Do Search, Dalesearch vo Firefoxe

Zpráva

Juldo78 · #1 Příspěvek od **Juldo78** » 25 lis 2013 01:55

Dobry den, syn si instaloval volajake hry z internetu na PC a neskor som objavil, ze vo Firefoxe sa objavuje zvlastna zalozka DO Search a v programoch pribudla nejaka aplikacia dalesearch, ktora sa neda odstranit. Posielam log. Dakujem vopred za pomoc.
J

info.txt logfile of random's system information tool 1.09 2013-11-25 01:41:04

======Uninstall list======

-->MsiExec /X{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{12321490-F573-4815-B6CC-7ABEF18C9AC4}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{12321490-F573-4815-B6CC-7ABEF18C9AC4}\setup.exe" -l0x9 /remove
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{6B997196-1F82-4EB7-A511-57F152259959}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x9 /remove
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9C6429B2-8FE9-4B40-8A83-171BCA4FA288}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9C6429B2-8FE9-4B40-8A83-171BCA4FA288}\setup.exe" -l0x9 /remove
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{AAEF329E-F353-46C9-933D-24A571986093}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{AAEF329E-F353-46C9-933D-24A571986093}\setup.exe" -l0x9 /remove
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9 /remove
Adobe Flash Player 11 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -maintain plugin
Adobe Reader X (10.1.7) MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}
Advanced Audio FX Engine-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x9 /remove
Aerosoft's - Aerosoft Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}\setup.exe" -runfromtemp -l0x0409 -removeonly
Aktualizácia Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-041B-0000-0000000FF1CE} /uninstall {9A8C39B0-D27F-4F81-BE74-2FECF164707E}
Aktualizácia Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-041B-0000-0000000FF1CE} /uninstall {CE23B3DC-18CC-46FC-A309-81D6670F8D3D}
Aktualizácia Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-041B-0000-0000000FF1CE} /uninstall {D6DBF512-87C0-4F6A-8FB9-AC3A389D9DE5}
AlienAutopsy-->C:\Program Files\AlienAutopsy\uninstaller.exe /arp
AlienRespawn - Support Software-->"C:\Program Files (x86)\InstallShield Installation Information\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}\setup.exe" -runfromtemp -l0x0009 -removeonly /z"dsu"
AlienRespawn-->"C:\Program Files (x86)\InstallShield Installation Information\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}\setup.exe" -runfromtemp -l0x0009 -removeonly
Alienware Command Center-->"C:\Program Files (x86)\InstallShield Installation Information\{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}\setup.exe" -runfromtemp -l0x0409 -removeonly
Alienware Command Center-->MsiExec.exe /X{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}
Alienware On-Screen Display-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{0D69462F-99CC-4F8D-942E-666E21CE59F8}
Atheros Bluetooth Suite (64)-->MsiExec.exe /X{230D1595-57DA-4933-8C4E-375797EBB7E1}
Blender-->"C:\Program Files (x86)\Blender Foundation\Blender\uninstall.exe"
Bus Simulator 2008 Demo-->"C:\Program Files (x86)\Bus Simulator 2008 Demo\unins000.exe"
Canon LBP7200C-->C:\Program Files\Canon\PrnUninstall\Canon LBP7200C\CNAC9UND.EXE
CyberLink PowerDVD 9.6-->"C:\Program Files (x86)\InstallShield Installation Information\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\setup.exe" /z-uninstall
CyberLink PowerDVD 9.6-->"C:\Program Files (x86)\InstallShield Installation Information\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\setup.exe" /z-uninstall
Dolní Kounice-->C:\m-r-software\Omsi\Odinstalace DK.exe
DVDFab 8.2.2.6 (25/12/2012) Qt-->"C:\Program Files (x86)\DVDFab 8 Qt\unins000.exe"
EMSC-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{FEF06E73-A519-4510-8CF3-B66041B91D8A}
Euro Truck Simulator 1.3-->C:\Program Files (x86)\Euro Truck Simulator\uninst.exe
European Bus Simulator 2012-->"C:\Program Files\astragon\European Bus Simulator 2012\unins000.exe"
Evolution GT 1.0-->"C:\Program Files (x86)\Black Bean\Evolution GT\unins000.exe"
FlightGear v0.9.10-->"C:\Program Files (x86)\FlightGear\unins000.exe"
Freight Train Simulator-->"C:\Program Files (x86)\GameHitZone.com\FreightTrainSimulator\unins000.exe"
Integrated Webcam Live! Central-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{6B997196-1F82-4EB7-A511-57F152259959}\setup.exe" -l0x9 /remove
Intel(R) Control Center-->C:\Program Files (x86)\Intel\Intel Control Center\uninstaller\SetupICC.exe -uninstall -force -confirm
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Intel(R) Rapid Storage Technology-->C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\Uninstall\setup.exe -uninstall
Intel(R) USB 3.0 eXtensible Host Controller Driver-->C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Uninstall\setup.exe -uninstall
Intel® Trusted Connect Service Client-->MsiExec.exe /I{538B98C3-773F-4F20-9C66-802D104DCBE2}
LEGO Star Wars II-->C:\Program Files (x86)\InstallShield Installation Information\{578FA426-47C0-4A3F-98A4-01ACD26B7556}\setup.exe -runfromtemp -l0x0409
LEGO® Batman™ 2: DC Super Heroes-->MsiExec.exe /X{4E2EA555-3DAE-4BE1-96BF-6A632ACFE8DE}
LEGO® Batman™-->C:\Program Files (x86)\InstallShield Installation Information\{0FFC48C5-C74B-498E-B908-74CB44D30E32}\setup.exe -runfromtemp -l0x0405
LEGO® Star Wars™: The Complete Saga-->C:\Program Files (x86)\InstallShield Installation Information\{D596980D-17BE-4425-B8F0-5640719AADE9}\setup.exe -runfromtemp -l0x0409
Locomania-->"C:\Program Files (x86)\TopCD\Locomania\unins000.exe"
Malá zvěrolékařka-->"C:\TopCD\Malá zvěrolékařka\unins000.exe"
Metro simulátor-->"C:\TopCD\Metro simulátor\unins000.exe"
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft .NET Framework 4 Extended-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /x64 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{8E34682C-8118-31F1-BC4C-98CD9675E1C2}
Microsoft Midtown Madness 2 Trial-->"C:\Program Files (x86)\Microsoft Games\Midtown Madness 2 Trial\UNINSTAL.EXE" /runtemp /addremove
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0016-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0018-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001B-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {664655D8-B9BB-455D-8A58-7EAF7B0B2862}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-002A-041B-1000-0000000FF1CE} /uninstall {8382BA92-20E3-47B6-971B-F673F0492D4E}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-006E-041B-0000-0000000FF1CE} /uninstall {8382BA92-20E3-47B6-971B-F673F0492D4E}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00A1-041B-0000-0000000FF1CE} /uninstall {4754EB3B-ED3D-4095-A2FD-684A3058A4FF}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6E107EB7-8B55-48BF-ACCB-199F86A2CD93}
Microsoft Office Excel MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0016-041B-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Slovak) 2007-->MsiExec.exe /X{90120000-00A1-041B-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Slovak) 2007-->MsiExec.exe /X{90120000-0018-041B-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Hungarian) 2007-->MsiExec.exe /X{90120000-001F-040E-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Slovak) 2007-->MsiExec.exe /X{90120000-002C-041B-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {0B7A4B67-2A38-42B1-9857-662FAB361E08}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {928D7B99-2BEA-49F9-83B8-20FA57860643}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {1FF96026-A04A-4C3E-B50A-BB7022654D0F}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-040E-0000-0000000FF1CE} /uninstall {0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {FDF9A959-241A-4662-A8DE-7DED9C22D160}
Microsoft Office Shared 64-bit MUI (Slovak) 2007-->MsiExec.exe /X{90120000-002A-041B-1000-0000000FF1CE}
Microsoft Office Shared MUI (Slovak) 2007-->MsiExec.exe /X{90120000-006E-041B-0000-0000000FF1CE}
Microsoft Office Word MUI (Slovak) 2007-->MsiExec.exe /X{90120000-001B-041B-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729-->MsiExec.exe /X{820B6609-4C97-3A2B-B644-573B06A0F0CC}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Microsoft XNA Framework Redistributable 3.1-->MsiExec.exe /I{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}
MOTORM4X-->"C:\Program Files (x86)\City Interactive\MOTORM4X Offroad Extreme\uninstall.exe"
Mozilla Firefox 25.0.1 (x86 sk)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nero Audio Pack 1-->MsiExec.exe /X{A7A0BF2E-31CC-49E3-9913-52C503EB969D}
Nero ControlCenter Help (CHM)-->MsiExec.exe /X{C994C746-C6D0-4EBA-B09E-DF7B18381B69}
Nero ControlCenter-->MsiExec.exe /X{ABC88553-8770-4B97-B43E-5A90647A5B63}
