VIRY.CZ

Dobrý deň. Mám problém s FPS v hrách . Nezáleží jaka je to hra , stále mam docela male FPS. Pred asi mesiacom som mal taký istý problém ale našiel som v PC program na určenie "profilu" . Vtedy som to mal na Max power saving a keď som to dal do Max performance tak to bolo ako za starých čias . Teda FPS na Battlefield 3 na High-Ultra bolo 50-60 . Teraz mam na medium 15-30. Neviem čo robiť lebo nič nefunguje. Prosím o pomoc ďakujem.

Moj PC : Procesor: AMD FX-4170
RAM: 8GB DDR 3
Grafika: AMD Radeon™ HD 7770 GHz Edition

Zdravím!
My nejsme, bohužel, herní fórum, ale bezpečnostní. Můžeme vám zkontrolovat, příp. vyčistit PC od virů a zbytečností. Pokud si to přejete, zkuste tento postup: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

FRST: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-10-2013
Ran by Pekarik (administrator) on PEKARIK-PC on 28-10-2013 17:29:42
Running from C:\Users\Pekarik\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
() C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIJBE.EXE
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Turbo Key\TurboKey.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Windows\inf\msaxoccoa\msaxoccoa.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
( ) E:\setup.exe
() C:\Users\Pekarik\AppData\Local\Temp\is-9NMN5.tmp\setup.tmp
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\Pekarik\AppData\Local\Temp\is-JMMPM.tmp\unarc.exe
(forum.viry.cz) C:\Users\Pekarik\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-08-11] (Realtek Semiconductor)
HKCU\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [802136 2013-07-01] (BitTorrent Inc.)
HKCU\...\Run: [GoogleChromeAutoLaunch_4281F3CB61F060AA6452A3FA375A5C27] - C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe [846288 2013-07-25] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-23] (Google Inc.)
HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\System32\spool\drivers\x64\3\E_IATIJBE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Turbo Key] - C:\Program Files (x86)\ASUS\Turbo Key\TurboKey.exe [1874432 2009-11-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2006-11-17] (AMD)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [mssedvbcSrv] - C:\Windows\inf\mssedvbc.vbe [1558 2013-08-27] ()
BootExecute: autocheck autochk /r \??\F:autocheck autochk *

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4BE07BF1CF38CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
URLSearchHook: HKLM-x32 - Default Value = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {590B2AB7-2131-4124-BDED-E92A0DAF951F} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {C6768776-2C34-4B34-9E8B-16734F6D5405} URL = http://websearch.ask.com/redirect?clien ... E59818CE8D
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.7.0_01\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.7.0_01\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.4.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre1.7.0_01\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Pekarik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Pekarik\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Pekarik\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Pekarik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\searchplugins\mapycz.xml
FF SearchPlugin: C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\searchplugins\zbocz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Adblock Plus - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions
FF Extension: OneClickDownloader - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\profiles\extensions\OneClickDownload@OneClickDownload.com
FF Extension: No Name - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins
FF Extension: No Name - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\profiles\extensions\prefs.js
FF Extension: No Name - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\profiles\extensions\prefs.js.BAK
FF Extension: No Name - C:\Users\Pekarik\AppData\Roaming\Mozilla\Firefox\profiles\extensions\search.sqlite
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Unity Player) - C:\Users\Pekarik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (Google Search) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Hola Better Internet) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio\1.1.834_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Gmail) - C:\Users\Pekarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [aaaapoldfpilohhfkhihnhdckpackghi] - C:\Users\Pekarik\AppData\Local\APN\GoogleCRXs\aaaapoldfpilohhfkhihnhdckpackghi_7.15.2.0.crx
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Pekarik\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-09-26] (Advanced Micro Devices, Inc.)
R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1011784 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [948296 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [831272 2013-06-21] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-06-21] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [548136 2013-06-21] ()
S4 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-12-02] (Nero AG)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2009-03-25] (Nero AG)
S4 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-04] ()
S4 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2148664 2013-01-31] (AVG)
S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH)
S4 Bonjour Service; "C:\Program Files (x86)\Bonjour\mDNSResponder.exe" [x]

