:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-09-09 06:28 - 2015-07-30 18:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-09-09 06:27 - 2015-09-02 04:56 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-09-09 06:27 - 2015-09-02 04:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-09 06:27 - 2015-09-02 04:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-09 06:27 - 2015-09-02 04:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-09 06:27 - 2015-09-02 04:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-09 06:27 - 2015-08-03 23:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2015-09-09 06:27 - 2015-08-03 23:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2015-09-09 06:27 - 2015-08-01 16:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2015-09-09 06:27 - 2015-08-01 05:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-09-09 06:27 - 2015-08-01 05:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-09-09 06:27 - 2015-08-01 05:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-09 06:27 - 2015-08-01 05:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-09-09 06:27 - 2015-08-01 05:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-09-09 06:27 - 2015-07-22 16:34 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-09 06:27 - 2015-07-22 16:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 06:27 - 2015-07-22 16:25 - 02461184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-09 06:27 - 2015-07-22 16:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 06:27 - 2015-07-18 20:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-09 06:27 - 2015-07-18 20:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-09 06:27 - 2015-07-18 20:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-09 06:27 - 2015-07-18 20:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-09 06:27 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe
2015-09-08 17:18 - 2015-09-08 17:28 - 183238656 _____ C:\Users\ASUS\Downloads\348-the-bicker-the-better---Uploaded-for-AGoA.super-forum.net-by-Sedlois.avi.crdownload
2015-09-07 18:08 - 2015-09-07 18:51 - 725458305 _____ C:\Users\ASUS\Downloads\PK5H.rar
2015-09-07 14:25 - 2015-09-07 14:25 - 00149666 _____ C:\Users\ASUS\Desktop\Trainwreck.2015.V2.READNFO.HDRip.XviD.AC3-EVO.srt
2015-09-06 16:54 - 2015-09-06 17:02 - 130061469 _____ C:\Users\ASUS\Downloads\Pokemon-Chronicles-03---Povest-o-hromu.mp4
2015-09-06 16:47 - 2015-09-06 16:54 - 129596952 _____ C:\Users\ASUS\Downloads\Pokemon-Chronicles-02---Povest-o-hromu.mp4
2015-09-05 18:17 - 2015-09-05 19:15 - 00000000 ____D C:\Users\ASUS\Downloads\Trainwreck.2015.V2.READNFO.HDRip.XviD.AC3-EVO
2015-09-05 18:16 - 2015-09-05 18:16 - 00118629 _____ C:\Users\ASUS\Downloads\Trainwreck2015V2READNFOHDRipXviDAC3-EVO - ThePirateBay.TO.torrent
2015-09-05 18:14 - 2015-09-05 18:14 - 00059246 _____ C:\Users\ASUS\Downloads\trainwreck.(2015).cze.1cd.(6282764).zip
2015-09-04 19:01 - 2015-09-04 19:01 - 00000898 _____ C:\Users\ASUS\Documents\Obrázky – zástupce.lnk
2015-09-04 17:00 - 2015-09-04 17:00 - 00010032 _____ C:\Users\ASUS\Downloads\317.rar
2015-09-04 15:41 - 2013-01-09 22:57 - 230241234 _____ C:\Users\ASUS\Desktop\314- Budiž světlo!.avi
2015-09-04 15:40 - 2013-01-09 22:35 - 00036414 _____ C:\Users\ASUS\Desktop\314- Budiž světlo!.ass
2015-09-04 14:12 - 2015-09-04 14:12 - 00056207 _____ C:\Users\ASUS\Desktop\orig397(2).ass
2015-09-03 16:33 - 2015-09-03 16:33 - 00001839 _____ C:\Users\ASUS\Downloads\config (1).zip
2015-09-03 16:31 - 2015-09-03 16:31 - 00013439 _____ C:\Users\ASUS\Downloads\config.zip
2015-09-02 11:57 - 2015-09-02 11:57 - 09547376 _____ C:\Users\ASUS\Downloads\[Akaname] Pokemon SPECIAL v01ch14.zip
2015-09-02 09:02 - 2015-09-02 09:02 - 00056743 _____ C:\Users\ASUS\Downloads\397 (1).ass
2015-09-02 08:20 - 2015-09-02 08:20 - 00000000 ____D C:\Users\ASUS\AppData\Local\Aegisub
2015-09-02 08:19 - 2015-09-23 11:08 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Aegisub
2015-09-02 08:19 - 2015-09-09 20:47 - 00000000 ____D C:\Program Files\Aegisub
2015-09-02 08:19 - 2015-09-02 08:19 - 00000000 ____D C:\ProgramData\Package Cache
2015-09-02 08:18 - 2015-09-02 08:18 - 20891980 _____ (Aegisub Team ) C:\Users\ASUS\Downloads\Aegisub-3.2.2-64.exe
2015-09-02 08:17 - 2015-09-02 08:18 - 19602087 _____ (Aegisub Team ) C:\Users\ASUS\Downloads\Aegisub-3.2.2-32.exe
2015-09-02 08:16 - 2015-09-02 08:16 - 00041535 _____ C:\Users\ASUS\Desktop\orig397.srt
2015-09-01 20:12 - 2015-09-01 22:42 - 00042035 _____ C:\Users\ASUS\Desktop\39777777777.srt
2015-09-01 19:41 - 2015-09-01 20:11 - 00042243 _____ C:\Users\ASUS\Desktop\39777.srt
2015-09-01 19:26 - 2015-09-01 19:37 - 183511040 _____ C:\Users\ASUS\Downloads\Episode-397---Hi-Ho-Silver-Wind!.avi
2015-09-01 16:18 - 2015-09-01 19:40 - 00056268 _____ C:\Users\ASUS\Downloads\397.ass
2015-09-01 13:43 - 2012-04-13 16:28 - 150499062 _____ C:\Users\ASUS\Desktop\423 - Fear Factor Phony.avi
2015-09-01 12:58 - 2015-09-01 12:58 - 01087682 _____ C:\Users\ASUS\Downloads\subtitleworkshop251.zip
2015-09-01 12:58 - 2015-09-01 12:58 - 00002150 _____ C:\Users\UpdatusUser\Desktop\Subtitle Workshop.lnk
2015-09-01 12:58 - 2015-09-01 12:58 - 00002150 _____ C:\Users\ASUS\Desktop\Subtitle Workshop.lnk
2015-09-01 12:58 - 2004-03-19 13:53 - 01107022 _____ C:\Users\ASUS\Desktop\SubtitleWorkshop251.exe
2015-09-01 12:40 - 2015-09-01 13:40 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo9.part1.rar
2015-09-01 11:58 - 2015-09-01 12:39 - 731164987 _____ C:\Users\ASUS\Downloads\Poketo6.part09.rar
2015-09-01 10:33 - 2015-09-01 11:13 - 732954624 _____ C:\Users\ASUS\Downloads\Pokémon navždy (2001).avi.crdownload
2015-09-01 10:19 - 2015-09-01 10:19 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-09-01 10:19 - 2015-09-01 10:19 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-01 10:17 - 2015-09-01 11:16 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part08.rar
2015-08-30 13:23 - 2015-08-30 14:14 - 908635796 _____ C:\Users\ASUS\Downloads\Kód-Enigmy-CZ-dub.avi.crdownload
2015-08-29 17:17 - 2015-08-29 18:17 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part06.rar
2015-08-29 09:36 - 2015-08-29 10:34 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part05.rar
2015-08-28 15:18 - 2015-08-28 15:18 - 00010224 _____ C:\Users\ASUS\Downloads\291.rar
2015-08-28 15:05 - 2015-08-28 15:06 - 244375198 _____ C:\Users\ASUS\Desktop\290- Wurmple cimprcampr.avi
2015-08-28 15:05 - 2013-01-08 00:24 - 226804242 _____ C:\Users\ASUS\Desktop\288- Loudavý Lotad.avi
2015-08-28 15:05 - 2013-01-07 12:10 - 240023604 _____ C:\Users\ASUS\Desktop\289- Jde o to být nejhezčí!.avi
2015-08-28 15:04 - 2015-08-28 16:03 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part04.rar
2015-08-28 15:04 - 2013-01-07 23:43 - 217555186 _____ C:\Users\ASUS\Desktop\287- Kousanec na pamětnou.avi
2015-08-28 15:04 - 2013-01-07 13:15 - 248700596 _____ C:\Users\ASUS\Desktop\284- Příběh se zápletkou.avi
2015-08-28 15:04 - 2013-01-07 13:03 - 221495792 _____ C:\Users\ASUS\Desktop\286- Nemluv s plnou pusou.avi
2015-08-28 15:04 - 2013-01-07 12:03 - 246806712 _____ C:\Users\ASUS\Desktop\283- Stromové ghetto.avi
2015-08-28 15:04 - 2013-01-07 11:21 - 233419278 _____ C:\Users\ASUS\Desktop\285- Mámo, táto, v komoře je Shroomish.avi
2015-08-28 15:03 - 2013-01-08 00:14 - 234978692 _____ C:\Users\ASUS\Desktop\280- Nezdolný Taillow.avi
2015-08-28 15:03 - 2013-01-08 00:04 - 217723210 _____ C:\Users\ASUS\Desktop\277- Tak ať Vám to šlape, chlape!.avi
2015-08-28 15:03 - 2013-01-07 12:52 - 222937772 _____ C:\Users\ASUS\Desktop\278- Ruiny s výhledem.avi
2015-08-28 15:03 - 2013-01-07 12:29 - 233586638 _____ C:\Users\ASUS\Desktop\282- Ukradená osobnost.avi
2015-08-28 15:03 - 2013-01-07 11:50 - 231638226 _____ C:\Users\ASUS\Desktop\281- Život v trenýrkách.avi
2015-08-28 15:03 - 2013-01-07 11:28 - 224424752 _____ C:\Users\ASUS\Desktop\279- Všude dobře, v Hoennu nejlépe.avi
2015-08-28 13:52 - 2015-08-28 13:52 - 00009079 _____ C:\Users\ASUS\Downloads\Chronicles 6.zip
2015-08-28 13:52 - 2015-08-28 13:52 - 00009079 _____ C:\Users\ASUS\Downloads\Chronicles 6 (1).zip
2015-08-28 13:51 - 2015-08-28 13:59 - 158361600 _____ C:\Users\ASUS\Downloads\06-Cerulean-Blues.avi.crdownload
2015-08-28 13:48 - 2015-08-28 14:50 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part04.crdownload
2015-08-28 12:39 - 2015-08-28 12:46 - 135249920 _____ C:\Users\ASUS\Downloads\05-a-family-that-battles-together-stays-together_nový.avi.crdownload
2015-08-28 10:37 - 2015-08-28 11:40 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part07.rar
2015-08-27 16:25 - 2015-08-27 17:07 - 735705088 _____ C:\Users\ASUS\Downloads\TEORIE VŠEHO - 2014 CZ dabing.avi
2015-08-27 15:28 - 2015-08-27 16:27 - 1047527424 _____ C:\Users\ASUS\Downloads\poketo6.part03.rar