Nero Core Components-->MsiExec.exe /X{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
Nero Recode 12-->MsiExec.exe /I{47F2C347-3604-40B1-AB28-27861AA561FA}
Nero Recode Help (CHM)-->MsiExec.exe /X{86847081-B387-4F49-AED1-C9B0A090D66C}
Nero Recode-->MsiExec.exe /X{1943C3BD-4462-4612-92C3-D36DD917C447}
Nero SharedVideoCodecs-->MsiExec.exe /X{2432E589-6256-4513-B0BF-EFA8E325D5F0}
Nero Update-->MsiExec.exe /X{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Norton 360-->C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360\A5E82D02\20.4.0.40\InstStub.exe /X /ARP
Norton Family-->"C:\Program Files (x86)\NortonInstaller\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM\LicenseType\2.9.5.14\InstStub.exe" /X /ARP
NVIDIA 3D Vision Driver 296.16-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.2\NVI2.DLL",UninstallPackage Display.3DVision
NVIDIA Graphics Driver 296.16-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.2\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA HD Audio Driver 1.3.12.0-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.4\NVI2.DLL",UninstallPackage HDAudio.Driver
NVIDIA PhysX System Software 9.12.0213-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.0\NVI2.DLL",UninstallPackage Display.PhysX
NVIDIA PhysX-->MsiExec.exe /X{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
NVIDIA Update 1.7.12-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.2\NVI2.DLL",UninstallPackage Display.Update
OMSI - Der Omnibussimulator-->"C:\Program Files (x86)\InstallShield Installation Information\{9AE850A4-B89D-4875-A159-B1B64D717EFB}\setup.exe" -runfromtemp -l0x0409 -removeonly
OpenAL-->"C:\Program Files (x86)\OpenAL\oalinst.exe" /U
Planet Horse 1.0-->"C:\Program Files (x86)\Planet Horse\unins000.exe"
Popeláři-->"C:\TopCD\Popeláři\unins000.exe"
Public Transport Simulator DEMO-->C:\Program Files (x86)\Public Transport Simulator DEMO\Uninstal.exe
Qualcomm Atheros Killer Network Manager-->"C:\Program Files (x86)\InstallShield Installation Information\{DF446558-ADF7-4884-9B2D-281979CCE71F}\setup.exe" -runfromtemp -l0x0409 -removeonly
Qualcomm Atheros Killer Network Manager-->MsiExec.exe /I{DF446558-ADF7-4884-9B2D-281979CCE71F}
Rail Simulator-->"C:\Program Files (x86)\InstallShield Installation Information\{0824EE6D-137F-4B83-9628-8E7B000BEBA6}\_is2008.psi" -runfromtemp -l0x0409 -removeonly
Rail Simulator-->MsiExec.exe /X{0824EE6D-137F-4B83-9628-8E7B000BEBA6}
SCANIA Truck Driving Simulator 1.0.0-->C:\Program Files (x86)\SCANIA Truck Driving Simulator\uninst.exe
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E720AD01-93D5-3E8E-BB8D-E4EF5AF4E5DD} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {BCD37DCB-F479-3D4D-A90E-A0F7575549C4} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FF811680-AECE-3F35-A98C-1B84B6E09168} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {6AF6C62E-4E3D-33BF-A591-9E4D53BDF22F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DA36C2E5-6B34-3A6A-9C0A-7D1CC1C5A768} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7B82A51A-768B-3A7B-ADFA-F777097A8079} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E40184A4-4A61-3D2E-9035-CB6E1E610E07} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4736E989-32D9-3B91-90D7-C68848E118CA} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {BA941BCD-BC45-3D64-AB89-0F737907515C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F1696E2F-4803-362F-A756-65B363483FE6} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8E6848A1-B790-34FE-921A-A5319258E254} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E7F6B64E-E11F-3D1C-868D-3F1443DA5A15} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {08BB8EA1-3BA7-3AD5-8A07-22A5EC1F704E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {880A0A36-244B-3C7A-8D6B-56E694CE7883} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9D8496AE-4030-3E92-B44E-4F81051E6C85} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {9D621E6E-E010-3C80-A055-135891134750} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {BA941BCD-BC45-3D64-AB89-0F737907515C} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Extended
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {D33B9EF5-3801-496A-A2D6-B7F4BE972D75}
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B145DBBB-7778-4A5D-9D2B-DA6569F02391}
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E34960DB-2A93-45DB-A208-02650F7AB09C}
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B7727B4D-5EA3-4C11-9D30-15E47616DCAF}
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {293FB6BE-D3EB-4162-B522-F9108040B9FE}
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {2B3C041A-A7F2-4A24-968D-4BEB6A123D15}
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {EA575F57-C5D1-4B5A-B9F9-F16EEBC6B58C}
Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E949D8B9-24FD-4AB7-B427-FC42AA8BB2D9}
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {79850906-6D2B-4061-8EAF-EAC84173DEC5}
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition -->msiexec /package {90120000-006E-041B-0000-0000000FF1CE} /uninstall {EB2C7999-DC02-4428-A0CC-761D987E5DF5}
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8907F32C-DF89-4C2F-AEDE-0DB4B65451C0}
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {319FC809-3841-4739-A25F-FDBADF073697}
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {4CCE0378-386F-4DC2-9CC1-A3710C77057D}
Security Update for Microsoft Office 2007 suites (KB2827329) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {81352C19-97CF-4365-8EAE-205BCC9A2DC8}
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {686630EC-8033-4031-85C5-D8E5CD62A958}
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8F311D6C-D8DD-4C32-9457-1A129CABD1A5}
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {AEA16A27-0B97-4670-818F-A98D06EC0A6F}
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}
Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition -->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {2C57A81A-7534-4DEE-A450-7FBE86F3200D}
Schwebebahn-Simulator 2013 Demo-->"C:\Program Files (x86)\rondomedia\Schwebebahn-Simulator 2013 Demo\unins000.exe"
Skype™ 5.10-->MsiExec.exe /X{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
Sound Blaster Recon3Di Extras-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{C45E715E-442E-4D82-BD46-A08A0870957C}\setup.exe" -l0x9 /remove
Sound Blaster Recon3Di-->MsiExec.exe /X{C8AAFCDC-CD3A-40AD-9FA9-07FB70F08224}
ST Microelectronics 3 Axis Digital Accelerometer Solution-->"C:\Program Files (x86)\InstallShield Installation Information\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}\setup.exe" -runfromtemp -l0x0409 -removeonly
Synaptics Pointing Device Driver-->rundll32.exe "%ProgramFiles%\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Traktor Simulátor-->"C:\Program Files (x86)\TopCD\Traktor Simulátor\unins000.exe"
TRS2006 Demo-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BAA6A5C5-A8AA-47D3-9EBC-1D7638291C09}\setup.exe" -l0x9
TuneUp Utilities 2012-->C:\Program Files (x86)\TuneUp Utilities 2012\TUInstallHelper.exe --Trigger-Uninstall
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8C286FD4-AB38-37A6-BC8A-6F16AFE9AB1F} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {EFD73366-C059-3D04-9848-59072A15DB53} /parameterfolder Client
Update for Microsoft .NET Framework 4 Extended (KB2468871)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2533523)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2600217)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2836939)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {8C286FD4-AB38-37A6-BC8A-6F16AFE9AB1F} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2836939v3)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {EFD73366-C059-3D04-9848-59072A15DB53} /parameterfolder Extended
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {A024FC7B-77DE-45DE-A058-1C049A17BFB3}
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {CB68A5B0-3508-4193-AEB9-AF636DAECE0F}
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CB68A5B0-3508-4193-AEB9-AF636DAECE0F}
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}
VLC media player 2.0.5-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Vysokozdvižný vozík-->"C:\TopCD\Vysokozdvižný vozík\unins000.exe"
WinRAR 4.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
Winx Club: Cesta Kolem Světa-->"C:\Program Files (x86)\InstallShield Installation Information\{995DC03E-1302-403C-AC5F-6004C8C50EA5}\setup.exe" -runfromtemp -l0x0405 -removeonly
Zataženo, občas trakaře(TM)-->"C:\Program Files (x86)\InstallShield Installation Information\{B76BE192-7AD9-4A02-90A8-E3DA068D2F00}\setup.exe" -runfromtemp -l0x0005 -removeonly