==================== Drivers (Whitelisted) ====================

S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21600 2013-08-11] (Advanced Micro Devices, Inc.)
S3 androidusb; C:\Windows\System32\Drivers\fxxandroidusb.sys [31744 2010-06-17] (Google Inc)
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [42240 2013-07-31] (Advanced Micro Devices)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [42240 2013-07-31] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-09-29] (Avira GmbH)
R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-09-29] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-16] (Disc Soft Ltd)
S3 EagleX64; No ImagePath
S3 FairplayKD; No ImagePath
S3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [59768 2013-07-14] (G Data Software AG)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-06-21] (AnchorFree Inc.)
S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
S1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-26] (Kaspersky Lab ZAO)
S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-26] (Kaspersky Lab ZAO)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
S3 PPJoyBus; C:\Windows\System32\DRIVERS\PPJoyBus64.sys [20024 2010-02-20] (Deon van der Westhuysen)
S3 PPortJoystick; C:\Windows\System32\DRIVERS\PPortJoy64.sys [39992 2010-02-20] (Deon van der Westhuysen)
S3 qcusbser; C:\Windows\System32\DRIVERS\FXX\qcusbser.sys [364288 2010-06-17] (QUALCOMM Incorporated)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2012-05-27] (Duplex Secure Ltd.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [11880 2012-07-04] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MSICDSetup; \??\D:\CDriver64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-28 17:29 - 2013-10-28 17:29 - 00000000 ____D C:\FRST
2013-10-28 17:28 - 2013-10-28 17:26 - 01956538 _____ (Farbar) C:\Users\Pekarik\Desktop\FRST64.exe
2013-10-28 17:28 - 2013-10-28 17:26 - 00112128 _____ (forum.viry.cz) C:\Users\Pekarik\Desktop\FRSTLauncher.exe
2013-10-28 17:26 - 2013-10-28 17:26 - 00112128 _____ (forum.viry.cz) C:\Users\Pekarik\Downloads\FRSTLauncher.exe
2013-10-28 17:25 - 2013-10-28 17:26 - 01956538 _____ (Farbar) C:\Users\Pekarik\Downloads\FRST64.exe
2013-10-28 01:21 - 2013-10-28 01:21 - 00003088 _____ C:\Windows\System32\Tasks\{EF1917A9-633C-4369-92CD-7DB120C53AED}
2013-10-27 12:35 - 2013-10-27 12:35 - 00021891 _____ C:\Users\Pekarik\Downloads\[CzT]Batman_Arkham_Origins_DLC_2013_.torrent
2013-10-27 11:06 - 2013-10-27 11:06 - 00003088 _____ C:\Windows\System32\Tasks\{F0021183-9D9F-4B5E-9454-35138538FAD3}
2013-10-27 00:51 - 2013-10-27 00:51 - 00003088 _____ C:\Windows\System32\Tasks\{F4235A29-0D04-4CFA-96A5-0A0EE4963E75}
2013-10-26 23:25 - 2013-10-26 23:25 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Nem's Tools
2013-10-26 23:24 - 2013-10-26 23:24 - 00604819 _____ (Ryan Gregg ) C:\Users\Pekarik\Downloads\gcfscape185.exe
2013-10-26 16:21 - 2013-10-26 16:21 - 00039782 _____ C:\Users\Pekarik\Downloads\[CzT]Zaklinac_2_Vrahove_Kralu_Rozsirena_Edice_The_Witcher_2_Assassins_of_Kings_Enchanced_Edition.torrent
2013-10-26 14:51 - 2013-10-26 14:51 - 00003738 _____ C:\Users\Pekarik\Downloads\L4D2 FPS config.zip
2013-10-26 00:09 - 2013-10-26 00:09 - 00003088 _____ C:\Windows\System32\Tasks\{E6A4B938-FEA6-460F-86D2-A306612098C9}
2013-10-25 06:20 - 2013-10-25 06:20 - 00003088 _____ C:\Windows\System32\Tasks\{F37F1F67-C114-4A9A-BC3F-BBDD01E4C995}
2013-10-24 23:29 - 2013-10-24 23:29 - 00003088 _____ C:\Windows\System32\Tasks\{3ABAFFF2-B544-4088-9C7B-041F78332DD6}
2013-10-24 19:15 - 2013-10-24 19:15 - 00823743 _____ C:\Users\Pekarik\Downloads\[kickass.to]batman.arkham.origins.limited.edition.sc.torrent
2013-10-24 18:34 - 2013-10-24 18:34 - 00003088 _____ C:\Windows\System32\Tasks\{0D39AD89-9D42-441C-9003-370D4EFB4479}
2013-10-24 06:23 - 2013-10-24 06:23 - 00003088 _____ C:\Windows\System32\Tasks\{6B2F2CAE-EE34-4809-9DEC-F4CDB830D4F8}
2013-10-23 21:04 - 2013-10-23 21:04 - 00003088 _____ C:\Windows\System32\Tasks\{FE340787-BD2D-459E-93A7-27AD99E0A0CE}
2013-10-22 23:25 - 2013-10-22 23:25 - 00003088 _____ C:\Windows\System32\Tasks\{F300A811-E84B-4299-B505-1B29F57CB14A}
2013-10-21 22:28 - 2013-10-21 22:28 - 00003088 _____ C:\Windows\System32\Tasks\{9E950C41-1048-4B15-BDEE-68479D369C23}
2013-10-21 15:45 - 2013-10-21 15:45 - 00000000 __SHD C:\ProgramData\DSS
2013-10-21 00:19 - 2013-10-21 00:19 - 00003088 _____ C:\Windows\System32\Tasks\{7DC0FA28-88F6-48E6-89CE-80491EDEE55C}
2013-10-20 00:36 - 2013-10-20 00:36 - 00003088 _____ C:\Windows\System32\Tasks\{7D7B9971-0A9D-4744-BD46-2EED9BB87F45}
2013-10-18 23:17 - 2013-10-18 23:17 - 00003088 _____ C:\Windows\System32\Tasks\{EF6B6BFC-B89E-447E-9B33-F0BF01F081EE}
2013-10-17 23:14 - 2013-10-17 23:14 - 00003088 _____ C:\Windows\System32\Tasks\{20F450E8-7EFD-4A74-995A-81366DE6A255}
2013-10-17 15:16 - 2013-10-17 15:16 - 00089095 _____ C:\Users\Pekarik\Downloads\the-elder-scrolls-v-skyrim-v1.1.21.0-trainer-plus2.zip
2013-10-17 15:12 - 2013-10-17 15:12 - 03033711 _____ C:\Users\Pekarik\Downloads\trainer_8494_gghz-tesvstrn.rar
2013-10-17 14:46 - 2013-10-17 14:46 - 01079830 _____ C:\Users\Pekarik\Downloads\trainer_8497_skyrimv_10trn.rar
2013-10-17 10:31 - 2013-10-17 10:31 - 00392601 _____ C:\Users\Pekarik\Downloads\[CzT]Omalovanky_pro_deti (1).torrent
2013-10-17 10:30 - 2013-10-17 10:30 - 00007875 _____ C:\Users\Pekarik\Downloads\[CzT]Omalovanky_pro_deti.torrent
2013-10-16 22:15 - 2013-10-16 22:15 - 00003088 _____ C:\Windows\System32\Tasks\{90ADE722-31D5-4524-B5A3-E2F75F9008D2}
2013-10-16 16:29 - 2013-10-16 16:29 - 00000774 _____ C:\Users\Public\Desktop\The Elder Scrolls V Skyrim LE.lnk
2013-10-16 13:23 - 2013-10-16 13:23 - 00000493 _____ C:\Users\Public\Desktop\PayDay 2.lnk
2013-10-16 10:16 - 2013-10-16 10:16 - 00053097 _____ C:\Users\Pekarik\Downloads\[CzT]The_Elder_Scrolls_V_Skyrim_Legendary_Edition_2013_CZ_.torrent
2013-10-16 07:17 - 2013-10-16 07:17 - 00018284 _____ C:\Users\Pekarik\Downloads\[CzT]PayDay_2_2013_.torrent
2013-10-15 22:58 - 2013-10-15 22:58 - 00003088 _____ C:\Windows\System32\Tasks\{187E0253-0EF5-4CDE-943E-920250F2C27A}
2013-10-15 19:58 - 2013-10-15 19:58 - 00003088 _____ C:\Windows\System32\Tasks\{E687A638-325F-4375-9E83-4AABF05FCA04}
2013-10-15 06:46 - 2013-10-15 06:46 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\Epson
2013-10-14 20:38 - 2013-10-14 20:38 - 00003088 _____ C:\Windows\System32\Tasks\{CF87FD9D-D243-4E3E-AF9B-C376CD50700D}
2013-10-14 12:28 - 2013-10-14 12:28 - 00000000 ____D C:\Program Files\Common Files\EPSON
2013-10-14 12:12 - 2013-10-14 12:12 - 00002347 _____ C:\Users\Public\Desktop\Epson Sprievodca sieťou XP-700 Series.lnk
2013-10-14 12:12 - 2013-10-14 12:12 - 00000244 _____ C:\Users\Public\Desktop\Sprievodca službou Epson Connect.url
2013-10-14 12:11 - 2013-10-28 17:18 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-10-14 12:11 - 2013-10-14 12:11 - 00000265 _____ C:\Users\Public\Desktop\Epson Používateľská príručka XP-700 Series.url
2013-10-14 12:10 - 2013-10-19 14:31 - 00000000 ____D C:\ProgramData\EPSON
2013-10-14 12:10 - 2013-10-14 12:11 - 00000000 ____D C:\Program Files (x86)\epson
2013-10-14 12:10 - 2013-10-14 12:10 - 00000926 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2013-10-14 12:10 - 2013-10-14 12:10 - 00000000 ____D C:\Program Files\EpsonNet
2013-10-14 12:10 - 2012-11-12 19:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2013-10-14 12:10 - 2012-11-12 19:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2013-10-14 12:10 - 2012-11-12 14:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2013-10-14 12:10 - 2012-11-12 14:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2013-10-14 12:10 - 2012-10-22 16:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2013-10-14 12:10 - 2012-10-22 16:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2013-10-14 12:10 - 2012-07-23 23:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2013-10-14 12:10 - 2011-12-11 23:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2013-10-14 12:10 - 2011-04-20 02:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMJBE.DLL
2013-10-14 12:10 - 2011-03-15 02:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ID4BJBE.DLL
2013-10-14 12:10 - 2007-04-10 00:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
2013-10-14 06:42 - 2013-10-14 06:42 - 00003088 _____ C:\Windows\System32\Tasks\{661706D0-4494-4051-8761-3DB85082C544}
2013-10-13 15:30 - 2013-10-13 15:31 - 00000000 ____D C:\Users\Pekarik\Desktop\Crack
2013-10-13 11:35 - 2013-10-23 19:07 - 00000000 ____D C:\Users\Pekarik\Documents\FIFA 14
2013-10-12 15:07 - 2013-08-22 10:52 - 05646848 _____ C:\Users\Pekarik\Desktop\The Bureau XCOM Declassified All Version Trainer Plus 5.EXE
2013-10-12 15:07 - 2013-05-16 09:42 - 00000047 _____ C:\Users\Pekarik\Desktop\ABCgames.sk.url
2013-10-12 15:06 - 2013-10-12 15:06 - 05483520 _____ C:\Users\Pekarik\Desktop\the-bureau-xcom-declassified-v1.0-v1.1-trainer-plus5.zip
2013-10-12 15:05 - 2013-10-12 15:06 - 05483520 _____ C:\Users\Pekarik\Downloads\the-bureau-xcom-declassified-v1.0-v1.1-trainer-plus5.zip
2013-10-12 14:09 - 2013-10-12 14:09 - 00000810 _____ C:\Users\Pekarik\Desktop\Portal 2 - Play.lnk
2013-10-12 09:43 - 2013-10-12 09:43 - 00022902 _____ C:\Users\Pekarik\Downloads\[CzT]Portal_2_CZ.torrent
2013-10-11 19:33 - 2013-10-11 19:33 - 00706089 _____ C:\Users\Pekarik\Downloads\Mollys Icons.zip
2013-10-11 19:32 - 2013-10-11 19:32 - 00003500 _____ C:\Users\Pekarik\Downloads\Age-Icons.zip
2013-10-11 13:03 - 2013-10-11 13:03 - 00000000 ____D C:\Users\Pekarik\Documents\Gamepires
2013-10-11 13:00 - 2013-10-11 13:00 - 00000611 _____ C:\Users\Public\Desktop\Gas Guzzlers Extreme.lnk
2013-10-11 06:51 - 2013-10-11 06:51 - 00030759 _____ C:\Users\Pekarik\Downloads\[CzT]Gas_Guzzlers_Extreme_2013_.torrent
2013-10-10 06:14 - 2013-10-10 06:14 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2013-10-10 06:12 - 2013-10-28 17:17 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 06:12 - 2013-10-28 12:04 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65.job
2013-10-10 06:12 - 2013-10-10 06:12 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65
2013-10-09 15:37 - 2013-10-09 15:37 - 00000000 ____D C:\Users\Pekarik\Documents\Battlefield 4 Beta
2013-10-09 14:58 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 14:58 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 14:58 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 14:58 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 14:58 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 14:58 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 14:58 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 14:58 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 14:58 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 14:58 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 14:58 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 14:58 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 14:46 - 2013-10-09 14:46 - 00000000 ____D C:\ProgramData\ATI