2015-08-27 11:51 - 2015-08-27 12:03 - 226090340 _____ C:\Users\ASUS\Downloads\Pokemon-Chronicles-01---Povest-o-hromu.mpg
2015-08-26 12:40 - 2015-08-26 13:43 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part02.rar
2015-08-26 11:10 - 2015-08-26 12:08 - 1047527424 _____ C:\Users\ASUS\Downloads\Poketo6.part01.rar
2015-08-26 09:28 - 2015-08-26 10:10 - 732407808 _____ C:\Users\ASUS\Downloads\Pokémon 3 (2000).avi.crdownload
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-25 11:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-25 10:59 - 2015-06-16 16:30 - 00000000 ____D C:\FRST
2015-09-25 10:54 - 2015-08-02 13:12 - 02192384 _____ (Farbar) C:\Users\ASUS\Desktop\FRST64.exe
2015-09-25 10:44 - 2015-06-16 16:05 - 00000966 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-25 10:43 - 2014-12-23 13:52 - 00214520 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-09-25 10:43 - 2014-10-22 14:30 - 00214520 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-09-25 10:36 - 2015-08-02 12:48 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-09-25 10:33 - 2014-08-05 17:38 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1447694392-248528962-4126827209-1002
2015-09-25 10:30 - 2014-10-03 16:30 - 00001436 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-25 10:25 - 2015-07-03 17:06 - 01204884 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-25 10:25 - 2014-07-28 18:18 - 00000000 ____D C:\ProgramData\Temp
2015-09-25 10:12 - 2014-10-17 20:06 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-25 10:09 - 2015-02-11 13:15 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Seznam.cz
2015-09-25 10:07 - 2014-10-06 16:38 - 00003798 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{F961BA38-6AD9-450B-9D20-5BD9C5795238}
2015-09-25 10:04 - 2015-06-16 16:05 - 00000962 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-25 10:04 - 2014-10-03 16:32 - 00000000 __RDO C:\Users\ASUS\OneDrive
2015-09-24 23:42 - 2014-09-05 12:37 - 00000930 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002UA.job
2015-09-24 23:10 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-24 22:45 - 2014-10-11 11:22 - 08551424 ___SH C:\Users\ASUS\Desktop\Thumbs.db
2015-09-24 21:28 - 2014-03-18 17:33 - 01745984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-24 21:28 - 2014-03-18 16:54 - 00739924 _____ C:\WINDOWS\system32\perfh005.dat
2015-09-24 21:28 - 2014-03-18 16:54 - 00151610 _____ C:\WINDOWS\system32\perfc005.dat
2015-09-24 20:27 - 2015-02-11 14:12 - 00000000 ____D C:\Users\ASUS\Desktop\Filmy
2015-09-24 18:17 - 2015-03-03 13:59 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\TS3Client
2015-09-24 18:12 - 2015-08-13 18:40 - 00000000 ____D C:\Program Files (x86)\Vitware
2015-09-24 15:42 - 2015-03-13 19:44 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\vlc
2015-09-24 11:42 - 2014-09-05 12:37 - 00000908 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002Core.job
2015-09-23 19:14 - 2015-08-14 10:30 - 00000124 _____ C:\Users\ASUS\Downloads\gammacfg.ini
2015-09-22 22:11 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-22 14:12 - 2014-10-17 20:06 - 00003666 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-09-22 11:16 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-20 09:48 - 2014-10-05 17:39 - 00836096 ___SH C:\Users\ASUS\Downloads\Thumbs.db
2015-09-19 17:35 - 2014-10-19 11:15 - 00000000 ____D C:\Users\ASUS\Desktop\Fotky
2015-09-18 13:21 - 2014-10-03 16:04 - 00000000 ____D C:\Users\ASUS
2015-09-16 20:39 - 2015-06-16 16:05 - 00003938 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-16 20:39 - 2015-06-16 16:05 - 00003702 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-15 15:37 - 2014-09-02 13:11 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\uTorrent
2015-09-15 10:19 - 2014-09-05 12:37 - 00003054 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002UA
2015-09-15 10:19 - 2014-09-05 12:37 - 00002704 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002Core
2015-09-15 10:19 - 2014-08-05 14:04 - 00000000 ____D C:\Users\ASUS\AppData\Local\Google
2015-09-15 03:18 - 2014-12-11 09:56 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-09-15 03:18 - 2014-12-11 09:56 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-12 08:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-09 17:55 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-09-09 14:58 - 2013-08-22 16:44 - 00346512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-09 14:46 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-09-09 14:45 - 2014-08-05 17:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-09 06:35 - 2014-03-18 17:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-01 12:58 - 2015-03-06 14:52 - 00000000 ____D C:\Program Files (x86)\URUSoft
2015-09-01 10:22 - 2014-07-28 18:09 - 00000000 ____D C:\Program Files\Intel
2015-09-01 10:22 - 2014-07-28 18:03 - 00000000 ____D C:\ProgramData\Intel
2015-09-01 10:13 - 2014-10-29 17:51 - 00000000 ____D C:\ProgramData\ASUS
2015-08-27 09:06 - 2014-08-05 19:03 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype
2015-08-26 18:37 - 2014-08-05 17:30 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories =======
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG.exe
2015-09-25 10:25 - 2015-09-25 10:25 - 0077312 _____ () C:\Users\ASUS\AppData\Local\Ancode.exe
2015-09-25 10:25 - 2015-09-25 10:25 - 0000187 _____ () C:\Users\ASUS\AppData\Local\Ancode.exe.config
2015-06-13 23:07 - 2015-06-13 23:07 - 0000000 _____ () C:\Users\ASUS\AppData\Local\Temp.dat
2013-05-01 13:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-05-01 13:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2015-09-25 10:27 - 2015-09-25 10:56 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Some files in TEMP:
====================
C:\Users\ASUS\AppData\Local\Temp\1024.exe
C:\Users\ASUS\AppData\Local\Temp\5232.exe
C:\Users\ASUS\AppData\Local\Temp\6789.exe
C:\Users\ASUS\AppData\Local\Temp\7830.exe
C:\Users\ASUS\AppData\Local\Temp\Font__7226_il92329.exe
C:\Users\ASUS\AppData\Local\Temp\fsd6AD4.exe
C:\Users\ASUS\AppData\Local\Temp\fsdA7EE.exe
C:\Users\ASUS\AppData\Local\Temp\nsbC3FE.exe
C:\Users\ASUS\AppData\Local\Temp\playerfile.exe
C:\Users\ASUS\AppData\Local\Temp\serial.exe
C:\Users\ASUS\AppData\Local\Temp\setup.exe
C:\Users\ASUS\AppData\Local\Temp\setup2.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-6.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-1-7.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-10_user.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-10.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-3.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-5_user.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-6.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\09498501-e665-432c-b0e5-cf85d7a22393-7.job => C:\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-10.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-3.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-6.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\4181c76b-5ae2-4578-9f53-012a58eadba2-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-7.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\ccKE7KWDPeDYPanKq2PM9f.job => C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002Core.job => C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1447694392-248528962-4126827209-1002UA.job => C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\IisaTUcvyNpQTZEHP0tG.job => C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\MyBrowser.job => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\utility.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET NOD32 Antivirus 4.2 (Enabled - Out of date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 4.2 (Enabled - Out of date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\ASUS\Desktop" je 60946 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Re: nějaký viry ..
Zdravim 
Haveti je tam spousta.
Ale proc by to mel nekdo resit, kdyz nedokoncujete prohlidky? Je to ztrata casu
Haveti je tam spousta.
Ale proc by to mel nekdo resit, kdyz nedokoncujete prohlidky? Je to ztrata casu
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: nějaký viry ..
Já vím a teď toho vážně lituju a nevím jestli je už pozdě
, ale mám ty starý logy pokud je ještě chcete vidět, vím jsem lenivý a omlouvám se ale mám teď tak pomalý a rozsekaný počítač a nemám se na koho obrátit, tak vás strašně prosím jestli by jste mi nemohli pomoc, slibuji že prohlídku dokončím!
Re: nějaký viry ..
Dobra. Ale jesti ne, upozornuji, ze dalsi sance uz nebude. Je to pak opravdu akorat ztrata naseho casu a takova spoluprace nas fakt nebavibobik123 píše:slibuji že prohlídku dokončím!
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: nějaký viry ..