======Hosts File======

127.0.0.1 localhost

=====Security event log=====

Computer Name: Alien
Event Code: 4672
Message: Special privileges assigned to new logon.

Subject:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7

Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 21337
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131125000043.190833-000
Event Type: Audit Success
User:

Computer Name: Alien
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-5-18
Account Name: ALIEN$
Account Domain: WORKGROUP
Logon ID: 0x3e7

Logon Type: 5

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x32c
Process Name: C:\Windows\System32\services.exe

Network Information:
Workstation Name:
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 21336
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131125000043.190833-000
Event Type: Audit Success
User:

Computer Name: Alien
Event Code: 4672
Message: Special privileges assigned to new logon.

Subject:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7

Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 21335
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131124234458.579978-000
Event Type: Audit Success
User:

Computer Name: Alien
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-5-18
Account Name: ALIEN$
Account Domain: WORKGROUP
Logon ID: 0x3e7

Logon Type: 5

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x32c
Process Name: C:\Windows\System32\services.exe

Network Information:
Workstation Name:
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 21334
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131124234458.579978-000
Event Type: Audit Success
User:

Computer Name: Alien
Event Code: 1102
Message: The audit log was cleared.
Subject:
Security ID: S-1-5-21-4062297882-3801681164-3370311771-1001
Account Name: Tatik
Domain Name: Alien
Logon ID: 0x29a8b3
Record Number: 21333
Source Name: Microsoft-Windows-Eventlog
Time Written: 20131124225717.252064-000
Event Type: Audit Success
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=8
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=3a09
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 25 lis 2013 06:52

Zdravim

Ty hry byly zakoupene nebo dostaly nejakou "medicinu" v podobe cracku\keygenu??

Poprosim o druhy log z RSIT s nauvem log.txt, je ulozen v c:\rsit

Stahnete na plochu CKScanner

Spustte a kliknete na Search for files
Po dokonceni skenu kliknete na Save List to File a nasledne OK
Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte

Juldo78 · #3 Příspěvek od **Juldo78** » 25 lis 2013 12:56

Dakujem, druhy "log" budem vediet zaslat po prichode domov (podvecer). Co sa tyka hier, jednalo sa konkretne o same "freeware" alebo "demo". Mam pocit, ze to stiahol s nejakym "VirtualBus". Simulatory, ktore si odskusa, mame kupene

...ma 9 rokov, cize mediciny este chvalabohu neobjavil
Co sa tyka vyskytu, zobrazuje sa len pod jeho prihlasovacim uctom (nie je admin). Pod adminom to neviem najst. Uz som uvazoval, aj vymazat jeho ucet a zalozit odznova.

J.

#4 Příspěvek od **vyosek** » 25 lis 2013 14:04

V pohode, zkusime to polecit...