2013-10-09 14:46 - 2013-10-09 14:46 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-10-09 14:45 - 2013-10-09 14:45 - 00060777 _____ C:\Windows\SysWOW64\CCCInstall_201310091545517456.log
2013-10-09 14:20 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 14:20 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 14:20 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 14:20 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 14:20 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 14:20 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 14:20 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 14:20 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 14:20 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 14:20 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 14:20 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 14:20 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 14:20 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 14:20 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 14:20 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 14:20 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 14:20 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 14:20 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 14:20 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 14:20 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 14:20 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 14:20 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 14:20 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 14:20 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 14:20 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 14:20 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 14:20 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 14:17 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 14:17 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 14:17 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 14:17 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 14:17 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 14:17 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 14:17 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 14:17 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 14:17 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 14:17 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 14:17 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 14:15 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 14:15 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 14:15 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 14:15 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 14:15 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 14:13 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 14:13 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 14:13 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 14:13 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 14:13 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 14:13 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 14:13 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 14:13 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 14:13 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 14:13 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 14:13 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 22:45 - 2013-10-08 22:45 - 00003088 _____ C:\Windows\System32\Tasks\{F30C42ED-C49B-44A6-9FCE-4E288625CD44}
2013-10-08 19:32 - 2013-10-08 19:34 - 04576943 _____ C:\Users\Pekarik\Downloads\Rayman-Legends---Crack.rar
2013-10-08 19:30 - 2013-10-08 19:30 - 00000826 _____ C:\Users\Pekarik\Desktop\Future Soldier - odkaz.lnk
2013-10-08 19:09 - 2013-10-08 19:16 - 12235992 _____ C:\Users\Pekarik\Downloads\Tom.Clancys.Ghost.Recon.Future.Soldier-SKIDROW.CRACK.ONLY.rar
2013-10-08 18:51 - 2013-10-08 18:51 - 00244006 _____ C:\Users\Pekarik\Downloads\[kickass.to]dishonored.the.brigmore.witches.dlc.skidrowcrack.torrent
2013-10-08 14:59 - 2013-10-08 14:59 - 04383127 _____ C:\Users\Pekarik\Downloads\Leetmod-1.9.exe
2013-10-08 06:12 - 2013-10-08 06:12 - 00003088 _____ C:\Windows\System32\Tasks\{E7381948-9EE5-4AA4-8C3F-AD5710220F47}
2013-10-08 05:37 - 2013-10-08 05:37 - 00003088 _____ C:\Windows\System32\Tasks\{8A8892B8-9F05-4BF0-AC58-9B0F889A4B09}
2013-10-07 15:55 - 2013-10-07 15:55 - 00000771 _____ C:\Users\Public\Desktop\Lost Planet 3.lnk
2013-10-07 12:06 - 2013-10-07 12:06 - 00000000 ____D C:\Users\Pekarik\Documents\Shadow Warrior
2013-10-07 12:02 - 2013-10-07 12:02 - 00000719 _____ C:\Users\Public\Desktop\Shadow Warrior.lnk
2013-10-06 22:10 - 2013-10-06 22:10 - 00003088 _____ C:\Windows\System32\Tasks\{BE936E68-3D68-40E4-B136-35A2CA3B7E98}
2013-10-06 17:09 - 2013-10-06 17:15 - 06816387 _____ C:\Users\Pekarik\Downloads\CALL-OF-JUAREZ-GUNSLINGER-Crack-By-Defi.rar
2013-10-06 17:00 - 2013-10-06 17:05 - 14403154 _____ C:\Users\Pekarik\Downloads\SC-978454R.rar
2013-10-06 16:40 - 2013-10-06 16:40 - 00048869 _____ C:\Users\Pekarik\Downloads\[CzT]Lost_Planet_3_2013_.torrent
2013-10-06 16:39 - 2013-10-06 16:39 - 00035366 _____ C:\Users\Pekarik\Downloads\[CzT]Shadow_Warrior_2013_.torrent
2013-10-06 16:38 - 2013-10-06 16:38 - 00021894 _____ C:\Users\Pekarik\Downloads\[CzT]Alien_Rage_Unlimited_2013_ (1).torrent
2013-10-06 14:56 - 2013-10-06 15:10 - 00000172 _____ C:\Users\Pekarik\Downloads\JOYPAD MOD v0.15.1.zip
2013-10-06 00:34 - 2013-10-06 00:34 - 00003088 _____ C:\Windows\System32\Tasks\{C136A8AF-5526-4AD3-B831-ED2C12A6796B}
2013-10-05 15:17 - 2013-10-05 15:17 - 00001268 _____ C:\Users\Public\Desktop\Uninstaller.lnk
2013-10-05 13:50 - 2013-10-05 13:50 - 00060777 _____ C:\Windows\SysWOW64\CCCInstall_201310051450219115.log
2013-10-05 13:21 - 2013-10-05 13:21 - 00889416 _____ (Microsoft Corporation) C:\Users\Pekarik\Downloads\dotNetFx40_Full_setup.exe
2013-10-04 23:31 - 2013-10-04 23:31 - 00003088 _____ C:\Windows\System32\Tasks\{5937F822-DF41-4D7F-B675-6E0FABF5DA6C}
2013-10-04 16:22 - 2013-10-04 16:27 - 00000000 ____D C:\Users\Pekarik\Documents\Battlefield 4
2013-10-04 06:50 - 2013-10-04 06:50 - 00003088 _____ C:\Windows\System32\Tasks\{B2C99A98-DCEC-4AD5-AB7E-BE2D8CA369A4}
2013-10-03 21:28 - 2013-10-03 21:28 - 00003088 _____ C:\Windows\System32\Tasks\{7FBD9431-4D6F-406E-8C49-42726CBF8C15}
2013-10-02 21:48 - 2013-10-02 21:48 - 00003088 _____ C:\Windows\System32\Tasks\{640C6817-7930-4179-888E-28E0867F2809}
2013-10-02 15:04 - 2013-10-02 15:04 - 00000000 ____D C:\Users\Pekarik\AppData\Local\LogMeIn
2013-10-02 15:04 - 2013-10-02 15:04 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-02 14:47 - 2013-10-02 14:47 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-01 22:29 - 2013-10-01 22:29 - 00003088 _____ C:\Windows\System32\Tasks\{62FA852B-8973-49EE-B286-183A5D2825CE}
2013-10-01 15:39 - 2013-10-01 15:39 - 03820328 _____ C:\Users\Pekarik\Downloads\battlelog-web-plugins_2.3.0_119 (1).exe
2013-10-01 15:32 - 2013-10-01 15:32 - 03820328 _____ C:\Users\Pekarik\Downloads\battlelog-web-plugins_2.3.0_119.exe
2013-09-30 23:07 - 2013-09-30 23:07 - 00003088 _____ C:\Windows\System32\Tasks\{138CE227-FD66-4A3A-8CB4-3B2799B5EA10}
2013-09-30 21:17 - 2013-09-30 21:17 - 00019038 _____ C:\Users\Pekarik\Downloads\[CzT]Rychle_a_zbesile_6_Fast_Furious_6_2013_CZ_ (1).torrent
2013-09-30 18:56 - 2013-09-30 18:56 - 00377920 _____ (AVAST Software) C:\Users\Pekarik\Downloads\aswclear.exe
2013-09-30 17:32 - 2013-09-30 17:32 - 01374136 _____ C:\Users\Pekarik\Downloads\fc3_v1.01_trn+10.rar
2013-09-30 17:25 - 2013-09-30 17:25 - 00368016 _____ C:\Users\Pekarik\Downloads\Far Cry 3 v1.0.1 Dx-9 plus 4 by Grom-Skynet.rar
2013-09-30 15:09 - 2013-09-30 15:09 - 00040794 _____ C:\ComboFix.txt
2013-09-30 14:44 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-30 14:44 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-30 14:44 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-30 14:44 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-30 14:44 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-30 14:44 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-30 14:44 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-30 14:44 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-30 14:43 - 2013-09-30 15:09 - 00000000 ____D C:\Qoobox
2013-09-30 14:43 - 2013-09-30 15:04 - 00000000 ____D C:\Windows\erdnt
2013-09-30 14:41 - 2013-09-30 14:42 - 05131234 _____ (Swearware) C:\Users\Pekarik\Downloads\ComboFix.exe
2013-09-29 22:58 - 2013-09-29 22:58 - 00003088 _____ C:\Windows\System32\Tasks\{74AAD74B-87C6-4D64-8907-6CDE28457835}
2013-09-29 16:28 - 2013-10-07 11:30 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-29 14:54 - 2013-09-29 14:54 - 00003088 _____ C:\Windows\System32\Tasks\{A5918246-6DEF-442E-9D6E-0D5B91E9C434}
2013-09-29 14:29 - 2013-09-29 14:29 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\Avira
2013-09-29 14:27 - 2013-09-29 14:27 - 00002062 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-09-29 14:26 - 2013-10-07 11:30 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-29 14:26 - 2013-10-07 11:30 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-29 14:26 - 2013-10-07 11:30 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-09-29 14:26 - 2013-09-29 14:27 - 00000000 ____D C:\ProgramData\Avira
2013-09-29 14:26 - 2013-09-29 14:26 - 00000000 ____D C:\Program Files (x86)\Avira
2013-09-29 14:26 - 2013-09-29 14:20 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2013-09-29 14:26 - 2013-09-29 14:20 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2013-09-29 14:04 - 2013-09-29 14:04 - 00003207 _____ C:\Users\Pekarik\Downloads\[CzT]Avira_Internet_Security_2013.torrent
2013-09-29 10:33 - 2013-09-29 10:33 - 00017138 _____ C:\Users\Pekarik\Downloads\[CzT]Pot_a_Krev_Pain_and_Gain_2013_.torrent
2013-09-29 09:53 - 2013-09-29 09:53 - 00000501 _____ C:\Users\Public\Desktop\Alien Rage.lnk
2013-09-29 09:51 - 2013-09-29 09:51 - 00019037 _____ C:\Users\Pekarik\Downloads\[CzT]Rychle_a_zbesile_6_Fast_Furious_6_2013_CZ_.torrent
2013-09-28 22:45 - 2013-09-28 22:45 - 00003088 _____ C:\Windows\System32\Tasks\{E17407B3-48D6-43E2-BF44-2C1B389F1448}
2013-09-28 22:02 - 2013-10-22 19:16 - 00000008 _____ C:\Users\Pekarik\Desktop\sd.txt
2013-09-28 19:07 - 2013-09-28 19:07 - 00935175 _____ C:\Users\Pekarik\Downloads\RSITx64 (1).exe
2013-09-28 12:16 - 2013-09-28 12:16 - 00021894 _____ C:\Users\Pekarik\Downloads\[CzT]Alien_Rage_Unlimited_2013_.torrent
2013-09-28 12:06 - 2013-09-29 18:19 - 00000000 ____D C:\Program Files\trend micro
2013-09-28 12:03 - 2013-09-28 12:03 - 00935175 _____ C:\Users\Pekarik\Downloads\RSITx64.exe
2013-09-28 11:43 - 2013-09-28 11:43 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Norman Malware Cleaner
2013-09-28 11:17 - 2013-09-28 11:22 - 27804664 _____ (SUPERAntiSpyware) C:\Users\Pekarik\Downloads\SAS_31810066.EXE
2013-09-28 11:13 - 2013-09-28 11:14 - 10059808 _____ (McAfee Inc) C:\Users\Pekarik\Downloads\stinger32.exe