# AdwCleaner v5.008 - Logfile created 25/09/2015 at 12:40:12
# Updated 18/09/2015 by Xplode
# Database : 2015-09-23.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : ASUS - PC
# Running from : C:\Users\ASUS\Desktop\adwcleaner_5.008.exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem
[-] Service Deleted : SSFK
[-] Service Deleted : WdsManPro
[-] Service Deleted : dipubibu
[-] Service Deleted : dymowuho
[-] Service Deleted : gyvixodu
[-] Service Deleted : lehicewu
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\AnyProtectEx
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[-] Folder Deleted : C:\Program Files (x86)\SavePass 1.1
[-] Folder Deleted : C:\Program Files (x86)\Liveistream
[-] Folder Deleted : C:\Program Files (x86)\SFK
[-] Folder Deleted : C:\Program Files (x86)\MyBrowser
[!] Folder Not Deleted : C:\Program Files (x86)\SavePass 1.1
[-] Folder Deleted : C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A
[-] Folder Deleted : C:\Program Files (x86)\CinemaPlus-3.2cV24.09
[!] Folder Not Deleted : C:\Program Files (x86)\MyBrowser
[!] Folder Not Deleted : C:\Program Files (x86)\SavePass 1.1
[-] Folder Deleted : C:\ProgramData\saophase
[-] Folder Deleted : C:\ProgramData\Saophases
[-] Folder Deleted : C:\ProgramData\3WdsManPro3
[-] Folder Deleted : C:\ProgramData\aWdsManProa
[-] Folder Deleted : C:\ProgramData\UWdsManProU
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Liveistream
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[!] Folder Not Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[-] Folder Deleted : C:\Users\ASUS\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\ASUS\AppData\Local\MyBrowser
[!] Folder Not Deleted : C:\Users\ASUS\AppData\Local\MyBrowser
[-] Folder Deleted : C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\AnyProtectEx
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\istartsurf
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\VOPackage
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\mystartsearch
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Liveistream
***** [ Files ] *****
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.snapdo.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.snapdo.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MyBrowser.lnk
[-] File Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\MyBrowser.lnk
[-] File Deleted : C:\Users\ASUS\Desktop\Linkury Updater .lnk
[-] File Deleted : C:\Users\Public\Desktop\MyBrowser.lnk
***** [ Shortcuts ] *****
[-] Shortcut Disinfected : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b8da4a38624bbb1e\Feedback.lnk
***** [ Scheduled tasks ] *****
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi
[-] Task Deleted : snp
[-] Task Deleted : MyBrowser
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-7
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-10_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-3
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-10_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-3
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-7
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-7
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-10_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-3
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-10_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-3
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-7
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Classes\CRSBRWSHTML
[-] Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [MyBrowser]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\04db568c-b7a8-4146-ba3a-95845c6777de
[-] Key Deleted : HKLM\SOFTWARE\4d654686-a08e-4d0f-a7cf-690fc154f7f8
[-] Key Deleted : HKLM\SOFTWARE\7599b366-44fb-456d-9c5a-c19913f520f2
[-] Key Deleted : HKLM\SOFTWARE\8318ff51-55bf-4877-a487-16fa82014e07
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\SavePass 1.1
[-] Key Deleted : HKCU\Software\CrossBrowser
[-] Key Deleted : HKCU\Software\Crossbrowse
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\MyBrowser
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\WEBAPP
[!] Key Not Deleted : HKCU\Software\SavePass 1.1
[!] Key Not Deleted : HKCU\Software\SavePass 1.1
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : HKCU\Software\MyBrowser
[!] Key Not Deleted : HKCU\Software\SavePass 1.1
[-] Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
[-] Key Deleted : HKLM\SOFTWARE\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\downchecker
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\WdsManPro
[!] Key Not Deleted : HKLM\SOFTWARE\SavePass 1.1
[!] Key Not Deleted : HKLM\SOFTWARE\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : HKLM\SOFTWARE\MyBrowser
[!] Key Not Deleted : HKLM\SOFTWARE\SavePass 1.1
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Liveistream
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\CrossBrowser
[!] Key Not Deleted : [x64] HKCU\Software\Crossbrowse
[!] Key Not Deleted : [x64] HKCU\Software\YorkNewCin
[!] Key Not Deleted : [x64] HKCU\Software\HighDefAction
[!] Key Not Deleted : [x64] HKCU\Software\ArenaHD
[!] Key Not Deleted : [x64] HKCU\Software\MyBrowser
[!] Key Not Deleted : [x64] HKCU\Software\OB
[!] Key Not Deleted : [x64] HKCU\Software\WEBAPP
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : [x64] HKCU\Software\MyBrowser
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : [x64] HKLM\SOFTWARE\downchecker
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
***** [ Web browsers ] *****
[-] [C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=14431 ... RYDDZ8RYDX
[-] [C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.mystartsearch.com/webfavicon.ico
*************************
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [19383 bytes] ##########
# Updated 18/09/2015 by Xplode
# Database : 2015-09-23.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : ASUS - PC
# Running from : C:\Users\ASUS\Desktop\adwcleaner_5.008.exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem
[-] Service Deleted : SSFK
[-] Service Deleted : WdsManPro
[-] Service Deleted : dipubibu
[-] Service Deleted : dymowuho
[-] Service Deleted : gyvixodu
[-] Service Deleted : lehicewu
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\AnyProtectEx
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[-] Folder Deleted : C:\Program Files (x86)\SavePass 1.1
[-] Folder Deleted : C:\Program Files (x86)\Liveistream
[-] Folder Deleted : C:\Program Files (x86)\SFK
[-] Folder Deleted : C:\Program Files (x86)\MyBrowser
[!] Folder Not Deleted : C:\Program Files (x86)\SavePass 1.1
[-] Folder Deleted : C:\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A
[-] Folder Deleted : C:\Program Files (x86)\CinemaPlus-3.2cV24.09
[!] Folder Not Deleted : C:\Program Files (x86)\MyBrowser
[!] Folder Not Deleted : C:\Program Files (x86)\SavePass 1.1
[-] Folder Deleted : C:\ProgramData\saophase
[-] Folder Deleted : C:\ProgramData\Saophases
[-] Folder Deleted : C:\ProgramData\3WdsManPro3
[-] Folder Deleted : C:\ProgramData\aWdsManProa
[-] Folder Deleted : C:\ProgramData\UWdsManProU
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Liveistream
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[!] Folder Not Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[-] Folder Deleted : C:\Users\ASUS\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\ASUS\AppData\Local\MyBrowser
[!] Folder Not Deleted : C:\Users\ASUS\AppData\Local\MyBrowser
[-] Folder Deleted : C:\Users\ASUS\AppData\Local\AD361280-1443176701-81E2-3131-08606E160A3A
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\AnyProtectEx
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\istartsurf
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\VOPackage
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\mystartsearch
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
[-] Folder Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Liveistream
***** [ Files ] *****
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.snapdo.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.snapdo.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
[-] File Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal
[-] File Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MyBrowser.lnk
[-] File Deleted : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\MyBrowser.lnk
[-] File Deleted : C:\Users\ASUS\Desktop\Linkury Updater .lnk
[-] File Deleted : C:\Users\Public\Desktop\MyBrowser.lnk
***** [ Shortcuts ] *****
[-] Shortcut Disinfected : C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b8da4a38624bbb1e\Feedback.lnk
***** [ Scheduled tasks ] *****
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi
[-] Task Deleted : snp
[-] Task Deleted : MyBrowser
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-7
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-10_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-3
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-10_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-3
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-7
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-1-7
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-10_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-3
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-5_user
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-6
[-] Task Deleted : 09498501-e665-432c-b0e5-cf85d7a22393-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-1-7
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-10_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-3
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-5_user
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-6
[-] Task Deleted : 4181c76b-5ae2-4578-9f53-012a58eadba2-7
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Classes\CRSBRWSHTML
[-] Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [MyBrowser]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\04db568c-b7a8-4146-ba3a-95845c6777de
[-] Key Deleted : HKLM\SOFTWARE\4d654686-a08e-4d0f-a7cf-690fc154f7f8
[-] Key Deleted : HKLM\SOFTWARE\7599b366-44fb-456d-9c5a-c19913f520f2
[-] Key Deleted : HKLM\SOFTWARE\8318ff51-55bf-4877-a487-16fa82014e07
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\SavePass 1.1
[-] Key Deleted : HKCU\Software\CrossBrowser
[-] Key Deleted : HKCU\Software\Crossbrowse
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\MyBrowser
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\WEBAPP
[!] Key Not Deleted : HKCU\Software\SavePass 1.1
[!] Key Not Deleted : HKCU\Software\SavePass 1.1
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : HKCU\Software\MyBrowser
[!] Key Not Deleted : HKCU\Software\SavePass 1.1
[-] Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
[-] Key Deleted : HKLM\SOFTWARE\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\downchecker
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\WdsManPro
[!] Key Not Deleted : HKLM\SOFTWARE\SavePass 1.1
[!] Key Not Deleted : HKLM\SOFTWARE\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : HKLM\SOFTWARE\MyBrowser
[!] Key Not Deleted : HKLM\SOFTWARE\SavePass 1.1
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Liveistream
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\CrossBrowser
[!] Key Not Deleted : [x64] HKCU\Software\Crossbrowse
[!] Key Not Deleted : [x64] HKCU\Software\YorkNewCin
[!] Key Not Deleted : [x64] HKCU\Software\HighDefAction
[!] Key Not Deleted : [x64] HKCU\Software\ArenaHD
[!] Key Not Deleted : [x64] HKCU\Software\MyBrowser
[!] Key Not Deleted : [x64] HKCU\Software\OB
[!] Key Not Deleted : [x64] HKCU\Software\WEBAPP
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[!] Key Not Deleted : [x64] HKCU\Software\CinemaPlus-3.2cV24.09
[!] Key Not Deleted : [x64] HKCU\Software\MyBrowser
[!] Key Not Deleted : [x64] HKCU\Software\SavePass 1.1
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : [x64] HKLM\SOFTWARE\downchecker
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKU\S-1-5-21-1447694392-248528962-4126827209-1002\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
***** [ Web browsers ] *****
[-] [C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=14431 ... RYDDZ8RYDX
[-] [C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.mystartsearch.com/webfavicon.ico
*************************
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [19383 bytes] ##########
Re: nějaký viry ..
Slusna sbirka. Tak jeste ten MBAM a podle vysledku se zaridime dale.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: nějaký viry ..
ještě to skenuje ... DETEKOVANÉ OBEJKTY: 80 
Re: nějaký viry ..
No ja rikal, ze je tam toho spoustu. Test trva, ale je dukladny a nezbytny
Co se nestihne dnes, dodelame dalsi dny. Hlavne je potreba to docistit uplne, jinak to bude za chvili zpet.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: nějaký viry ..
to skenování už se táhne pomalu 4 hodiny .. hrozný, nikdy to neskončí 
Re: nějaký viry ..
No, rekord, co jsem tu videl, byl nekolik desitek hodin
Ale drtiva vetsina se vejde pod 8 hodin.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: nějaký viry ..