Ja tu budu poradne tez az podvecer\vecer

Juldo78 · #5 Příspěvek od **Juldo78** » 25 lis 2013 19:12

Posielam log

Logfile of random's system information tool 1.09 (written by random/random)
Run by Tatik at 2013-11-25 01:40:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 293 GB (63%) free of 468 GB
Total RAM: 16251 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:41:03, on 25. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\NF.exe
C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe
C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
C:\Windows\system32\spool\DRIVERS\x64\3\CNAC9SWK.EXE
C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe
C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
C:\Program Files (x86)\AlienRespawn\TOASTER.EXE
C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
C:\Program Files\Alienware\Command Center\AlienFusionController.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Tatik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.com/index.jhtml?n=77 ... 3godlUkAQA
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Norton Family BHO - {B8E07826-0971-4f16-B133-047B88034E89} - C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\coIEPlg.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll
O3 - Toolbar: (no name) - {81F88FCF-3CB0-4D17-84E1-9A6CEDEE192A} - (no file)
O4 - HKLM\..\Run: [Sound Blaster Recon3Di Control Panel] "c:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe" /r
O4 - HKLM\..\Run: [AlienwareOn-ScreenDisplay] C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Integrated Webcam Live! Central] "C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe" /mode2
O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\RunOnce: [*TampMon] C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\tampmon.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Qualcomm Atheros Killer Network Manager.lnk = C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Alienware Fusion Service (AlienFusionService) - Alienware - C:\Program Files\Alienware\Command Center\AlienFusionService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: CyberLink Product - 2012/09/07 06:06:12 (CLKMSVC10_9EC60124) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Sound Core3D Service (CtHdaSvc) - Creative Technology Ltd - C:\Windows\sysWow64\CtHdaSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Family (NSM) - Symantec Corporation - C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\NF.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service - Unknown owner - C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\AlienRespawn\sftservice.EXE
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13288 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\Windows\sysWow64\CtHdaSvc.exe
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe" /s "N360" /m "C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\NF.exe" /s "NSM" /m "C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\diMaster.dll" /prefetch:1
"C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe"
"C:\Program Files (x86)\AlienRespawn\sftservice.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Alienware\Command Center\AlienFusionService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session
"taskhost.exe"
"C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe" /c /a /s UserSession
"C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\NF.exe" /c /a /s UserSession
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE"
"C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe" -minimized
"C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe" /r
"C:\Program Files\Alienware\Command Center\AWCCServiceController.exe"
C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
C:\Windows\system32\spool\DRIVERS\x64\3\CNAC9SWK.EXE !hide Canon LBP7200C
"C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe" /r /appid=Sound Blaster Recon3Di Control Panel /pdtid=2
"C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe" /mode2
"C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\Mobogenie\DaemonProcess.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\AlienRespawn\TOASTER.EXE" C:\Users\Tatik
"C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe"
"C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe"
"C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe" 66124
"C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe" 66124
\??\C:\Windows\system32\conhost.exe "-4706238837716374731409870580914387698-342579241-11167904871418218927533500303
\??\C:\Windows\system32\conhost.exe "5796850481247928783-966295429-647875771403203337-333329089-1116482429-340502569
"C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe" /TUStart /pid:2424
C:\Windows\explorer.exe
"C:\Program Files\Alienware\Command Center\AlienFusionController.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
taskeng.exe {DCC64F0D-17E6-46F3-953D-14FA028E763B}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Users\Tatik\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\d7irfjo5.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-09 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-02-13 51872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8E07826-0971-4f16-B133-047B88034E89}]
Norton Family BHO - C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\coIEPlg.dll [2013-10-15 526672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776]
{81F88FCF-3CB0-4D17-84E1-9A6CEDEE192A}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-03-16 2890000]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-02-18 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-02-18 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-02-18 440600]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-02-13 1020064]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2012-02-13 800416]
"Command Center Controllers"=C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [2012-06-15 12656]
"CNAP2 Launcher"=C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [2010-10-15 226784]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Recon3Di Control Panel"=c:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [2011-12-22 880640]
"AlienwareOn-ScreenDisplay"=C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [2011-11-04 1546096]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-11-30 284440]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-17 291608]
"Integrated Webcam Live! Central"=C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe [2012-03-06 577024]
"RemoteControl9"=C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [2010-10-01 87336]
"PDVD9LanguageShortcut"=C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [2010-09-18 50472]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [2012-03-27 76872]
"mobilegeni daemon"=C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [2013-09-10 646336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"*TampMon"=C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\tampmon.exe [2013-10-26 61264]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Qualcomm Atheros Killer Network Manager.lnk - C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-14 430080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-25 01:40:57 ----D---- C:\rsit
2013-11-25 01:40:57 ----D---- C:\Program Files\trend micro
2013-11-24 23:40:51 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-24 23:00:35 ----D---- C:\Windows\ERUNT
2013-11-24 22:59:29 ----A---- C:\sc-cleaner.txt
2013-11-24 22:06:21 ----RA---- C:\Windows\system32\drivers\SymIMV.sys
2013-11-24 20:14:37 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-11-24 19:57:32 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2013-11-24 19:57:32 ----A---- C:\Windows\system32\uxtuneup.dll
2013-11-24 19:56:22 ----A---- C:\Windows\system32\TURegOpt.exe
2013-11-24 19:56:21 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2013-11-24 19:56:21 ----A---- C:\Windows\system32\authuitu.dll
2013-11-24 19:56:12 ----D---- C:\Program Files (x86)\TuneUp Utilities 2012
2013-11-24 19:39:45 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-11-16 16:37:46 ----D---- C:\Users\Tatik\AppData\Roaming\Blender Foundation
2013-11-16 16:37:44 ----D---- C:\Program Files (x86)\Blender Foundation
2013-11-14 18:45:53 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2013-11-14 17:37:24 ----D---- C:\m-r-software
2013-11-13 07:29:20 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-11-13 07:29:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-11-13 07:29:20 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-11-13 07:29:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-11-13 07:29:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-11-13 07:29:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-11-13 07:29:20 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 07:29:20 ----A---- C:\Windows\system32\ieui.dll
2013-11-13 07:29:20 ----A---- C:\Windows\system32\iesysprep.dll
2013-11-13 07:29:20 ----A---- C:\Windows\system32\iesetup.dll
2013-11-13 07:29:20 ----A---- C:\Windows\system32\iernonce.dll
2013-11-13 07:29:20 ----A---- C:\Windows\system32\ie4uinit.exe
2013-11-13 07:29:19 ----A---- C:\Windows\system32\iertutil.dll
2013-11-13 07:29:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-11-13 07:29:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-11-13 07:29:18 ----A---- C:\Windows\system32\msfeeds.dll
2013-11-13 07:29:18 ----A---- C:\Windows\system32\jscript.dll
2013-11-13 07:29:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-11-13 07:29:17 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-11-13 07:29:17 ----A---- C:\Windows\system32\jscript9.dll
2013-11-13 07:29:16 ----A---- C:\Windows\system32\urlmon.dll
2013-11-13 07:29:15 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-11-13 07:29:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-11-13 07:29:15 ----A---- C:\Windows\system32\wininet.dll
2013-11-13 07:29:15 ----A---- C:\Windows\system32\jsproxy.dll
2013-11-13 07:29:14 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-11-13 07:29:13 ----A---- C:\Windows\system32\mshtml.dll
2013-11-13 07:29:13 ----A---- C:\Windows\system32\ieframe.dll
2013-11-13 07:29:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-11-13 06:50:45 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-11-13 06:50:45 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-11-13 06:50:45 ----A---- C:\Windows\system32\nshwfp.dll
2013-11-13 06:50:45 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-13 06:50:45 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 06:48:40 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-11-13 06:48:40 ----A---- C:\Windows\system32\crypt32.dll
2013-11-13 06:48:18 ----A---- C:\Windows\system32\drivers\afd.sys
2013-11-13 06:47:52 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-11-13 06:47:52 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-11-13 06:47:52 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-11-13 06:47:52 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 06:47:52 ----A---- C:\Windows\system32\credui.dll
2013-11-13 06:47:52 ----A---- C:\Windows\system32\authui.dll
2013-11-13 06:47:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-11-13 06:47:48 ----A---- C:\Windows\system32\schannel.dll
2013-11-13 06:47:48 ----A---- C:\Windows\system32\drivers\cng.sys
2013-11-13 06:47:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-11-13 06:47:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-11-13 06:47:47 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-11-13 06:47:47 ----A---- C:\Windows\system32\sspisrv.dll
2013-11-13 06:47:47 ----A---- C:\Windows\system32\sspicli.dll
2013-11-13 06:47:47 ----A---- C:\Windows\system32\secur32.dll
2013-11-13 06:47:47 ----A---- C:\Windows\system32\ncrypt.dll
2013-11-13 06:47:47 ----A---- C:\Windows\system32\lsass.exe
2013-11-13 06:47:47 ----A---- C:\Windows\system32\lsasrv.dll
2013-11-13 06:47:47 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-11-13 06:47:47 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-11-13 06:46:59 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-11-13 06:46:59 ----A---- C:\Windows\system32\gdi32.dll
2013-11-03 17:14:26 ----A---- C:\Windows\system32\CNAP2LMD.DLL
2013-11-03 17:14:26 ----A---- C:\Windows\system32\CNAP1NSD.DLL
2013-11-03 17:14:26 ----A---- C:\Windows\system32\CNAC9EMD.DLL
2013-11-03 17:13:31 ----D---- C:\Program Files\Canon
2013-11-03 09:43:54 ----D---- C:\Program Files (x86)\Microsoft Works
2013-11-03 09:43:42 ----D---- C:\Windows\PCHEALTH
2013-11-03 09:41:39 ----D---- C:\Program Files\Microsoft Office
2013-11-03 09:41:11 ----D---- C:\ProgramData\Microsoft Help
2013-11-03 09:41:11 ----D---- C:\Program Files (x86)\Microsoft Office
2013-11-03 09:40:46 ----RD---- C:\MSOCache