==================== One Month Modified Files and Folders =======

2013-10-28 17:29 - 2013-10-28 17:29 - 00000000 ____D C:\FRST
2013-10-28 17:26 - 2013-10-28 17:28 - 01956538 _____ (Farbar) C:\Users\Pekarik\Desktop\FRST64.exe
2013-10-28 17:26 - 2013-10-28 17:28 - 00112128 _____ (forum.viry.cz) C:\Users\Pekarik\Desktop\FRSTLauncher.exe
2013-10-28 17:26 - 2013-10-28 17:26 - 00112128 _____ (forum.viry.cz) C:\Users\Pekarik\Downloads\FRSTLauncher.exe
2013-10-28 17:26 - 2013-10-28 17:25 - 01956538 _____ (Farbar) C:\Users\Pekarik\Downloads\FRST64.exe
2013-10-28 17:26 - 2012-05-23 10:57 - 01746299 _____ C:\Windows\WindowsUpdate.log
2013-10-28 17:18 - 2013-10-14 12:11 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-10-28 17:18 - 2012-09-06 17:49 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-28 17:17 - 2013-10-10 06:12 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-28 17:15 - 2012-05-23 11:37 - 00003986 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9FAF6C4B-B073-4ACF-9139-A0B27904CB89}
2013-10-28 17:13 - 2012-12-26 20:11 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-10-28 17:12 - 2012-05-24 15:25 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\uTorrent
2013-10-28 17:10 - 2012-05-27 07:26 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\DAEMON Tools Lite
2013-10-28 16:53 - 2012-05-26 08:28 - 00291088 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-28 16:53 - 2012-05-26 08:18 - 00291088 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-28 16:08 - 2012-05-26 08:18 - 00291088 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-28 15:58 - 2012-05-25 08:45 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-28 13:07 - 2012-08-12 19:36 - 00000000 ____D C:\Users\Pekarik\AppData\Local\LogMeIn Hamachi
2013-10-28 12:12 - 2009-07-14 05:45 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-28 12:12 - 2009-07-14 05:45 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-28 12:09 - 2009-07-14 06:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-28 12:04 - 2013-10-10 06:12 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65.job
2013-10-28 12:04 - 2012-07-23 11:03 - 00000000 ____D C:\Users\Pekarik\AppData\Local\TSVNCache
2013-10-28 12:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-28 01:21 - 2013-10-28 01:21 - 00003088 _____ C:\Windows\System32\Tasks\{EF1917A9-633C-4369-92CD-7DB120C53AED}
2013-10-28 01:21 - 2012-05-24 19:23 - 00000000 ____D C:\ProgramData\Skype
2013-10-27 18:11 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-10-27 12:35 - 2013-10-27 12:35 - 00021891 _____ C:\Users\Pekarik\Downloads\[CzT]Batman_Arkham_Origins_DLC_2013_.torrent
2013-10-27 11:06 - 2013-10-27 11:06 - 00003088 _____ C:\Windows\System32\Tasks\{F0021183-9D9F-4B5E-9454-35138538FAD3}
2013-10-27 00:51 - 2013-10-27 00:51 - 00003088 _____ C:\Windows\System32\Tasks\{F4235A29-0D04-4CFA-96A5-0A0EE4963E75}
2013-10-26 23:25 - 2013-10-26 23:25 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Nem's Tools
2013-10-26 23:25 - 2012-07-24 15:46 - 00000000 ____D C:\Program Files\Nem's Tools
2013-10-26 23:24 - 2013-10-26 23:24 - 00604819 _____ (Ryan Gregg ) C:\Users\Pekarik\Downloads\gcfscape185.exe
2013-10-26 16:21 - 2013-10-26 16:21 - 00039782 _____ C:\Users\Pekarik\Downloads\[CzT]Zaklinac_2_Vrahove_Kralu_Rozsirena_Edice_The_Witcher_2_Assassins_of_Kings_Enchanced_Edition.torrent
2013-10-26 14:51 - 2013-10-26 14:51 - 00003738 _____ C:\Users\Pekarik\Downloads\L4D2 FPS config.zip
2013-10-26 00:09 - 2013-10-26 00:09 - 00003088 _____ C:\Windows\System32\Tasks\{E6A4B938-FEA6-460F-86D2-A306612098C9}
2013-10-25 23:01 - 2012-07-21 00:29 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\TS3Client
2013-10-25 06:20 - 2013-10-25 06:20 - 00003088 _____ C:\Windows\System32\Tasks\{F37F1F67-C114-4A9A-BC3F-BBDD01E4C995}
2013-10-24 23:29 - 2013-10-24 23:29 - 00003088 _____ C:\Windows\System32\Tasks\{3ABAFFF2-B544-4088-9C7B-041F78332DD6}
2013-10-24 19:15 - 2013-10-24 19:15 - 00823743 _____ C:\Users\Pekarik\Downloads\[kickass.to]batman.arkham.origins.limited.edition.sc.torrent
2013-10-24 18:34 - 2013-10-24 18:34 - 00003088 _____ C:\Windows\System32\Tasks\{0D39AD89-9D42-441C-9003-370D4EFB4479}
2013-10-24 17:46 - 2012-08-01 15:58 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\vlc
2013-10-24 06:23 - 2013-10-24 06:23 - 00003088 _____ C:\Windows\System32\Tasks\{6B2F2CAE-EE34-4809-9DEC-F4CDB830D4F8}
2013-10-23 21:04 - 2013-10-23 21:04 - 00003088 _____ C:\Windows\System32\Tasks\{FE340787-BD2D-459E-93A7-27AD99E0A0CE}
2013-10-23 19:07 - 2013-10-13 11:35 - 00000000 ____D C:\Users\Pekarik\Documents\FIFA 14
2013-10-23 17:56 - 2013-08-12 15:49 - 00000000 ____D C:\Users\Pekarik\Documents\Soubory aplikace Outlook
2013-10-22 23:25 - 2013-10-22 23:25 - 00003088 _____ C:\Windows\System32\Tasks\{F300A811-E84B-4299-B505-1B29F57CB14A}
2013-10-22 19:16 - 2013-09-28 22:02 - 00000008 _____ C:\Users\Pekarik\Desktop\sd.txt
2013-10-21 22:28 - 2013-10-21 22:28 - 00003088 _____ C:\Windows\System32\Tasks\{9E950C41-1048-4B15-BDEE-68479D369C23}
2013-10-21 15:45 - 2013-10-21 15:45 - 00000000 __SHD C:\ProgramData\DSS
2013-10-21 00:19 - 2013-10-21 00:19 - 00003088 _____ C:\Windows\System32\Tasks\{7DC0FA28-88F6-48E6-89CE-80491EDEE55C}
2013-10-20 00:36 - 2013-10-20 00:36 - 00003088 _____ C:\Windows\System32\Tasks\{7D7B9971-0A9D-4744-BD46-2EED9BB87F45}
2013-10-19 21:38 - 2012-05-24 19:23 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\Skype
2013-10-19 14:31 - 2013-10-14 12:10 - 00000000 ____D C:\ProgramData\EPSON
2013-10-18 23:17 - 2013-10-18 23:17 - 00003088 _____ C:\Windows\System32\Tasks\{EF6B6BFC-B89E-447E-9B33-F0BF01F081EE}
2013-10-17 23:14 - 2013-10-17 23:14 - 00003088 _____ C:\Windows\System32\Tasks\{20F450E8-7EFD-4A74-995A-81366DE6A255}
2013-10-17 15:16 - 2013-10-17 15:16 - 00089095 _____ C:\Users\Pekarik\Downloads\the-elder-scrolls-v-skyrim-v1.1.21.0-trainer-plus2.zip
2013-10-17 15:12 - 2013-10-17 15:12 - 03033711 _____ C:\Users\Pekarik\Downloads\trainer_8494_gghz-tesvstrn.rar
2013-10-17 14:46 - 2013-10-17 14:46 - 01079830 _____ C:\Users\Pekarik\Downloads\trainer_8497_skyrimv_10trn.rar
2013-10-17 10:31 - 2013-10-17 10:31 - 00392601 _____ C:\Users\Pekarik\Downloads\[CzT]Omalovanky_pro_deti (1).torrent
2013-10-17 10:30 - 2013-10-17 10:30 - 00007875 _____ C:\Users\Pekarik\Downloads\[CzT]Omalovanky_pro_deti.torrent
2013-10-16 22:15 - 2013-10-16 22:15 - 00003088 _____ C:\Windows\System32\Tasks\{90ADE722-31D5-4524-B5A3-E2F75F9008D2}
2013-10-16 16:29 - 2013-10-16 16:29 - 00000774 _____ C:\Users\Public\Desktop\The Elder Scrolls V Skyrim LE.lnk
2013-10-16 13:44 - 2012-05-27 15:50 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-10-16 13:23 - 2013-10-16 13:23 - 00000493 _____ C:\Users\Public\Desktop\PayDay 2.lnk
2013-10-16 10:16 - 2013-10-16 10:16 - 00053097 _____ C:\Users\Pekarik\Downloads\[CzT]The_Elder_Scrolls_V_Skyrim_Legendary_Edition_2013_CZ_.torrent
2013-10-16 07:17 - 2013-10-16 07:17 - 00018284 _____ C:\Users\Pekarik\Downloads\[CzT]PayDay_2_2013_.torrent
2013-10-15 22:58 - 2013-10-15 22:58 - 00003088 _____ C:\Windows\System32\Tasks\{187E0253-0EF5-4CDE-943E-920250F2C27A}
2013-10-15 20:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-15 19:58 - 2013-10-15 19:58 - 00003088 _____ C:\Windows\System32\Tasks\{E687A638-325F-4375-9E83-4AABF05FCA04}
2013-10-15 06:46 - 2013-10-15 06:46 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\Epson
2013-10-14 20:38 - 2013-10-14 20:38 - 00003088 _____ C:\Windows\System32\Tasks\{CF87FD9D-D243-4E3E-AF9B-C376CD50700D}
2013-10-14 12:28 - 2013-10-14 12:28 - 00000000 ____D C:\Program Files\Common Files\EPSON
2013-10-14 12:12 - 2013-10-14 12:12 - 00002347 _____ C:\Users\Public\Desktop\Epson Sprievodca sieťou XP-700 Series.lnk
2013-10-14 12:12 - 2013-10-14 12:12 - 00000244 _____ C:\Users\Public\Desktop\Sprievodca službou Epson Connect.url
2013-10-14 12:11 - 2013-10-14 12:11 - 00000265 _____ C:\Users\Public\Desktop\Epson Používateľská príručka XP-700 Series.url
2013-10-14 12:11 - 2013-10-14 12:10 - 00000000 ____D C:\Program Files (x86)\epson
2013-10-14 12:11 - 2012-05-23 11:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-14 12:10 - 2013-10-14 12:10 - 00000926 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2013-10-14 12:10 - 2013-10-14 12:10 - 00000000 ____D C:\Program Files\EpsonNet
2013-10-14 09:26 - 2013-02-02 16:48 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\.minecraft
2013-10-14 06:42 - 2013-10-14 06:42 - 00003088 _____ C:\Windows\System32\Tasks\{661706D0-4494-4051-8761-3DB85082C544}
2013-10-14 06:42 - 2012-05-23 11:01 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Google
2013-10-13 15:31 - 2013-10-13 15:30 - 00000000 ____D C:\Users\Pekarik\Desktop\Crack
2013-10-12 15:06 - 2013-10-12 15:06 - 05483520 _____ C:\Users\Pekarik\Desktop\the-bureau-xcom-declassified-v1.0-v1.1-trainer-plus5.zip
2013-10-12 15:06 - 2013-10-12 15:05 - 05483520 _____ C:\Users\Pekarik\Downloads\the-bureau-xcom-declassified-v1.0-v1.1-trainer-plus5.zip
2013-10-12 14:15 - 2012-05-27 08:15 - 00000000 ____D C:\Users\Pekarik\AppData\Local\SKIDROW
2013-10-12 14:09 - 2013-10-12 14:09 - 00000810 _____ C:\Users\Pekarik\Desktop\Portal 2 - Play.lnk
2013-10-12 09:43 - 2013-10-12 09:43 - 00022902 _____ C:\Users\Pekarik\Downloads\[CzT]Portal_2_CZ.torrent
2013-10-11 19:33 - 2013-10-11 19:33 - 00706089 _____ C:\Users\Pekarik\Downloads\Mollys Icons.zip
2013-10-11 19:32 - 2013-10-11 19:32 - 00003500 _____ C:\Users\Pekarik\Downloads\Age-Icons.zip
2013-10-11 13:03 - 2013-10-11 13:03 - 00000000 ____D C:\Users\Pekarik\Documents\Gamepires
2013-10-11 13:00 - 2013-10-11 13:00 - 00000611 _____ C:\Users\Public\Desktop\Gas Guzzlers Extreme.lnk
2013-10-11 07:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-11 06:51 - 2013-10-11 06:51 - 00030759 _____ C:\Users\Pekarik\Downloads\[CzT]Gas_Guzzlers_Extreme_2013_.torrent
2013-10-10 18:23 - 2012-07-08 09:55 - 00000000 ____D C:\Users\Pekarik\Desktop\Iné
2013-10-10 16:40 - 2012-07-07 21:12 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Ubisoft Game Launcher
2013-10-10 06:14 - 2013-10-10 06:14 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2013-10-10 06:12 - 2013-10-10 06:12 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65
2013-10-10 06:12 - 2012-05-23 11:01 - 00003932 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-09 22:08 - 2012-05-23 11:52 - 00000000 ____D C:\Windows\Panther
2013-10-09 15:37 - 2013-10-09 15:37 - 00000000 ____D C:\Users\Pekarik\Documents\Battlefield 4 Beta