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 25. 9. 2015
Čas skenování: 12:48
Protokol: 6hodin.txt
Správce: Ano
Verze: 2.1.8.1057
Databáze malwaru: v2015.09.25.01
Databáze rootkitů: v2015.09.22.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto
OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: ASUS
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 579145
Uplynulý čas: 6 hod, 43 min, 57 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 2
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Ancode.exe, 2020, , [1cf90d2792f97bbbc6feb2035aa710f0]
PUP.Optional.Amonetize, C:\Program Files\Concom\packages\cd4fc75c-6bf2-4021-8e55-fc82124ac46c\Stanron.exe, 2292, , [e82da88c177438fe80740fa06a9732ce]
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 21
Trojan.Agent.MSIL, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nowuedctepupdateama, , [1cf90d2792f97bbbc6feb2035aa710f0],
PUP.Optional.Cinema, HKCU\SOFTWARE\CinemaP-1.9cV31.07-nv-ie, , [1bfa67cd5c2f7eb8c7117c13b84c41bf],
PUP.Optional.CinemaPlus, HKCU\SOFTWARE\CinemaPlus-3.2cV24.09-nv, , [ea2b64d0e0ab7cba84d73759be46847c],
PUP.Optional.CinemaPlus, HKCU\SOFTWARE\CinemaPlus-3.2cV24.09-nv-ie, , [1bfaf63e94f787aff16a642cab59a35d],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKCU\SOFTWARE\Internet Speed Checker-nv-ie, , [c84db480afdca096f7528fa9dc27be42],
PUP.Optional.SavePass, HKCU\SOFTWARE\SavePass 1.1-nv, , [fd18db59197238fe457692272bd917e9],
PUP.Optional.SavePass, HKCU\SOFTWARE\SavePass 1.1-nv-ie, , [e431250f95f641f58f2cedcc9a6a51af],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\CinemaPlus-3.2cV24.09-nv, , [060fb381701b4fe72358850bc83c4bb5],
PUP.Optional.DownChecker, HKLM\SOFTWARE\downchecker, , [dd38191b3c4f9f970463f93b46bdc937],
PUP.Optional.SavePass, HKLM\SOFTWARE\SavePass 1.1-nv, , [c84d88ac7d0e3ff7437cbefb29dbf60a],
PUP.Optional.Linkury, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe, , [bd5850e4800bca6cfa6b65718d77926e],
PUP.Optional.Cinema, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV31.07-nv-ie, , [1203b67e74176bcb8f523e5132d2e41c],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV24.09-nv, , [a570161e3c4fa78fcfac79178c787987],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV24.09-nv-ie, , [0e0756dee9a273c3aad17719b84c06fa],
PUP.Optional.DownChecker, HKLM\SOFTWARE\WOW6432NODE\downchecker, , [2de80b2975163ef888dfe54ffa091ce4],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv, , [30e5e74d96f516206a552a8ff70d32ce],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv-ie, , [0f0638fcfe8d8aacdde2eecba2625fa1],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Saophase_RASAPI32, , [28edf2426625fb3bddda28ae3fc5669a],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Saophase_RASMANCS, , [12031b19cebdad89eacdf7dfa65e09f7],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe, , [eb2a4aeaf794cf67eb7a528409fbb050],
PUP.Optional.CrossAd.Gen, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9563BC59-9556-4805-8CD4-886781779D8D}, , [c550c76d02896fc71d78426ffd085aa6],
Hodnoty registru: 9
PUP.Optional.Linkury, HKCU\ENVIRONMENT|SNF, C:\ProgramData\Saophases\snp.sc, , [24f17eb67813d0663afdfeaa44c04bb5]
PUP.Optional.Linkury, HKCU\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFRec&co=CZ&userid=c35a965c-c953-5383-6c8e-332f11c983e3&searchtype=sc&installDate=25., , [57be82b22467fa3ce7512e7a778d6b95]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, , [30e51b19fc8ff44297a4e69b61a3da26]
PUP.Optional.LiveIStream, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SMPLAYER.EXE, C:\Program Files (x86)\Liveistream\smplayer.exe, , [9a7b1f15a0ebbd79601e4c5cac58f709]
PUP.Optional.MyBrowser, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_5F00D79597A684C35D384C6669E057DF, "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe" --no-startup-window, , [e23353e1b3d8ee481b9fab2a27ddd729]
PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS, MyBrowser, , [b560959f6c1fa88ef6db587a7f85db25]
PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|StubPath, "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level, , [0d0843f16823e056e9e8ece628dc2dd3]
PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|Localized Name, MyBrowser, , [b560b77d682333039d344f8324e03bc5]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, , [0f06c56f256694a2ec52a3debb49ff01]
Data registru: 6
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[9e77250f2e5d93a3f5775225cd38c53b]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJp75irogpSDkM1CET6H3SmhLr__raMSSvsz6lWrlxZ0LNn8Y5IVcrHvbnMFDb4p2p2lCNH0ao5JCsovNgJs,, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJp75irogpSDkM1CET6H3SmhLr__raMSSvsz6lWrlxZ0LNn8Y5IVcrHvbnMFDb4p2p2lCNH0ao5JCsovNgJs,),,[bf56e3513b5096a082ebf08736cf7a86]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[fb1af440ddae2d09ed7ff285c342a35d]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[8d88c96b5c2f62d40765e1964fb621df]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[32e355df9bf03df9d896c3b4f70e5ba5]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({ielnksrch}),,[50c5aa8a96f5d95d77fb6611c14431cf]
Složky: 11
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.488222, , [ee278da7a8e392a46b4e17038281748c],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.496521, , [4fc645ef7e0d1d190bae67b34cb7bd43],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.431993, , [be57cd67e2a9b97d38811cfe9172d828],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin, , [c550c76d02896fc71d78426ffd085aa6],
Soubory: 210
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Ancode.exe, , [1cf90d2792f97bbbc6feb2035aa710f0],
PUP.Optional.Amonetize, C:\Program Files\Concom\packages\cd4fc75c-6bf2-4021-8e55-fc82124ac46c\Stanron.exe, , [e82da88c177438fe80740fa06a9732ce],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\963c382f-8ddd-4cf1-9fa0-d87507a907e9.dll.vir, , [7d98b282711a3df998ecd3e453ae39c7],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\9e8ce6a8-cc2b-493a-98f7-3d6f79e8bce7.dll.vir, , [987d1024d1ba4aecc9119826ce33f20e],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\ba0c937c-4d5b-4ea1-8941-e9e2cff32790.dll.vir, , [9b7a92a24b40d95d364ef1c6c63b8a76],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\ccdabd87-89b1-4ec5-9316-2623b03ab8f4.dll.vir, , [6da8e45092f91f175a8015a9f40d1de3],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-7.exe.vir, , [4bca8da7fa91b97dc0847e2c52b355ab],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\bbcc8b6c-d921-4350-8999-c1fdbedc8c1a.dll.vir, , [6baaca6a3556f343d5058737be43ce32],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\be75327b-0785-420a-ae0c-93d4b63aef76.dll.vir, , [977ea0944e3ddf570282d0e76998ee12],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-6.exe.vir, , [7c9954e0c7c440f688bcb4f6b3527b85],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-11.exe.vir, , [52c31420098251e5e55f07a307feac54],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-3.exe.vir, , [a66fae86a5e6ab8b2c186a404eb7649c],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-5.exe.vir, , [3bda81b3f3985ed880c4268446bf27d9],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-6.exe.vir, , [3fd6ee464843e353cd771c8e58ad13ed],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-64.exe.vir, , [a075201414771e18a99b6e3cff060000],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-7.exe.vir, , [eb2a052f2f5c251190b42b7f03022ad6],
PUP.Optional.Downloader, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\Uninstall.exe.vir, , [0a0bef45d5b64beb8f449427946d43bd],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.exe.vir, , [32e378bc2a6155e133f08426966f9e62],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.exe.vir, , [35e0d75d9bf0e84e60c39d0dd72e3cc4],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-10.exe.vir, , [22f37cb83754d066cb585258b550af51],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-3.exe.vir, , [cc49fc38305be94d041f03a7768fca36],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-5.exe.vir, , [28ede54fc0cb87af12115852c93cfa06],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-6.exe.vir, , [48cda98b93f89a9c0221f8b2a4616f91],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-64.exe.vir, , [f61f2311e1aa4fe7190aa901699cd62a],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-7.exe.vir, , [3fd6f63ecac1df5774af8b1f887d0cf4],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4d654686-a08e-4d0f-a7cf-690fc154f7f8.dll.vir, , [2de887ad1b7069cd03d7239bea173ac6],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\7599b366-44fb-456d-9c5a-c19913f520f2.dll.vir, , [888d5fd54447d4626a1a5166d130e61a],
PUP.Optional.Downloader, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\Uninstall.exe.vir, , [060f250f0685cb6b8a49c7f4a35eb050],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\UninstallBrw.exe.vir, , [cb4a87ad7c0f53e3aa798129f60fb050],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\utils.exe.vir, , [8b8a37fd6328ba7c4dd64e5c877e946c],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe.vir, , [49ccd262cbc0290dd56b25858f76b34d],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe.vir, , [66af270dcfbc4ee89a692a59b9485da3],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\metro_driver.dll.vir, , [fb1a1024b4d71f1746faf8b243c206fa],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_elf.dll.vir, , [38dd9a9a4d3ed75faa964a6059acdb25],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\delegate_execute.exe.vir, , [888daf8592f9ec4ada6651594bba49b7],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\nacl64.exe.vir, , [67ae8da795f60a2c9ba51c8ee223b54b],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe.vir, , [ae671c18127985b1132f04a647be6997],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\setup.exe.vir, , [928360d4a3e83df92b17adfdb550b749],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\globalupdate.exe.vir, , [9c7990a43358d561f6e351261ee3cb35],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdate.exe.vir, , [0a0bec48bad1aa8cf5e42b4cfc05768a],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateBroker.exe.vir, , [0b0a7bb9751660d695446116ef1226da],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateCrashHandler.exe.vir, , [bb5a2113375482b4d009ccab80818779],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateOnDemand.exe.vir, , [090cb87c91faa0962dac3b3cfd04b44c],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll.vir, , [888d4be9c3c86bcb5b7e0572f1109a66],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll.vir, , [b65fe74d5e2dd56147921661d22f1de3],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll.vir, , [898c1123e8a38da9c9102c4b2fd2b54b],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll.vir, , [b85d58dcafdc0135f6e33641926f9769],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll.vir, , [3dd81a1ac8c3082ec514cbacef123bc5],
PUP.Optional.LiveIStream, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Liveistream\uninstall.exe.vir, , [ab6a78bc810a3afcdb1b0552867a7090],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MyBrowser\MyBrowser\Application\utility.exe.vir, , [37de4de7aeddd95df95cb6f7689d6997],