======List of files/folders modified in the last 1 month======

2013-11-25 01:40:58 ----D---- C:\Windows\Temp
2013-11-25 01:40:57 ----RD---- C:\Program Files
2013-11-25 01:00:49 ----SHD---- C:\System Volume Information
2013-11-25 00:57:44 ----D---- C:\Windows\system32\drivers
2013-11-25 00:55:13 ----D---- C:\Windows\system32\config
2013-11-24 23:58:30 ----D---- C:\Windows\System32
2013-11-24 23:58:30 ----D---- C:\Windows\inf
2013-11-24 23:58:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-24 23:54:20 ----D---- C:\Program Files (x86)\AlienRespawn
2013-11-24 23:54:19 ----D---- C:\ProgramData\Bigfoot Networks
2013-11-24 23:53:21 ----A---- C:\Windows\SYSWOW64\log.txt
2013-11-24 23:51:21 ----D---- C:\Windows\system32\Tasks
2013-11-24 23:51:14 ----D---- C:\ProgramData\NVIDIA
2013-11-24 23:41:20 ----D---- C:\Users\Tatik\AppData\Roaming\Mozilla
2013-11-24 23:40:51 ----RD---- C:\Program Files (x86)
2013-11-24 23:18:40 ----D---- C:\Windows
2013-11-24 23:04:31 ----D---- C:\ProgramData
2013-11-24 22:28:40 ----D---- C:\Windows\Prefetch
2013-11-24 22:16:06 ----D---- C:\ProgramData\Norton
2013-11-24 22:06:20 ----D---- C:\Windows\system32\DriverStore
2013-11-24 22:06:20 ----D---- C:\Windows\system32\catroot
2013-11-24 22:05:45 ----D---- C:\Windows\SysWOW64
2013-11-24 21:52:59 ----D---- C:\Windows\system32\catroot2
2013-11-24 19:57:34 ----SHD---- C:\Windows\Installer
2013-11-24 19:56:16 ----D---- C:\Users\Tatik\AppData\Roaming\TuneUp Software
2013-11-24 19:56:16 ----D---- C:\ProgramData\TuneUp Software
2013-11-17 16:53:56 ----D---- C:\Program Files\Microsoft Games
2013-11-16 04:14:28 ----D---- C:\Windows\rescache
2013-11-14 17:37:23 ----D---- C:\Program Files (x86)\InstallShield Installation Information
2013-11-14 17:28:42 ----D---- C:\Windows\winsxs
2013-11-14 17:27:32 ----D---- C:\Program Files (x86)\Internet Explorer
2013-11-14 17:27:31 ----D---- C:\Program Files\Internet Explorer
2013-11-14 17:27:30 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-11-14 17:27:30 ----D---- C:\Windows\SYSWOW64\en-US
2013-11-14 17:27:30 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-11-14 17:27:30 ----D---- C:\Windows\system32\sk-SK
2013-11-14 17:27:30 ----D---- C:\Windows\system32\en-US
2013-11-14 17:27:30 ----D---- C:\Windows\system32\cs-CZ
2013-11-13 07:28:45 ----D---- C:\Windows\system32\MRT
2013-11-13 07:27:31 ----A---- C:\Windows\system32\MRT.exe
2013-11-05 19:35:40 ----D---- C:\Users\Tatik\AppData\Roaming\flightgear.org
2013-11-04 06:56:48 ----RSD---- C:\Windows\assembly
2013-11-04 06:56:02 ----RSD---- C:\Windows\Fonts
2013-11-03 09:46:59 ----SD---- C:\Users\Tatik\AppData\Roaming\Microsoft
2013-11-03 09:43:46 ----D---- C:\Program Files (x86)\Common Files
2013-11-03 09:43:42 ----D---- C:\ProgramData\Microsoft
2013-11-03 09:43:42 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-11-03 09:43:26 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-11-03 09:41:35 ----D---- C:\Windows\ShellNew
2013-10-30 07:45:28 ----D---- C:\Windows\system32\drivers\NSMx64
2013-10-27 19:12:35 ----D---- C:\TopCD