2013-10-09 15:09 - 2009-07-14 05:45 - 05364144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 15:00 - 2012-08-09 15:50 - 00766336 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 14:59 - 2012-12-09 16:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 14:57 - 2013-03-14 07:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 14:57 - 2013-03-14 07:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 14:55 - 2013-07-20 02:01 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 14:54 - 2012-05-23 12:48 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 14:46 - 2013-10-09 14:46 - 00000000 ____D C:\ProgramData\ATI
2013-10-09 14:46 - 2013-10-09 14:46 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-10-09 14:46 - 2012-05-23 11:22 - 00000000 ____D C:\ProgramData\AMD
2013-10-09 14:45 - 2013-10-09 14:45 - 00060777 _____ C:\Windows\SysWOW64\CCCInstall_201310091545517456.log
2013-10-09 14:45 - 2012-05-23 11:18 - 00000000 ____D C:\Program Files\ATI Technologies
2013-10-09 14:14 - 2012-05-23 12:04 - 00000000 ____D C:\AMD
2013-10-08 22:45 - 2013-10-08 22:45 - 00003088 _____ C:\Windows\System32\Tasks\{F30C42ED-C49B-44A6-9FCE-4E288625CD44}
2013-10-08 19:34 - 2013-10-08 19:32 - 04576943 _____ C:\Users\Pekarik\Downloads\Rayman-Legends---Crack.rar
2013-10-08 19:30 - 2013-10-08 19:30 - 00000826 _____ C:\Users\Pekarik\Desktop\Future Soldier - odkaz.lnk
2013-10-08 19:16 - 2013-10-08 19:09 - 12235992 _____ C:\Users\Pekarik\Downloads\Tom.Clancys.Ghost.Recon.Future.Soldier-SKIDROW.CRACK.ONLY.rar
2013-10-08 18:51 - 2013-10-08 18:51 - 00244006 _____ C:\Users\Pekarik\Downloads\[kickass.to]dishonored.the.brigmore.witches.dlc.skidrowcrack.torrent
2013-10-08 14:59 - 2013-10-08 14:59 - 04383127 _____ C:\Users\Pekarik\Downloads\Leetmod-1.9.exe
2013-10-08 06:12 - 2013-10-08 06:12 - 00003088 _____ C:\Windows\System32\Tasks\{E7381948-9EE5-4AA4-8C3F-AD5710220F47}
2013-10-08 05:37 - 2013-10-08 05:37 - 00003088 _____ C:\Windows\System32\Tasks\{8A8892B8-9F05-4BF0-AC58-9B0F889A4B09}
2013-10-07 16:39 - 2012-05-24 13:46 - 00000000 ____D C:\Users\Pekarik\Documents\My Games
2013-10-07 15:55 - 2013-10-07 15:55 - 00000771 _____ C:\Users\Public\Desktop\Lost Planet 3.lnk
2013-10-07 12:06 - 2013-10-07 12:06 - 00000000 ____D C:\Users\Pekarik\Documents\Shadow Warrior
2013-10-07 12:02 - 2013-10-07 12:02 - 00000719 _____ C:\Users\Public\Desktop\Shadow Warrior.lnk
2013-10-07 11:30 - 2013-09-29 16:28 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-07 11:30 - 2013-09-29 14:26 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-07 11:30 - 2013-09-29 14:26 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-07 11:30 - 2013-09-29 14:26 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-06 22:10 - 2013-10-06 22:10 - 00003088 _____ C:\Windows\System32\Tasks\{BE936E68-3D68-40E4-B136-35A2CA3B7E98}
2013-10-06 20:20 - 2012-05-23 11:54 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\GHISLER
2013-10-06 17:15 - 2013-10-06 17:09 - 06816387 _____ C:\Users\Pekarik\Downloads\CALL-OF-JUAREZ-GUNSLINGER-Crack-By-Defi.rar
2013-10-06 17:05 - 2013-10-06 17:00 - 14403154 _____ C:\Users\Pekarik\Downloads\SC-978454R.rar
2013-10-06 16:40 - 2013-10-06 16:40 - 00048869 _____ C:\Users\Pekarik\Downloads\[CzT]Lost_Planet_3_2013_.torrent
2013-10-06 16:39 - 2013-10-06 16:39 - 00035366 _____ C:\Users\Pekarik\Downloads\[CzT]Shadow_Warrior_2013_.torrent
2013-10-06 16:38 - 2013-10-06 16:38 - 00021894 _____ C:\Users\Pekarik\Downloads\[CzT]Alien_Rage_Unlimited_2013_ (1).torrent
2013-10-06 15:12 - 2012-07-08 09:40 - 00000000 ____D C:\Users\Pekarik\Desktop\HRY
2013-10-06 15:10 - 2013-10-06 14:56 - 00000172 _____ C:\Users\Pekarik\Downloads\JOYPAD MOD v0.15.1.zip
2013-10-06 00:34 - 2013-10-06 00:34 - 00003088 _____ C:\Windows\System32\Tasks\{C136A8AF-5526-4AD3-B831-ED2C12A6796B}
2013-10-05 15:17 - 2013-10-05 15:17 - 00001268 _____ C:\Users\Public\Desktop\Uninstaller.lnk
2013-10-05 15:17 - 2013-08-01 18:21 - 00001256 _____ C:\Users\Pekarik\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-10-05 15:17 - 2013-08-01 18:21 - 00001217 _____ C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
2013-10-05 13:50 - 2013-10-05 13:50 - 00060777 _____ C:\Windows\SysWOW64\CCCInstall_201310051450219115.log
2013-10-05 13:43 - 2013-06-20 16:11 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-05 13:21 - 2013-10-05 13:21 - 00889416 _____ (Microsoft Corporation) C:\Users\Pekarik\Downloads\dotNetFx40_Full_setup.exe
2013-10-04 23:31 - 2013-10-04 23:31 - 00003088 _____ C:\Windows\System32\Tasks\{5937F822-DF41-4D7F-B675-6E0FABF5DA6C}
2013-10-04 23:30 - 2013-08-06 16:05 - 00000000 ____D C:\Program Files (x86)\Counter-Strike 1.6 Standalone
2013-10-04 20:55 - 2013-03-29 10:20 - 00000000 ____D C:\Users\Pekarik\Desktop\Blbosti
2013-10-04 20:55 - 2013-02-02 13:47 - 00000000 ____D C:\Users\Pekarik\Desktop\Fotky
2013-10-04 16:27 - 2013-10-04 16:22 - 00000000 ____D C:\Users\Pekarik\Documents\Battlefield 4
2013-10-04 16:23 - 2012-05-26 08:28 - 00000000 ____D C:\Users\Pekarik\AppData\Local\PunkBuster
2013-10-04 16:19 - 2012-05-26 08:18 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-10-04 06:50 - 2013-10-04 06:50 - 00003088 _____ C:\Windows\System32\Tasks\{B2C99A98-DCEC-4AD5-AB7E-BE2D8CA369A4}
2013-10-03 21:28 - 2013-10-03 21:28 - 00003088 _____ C:\Windows\System32\Tasks\{7FBD9431-4D6F-406E-8C49-42726CBF8C15}
2013-10-02 21:48 - 2013-10-02 21:48 - 00003088 _____ C:\Windows\System32\Tasks\{640C6817-7930-4179-888E-28E0867F2809}
2013-10-02 15:04 - 2013-10-02 15:04 - 00000000 ____D C:\Users\Pekarik\AppData\Local\LogMeIn
2013-10-02 15:04 - 2013-10-02 15:04 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-02 14:47 - 2013-10-02 14:47 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 14:47 - 2013-07-03 07:07 - 00000926 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-10-01 22:29 - 2013-10-01 22:29 - 00003088 _____ C:\Windows\System32\Tasks\{62FA852B-8973-49EE-B286-183A5D2825CE}
2013-10-01 15:39 - 2013-10-01 15:39 - 03820328 _____ C:\Users\Pekarik\Downloads\battlelog-web-plugins_2.3.0_119 (1).exe
2013-10-01 15:34 - 2012-05-26 08:28 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-10-01 15:32 - 2013-10-01 15:32 - 03820328 _____ C:\Users\Pekarik\Downloads\battlelog-web-plugins_2.3.0_119.exe
2013-09-30 23:07 - 2013-09-30 23:07 - 00003088 _____ C:\Windows\System32\Tasks\{138CE227-FD66-4A3A-8CB4-3B2799B5EA10}
2013-09-30 21:17 - 2013-09-30 21:17 - 00019038 _____ C:\Users\Pekarik\Downloads\[CzT]Rychle_a_zbesile_6_Fast_Furious_6_2013_CZ_ (1).torrent
2013-09-30 19:07 - 2013-08-16 20:05 - 00000000 ____D C:\ProgramData\Alwil Software
2013-09-30 19:06 - 2012-05-23 11:43 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-30 18:56 - 2013-09-30 18:56 - 00377920 _____ (AVAST Software) C:\Users\Pekarik\Downloads\aswclear.exe
2013-09-30 17:32 - 2013-09-30 17:32 - 01374136 _____ C:\Users\Pekarik\Downloads\fc3_v1.01_trn+10.rar
2013-09-30 17:25 - 2013-09-30 17:25 - 00368016 _____ C:\Users\Pekarik\Downloads\Far Cry 3 v1.0.1 Dx-9 plus 4 by Grom-Skynet.rar
2013-09-30 15:09 - 2013-09-30 15:09 - 00040794 _____ C:\ComboFix.txt
2013-09-30 15:09 - 2013-09-30 14:43 - 00000000 ____D C:\Qoobox
2013-09-30 15:04 - 2013-09-30 14:43 - 00000000 ____D C:\Windows\erdnt
2013-09-30 15:03 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-09-30 14:44 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-09-30 14:42 - 2013-09-30 14:41 - 05131234 _____ (Swearware) C:\Users\Pekarik\Downloads\ComboFix.exe
2013-09-29 22:58 - 2013-09-29 22:58 - 00003088 _____ C:\Windows\System32\Tasks\{74AAD74B-87C6-4D64-8907-6CDE28457835}
2013-09-29 18:19 - 2013-09-28 12:06 - 00000000 ____D C:\Program Files\trend micro
2013-09-29 16:06 - 2013-06-02 21:18 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Game Dev Tycoon
2013-09-29 16:04 - 2012-05-23 10:57 - 00000000 ____D C:\Users\Pekarik
2013-09-29 14:54 - 2013-09-29 14:54 - 00003088 _____ C:\Windows\System32\Tasks\{A5918246-6DEF-442E-9D6E-0D5B91E9C434}
2013-09-29 14:40 - 2013-09-25 20:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-29 14:29 - 2013-09-29 14:29 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\Avira
2013-09-29 14:27 - 2013-09-29 14:27 - 00002062 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-09-29 14:27 - 2013-09-29 14:26 - 00000000 ____D C:\ProgramData\Avira
2013-09-29 14:26 - 2013-09-29 14:26 - 00000000 ____D C:\Program Files (x86)\Avira
2013-09-29 14:20 - 2013-09-29 14:26 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2013-09-29 14:20 - 2013-09-29 14:26 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2013-09-29 14:04 - 2013-09-29 14:04 - 00003207 _____ C:\Users\Pekarik\Downloads\[CzT]Avira_Internet_Security_2013.torrent
2013-09-29 12:53 - 2013-09-27 19:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-09-29 12:53 - 2013-09-25 17:23 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-29 12:47 - 2012-05-27 15:53 - 00000000 ____D C:\ProgramData\Codemasters
2013-09-29 12:44 - 2013-09-26 11:39 - 00000000 ____D C:\Program Files (x86)\Delete Doctor
2013-09-29 10:33 - 2013-09-29 10:33 - 00017138 _____ C:\Users\Pekarik\Downloads\[CzT]Pot_a_Krev_Pain_and_Gain_2013_.torrent
2013-09-29 09:53 - 2013-09-29 09:53 - 00000501 _____ C:\Users\Public\Desktop\Alien Rage.lnk
2013-09-29 09:51 - 2013-09-29 09:51 - 00019037 _____ C:\Users\Pekarik\Downloads\[CzT]Rychle_a_zbesile_6_Fast_Furious_6_2013_CZ_.torrent
2013-09-28 22:45 - 2013-09-28 22:45 - 00003088 _____ C:\Windows\System32\Tasks\{E17407B3-48D6-43E2-BF44-2C1B389F1448}
2013-09-28 22:19 - 2012-05-23 11:41 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-28 22:06 - 2013-09-22 09:47 - 00001912 _____ C:\Windows\epplauncher.mif
2013-09-28 19:07 - 2013-09-28 19:07 - 00935175 _____ C:\Users\Pekarik\Downloads\RSITx64 (1).exe
2013-09-28 17:15 - 2013-09-26 11:11 - 00000000 ____D C:\Users\Pekarik\AppData\Roaming\Malwarebytes
2013-09-28 17:15 - 2013-09-26 11:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-28 16:46 - 2013-01-12 23:41 - 00000000 ____D C:\Users\Pekarik\Documents\FIFA 13
2013-09-28 15:32 - 2013-09-26 14:50 - 26933719 _____ C:\Users\Pekarik\Downloads\FIFA-13-Crack-only-Skidrow.rar
2013-09-28 15:30 - 2013-09-07 16:00 - 00399528 _____ C:\Users\Pekarik\Downloads\Crack.rar
2013-09-28 15:22 - 2013-09-08 14:34 - 00000000 ____D C:\Users\Pekarik\Desktop\Outlast
2013-09-28 12:16 - 2013-09-28 12:16 - 00021894 _____ C:\Users\Pekarik\Downloads\[CzT]Alien_Rage_Unlimited_2013_.torrent
2013-09-28 12:03 - 2013-09-28 12:03 - 00935175 _____ C:\Users\Pekarik\Downloads\RSITx64.exe
2013-09-28 11:43 - 2013-09-28 11:43 - 00000000 ____D C:\Users\Pekarik\AppData\Local\Norman Malware Cleaner
2013-09-28 11:22 - 2013-09-28 11:17 - 27804664 _____ (SUPERAntiSpyware) C:\Users\Pekarik\Downloads\SAS_31810066.EXE
2013-09-28 11:14 - 2013-09-28 11:13 - 10059808 _____ (McAfee Inc) C:\Users\Pekarik\Downloads\stinger32.exe
2013-09-28 11:12 - 2013-09-27 23:28 - 00000000 ____D C:\Program Files\stinger
2013-09-28 11:02 - 2012-08-01 01:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