PUP.Optional.MyBrowser, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\chrmstp.exe.vir, , [5bbaf93b434860d624f7bc21f80922de],
PUP.Optional.MyBrowser, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\setup.exe.vir, , [8491191b781310267d9ea93433ceba46],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-7.exe.vir, , [090c55df55365bdba331358a3ac79a66],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\04db568c-b7a8-4146-ba3a-95845c6777de.dll.vir, , [c154e153583322140ad019a5926f52ae],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-6.exe.vir, , [e13456de9fecee4802d2754a3cc55da3],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-7.exe.vir, , [c451e054f2992d09dafa843b19e8b749],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-10.exe.vir, , [3bda41f3e1aab4825e766d52cb3638c8],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-3.exe.vir, , [b560dc58d0bbc07630a4cdf261a039c7],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-5.exe.vir, , [92835fd5cfbcc670aa2a665943bef50b],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-6.exe.vir, , [cd4862d2206b8fa718bc833c2cd53bc5],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-64.exe.vir, , [799c8ba95437231300d4d5ea53aed52b],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\8318ff51-55bf-4877-a487-16fa82014e07.dll.vir, , [ea2ba78d2368e650e79dc4f3b150c13f],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\UninstallBrw.exe.vir, , [2aeb4ce8ec9f8da9399bdfe0b64ba45c],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\utils.exe.vir, , [8e87bc78f49756e00dc75d62857c13ed],
PUP.Optional.WProtectManager, C:\AdwCleaner\Quarantine\C\ProgramData\3WdsManPro3\WdsManPro.exe.vir, , [4bca5adaeaa13ef82b4c149a29dc5ca4],
PUP.Optional.WProtectManager, C:\AdwCleaner\Quarantine\C\ProgramData\aWdsManProa\WdsManPro.exe.vir, , [9c792c08365515217dfa1d91f015fe02],
PUP.Optional.WProtectManager, C:\AdwCleaner\Quarantine\C\ProgramData\UWdsManProU\WdsManPro.exe.vir, , [c5504ee64f3c6bcb1c5b307e4cb9f709],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Users\ASUS\AppData\Roaming\pzMxsi6nDAv.exe.vir, , [d44138fcccbfe155d2871e9df60b619f],
PUP.Optional.BrowserWatch, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\BrowerWatchCH.dll.vir, , [c45170c46f1c78be8e9eaeafad5859a7],
PUP.Optional.BrowserWatch, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\BrowerWatchFF.dll.vir, , [71a41321dbb092a40e1ee27bac5921df],
PUP.Optional.SearchProtect, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\BrowserAction.dll.vir, , [ad682113d1ba55e195b6d79d32cf2ed2],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\CmdShell.exe.vir, , [6aab6ec6137864d2c8c9d5d742c306fa],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\HPNotify.exe.vir, , [8f8642f2d1ba082e771a9d0fc144a65a],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\IeWatchDog.dll.vir, , [8a8b88acec9f63d399f81f8d65a0768a],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\SupTab.dll.vir, , [f02576beeba02f07028fc2ea986d26da],
PUP.Optional.PCMechanic, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\ASUS\AppData\Roaming\OpenCandy\C79FC06C60C946DAB3898614C5FD9914\pcmechanicpmROW_p1v2.exe.vir, , [cd482410d5b6f6400de66c3c6f92d927],
PUP.Optional.Linkury, C:\Program Files\Common Files\ncqwmj3j\53d44e30co4ie.exe, , [8d8844f03c4fa3935396b400ab56629e],
PUP.Optional.Nova, C:\Program Files (x86)\963c382f-8ddd-4cf1-9fa0-d87507a907e9\5ffd645f-175d-4de4-b4a7-b7289662bf4c.dll, , [ac6986ae0883a88e8f4bdfdf02ff14ec],
PUP.Optional.CrossRider, C:\Program Files (x86)\963c382f-8ddd-4cf1-9fa0-d87507a907e9\94440a7b-fde3-4399-bc7c-d4fd9fa22c5d.dll, , [7f96ec486922ca6c99eb576046bb56aa],
PUP.Optional.CrossRider, C:\Program Files (x86)\Adobe\23a45491-c09e-4201-9969-fc162e472fd5.dll, , [3bda1024addeae88770d2b8c41c0ca36],
PUP.Optional.Nova, C:\Program Files (x86)\Adobe\f1da7c86-6338-4d0c-84dd-8a628c9124af.dll, , [17fe43f1e7a45cda2baf1ca281802cd4],
PUP.Optional.Nova, C:\Program Files (x86)\ba0c937c-4d5b-4ea1-8941-e9e2cff32790\433749e3-bc53-4556-aa36-3a1e60242e4b.dll, , [db3af143543761d514c6a21c01004cb4],
PUP.Optional.CrossRider, C:\Program Files (x86)\ba0c937c-4d5b-4ea1-8941-e9e2cff32790\cbb8e832-bd87-4d88-9f10-a3cf2e1003a4.dll, , [bb5abe76573442f47e061b9cd62b0000],
PUP.Optional.APNToolBar, C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe, , [d63f59dbb2d9122441eeaf0b758ce020],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\uninst.exe, , [a075e94be5a6ca6c09fbbefeec153fc1],
PUP.Optional.SavePass, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\setup[1].exe, , [2ce9b084d5b6a39327ad6b543fc247b9],
PUP.Optional.AnyProtect, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\Setup[2].exe, , [f322b97bd3b874c2f761abe3bb47e51b],
PUP.Optional.PreInstaller, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\setup_362[2].exe, , [f81d30049dee58deb9ad8738e41dd42c],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\VuuPC_VO2_8907[2].exe, , [11042f05484325112c045c307b861ee2],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\NJZET45B\cmi_mystartsearch[1].exe, , [ed288aaac4c73afc89c09f097491c53b],
PUP.Optional.AnyProtect, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\VHMD6WOY\AnyProtectSetup[1].exe, , [5eb7151f5635bc7a5009206e36ccef11],
PUP.Optional.Amonetize, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\VHMD6WOY\Bundle_CPUminer[1].exe, , [14017eb65536e0562f4d1eb2f809c53b],
PUP.Optional.IStartSurf.ShrtCln, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\VHMD6WOY\obw_istartsurf[1].exe, , [59bc0c2897f48aac4f91287f7f86c040],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\ZJEBM9VA\setup[3].exe, , [e03567cd1d6e6bcbd77eeac3aa5bcd33],
PUP.Optional.CinemaPlus, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\ZJEBM9VA\setup[4].exe, , [10051e16ddaeab8b8c97d3d7a85d7888],
PUP.Optional.Bundler, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\ZJEBM9VA\FinalInstaller_dotnet4[1].exe, , [67aef4401279003616892339d927728e],
PUP.Optional.Amonetize, C:\Users\ASUS\AppData\Local\Temp\nsbC3FE.exe, , [fb1ae153ddaeeb4bf102327d9b6619e7],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\ASUS\AppData\Local\Temp\nseDBA8.tmp, , [5cb9a1938b002a0c0c3d3771d53059a7],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Temp\nsfFA35.tmp, , [54c11f15e1aa082ef43c890308f928d8],
PUP.Optional.PreInstaller, C:\Users\ASUS\AppData\Local\Temp\nsh1582.tmp, , [eb2a2b098cffbd79aeb8f2cdd42da65a],
PUP.Optional.Bundler, C:\Users\ASUS\AppData\Local\Temp\fsd6AD4.exe, , [29ec052fc6c5d95db1ee362603fd9868],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\ASUS\AppData\Local\Temp\nsr3E0D.tmp, , [cc49e54f0e7d86b0ca7f63453acbbe42],
PUP.Optional.PreInstaller, C:\Users\ASUS\AppData\Local\Temp\nsrA365.tmp, , [e92cce6690fbf93d88de7b44936e7888],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Temp\nstBE7A.tmp, , [b85dbd77bccfff3748e8b3d93bc6a15f],
PUP.Optional.LiveIStream, C:\Users\ASUS\AppData\Local\Temp\playerfile.exe, , [94813afab6d5a09611e5e1765fa1e41c],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Temp\1024.exe, , [f81d290bd1badf574c090da0689d8080],
PUP.Optional.CinemaPlus, C:\Users\ASUS\AppData\Local\Temp\5232.exe, , [0a0bd85c286346f0e73cdecc3bcac040],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Temp\6789.exe, , [61b42212bccf9a9c292cbcf1000528d8],
PUP.Optional.CinemaPlus, C:\Users\ASUS\AppData\Local\Temp\7830.exe, , [a66f2b09028973c39a89ebbfc5409868],
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Temp\aqqZi.tmp, , [ac69e84c9af180b63292caeb2dd46b95],
PUP.Optional.OutBrowse, C:\Users\ASUS\AppData\Local\Temp\beedbgajed.exe, , [1cf9be76becd56e0837903e2c33ec53b],
PUP.Optional.Bundler, C:\Users\ASUS\AppData\Local\Temp\fsdA7EE.exe, , [9b7ad26207843303bae5005cb54bf907],
PUP.Optional.Yesapps, C:\Users\ASUS\AppData\Local\Temp\serial.exe, , [73a2a193d6b50b2bc9f9736e0cf519e7],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Temp\nso2C1.tmp\nsCBHTML5.dll, , [fc1988ac157678be40f0d5b7af52e818],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdate.exe, , [cb4aa29234572d096b6ed4a37a87867a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateBroker.exe, , [20f5df55305b6dc948915522da27b44c],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateCrashHandler.exe, , [bb5a62d2b8d30333d9000473ee13bd43],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateOnDemand.exe, , [9f7682b2612a95a15c7df2850ff26997],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\goopdate.dll, , [af66d064ef9ce74f4b8eea8d53ae39c7],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\goopdateres_en.dll, , [cd48dc58fa912c0a67727ff8bc4521df],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\npglobalupdateUpdate4.dll, , [f0250430a5e642f4d801067108f9d729],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\psmachine.dll, , [fa1b0e26e0abbe78568395e2a75ade22],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\psuser.dll, , [080d69cbb6d593a30ecb0077748dab55],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdate.exe, , [59bcfc38e9a20b2bb6231c5b4db4d52b],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateBroker.exe, , [db3a2d071972df57edec0473c63b966a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateCrashHandler.exe, , [b85dcc68632891a500d97ef9e71aa060],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateOnDemand.exe, , [bf5667cd5d2e8da99d3c8fe83ac70af6],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\goopdate.dll, , [d44164d08dfe59ddc8117ff837ca4bb5],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\goopdateres_en.dll, , [9a7b181cc7c4c6701dbc2552758c57a9],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\npglobalupdateUpdate4.dll, , [c055e74d0f7cf44297427dfa24dda060],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\psmachine.dll, , [fb1a38fc6427ac8a4396ec8b728f17e9],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\psuser.dll, , [ac69d262a8e32a0ca8314a2d51b0db25],
Trojan.MSIL.Dropper, C:\Users\ASUS\AppData\Local\Temp\f9626892-7a78-3199-abd2-97bbce96297b\OfferInstaller.exe, , [878e43f15f2cef475164e9726b9af60a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdate.exe, , [3bda55df6625d95db8219dda5ca539c7],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateBroker.exe, , [f1247bb97912f640ab2ef18649b8d729],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateCrashHandler.exe, , [cf46c371acdf0432ffda0572ae532cd4],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateOnDemand.exe, , [65b0ec488407ea4c9841b8bf976a4eb2],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\goopdate.dll, , [e92c52e2c8c39d996277fc7b7d8414ec],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\goopdateres_en.dll, , [2ee75dd7a5e69a9ce0f941366899d62a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\npglobalupdateUpdate4.dll, , [fd180c284348de589445d2a5f30e1ae6],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\psmachine.dll, , [e72e93a1fd8ee35310c90c6b3cc54eb2],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\psuser.dll, , [6fa6c76d7615ef474e8bdf98d22fd22e],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Temp\261719258\setup.exe, , [3cd989ab3358e1552222d6d48a7bb050],