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 EMSC;COMPAL Embedded System Control; C:\Windows\system32\DRIVERS\EMSC.SYS [2009-06-26 16752]
R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2011-12-29 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-27 16152]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-03-04 28992]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdcfltn.sys [2011-07-16 22128]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS [2013-05-21 493656]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360x64\1404000.028\SYMEFA64.SYS [2013-05-23 1139800]
R1 BfLwf;Bigfoot Networks Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys [2012-02-24 75880]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20131114.001\BHDrvx64.sys [2013-10-23 1524824]
R1 ccSet_N360;Norton 360 Settings Manager; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [2013-04-16 169048]
R1 ccSet_NSM;Norton Family Settings Manager; C:\Windows\system32\drivers\NSMx64\0209050.00E\ccSetx64.sys [2013-09-27 162392]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-11-21 484952]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20131122.001\IDSvia64.sys [2013-10-30 521816]
R1 nvkflt;nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [2012-03-04 249152]
R1 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [2013-05-16 796760]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [2013-03-05 36952]
R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\Windows\system32\DRIVERS\SymIMv.sys [2013-03-05 43680]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [2013-03-05 224416]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [2013-04-25 433752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 Ak27x64;Killer Wireless-N 1102 device driver; C:\Windows\system32\DRIVERS\Ak27x64.sys [2012-02-24 3571816]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2012-02-13 36000]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2012-02-13 339616]
R3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2012-02-13 110752]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2012-02-13 30368]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2012-02-13 167584]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2012-02-13 68256]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2012-02-13 280992]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2012-02-13 550560]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2012-09-07 80384]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2011-06-16 176000]
R3 cthda;Sound Core3D(CtHda.sys); C:\Windows\system32\drivers\cthda.sys [2012-03-28 1052760]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-11-21 137648]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-14 14692224]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-27 356120]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-27 787736]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-09-19 108656]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-02-01 60184]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131123.001\ENG64.SYS [2013-10-29 126040]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131123.001\EX64.SYS [2013-10-29 2099288]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2012-01-31 340584]
R3 ST_ACCEL;STMicroelectronics Accelerometer Service; C:\Windows\system32\DRIVERS\ST_ACCEL.sys [2012-01-03 67184]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-09-18 177752]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-03-16 426768]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2011-10-31 11856]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 netvsc;netvsc; C:\Windows\system32\DRIVERS\netvsc60.sys [2010-11-21 168448]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-01-17 188224]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\Windows\system32\drivers\nvstusb.sys [2012-03-05 398656]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 SYMRDR_{78CA3BF0-9C3B-40e1-B46D-38C877EF059A};Symantec Redirector - Norton Family; C:\Windows\System32\Drivers\NSMx64\0209050.00E\SymRdrS.SYS [2013-09-24 245848]
S3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver; C:\Windows\system32\drivers\Synth3dVsc.sys [2010-11-21 88960]
S3 SynthVid;SynthVid; C:\Windows\system32\DRIVERS\VMBusVideoM.sys [2010-11-21 22528]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;Remote Deskotop USB Hub; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-09 65640]
R2 AlienFusionService;Alienware Fusion Service; C:\Program Files\Alienware\Command Center\AlienFusionService.exe [2012-06-15 14704]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-02-13 106144]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CTAudSvcService;Creative Audio Service; c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2011-10-20 423424]
R2 CtHdaSvc;Sound Core3D Service; C:\Windows\sysWow64\CtHdaSvc.exe [2012-03-28 122880]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-30 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-01-11 627936]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-01 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-02-01 277784]
R2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-05-21 144368]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
R2 NSM;Norton Family; C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\NF.exe [2013-10-26 570264]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-03-04 889664]
R2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [2012-02-24 492032]
R2 SftService;SoftThinks Agent Service; C:\Program Files (x86)\AlienRespawn\sftservice.EXE [2012-02-16 1695040]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-03-04 382272]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2013-10-22 2144056]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-01 363800]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 CLKMSVC10_9EC60124;CyberLink Product - 2012/09/07 06:06:12; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2012-03-27 242448]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-04 2458944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-12 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-19 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-18 276248]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2012-09-07 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-09-07 79360]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-13 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Juldo78 · #6 Příspěvek od **Juldo78** » 25 lis 2013 19:30

posielam este ckfiles:

CKScanner 2.4 - Additional Security Risks - These are not necessarily bad
c:\program files (x86)\cyberlink\powerdvd9\navfilter\kmsvc.exe
scanner sequence 3.CP.11.DSAPTZ
----- EOF -----

hmm... ten Cyberlink - power DVD je ale original SW k NTB, ktory prehrava BR disky...

#7 Příspěvek od **vyosek** » 25 lis 2013 20:05

A ta nejvyssi licence Ultimate je legalni, ta neni zrovna neni bezna pro domaci uziavtele

Juldo78 · #8 Příspěvek od **Juldo78** » 25 lis 2013 20:37

...bola sucastou NTB...suvisi to nejako s problemom?

#9 Příspěvek od **vyosek** » 25 lis 2013 20:38

Jen jsem se zeptal, tot vse

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Juldo78 · #10 Příspěvek od **Juldo78** » 25 lis 2013 20:50

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x64
Ran by Tatik on po 25. 11. 2013 at 20:47:31,34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 25. 11. 2013 at 20:49:57,21
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Juldo78 · #11 Příspěvek od **Juldo78** » 25 lis 2013 20:59

Este AdwCleaner:

# AdwCleaner v3.013 - Report created 25/11/2013 at 20:54:21
# Updated 24/11/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Tatik - ALIEN
# Running from : C:\Users\Tatik\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\ExpressFiles
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\Users\Tatik\AppData\Local\DProtect
Folder Deleted : C:\Users\Tatik\AppData\Roaming\ExpressFiles
Folder Deleted : C:\Users\Tatik\AppData\Roaming\SimilarSites
Folder Deleted : C:\Users\Lukasko\AppData\Local\iLivid
Folder Deleted : C:\Users\Lucka\AppData\Local\iLivid
Folder Deleted : C:\Users\Lucka\AppData\Local\Softonic
Folder Deleted : C:\Users\Lucka\AppData\Local\torch
Folder Deleted : C:\Users\Lucka\AppData\LocalLow\Delta
Folder Deleted : C:\Users\Lucka\AppData\Roaming\ExpressFiles
Folder Deleted : C:\Users\Lucka\AppData\Roaming\goforfiles
Folder Deleted : C:\Users\Lucka\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic
Folder Deleted : C:\Users\Tatik\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf
Folder Deleted : C:\Users\Tatik\AppData\Local\Google\Chrome\User Data\Default\Extensions\olakgnkoldmagdblaalodobkmeokmgjj
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
File Deleted : C:\Users\Lukasko\AppData\Roaming\Mozilla\Firefox\Profiles\gptt8ffs.default\bprotector_extensions.sqlite
File Deleted : C:\Users\Lukasko\AppData\Roaming\Mozilla\Firefox\Profiles\gptt8ffs.default\bprotector_prefs.js
File Deleted : C:\Users\Lukasko\AppData\Roaming\Mozilla\Firefox\Profiles\gptt8ffs.default\searchplugins\metaCrawler.xml
File Deleted : C:\Users\Lukasko\AppData\Roaming\Mozilla\Firefox\Profiles\gptt8ffs.default\user.js
File Deleted : C:\Windows\System32\Tasks\Express FilesUpdate
File Deleted : C:\Windows\System32\Tasks\GoforFilesUpdate

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\5e6d8dfb369eb41
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{81F88FCF-3CB0-4D17-84E1-9A6CEDEE192A}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : HKCU\Software\ExpressFiles
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\Software\dosearchessoftware
Key Deleted : HKLM\Software\ExpressFiles