Files to move or delete:
====================
C:\Users\Pekarik\a3dapi.dll
C:\Users\Pekarik\hlds.exe
C:\Users\Pekarik\hltv.exe
C:\Users\Pekarik\hw.dll
C:\Users\Pekarik\Mss32.dll
C:\Users\Pekarik\Steam.dll
C:\Users\Pekarik\steamclient.dll
C:\Users\Pekarik\sw.dll
C:\Users\Pekarik\tier0_s.dll
C:\Users\Pekarik\vstdlib_s.dll


Some content of TEMP:
====================
C:\Users\Pekarik\AppData\Local\Temp\avgnt.exe
C:\Users\Pekarik\AppData\Local\Temp\UninstallTemp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2013-10-21 09:26




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:465.66 GB) (Free:111.64 GB) NTFS
Drive e: (20131024_232107) (CDROM) (Total:8.3 GB) (Free:0 GB) CDFS
Drive f: (Seagate Backup Plus Drive) (Fixed) (Total:931.51 GB) (Free:205.57 GB) NTFS

Available physical RAM: 5081.72 MB
Total physical RAM: 7422.12 MB
Percentage of memory in use: 31%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: BDB6A7C8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Disk: 1 (Size: 932 GB) (Disk ID: 13895D5A)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:661DFA1C
AlternateDataStreams: C:\Users\Pekarik\AppData\Roaming:NT

==================== Security Center ==================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: FireWall (Enabled) {CE40CCC0-8ADB-6D67-25A0-C5B6438E4B57}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Pekarik\Desktop" je 24819 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 6
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppsHat
C:\Users\Pekarik\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_UI
"C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate
"C:\Users\Pekarik\AppData\Roaming\Seznam.cz\szninstall.exe" -c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop
"C:\Users\Pekarik\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\G Data AntiVirus Tray Application
C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Pekarik\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_4281F3CB61F060AA6452A3FA375A5C27
"C:\Users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mouseElf
C:\PROGRA~2\SCROLL~1\MouseElf.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv
C:\Windows\inf\ntvdm.vbe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Optimizer Pro
C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDP
C:\Users\Pekarik\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce
"C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam
"C:\Program Files (x86)\Steam\steam.exe" -silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent
"C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebcamMaxAutoRun
"C:\Program Files (x86)\WebcamMax\WebcamMax.exe" -a [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Windows\inf\msaxoccoa\msaxoccoa.exe
E:\setup.exe
C:\Users\Pekarik\AppData\Local\Temp
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-23] (Google Inc.)
C:\Windows\inf\mssedvbc.vbe
HKLM-x32\...\Run: [mssedvbcSrv] - C:\Windows\inf\mssedvbc.vbe [1558 2013-08-27] ()
BootExecute: autocheck autochk /r \??\F:autocheck autochk *
SearchScopes: HKCU - {C6768776-2C34-4B34-9E8B-16734F6D5405} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYSK&apn_uid=6fb13b1b-1ba1-484c-870f-2872a4ea2308&apn_sauid=02272C26-F61C-4007-9F67-E5E59818CE8D
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
BHO-x32: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
S3 EagleX64; No ImagePath
S3 FairplayKD; No ImagePath
C:\Users\Pekarik\Downloads\Rayman-Legends---Crack.rar
C:\Users\Pekarik\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:661DFA1C
AlternateDataStreams: C:\Users\Pekarik\AppData\Roaming:NT
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv
C:\Windows\inf\ntvdm.vbe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [x]
C:\Program Files (x86)\Common Files\Spigot
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Tu to je:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-10-2013
Ran by Pekarik at 2013-10-28 18:08:49 Run:2
Running from C:\Users\Pekarik\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
C:\Windows\inf\msaxoccoa\msaxoccoa.exe
E:\setup.exe
C:\Users\Pekarik\AppData\Local\Temp
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-23] (Google Inc.)
C:\Windows\inf\mssedvbc.vbe
HKLM-x32\...\Run: [mssedvbcSrv] - C:\Windows\inf\mssedvbc.vbe [1558 2013-08-27] ()
BootExecute: autocheck autochk /r \??\F:autocheck autochk *
SearchScopes: HKCU - {C6768776-2C34-4B34-9E8B-16734F6D5405} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYSK&apn_uid=6fb13b1b-1ba1-484c-870f-2872a4ea2308&apn_sauid=02272C26-F61C-4007-9F67-E5E59818CE8D
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
BHO-x32: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
S3 EagleX64; No ImagePath
S3 FairplayKD; No ImagePath
C:\Users\Pekarik\Downloads\Rayman-Legends---Crack.rar
C:\Users\Pekarik\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:661DFA1C
AlternateDataStreams: C:\Users\Pekarik\AppData\Roaming:NT
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv
C:\Windows\inf\ntvdm.vbe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [x]
C:\Program Files (x86)\Common Files\Spigot
End
*****************

"C:\Windows\inf\msaxoccoa\msaxoccoa.exe" => File/Directory not found.