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Temp\aqqZi\xrc.exe, , [cb4ac96bbdcebe78705424910df4758b],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f.exe, , [27ee50e41c6f45f1fa5f04b7629f0df3],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG.exe, , [b065250ff794f73ffe5ba6157b866e92],
PUP.Optional.Amonetize, C:\WINDOWS\Temp\tmp223F.tmp, , [da3b82b2d4b75cdae311b3fcb84926da],
PUP.Optional.Linkury, C:\WINDOWS\Temp\tmpFF84.tmp, , [1ef77db716759f97866361534eb3d927],
PUP.Optional.CrossRider, C:\zoek_backup\C_PROGRA~2_23a45491-c09e-4201-9969-fc162e472fd5\7bec3ab9-3c37-41c3-9951-9443526d0529.dll, , [3ed757dd7f0c63d34e36813690718080],
PUP.Optional.Nova, C:\zoek_backup\C_PROGRA~2_23a45491-c09e-4201-9969-fc162e472fd5\fd2b616e-a8d0-4c07-b89e-736fe4073be2.dll, , [d342a29258331e18865410aed62b659b],
PUP.Optional.Amonetize, C:\zoek_backup\C_Users_ASUS_AppData_Local_25500\Updater.exe, , [8c89999b0e7def47c6e6ed68e917f20e],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\config.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\everything.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\everything.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\helper.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\Patch.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SearchBase.db, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SearchBase.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SearchHand.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX64.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX64.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\bing.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\google.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\search_config.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\SFK.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\SFKEX.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\yahoo.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\bing.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\caret.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\FileListItem.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\FileListItem_bing.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\FileListItem_google.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\frame.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\frame2.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\google.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\guide.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\icon_search.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\mainpanel.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\MainPannel.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\panel_base.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\search_content_list.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\WndMask.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\yahoo.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Linkury.Gen, C:\WINDOWS\SysWOW64\findit.xml, , [0213cc685e2d91a5e08a792f08fcd22e],
PUP.Optional.LiveIStream, C:\Users\ASUS\Desktop\Liveistream.lnk, , [d73e10242e5d53e3c3b81791e321fd03],
PUP.Optional.LiveIStream, C:\Users\UpdatusUser\Desktop\Liveistream.lnk, , [9580ad8797f403336c0f099f07fd5aa6],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateHelper.msi, , [ee278da7a8e392a46b4e17038281748c],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateHelper.msi, , [4fc645ef7e0d1d190bae67b34cb7bd43],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateHelper.msi, , [be57cd67e2a9b97d38811cfe9172d828],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\000003.log, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\CURRENT, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\LOCK, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\LOG, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\LOG.old, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\MANIFEST-000001, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons\ff.HP, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons\ff.NT, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons\snp.sc, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\config.json, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\hello.js, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\log.html, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\manifest.json, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\scriptTagContext.js, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\tmp_bg.js, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\uconfig.json, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin\c.dat, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin\shgkj.dll, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin\VirtualBus.dll, , [c550c76d02896fc71d78426ffd085aa6],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
www.malwarebytes.org
Datum skenování: 25. 9. 2015
Čas skenování: 12:48
Protokol: 6hodin.txt
Správce: Ano
Verze: 2.1.8.1057
Databáze malwaru: v2015.09.25.01
Databáze rootkitů: v2015.09.22.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto
OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: ASUS
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 579145
Uplynulý čas: 6 hod, 43 min, 57 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 2
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Ancode.exe, 2020, , [1cf90d2792f97bbbc6feb2035aa710f0]
PUP.Optional.Amonetize, C:\Program Files\Concom\packages\cd4fc75c-6bf2-4021-8e55-fc82124ac46c\Stanron.exe, 2292, , [e82da88c177438fe80740fa06a9732ce]
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 21
Trojan.Agent.MSIL, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nowuedctepupdateama, , [1cf90d2792f97bbbc6feb2035aa710f0],
PUP.Optional.Cinema, HKCU\SOFTWARE\CinemaP-1.9cV31.07-nv-ie, , [1bfa67cd5c2f7eb8c7117c13b84c41bf],
PUP.Optional.CinemaPlus, HKCU\SOFTWARE\CinemaPlus-3.2cV24.09-nv, , [ea2b64d0e0ab7cba84d73759be46847c],
PUP.Optional.CinemaPlus, HKCU\SOFTWARE\CinemaPlus-3.2cV24.09-nv-ie, , [1bfaf63e94f787aff16a642cab59a35d],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKCU\SOFTWARE\Internet Speed Checker-nv-ie, , [c84db480afdca096f7528fa9dc27be42],
PUP.Optional.SavePass, HKCU\SOFTWARE\SavePass 1.1-nv, , [fd18db59197238fe457692272bd917e9],
PUP.Optional.SavePass, HKCU\SOFTWARE\SavePass 1.1-nv-ie, , [e431250f95f641f58f2cedcc9a6a51af],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\CinemaPlus-3.2cV24.09-nv, , [060fb381701b4fe72358850bc83c4bb5],
PUP.Optional.DownChecker, HKLM\SOFTWARE\downchecker, , [dd38191b3c4f9f970463f93b46bdc937],
PUP.Optional.SavePass, HKLM\SOFTWARE\SavePass 1.1-nv, , [c84d88ac7d0e3ff7437cbefb29dbf60a],
PUP.Optional.Linkury, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe, , [bd5850e4800bca6cfa6b65718d77926e],
PUP.Optional.Cinema, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV31.07-nv-ie, , [1203b67e74176bcb8f523e5132d2e41c],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV24.09-nv, , [a570161e3c4fa78fcfac79178c787987],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV24.09-nv-ie, , [0e0756dee9a273c3aad17719b84c06fa],
PUP.Optional.DownChecker, HKLM\SOFTWARE\WOW6432NODE\downchecker, , [2de80b2975163ef888dfe54ffa091ce4],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv, , [30e5e74d96f516206a552a8ff70d32ce],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv-ie, , [0f0638fcfe8d8aacdde2eecba2625fa1],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Saophase_RASAPI32, , [28edf2426625fb3bddda28ae3fc5669a],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Saophase_RASMANCS, , [12031b19cebdad89eacdf7dfa65e09f7],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe, , [eb2a4aeaf794cf67eb7a528409fbb050],
PUP.Optional.CrossAd.Gen, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9563BC59-9556-4805-8CD4-886781779D8D}, , [c550c76d02896fc71d78426ffd085aa6],
Hodnoty registru: 9
PUP.Optional.Linkury, HKCU\ENVIRONMENT|SNF, C:\ProgramData\Saophases\snp.sc, , [24f17eb67813d0663afdfeaa44c04bb5]
PUP.Optional.Linkury, HKCU\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFRec&co=CZ&userid=c35a965c-c953-5383-6c8e-332f11c983e3&searchtype=sc&installDate=25., , [57be82b22467fa3ce7512e7a778d6b95]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, , [30e51b19fc8ff44297a4e69b61a3da26]
PUP.Optional.LiveIStream, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SMPLAYER.EXE, C:\Program Files (x86)\Liveistream\smplayer.exe, , [9a7b1f15a0ebbd79601e4c5cac58f709]
PUP.Optional.MyBrowser, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_5F00D79597A684C35D384C6669E057DF, "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe" --no-startup-window, , [e23353e1b3d8ee481b9fab2a27ddd729]
PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS, MyBrowser, , [b560959f6c1fa88ef6db587a7f85db25]
PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|StubPath, "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level, , [0d0843f16823e056e9e8ece628dc2dd3]
PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|Localized Name, MyBrowser, , [b560b77d682333039d344f8324e03bc5]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, , [0f06c56f256694a2ec52a3debb49ff01]
Data registru: 6
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[9e77250f2e5d93a3f5775225cd38c53b]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJp75irogpSDkM1CET6H3SmhLr__raMSSvsz6lWrlxZ0LNn8Y5IVcrHvbnMFDb4p2p2lCNH0ao5JCsovNgJs,, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJp75irogpSDkM1CET6H3SmhLr__raMSSvsz6lWrlxZ0LNn8Y5IVcrHvbnMFDb4p2p2lCNH0ao5JCsovNgJs,),,[bf56e3513b5096a082ebf08736cf7a86]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[fb1af440ddae2d09ed7ff285c342a35d]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[8d88c96b5c2f62d40765e1964fb621df]
PUP.Optional.Linkury.ShrtCln, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgBkCk2PRuZ47-iCIJOQmT0W04ug0jUcdQBV8LoQRfYh_4M0aAjEyUiBEn16yPBHJpJxyWx5LLpE9Cn894beBq9DN8Gs3h2A-q14VlnNlVKLkTpYmYlSUxPIk8UUfociY-Lj0s-q4C6eTw5k3aQ,&q={searchTerms}),,[32e355df9bf03df9d896c3b4f70e5ba5]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({ielnksrch}),,[50c5aa8a96f5d95d77fb6611c14431cf]
Složky: 11
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.488222, , [ee278da7a8e392a46b4e17038281748c],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.496521, , [4fc645ef7e0d1d190bae67b34cb7bd43],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.431993, , [be57cd67e2a9b97d38811cfe9172d828],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin, , [c550c76d02896fc71d78426ffd085aa6],
Soubory: 210
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Ancode.exe, , [1cf90d2792f97bbbc6feb2035aa710f0],