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16736

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v25.0.1 (sk)

[ File : C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\d7irfjo5.default\prefs.js ]

[ File : C:\Users\Lukasko\AppData\Roaming\Mozilla\Firefox\Profiles\gptt8ffs.default\prefs.js ]

Line Deleted : user_pref("browser.newtab.url", "hxxp://www.dosearches.com/?utm_source=b&utm_me ... 1379869934");
Line Deleted : user_pref("browser.search.order.1", "metaCrawler");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCzztA0Czy0CzzyB0EyBtDtN0D0Tzu0CyCtBtBtN1L2XzutBtFtBtFyCtFtCtDzyyBtN1L1Czu&cr=1812117[...]
Line Deleted : user_pref("extensions.enabledAddons", "%7B60364604-8b4c-42f4-a2ca-a76ca7b61b37%7D:7.0,ffxtlbr%40metacrawler.com:1.6.0,%7B6D5C8FC4-DE46-41bf-9092-93F0F78E9115%7D:2.9.5.14,%7B972ce4c6-7e08-4474-a285-320[...]
Line Deleted : user_pref("extensions.irmcrawler.aflt", "ironmc2");
Line Deleted : user_pref("extensions.irmcrawler.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCzztA0Czy0CzzyB0EyBtDtN0D0Tzu0CyCtBtBtN1L2XzutBtFtBtFyCtFtCtDzyyBtN1L1Czu");
Line Deleted : user_pref("extensions.irmcrawler.cr", "1812117665");
Line Deleted : user_pref("extensions.irmcrawler.firstrun", false);
Line Deleted : user_pref("extensions.irmcrawler.instlRef", "");
Line Deleted : user_pref("extensions.metacrawler.aflt", "ironmc2");
Line Deleted : user_pref("extensions.metacrawler.appId", "{0FA5C13C-4EDA-488A-A8EB-B84CD7395A79}");
Line Deleted : user_pref("extensions.metacrawler.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCzztA0Czy0CzzyB0EyBtDtN0D0Tzu0CyCtBtBtN1L2XzutBtFtBtFyCtFtCtDzyyBtN1L1Czu");
Line Deleted : user_pref("extensions.metacrawler.cntry", "SK");
Line Deleted : user_pref("extensions.metacrawler.cr", "1812117665");
Line Deleted : user_pref("extensions.metacrawler.dfltLng", "");
Line Deleted : user_pref("extensions.metacrawler.dfltSrch", true);
Line Deleted : user_pref("extensions.metacrawler.dnsErr", true);
Line Deleted : user_pref("extensions.metacrawler.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,182856[...]
Line Deleted : user_pref("extensions.metacrawler.dpk_blck", "true");
Line Deleted : user_pref("extensions.metacrawler.dspFFXOld", "dosearches");
Line Deleted : user_pref("extensions.metacrawler.excTlbr", false);
Line Deleted : user_pref("extensions.metacrawler.hdrMd5", "30AE2D9D0945394675F7D383D557A956");
Line Deleted : user_pref("extensions.metacrawler.hmpg", true);
Line Deleted : user_pref("extensions.metacrawler.hmpgUrl", "hxxp://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCzztA0Czy0CzzyB0EyBtDtN0D0Tzu0CyCtBtBtN1L2XzutBtFtBtFyCtFtCtDzyyBtN1L1Czu&cr=1[...]
Line Deleted : user_pref("extensions.metacrawler.hpFFXOld", "hxxp://www.dosearches.com/?utm_source=b&utm_me ... XXXXX&ts=1[...]
Line Deleted : user_pref("extensions.metacrawler.id", "E006E683C9C87E70");
Line Deleted : user_pref("extensions.metacrawler.instlDay", "15961");
Line Deleted : user_pref("extensions.metacrawler.instlRef", "");
Line Deleted : user_pref("extensions.metacrawler.lastB", "hxxp://www.dalesearch.com/?babsrc=HP_ss&mntrId ... 0&tsp=5004");
Line Deleted : user_pref("extensions.metacrawler.lastVrsnTs", "");
Line Deleted : user_pref("extensions.metacrawler.newTabUrl", "hxxp://i.search.metacrawler.com/?f=2&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCzztA0Czy0CzzyB0EyBtDtN0D0Tzu0CyCtBtBtN1L2XzutBtFtBtFyCtFtCtDzyyBtN1L1Czu&cr[...]
Line Deleted : user_pref("extensions.metacrawler.prdct", "metacrawler");
Line Deleted : user_pref("extensions.metacrawler.prtnrId", "metaCrawler");
Line Deleted : user_pref("extensions.metacrawler.sg", "{smplGrp}");
Line Deleted : user_pref("extensions.metacrawler.srchPrvdr", "metaCrawler");
Line Deleted : user_pref("extensions.metacrawler.tlbrId", "base");
Line Deleted : user_pref("extensions.metacrawler.tlbrSrchUrl", "hxxp://i.search.metacrawler.com/?f=3&a=ironmc2&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCzztA0Czy0CzzyB0EyBtDtN0D0Tzu0CyCtBtBtN1L2XzutBtFtBtFyCtFtCtDzyyBtN1L1Czu&[...]
Line Deleted : user_pref("extensions.metacrawler.vrsn", "1.8.19.0");
Line Deleted : user_pref("extensions.metacrawler.vrsni", "1.8.19.0");
Line Deleted : user_pref("extensions.metacrawler_i.hmpg", true);
Line Deleted : user_pref("extensions.metacrawler_i.newTab", false);
Line Deleted : user_pref("extensions.metacrawler_i.smplGrp", "none");
Line Deleted : user_pref("extensions.metacrawler_i.vrsnTs", "1.8.19.020:40:12");

[ File : C:\Users\Lucka\AppData\Roaming\Mozilla\Firefox\Profiles\4jrl8syf.default-1385324633945\prefs.js ]

*************************

AdwCleaner[R0].txt - [8795 octets] - [25/11/2013 20:52:24]
AdwCleaner[S0].txt - [8591 octets] - [25/11/2013 20:54:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8651 octets] ##########

Juldo78 · #12 Příspěvek od **Juldo78** » 25 lis 2013 21:00

...tak to je zatial vsetko.

...malo by to uz byt ok?
...ako mam tomu predist? Mam nainstalovany aj Norton 360 (original) plus nejaku rodicovsku kontrolu (akurat ta dost casto hlasi, ze je nedostupna)...nema ani Admin prava...

Dik.

#13 Příspěvek od **vyosek** » 25 lis 2013 22:16

Poprosim nyni o log z FRSTLauncheru dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100

Bylo tam hodne reklaminiho nezadouciho SW, chce to cist co se instaluje jako doprovod - vice zde http://www.viry.cz/pozor-na-to-co-vsech ... -pocitace/

Juldo78 · #14 Příspěvek od **Juldo78** » 26 lis 2013 00:44

pripajam...