OK. Nastala nějaká změna?

Nie , nič sa nezmenilo.

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

ComboFix 13-10-28.01 - Pekarik . 10. 2013 20:01:15.4.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.7422.5091 [GMT 1:00]
Running from: c:\users\Pekarik\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: FireWall *Enabled* {CE40CCC0-8ADB-6D67-25A0-C5B6438E4B57}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ntuser.dat
.
.
((((((((((((((((((((((((( Files Created from 2013-09-28 to 2013-10-28 )))))))))))))))))))))))))))))))
.
.
2013-10-28 19:08 . 2013-10-28 19:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-10-28 16:29 . 2013-10-28 17:08 -------- d-----w- C:\FRST
2013-10-26 22:25 . 2013-10-26 22:25 -------- d-----w- c:\users\Pekarik\AppData\Local\Nem's Tools
2013-10-25 12:25 . 2013-10-28 16:10 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3AC60EB2-2B7F-4E4E-8FFF-5ED91BD2F07B}\offreg.dll
2013-10-25 11:38 . 2013-10-14 07:12 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3AC60EB2-2B7F-4E4E-8FFF-5ED91BD2F07B}\mpengine.dll
2013-10-21 14:45 . 2013-10-21 14:45 -------- d-sh--w- c:\programdata\DSS
2013-10-15 05:46 . 2013-10-15 05:46 -------- d-----w- c:\users\Pekarik\AppData\Roaming\Epson
2013-10-14 11:28 . 2013-10-14 11:28 -------- d-----w- c:\program files\Common Files\EPSON
2013-10-14 11:11 . 2013-10-28 16:18 -------- d-----w- c:\program files (x86)\Epson Software
2013-10-09 13:46 . 2013-10-09 13:46 -------- d-----w- c:\programdata\ATI
2013-10-09 13:46 . 2013-10-09 13:46 -------- d-----w- c:\program files (x86)\AMD AVT
2013-10-09 13:17 . 2013-06-25 22:55 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-10-09 13:17 . 2013-07-12 10:41 185344 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2013-10-09 13:17 . 2013-07-12 10:41 100864 ----a-w- c:\windows\system32\drivers\usbcir.sys
2013-10-09 13:17 . 2013-07-03 04:40 42496 ----a-w- c:\windows\system32\drivers\usbscan.sys
2013-10-09 13:17 . 2013-07-03 04:05 76800 ----a-w- c:\windows\system32\drivers\hidclass.sys
2013-10-09 13:17 . 2013-07-03 04:05 32896 ----a-w- c:\windows\system32\drivers\hidparse.sys
2013-10-09 13:17 . 2013-07-04 12:57 259584 ----a-w- c:\windows\system32\WebClnt.dll
2013-10-09 13:17 . 2013-07-04 11:57 205824 ----a-w- c:\windows\SysWow64\WebClnt.dll
2013-10-09 13:17 . 2013-07-04 12:50 102400 ----a-w- c:\windows\system32\davclnt.dll
2013-10-09 13:17 . 2013-07-04 11:51 81920 ----a-w- c:\windows\SysWow64\davclnt.dll
2013-10-09 13:17 . 2013-07-04 10:11 140800 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2013-10-09 13:15 . 2013-09-08 02:30 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-10-09 13:15 . 2013-09-14 01:10 497152 ----a-w- c:\windows\system32\drivers\afd.sys
2013-10-09 13:15 . 2013-09-08 02:27 327168 ----a-w- c:\windows\system32\mswsock.dll
2013-10-09 13:15 . 2013-09-08 02:03 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
2013-10-09 13:15 . 2013-08-28 01:21 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-10-09 13:13 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:13 . 2013-07-20 10:33 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:13 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-10-09 13:13 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2013-10-09 13:13 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-10-09 13:13 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-10-09 13:13 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-10-09 13:13 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-10-09 13:13 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-10-09 13:13 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-10-09 13:13 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-10-02 14:04 . 2013-10-02 14:04 -------- d-----w- c:\users\Pekarik\AppData\Local\LogMeIn
2013-10-02 14:04 . 2013-10-02 14:04 -------- d-----w- c:\programdata\LogMeIn
2013-10-02 13:47 . 2013-10-02 13:47 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2013-09-29 15:28 . 2013-10-07 10:30 83160 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-09-29 13:29 . 2013-09-29 13:29 -------- d-----w- c:\users\Pekarik\AppData\Roaming\Avira
2013-09-29 13:26 . 2013-10-07 10:30 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-09-29 13:26 . 2013-10-07 10:30 132600 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-09-29 13:26 . 2013-10-07 10:30 105856 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-09-29 13:26 . 2013-09-29 13:20 141376 ----a-w- c:\windows\system32\drivers\avfwot.sys
2013-09-29 13:26 . 2013-09-29 13:20 114608 ----a-w- c:\windows\system32\drivers\avfwim.sys
2013-09-29 13:26 . 2013-09-29 13:27 -------- d-----w- c:\programdata\Avira
2013-09-29 13:26 . 2013-09-29 13:26 -------- d-----w- c:\program files (x86)\Avira
2013-09-29 09:01 . 2013-09-29 09:01 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-28 18:04 . 2012-05-26 07:28 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-10-28 18:04 . 2012-05-26 07:18 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-10-28 15:53 . 2012-05-26 07:18 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-10-09 13:54 . 2012-05-23 11:48 80541720 ----a-w- c:\windows\system32\MRT.exe
2013-10-04 15:19 . 2012-05-26 07:18 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-09-26 21:21 . 2013-09-26 21:21 157736 ----a-w- c:\windows\system32\amdhcp64.dll
2013-09-26 21:21 . 2013-09-26 21:21 142304 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2013-09-26 21:21 . 2013-09-26 21:21 78432 ----a-w- c:\windows\system32\atimpc64.dll
2013-09-26 21:21 . 2013-09-26 21:21 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2013-09-26 21:21 . 2013-09-26 21:21 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-09-26 21:21 . 2013-09-26 21:21 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-09-26 21:21 . 2013-09-26 21:21 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2013-09-26 21:21 . 2013-09-26 21:21 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-09-26 21:21 . 2013-09-26 21:21 98496 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-09-26 21:21 . 2013-09-26 21:21 115512 ----a-w- c:\windows\system32\atiu9p64.dll
2013-09-26 21:21 . 2013-09-26 21:21 1311360 ----a-w- c:\windows\system32\aticfx64.dll
2013-09-26 21:21 . 2013-09-26 21:21 1094000 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-09-26 21:21 . 2013-09-26 21:21 9571960 ----a-w- c:\windows\system32\atidxx64.dll
2013-09-26 21:20 . 2013-09-26 21:20 8228328 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-09-26 21:20 . 2013-09-26 21:20 6512312 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-09-26 21:20 . 2013-09-26 21:20 6630232 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-09-26 21:20 . 2013-09-26 21:20 7139552 ----a-w- c:\windows\system32\atiumd6a.dll
2013-09-26 21:20 . 2013-09-26 21:20 7751408 ----a-w- c:\windows\system32\atiumd64.dll
2013-09-26 21:18 . 2013-09-26 21:18 12760576 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-09-26 21:04 . 2013-09-26 21:04 229888 ----a-w- c:\windows\system32\clinfo.exe
2013-09-26 21:04 . 2013-09-26 21:04 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-09-26 21:04 . 2013-09-26 21:04 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-09-26 21:04 . 2013-09-26 21:04 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2013-09-26 21:04 . 2013-09-26 21:04 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-09-26 21:04 . 2013-09-26 21:04 28469248 ----a-w- c:\windows\system32\amdocl64.dll
2013-09-26 21:01 . 2013-09-26 21:01 24008192 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-09-26 20:59 . 2013-09-26 20:59 63488 ----a-w- c:\windows\system32\OpenCL.dll
2013-09-26 20:59 . 2013-09-26 20:59 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-09-26 20:54 . 2013-09-26 20:54 129536 ----a-w- c:\windows\system32\coinst_13.20.16.dll
2013-09-26 20:51 . 2013-09-26 20:51 25828864 ----a-w- c:\windows\system32\atio6axx.dll
2013-09-26 20:45 . 2013-09-26 20:45 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2013-09-26 20:45 . 2013-09-26 20:45 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2013-09-26 20:44 . 2013-09-26 20:44 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-09-26 20:44 . 2013-09-26 20:44 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2013-09-26 20:44 . 2013-09-26 20:44 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-09-26 20:44 . 2013-09-26 20:44 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2013-09-26 20:41 . 2013-09-26 20:41 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-09-26 20:32 . 2013-09-26 20:32 21724160 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-09-26 20:23 . 2013-09-26 20:23 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-09-26 20:23 . 2013-09-26 20:23 31232 ----a-w- c:\windows\system32\atimuixx.dll
2013-09-26 20:23 . 2013-09-26 20:23 580608 ----a-w- c:\windows\system32\atieclxx.exe
2013-09-26 20:22 . 2013-09-26 20:22 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2013-09-26 20:20 . 2013-09-26 20:20 190976 ----a-w- c:\windows\system32\atitmm64.dll
2013-09-26 19:50 . 2013-09-26 19:50 1133568 ----a-w- c:\windows\system32\atiadlxx.dll
2013-09-26 19:50 . 2013-09-26 19:50 819712 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-09-26 19:50 . 2013-09-26 19:50 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2013-09-26 19:50 . 2013-09-26 19:50 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-09-26 19:50 . 2013-09-26 19:50 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2013-09-26 19:50 . 2013-09-26 19:50 100352 ----a-w- c:\windows\system32\atig6txx.dll