PUP.Optional.Amonetize, C:\Program Files\Concom\packages\cd4fc75c-6bf2-4021-8e55-fc82124ac46c\Stanron.exe, , [e82da88c177438fe80740fa06a9732ce],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\963c382f-8ddd-4cf1-9fa0-d87507a907e9.dll.vir, , [7d98b282711a3df998ecd3e453ae39c7],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\9e8ce6a8-cc2b-493a-98f7-3d6f79e8bce7.dll.vir, , [987d1024d1ba4aecc9119826ce33f20e],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\ba0c937c-4d5b-4ea1-8941-e9e2cff32790.dll.vir, , [9b7a92a24b40d95d364ef1c6c63b8a76],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\AD361280-1443169463-81E2-3131-08606E160A3A\ccdabd87-89b1-4ec5-9316-2623b03ab8f4.dll.vir, , [6da8e45092f91f175a8015a9f40d1de3],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-7.exe.vir, , [4bca8da7fa91b97dc0847e2c52b355ab],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\bbcc8b6c-d921-4350-8999-c1fdbedc8c1a.dll.vir, , [6baaca6a3556f343d5058737be43ce32],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\be75327b-0785-420a-ae0c-93d4b63aef76.dll.vir, , [977ea0944e3ddf570282d0e76998ee12],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-6.exe.vir, , [7c9954e0c7c440f688bcb4f6b3527b85],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-11.exe.vir, , [52c31420098251e5e55f07a307feac54],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-3.exe.vir, , [a66fae86a5e6ab8b2c186a404eb7649c],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-5.exe.vir, , [3bda81b3f3985ed880c4268446bf27d9],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-6.exe.vir, , [3fd6ee464843e353cd771c8e58ad13ed],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-64.exe.vir, , [a075201414771e18a99b6e3cff060000],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-7.exe.vir, , [eb2a052f2f5c251190b42b7f03022ad6],
PUP.Optional.Downloader, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.9cV31.07\Uninstall.exe.vir, , [0a0bef45d5b64beb8f449427946d43bd],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-6.exe.vir, , [32e378bc2a6155e133f08426966f9e62],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-1-7.exe.vir, , [35e0d75d9bf0e84e60c39d0dd72e3cc4],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-10.exe.vir, , [22f37cb83754d066cb585258b550af51],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-3.exe.vir, , [cc49fc38305be94d041f03a7768fca36],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-5.exe.vir, , [28ede54fc0cb87af12115852c93cfa06],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-6.exe.vir, , [48cda98b93f89a9c0221f8b2a4616f91],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-64.exe.vir, , [f61f2311e1aa4fe7190aa901699cd62a],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4181c76b-5ae2-4578-9f53-012a58eadba2-7.exe.vir, , [3fd6f63ecac1df5774af8b1f887d0cf4],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\4d654686-a08e-4d0f-a7cf-690fc154f7f8.dll.vir, , [2de887ad1b7069cd03d7239bea173ac6],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\7599b366-44fb-456d-9c5a-c19913f520f2.dll.vir, , [888d5fd54447d4626a1a5166d130e61a],
PUP.Optional.Downloader, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\Uninstall.exe.vir, , [060f250f0685cb6b8a49c7f4a35eb050],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\UninstallBrw.exe.vir, , [cb4a87ad7c0f53e3aa798129f60fb050],
PUP.Optional.CinemaPlus, C:\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaPlus-3.2cV24.09\utils.exe.vir, , [8b8a37fd6328ba7c4dd64e5c877e946c],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe.vir, , [49ccd262cbc0290dd56b25858f76b34d],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe.vir, , [66af270dcfbc4ee89a692a59b9485da3],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\metro_driver.dll.vir, , [fb1a1024b4d71f1746faf8b243c206fa],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_elf.dll.vir, , [38dd9a9a4d3ed75faa964a6059acdb25],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\delegate_execute.exe.vir, , [888daf8592f9ec4ada6651594bba49b7],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\nacl64.exe.vir, , [67ae8da795f60a2c9ba51c8ee223b54b],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe.vir, , [ae671c18127985b1132f04a647be6997],
PUP.Optional.CrossBrowse, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\setup.exe.vir, , [928360d4a3e83df92b17adfdb550b749],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\globalupdate.exe.vir, , [9c7990a43358d561f6e351261ee3cb35],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdate.exe.vir, , [0a0bec48bad1aa8cf5e42b4cfc05768a],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateBroker.exe.vir, , [0b0a7bb9751660d695446116ef1226da],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateCrashHandler.exe.vir, , [bb5a2113375482b4d009ccab80818779],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateOnDemand.exe.vir, , [090cb87c91faa0962dac3b3cfd04b44c],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll.vir, , [888d4be9c3c86bcb5b7e0572f1109a66],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll.vir, , [b65fe74d5e2dd56147921661d22f1de3],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll.vir, , [898c1123e8a38da9c9102c4b2fd2b54b],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll.vir, , [b85d58dcafdc0135f6e33641926f9769],
PUP.Optional.ModGoog, C:\AdwCleaner\Quarantine\C\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll.vir, , [3dd81a1ac8c3082ec514cbacef123bc5],
PUP.Optional.LiveIStream, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Liveistream\uninstall.exe.vir, , [ab6a78bc810a3afcdb1b0552867a7090],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MyBrowser\MyBrowser\Application\utility.exe.vir, , [37de4de7aeddd95df95cb6f7689d6997],
PUP.Optional.MyBrowser, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\chrmstp.exe.vir, , [5bbaf93b434860d624f7bc21f80922de],
PUP.Optional.MyBrowser, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\setup.exe.vir, , [8491191b781310267d9ea93433ceba46],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-7.exe.vir, , [090c55df55365bdba331358a3ac79a66],
PUP.Optional.Nova, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\04db568c-b7a8-4146-ba3a-95845c6777de.dll.vir, , [c154e153583322140ad019a5926f52ae],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-6.exe.vir, , [e13456de9fecee4802d2754a3cc55da3],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-1-7.exe.vir, , [c451e054f2992d09dafa843b19e8b749],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-10.exe.vir, , [3bda41f3e1aab4825e766d52cb3638c8],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-3.exe.vir, , [b560dc58d0bbc07630a4cdf261a039c7],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-5.exe.vir, , [92835fd5cfbcc670aa2a665943bef50b],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-6.exe.vir, , [cd4862d2206b8fa718bc833c2cd53bc5],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\09498501-e665-432c-b0e5-cf85d7a22393-64.exe.vir, , [799c8ba95437231300d4d5ea53aed52b],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\8318ff51-55bf-4877-a487-16fa82014e07.dll.vir, , [ea2ba78d2368e650e79dc4f3b150c13f],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\UninstallBrw.exe.vir, , [2aeb4ce8ec9f8da9399bdfe0b64ba45c],
PUP.Optional.SavePass, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SavePass 1.1\utils.exe.vir, , [8e87bc78f49756e00dc75d62857c13ed],
PUP.Optional.WProtectManager, C:\AdwCleaner\Quarantine\C\ProgramData\3WdsManPro3\WdsManPro.exe.vir, , [4bca5adaeaa13ef82b4c149a29dc5ca4],
PUP.Optional.WProtectManager, C:\AdwCleaner\Quarantine\C\ProgramData\aWdsManProa\WdsManPro.exe.vir, , [9c792c08365515217dfa1d91f015fe02],
PUP.Optional.WProtectManager, C:\AdwCleaner\Quarantine\C\ProgramData\UWdsManProU\WdsManPro.exe.vir, , [c5504ee64f3c6bcb1c5b307e4cb9f709],
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Users\ASUS\AppData\Roaming\pzMxsi6nDAv.exe.vir, , [d44138fcccbfe155d2871e9df60b619f],
PUP.Optional.BrowserWatch, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\BrowerWatchCH.dll.vir, , [c45170c46f1c78be8e9eaeafad5859a7],
PUP.Optional.BrowserWatch, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\BrowerWatchFF.dll.vir, , [71a41321dbb092a40e1ee27bac5921df],
PUP.Optional.SearchProtect, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\BrowserAction.dll.vir, , [ad682113d1ba55e195b6d79d32cf2ed2],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\CmdShell.exe.vir, , [6aab6ec6137864d2c8c9d5d742c306fa],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\HPNotify.exe.vir, , [8f8642f2d1ba082e771a9d0fc144a65a],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\IeWatchDog.dll.vir, , [8a8b88acec9f63d399f81f8d65a0768a],
PUP.Optional.Giner, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\SupTab.dll.vir, , [f02576beeba02f07028fc2ea986d26da],
PUP.Optional.PCMechanic, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\ASUS\AppData\Roaming\OpenCandy\C79FC06C60C946DAB3898614C5FD9914\pcmechanicpmROW_p1v2.exe.vir, , [cd482410d5b6f6400de66c3c6f92d927],
PUP.Optional.Linkury, C:\Program Files\Common Files\ncqwmj3j\53d44e30co4ie.exe, , [8d8844f03c4fa3935396b400ab56629e],
PUP.Optional.Nova, C:\Program Files (x86)\963c382f-8ddd-4cf1-9fa0-d87507a907e9\5ffd645f-175d-4de4-b4a7-b7289662bf4c.dll, , [ac6986ae0883a88e8f4bdfdf02ff14ec],
PUP.Optional.CrossRider, C:\Program Files (x86)\963c382f-8ddd-4cf1-9fa0-d87507a907e9\94440a7b-fde3-4399-bc7c-d4fd9fa22c5d.dll, , [7f96ec486922ca6c99eb576046bb56aa],
PUP.Optional.CrossRider, C:\Program Files (x86)\Adobe\23a45491-c09e-4201-9969-fc162e472fd5.dll, , [3bda1024addeae88770d2b8c41c0ca36],
PUP.Optional.Nova, C:\Program Files (x86)\Adobe\f1da7c86-6338-4d0c-84dd-8a628c9124af.dll, , [17fe43f1e7a45cda2baf1ca281802cd4],
PUP.Optional.Nova, C:\Program Files (x86)\ba0c937c-4d5b-4ea1-8941-e9e2cff32790\433749e3-bc53-4556-aa36-3a1e60242e4b.dll, , [db3af143543761d514c6a21c01004cb4],
PUP.Optional.CrossRider, C:\Program Files (x86)\ba0c937c-4d5b-4ea1-8941-e9e2cff32790\cbb8e832-bd87-4d88-9f10-a3cf2e1003a4.dll, , [bb5abe76573442f47e061b9cd62b0000],
PUP.Optional.APNToolBar, C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe, , [d63f59dbb2d9122441eeaf0b758ce020],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\uninst.exe, , [a075e94be5a6ca6c09fbbefeec153fc1],
PUP.Optional.SavePass, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\setup[1].exe, , [2ce9b084d5b6a39327ad6b543fc247b9],
PUP.Optional.AnyProtect, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\Setup[2].exe, , [f322b97bd3b874c2f761abe3bb47e51b],
PUP.Optional.PreInstaller, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\setup_362[2].exe, , [f81d30049dee58deb9ad8738e41dd42c],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\GUCYCO13\VuuPC_VO2_8907[2].exe, , [11042f05484325112c045c307b861ee2],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\NJZET45B\cmi_mystartsearch[1].exe, , [ed288aaac4c73afc89c09f097491c53b],
PUP.Optional.AnyProtect, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\VHMD6WOY\AnyProtectSetup[1].exe, , [5eb7151f5635bc7a5009206e36ccef11],
PUP.Optional.Amonetize, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\VHMD6WOY\Bundle_CPUminer[1].exe, , [14017eb65536e0562f4d1eb2f809c53b],
PUP.Optional.IStartSurf.ShrtCln, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\VHMD6WOY\obw_istartsurf[1].exe, , [59bc0c2897f48aac4f91287f7f86c040],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\ZJEBM9VA\setup[3].exe, , [e03567cd1d6e6bcbd77eeac3aa5bcd33],
PUP.Optional.CinemaPlus, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\ZJEBM9VA\setup[4].exe, , [10051e16ddaeab8b8c97d3d7a85d7888],
PUP.Optional.Bundler, C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\ZJEBM9VA\FinalInstaller_dotnet4[1].exe, , [67aef4401279003616892339d927728e],
PUP.Optional.Amonetize, C:\Users\ASUS\AppData\Local\Temp\nsbC3FE.exe, , [fb1ae153ddaeeb4bf102327d9b6619e7],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\ASUS\AppData\Local\Temp\nseDBA8.tmp, , [5cb9a1938b002a0c0c3d3771d53059a7],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Temp\nsfFA35.tmp, , [54c11f15e1aa082ef43c890308f928d8],
PUP.Optional.PreInstaller, C:\Users\ASUS\AppData\Local\Temp\nsh1582.tmp, , [eb2a2b098cffbd79aeb8f2cdd42da65a],
PUP.Optional.Bundler, C:\Users\ASUS\AppData\Local\Temp\fsd6AD4.exe, , [29ec052fc6c5d95db1ee362603fd9868],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\ASUS\AppData\Local\Temp\nsr3E0D.tmp, , [cc49e54f0e7d86b0ca7f63453acbbe42],
PUP.Optional.PreInstaller, C:\Users\ASUS\AppData\Local\Temp\nsrA365.tmp, , [e92cce6690fbf93d88de7b44936e7888],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Temp\nstBE7A.tmp, , [b85dbd77bccfff3748e8b3d93bc6a15f],
PUP.Optional.LiveIStream, C:\Users\ASUS\AppData\Local\Temp\playerfile.exe, , [94813afab6d5a09611e5e1765fa1e41c],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Temp\1024.exe, , [f81d290bd1badf574c090da0689d8080],
PUP.Optional.CinemaPlus, C:\Users\ASUS\AppData\Local\Temp\5232.exe, , [0a0bd85c286346f0e73cdecc3bcac040],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Temp\6789.exe, , [61b42212bccf9a9c292cbcf1000528d8],
PUP.Optional.CinemaPlus, C:\Users\ASUS\AppData\Local\Temp\7830.exe, , [a66f2b09028973c39a89ebbfc5409868],
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Temp\aqqZi.tmp, , [ac69e84c9af180b63292caeb2dd46b95],
PUP.Optional.OutBrowse, C:\Users\ASUS\AppData\Local\Temp\beedbgajed.exe, , [1cf9be76becd56e0837903e2c33ec53b],
PUP.Optional.Bundler, C:\Users\ASUS\AppData\Local\Temp\fsdA7EE.exe, , [9b7ad26207843303bae5005cb54bf907],
PUP.Optional.Yesapps, C:\Users\ASUS\AppData\Local\Temp\serial.exe, , [73a2a193d6b50b2bc9f9736e0cf519e7],
PUP.Optional.CheckOffer, C:\Users\ASUS\AppData\Local\Temp\nso2C1.tmp\nsCBHTML5.dll, , [fc1988ac157678be40f0d5b7af52e818],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdate.exe, , [cb4aa29234572d096b6ed4a37a87867a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateBroker.exe, , [20f5df55305b6dc948915522da27b44c],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateCrashHandler.exe, , [bb5a62d2b8d30333d9000473ee13bd43],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateOnDemand.exe, , [9f7682b2612a95a15c7df2850ff26997],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\goopdate.dll, , [af66d064ef9ce74f4b8eea8d53ae39c7],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\goopdateres_en.dll, , [cd48dc58fa912c0a67727ff8bc4521df],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\npglobalupdateUpdate4.dll, , [f0250430a5e642f4d801067108f9d729],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\psmachine.dll, , [fa1b0e26e0abbe78568395e2a75ade22],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.488222\psuser.dll, , [080d69cbb6d593a30ecb0077748dab55],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdate.exe, , [59bcfc38e9a20b2bb6231c5b4db4d52b],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateBroker.exe, , [db3a2d071972df57edec0473c63b966a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateCrashHandler.exe, , [b85dcc68632891a500d97ef9e71aa060],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateOnDemand.exe, , [bf5667cd5d2e8da99d3c8fe83ac70af6],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\goopdate.dll, , [d44164d08dfe59ddc8117ff837ca4bb5],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\goopdateres_en.dll, , [9a7b181cc7c4c6701dbc2552758c57a9],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\npglobalupdateUpdate4.dll, , [c055e74d0f7cf44297427dfa24dda060],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\psmachine.dll, , [fb1a38fc6427ac8a4396ec8b728f17e9],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.496521\psuser.dll, , [ac69d262a8e32a0ca8314a2d51b0db25],
Trojan.MSIL.Dropper, C:\Users\ASUS\AppData\Local\Temp\f9626892-7a78-3199-abd2-97bbce96297b\OfferInstaller.exe, , [878e43f15f2cef475164e9726b9af60a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdate.exe, , [3bda55df6625d95db8219dda5ca539c7],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateBroker.exe, , [f1247bb97912f640ab2ef18649b8d729],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateCrashHandler.exe, , [cf46c371acdf0432ffda0572ae532cd4],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateOnDemand.exe, , [65b0ec488407ea4c9841b8bf976a4eb2],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\goopdate.dll, , [e92c52e2c8c39d996277fc7b7d8414ec],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\goopdateres_en.dll, , [2ee75dd7a5e69a9ce0f941366899d62a],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\npglobalupdateUpdate4.dll, , [fd180c284348de589445d2a5f30e1ae6],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\psmachine.dll, , [e72e93a1fd8ee35310c90c6b3cc54eb2],
PUP.Optional.ModGoog, C:\Users\ASUS\AppData\Local\Temp\comh.431993\psuser.dll, , [6fa6c76d7615ef474e8bdf98d22fd22e],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Local\Temp\261719258\setup.exe, , [3cd989ab3358e1552222d6d48a7bb050],
Trojan.Agent.MSIL, C:\Users\ASUS\AppData\Local\Temp\aqqZi\xrc.exe, , [cb4ac96bbdcebe78705424910df4758b],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Roaming\ccKE7KWDPeDYPanKq2PM9f.exe, , [27ee50e41c6f45f1fa5f04b7629f0df3],
PUP.Optional.CrossRider, C:\Users\ASUS\AppData\Roaming\IisaTUcvyNpQTZEHP0tG.exe, , [b065250ff794f73ffe5ba6157b866e92],
PUP.Optional.Amonetize, C:\WINDOWS\Temp\tmp223F.tmp, , [da3b82b2d4b75cdae311b3fcb84926da],
PUP.Optional.Linkury, C:\WINDOWS\Temp\tmpFF84.tmp, , [1ef77db716759f97866361534eb3d927],
PUP.Optional.CrossRider, C:\zoek_backup\C_PROGRA~2_23a45491-c09e-4201-9969-fc162e472fd5\7bec3ab9-3c37-41c3-9951-9443526d0529.dll, , [3ed757dd7f0c63d34e36813690718080],
PUP.Optional.Nova, C:\zoek_backup\C_PROGRA~2_23a45491-c09e-4201-9969-fc162e472fd5\fd2b616e-a8d0-4c07-b89e-736fe4073be2.dll, , [d342a29258331e18865410aed62b659b],
PUP.Optional.Amonetize, C:\zoek_backup\C_Users_ASUS_AppData_Local_25500\Updater.exe, , [8c89999b0e7def47c6e6ed68e917f20e],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\config.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\everything.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\everything.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\helper.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\Patch.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SearchBase.db, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SearchBase.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SearchHand.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX64.dll, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\SFKEX64.exe, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\bing.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\google.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\search_config.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\SFK.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\SFKEX.ini, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\net_search\yahoo.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\bing.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\caret.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\FileListItem.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\FileListItem_bing.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\FileListItem_google.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\frame.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\frame2.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\google.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\guide.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\icon_search.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\mainpanel.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\MainPannel.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\panel_base.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\search_content_list.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\WndMask.xml, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Everything, C:\Users\ASUS\AppData\Everything\skin\yahoo.png, , [23f2a2926823d85e882e0b90bb4922de],
PUP.Optional.Linkury.Gen, C:\WINDOWS\SysWOW64\findit.xml, , [0213cc685e2d91a5e08a792f08fcd22e],
PUP.Optional.LiveIStream, C:\Users\ASUS\Desktop\Liveistream.lnk, , [d73e10242e5d53e3c3b81791e321fd03],
PUP.Optional.LiveIStream, C:\Users\UpdatusUser\Desktop\Liveistream.lnk, , [9580ad8797f403336c0f099f07fd5aa6],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.488222\globalupdateHelper.msi, , [ee278da7a8e392a46b4e17038281748c],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.496521\globalupdateHelper.msi, , [4fc645ef7e0d1d190bae67b34cb7bd43],
PUP.Optional.GlobalUpdate, C:\Users\ASUS\AppData\Local\Temp\comh.431993\globalupdateHelper.msi, , [be57cd67e2a9b97d38811cfe9172d828],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\000003.log, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\CURRENT, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\LOCK, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\LOG, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\LOG.old, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.MindSpark, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fphnecoppfkhnnbhhmdmpldmkpnflegp\MANIFEST-000001, , [71a4a78d503bf640c63e092ad52e619f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons\ff.HP, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons\ff.NT, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Airrons\snp.sc, , [8f8655df99f290a69750fbb3ad5835cb],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\config.json, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\hello.js, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\log.html, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\manifest.json, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\scriptTagContext.js, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\tmp_bg.js, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Component\uconfig.json, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin\c.dat, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin\shgkj.dll, , [c550c76d02896fc71d78426ffd085aa6],
PUP.Optional.CrossAd.Gen, C:\Users\ASUS\AppData\Local\Virtual Bus\Bin\VirtualBus.dll, , [c550c76d02896fc71d78426ffd085aa6],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
Re: nějaký viry ..
Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte (staci uz jen sken hrozeb - bude rychlejsi), at vime, jestli se to nevraci. Napiste zase vysledek testu a podle nej zvolim dalsi postup.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: nějaký viry ..
btw, po restartu mi to hodilo tuhle podivnou hlášku 
- Přílohy
-
- 456.png (13.24 KiB) Zobrazeno 3083 x
Re: nějaký viry ..
To se pak docisti 
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).


Přispějete na provoz fóra?