2013-09-26 19:49 . 2013-09-26 19:49 96768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-09-26 19:49 . 2013-09-26 19:49 95744 ----a-w- c:\windows\system32\amdave64.dll
2013-09-26 19:49 . 2013-09-26 19:49 619008 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-09-26 19:49 . 2013-09-26 19:49 90112 ----a-w- c:\windows\SysWow64\amdave32.dll
2013-09-26 19:49 . 2013-09-26 19:49 89088 ----a-w- c:\windows\system32\atisamu64.dll
2013-09-26 19:49 . 2013-09-26 19:49 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
2013-09-26 19:46 . 2013-09-26 19:46 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-09-26 15:15 . 2013-09-26 15:15 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2013-09-26 15:10 . 2013-09-26 15:10 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
2013-09-26 11:32 . 2012-08-13 14:49 178448 ----a-w- c:\windows\system32\drivers\kneps.sys
2013-09-26 11:32 . 2012-06-08 09:38 54368 ----a-w- c:\windows\system32\drivers\kltdi.sys
2013-09-22 14:55 . 2013-09-22 14:55 722882 ----a-w- c:\windows\Counter-Strike 1.6 Standalone Uninstaller.exe
2013-09-16 10:21 . 2013-09-16 10:21 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-09-03 12:35 . 2012-05-23 10:47 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-08-29 01:48 . 2013-10-09 13:20 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-08-19 14:41 . 2012-05-23 10:41 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-08-19 14:41 . 2012-05-23 10:41 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-08-19 11:43 . 2013-08-19 11:43 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS
2013-08-19 11:14 . 2013-08-19 11:14 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-08-19 11:14 . 2012-06-06 20:15 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-08-19 11:14 . 2012-06-06 20:15 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-08-11 13:48 . 2013-07-14 15:41 106648 ----a-w- c:\windows\system32\drivers\GRD.sys
2013-08-11 13:15 . 2013-07-14 15:30 65912 ----a-w- c:\windows\system32\drivers\gdwfpcd64.sys
2013-08-11 12:44 . 2013-08-11 12:44 849992 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2013-08-11 12:44 . 2013-08-11 12:44 73800 ----a-w- c:\windows\system32\RtNicProp64.dll
2013-08-11 12:44 . 2012-05-23 10:03 108104 ----a-w- c:\windows\system32\RTNUninst64.dll
2013-08-11 12:43 . 2013-08-11 12:43 916016 ----a-w- c:\windows\system32\SFSS_APO.dll
2013-08-11 12:43 . 2013-08-11 12:43 858032 ----a-w- c:\windows\system32\tossaeapo64.dll
2013-08-11 12:43 . 2013-08-11 12:43 836544 ----a-w- c:\windows\system32\tadefxapo264.dll
2013-08-11 12:43 . 2013-08-11 12:43 834328 ----a-w- c:\windows\system32\slcnt64.dll
2013-08-11 12:43 . 2013-08-11 12:43 81248 ----a-w- c:\windows\system32\SFCOM64.dll
2013-08-11 12:43 . 2013-08-11 12:43 78688 ----a-w- c:\windows\system32\SFAPO64.dll
2013-08-11 12:43 . 2013-08-11 12:43 748376 ----a-w- c:\windows\system32\RTKSMSettingsIPC.dll
2013-08-11 12:43 . 2013-08-11 12:43 65944 ----a-w- c:\windows\system32\tepeqapo64.dll
2013-08-11 12:43 . 2013-08-11 12:43 635160 ----a-w- c:\windows\system32\sltech64.dll
2013-08-11 12:43 . 2013-08-11 12:43 569256 ----a-w- c:\windows\system32\tosasfapo64.dll
2013-08-11 12:43 . 2013-08-11 12:43 528152 ----a-w- c:\windows\system32\sl3apo64.dll
2013-08-11 12:43 . 2013-08-11 12:43 4819224 ----a-w- c:\windows\system32\RTKSMlfx.dll
2013-08-11 12:43 . 2013-08-11 12:43 3693640 ----a-w- c:\windows\system32\RtkAPO64.dll
2013-08-11 12:43 . 2013-08-11 12:43 3425608 ----a-w- c:\windows\system32\drivers\RTKVHD64.sys
2013-08-11 12:43 . 2013-08-11 12:43 331880 ----a-w- c:\windows\system32\RtlCPAPI64.dll
2013-08-11 12:43 . 2013-08-11 12:43 2794056 ----a-w- c:\windows\system32\RtPgEx64.dll
2013-08-11 12:43 . 2013-08-11 12:43 221024 ----a-w- c:\windows\system32\SFNHK64.dll
2013-08-11 12:43 . 2013-08-11 12:43 215320 ----a-w- c:\windows\system32\slprp64.dll
2013-08-11 12:43 . 2013-08-11 12:43 2103040 ----a-w- c:\windows\system32\WavesGUILib64.dll
2013-08-11 12:43 . 2013-08-11 12:43 1662024 ----a-w- c:\windows\system32\RTSnMg64.cpl
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2013-07-01 802136]
"GoogleChromeAutoLaunch_4281F3CB61F060AA6452A3FA375A5C27"="c:\users\Pekarik\AppData\Local\Google\Chrome\Application\chrome.exe" [2013-07-25 846288]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-08-01 3673696]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-05-23 39408]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIJBE.EXE" [2012-02-29 283232]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Turbo Key"="c:\program files (x86)\ASUS\Turbo Key\TurboKey.exe" [2009-11-24 1874432]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2006-11-17 77824]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-10-07 681032]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-09-26 766208]
"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2012-04-02 1058912]
"mssedvbcSrv"="c:\windows\inf\mssedvbc.vbe" [2013-08-27 1558]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-02-15 17146504]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ RegistryDefragBootTime.exe\0autocheck autochk /r \??\F:\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R0 amdkmafd;AMD Audio Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmafd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmafd.sys [x]
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
R1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
R1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
R2 AODDriver4.2.0;AODDriver4.2.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\fxxandroidusb.sys;c:\windows\SYSNATIVE\Drivers\fxxandroidusb.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 EagleX64;EagleX64; [x]
R3 FairplayKD;FairplayKD; [x]
R3 GDPkIcpt;GDPkIcpt;c:\windows\system32\drivers\PktIcpt.sys;c:\windows\SYSNATIVE\drivers\PktIcpt.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 PPJoyBus;Parallel Port Joystick Bus Enumerator;c:\windows\system32\DRIVERS\PPJoyBus64.sys;c:\windows\SYSNATIVE\DRIVERS\PPJoyBus64.sys [x]
R3 PPortJoystick;Parallel Port Joystick Device Driver;c:\windows\system32\DRIVERS\PPortJoy64.sys;c:\windows\SYSNATIVE\DRIVERS\PPortJoy64.sys [x]
R3 qcusbser;Qualcomm USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\FXX\qcusbser.sys;c:\windows\SYSNATIVE\DRIVERS\FXX\qcusbser.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R4 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [x]
R4 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys;c:\windows\SYSNATIVE\DRIVERS\avfwot.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 HssDRV6;Hotspot Shield Routing Driver 6;c:\windows\system32\DRIVERS\hssdrv6.sys;c:\windows\SYSNATIVE\DRIVERS\hssdrv6.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [x]
S2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [x]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [x]
S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 hshld;Hotspot Shield Service;c:\program files (x86)\Hotspot Shield\bin\cmw_srv.exe;c:\program files (x86)\Hotspot Shield\bin\cmw_srv.exe [x]
S2 HssWd;Hotspot Shield Monitoring Service;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys;c:\windows\SYSNATIVE\DRIVERS\avfwim.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2013-10-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-23 10:01]
.
2013-10-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-23 10:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-08-11 13538376]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 8.8.8.8 192.168.1.1
FF - ProfilePath - c:\users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF - ExtSQL: 2013-10-05 18:17; ascsurfingprotection@iobit.com; c:\users\Pekarik\AppData\Roaming\Mozilla\Firefox\Profiles\2p36ltir.default\extensions\ascsurfingprotection@iobit.com
FF - ExtSQL: 2013-10-19 15:37; e-webprint@epson.com; c:\program files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF - ExtSQL: !HIDDEN! 2012-08-30 18:10; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - ORPHANS REMOVED - - - -
.
BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-dBpoweramp Music Converter - c:\windows\system32\SpoonUninstall.exe
AddRemove-PunkBusterSvc - c:\program files (x86)\Origin Games\Battlefield 4 Beta\pbsvc.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64A3D41B-61A5-4834-9A42-FDE1C37D0009}]
@Denied: (Full) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-10-28 20:10:24
ComboFix-quarantined-files.txt 2013-10-28 19:10
ComboFix2.txt 2013-09-30 14:09
.
Pre-Run: 119 823 572 992 bytes free
Post-Run: 119 796 862 976 bytes free
.
- - End Of File - - 80F7B5D022FF7C54D0E02B29B1D516B3
A36C5E4F47E84449FF07ED3517B43A31

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Collect::
c:\windows\inf\mssedvbc.vbe

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore1ce7f584e5e7b65.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder:
c:\program files (x86)\Google\GoogleToolbarNotifier

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
mssedvbcSrv"=-

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{64A3D41B-61A5-4834-9A42-FDE1C37D0009}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.