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-11-2013 01
Ran by Tatik (administrator) on ALIEN on 26-11-2013 00:39:16
Running from C:\Users\Tatik\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccsvchst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\nf.exe
() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe
(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccsvchst.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
() C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAC9SWK.EXE
() C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\nf.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2890000 2012-03-16] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1020064 2012-02-13] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-02-13] (Atheros Commnucations)
HKLM\...\Run: [Command Center Controllers] - C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware)
HKLM\...\Run: [CNAP2 Launcher] - C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM-x32\...\RunOnce: [*TampMon] - C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\tampmon.exe [61264 2013-10-26] (Symantec Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-22] (Creative Technology Ltd)
HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] - C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [1546096 2011-11-04] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-17] (Intel Corporation)
HKLM-x32\...\Run: [Integrated Webcam Live! Central] - C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe [577024 2012-03-06] (Creative Technology Ltd)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [76872 2012-03-27] (cyberlink)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [646336 2013-09-10] ()
HKU\Lucka\...\Run: [Softonic for Windows] - "C:\Users\Lucka\AppData\Local\Softonic\Softonic.exe" -minimize
HKU\Lucka\...\Policies\system: [LogonHoursAction] 2
HKU\Lucka\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lukasko\...\Policies\system: [LogonHoursAction] 2
HKU\Lukasko\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [260928 2012-03-04] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Norton Family BHO - {B8E07826-0971-4f16-B133-047B88034E89} - C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [174592] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 16 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\d7irfjo5.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{6D5C8FC4-DE46-41bf-9092-93F0F78E9115}] - C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_2.6.0.52\coFFFw\
FF Extension: Norton Family - C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_2.6.0.52\coFFFw\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [napjheenlliimoedooldaalpjfidlidp] - C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\Extensions\Chrome.crx

==================== Services (Whitelisted) =================

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [242448 2012-03-27] (CyberLink)
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-28] (Creative Technology Ltd)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-01] (Intel Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NSM; C:\Program Files (x86)\Norton Family\Engine\2.9.5.14\NF.exe [570264 2013-10-26] (Symantec Corporation)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-02-24] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-10-22] (TuneUp Software)
S3 WinDefend; %ProgramFiles(x86)%\Windows Defender\mpsvc.dll [x]

==================== Drivers (Whitelisted) ====================

R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [3571816 2012-02-24] (Atheros Communications, Inc.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-24] (Bigfoot Networks, Inc.)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20131114.001\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 ccSet_NSM; C:\Windows\system32\drivers\NSMx64\0209050.00E\ccSetx64.sys [162392 2013-09-27] (Symantec Corporation)
R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-28] (Creative Technology Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20131122.001\IDSvia64.sys [521816 2013-10-30] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131125.003\ENG64.SYS [126040 2013-10-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131125.003\EX64.SYS [2099288 2013-10-29] (Symantec Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-03-04] (NVIDIA Corporation)
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_ACCEL.sys [67184 2012-01-03] (STMicroelectronics)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-18] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [43680 2013-03-05] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 SYMRDR_{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}; C:\Windows\System32\Drivers\NSMx64\0209050.00E\SymRdrS.SYS [245848 2013-09-24] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-10-31] (TuneUp Software)
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-11-26 00:39 - 2013-11-26 00:39 - 00017331 _____ C:\Users\Tatik\Downloads\FRST.txt
2013-11-26 00:38 - 2013-11-26 00:38 - 00000000 ____D C:\FRST
2013-11-26 00:37 - 2013-11-26 00:37 - 01958474 _____ (Farbar) C:\Users\Tatik\Downloads\FRST64.exe
2013-11-26 00:33 - 2013-11-26 00:33 - 00000000 ___RD C:\Users\Tatik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-11-25 20:52 - 2013-11-25 20:54 - 00000000 ____D C:\AdwCleaner
2013-11-25 20:51 - 2013-11-25 20:51 - 01091882 _____ C:\Users\Tatik\Downloads\adwcleaner.exe
2013-11-25 20:49 - 2013-11-25 20:49 - 00000654 _____ C:\Users\Tatik\Desktop\JRT.txt
2013-11-25 19:41 - 2013-11-25 19:41 - 00000000 ___RD C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-11-25 19:39 - 2013-11-25 01:40 - 00935175 _____ C:\Users\Lucka\Desktop\RSITx64.exe
2013-11-25 19:19 - 2013-11-25 19:28 - 00000191 _____ C:\Users\Tatik\Downloads\ckfiles.txt
2013-11-25 19:16 - 2013-11-25 19:16 - 00468480 _____ () C:\Users\Tatik\Downloads\ckscanner.exe
2013-11-25 01:40 - 2013-11-25 01:41 - 00000000 ____D C:\rsit
2013-11-25 01:40 - 2013-11-25 01:41 - 00000000 ____D C:\Program Files\trend micro
2013-11-25 01:40 - 2013-11-25 01:40 - 00935175 _____ C:\Users\Tatik\Downloads\RSITx64.exe
2013-11-25 00:49 - 2013-11-25 00:53 - 00000000 ____D C:\Users\Tatik\Desktop\RK_Quarantine
2013-11-25 00:45 - 2013-11-25 00:45 - 03679744 _____ C:\Users\Tatik\Downloads\RogueKiller.exe
2013-11-24 23:40 - 2013-11-24 23:40 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-24 23:40 - 2013-11-24 23:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-24 23:25 - 2013-11-24 23:25 - 23825872 _____ (Mozilla) C:\Users\Tatik\Downloads\Firefox Setup 25.0.1.exe
2013-11-24 23:18 - 2013-11-24 23:19 - 00002102 _____ C:\Windows\logboot_24.11.2013.tureg.log
2013-11-24 23:00 - 2013-11-24 23:00 - 00000000 ____D C:\Windows\ERUNT
2013-11-24 22:59 - 2013-11-24 23:47 - 00001788 _____ C:\sc-cleaner.txt
2013-11-24 22:59 - 2013-11-24 22:59 - 00000000 ____D C:\Users\Tatik\Desktop\sc-cleaner
2013-11-24 22:58 - 2013-11-24 22:58 - 01034531 _____ (Thisisu) C:\Users\Tatik\Downloads\JRT.exe
2013-11-24 22:57 - 2013-11-24 22:57 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Tatik\Downloads\sc-cleaner.exe
2013-11-24 22:16 - 2013-11-24 22:28 - 00000000 ____D C:\Users\Tatik\AppData\Local\NPE
2013-11-24 22:15 - 2013-11-24 22:15 - 03053496 _____ (Symantec Corporation) C:\Users\Tatik\Downloads\NPE.exe
2013-11-24 22:06 - 2013-03-05 03:14 - 00043680 ____R (Symantec Corporation) C:\Windows\system32\Drivers\SymIMV.sys
2013-11-24 21:23 - 2013-11-24 21:23 - 00000000 ____D C:\Users\Lucka\Desktop\Staré údaje Firefoxu
2013-11-24 20:14 - 2013-11-24 23:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-24 19:57 - 2013-10-22 15:50 - 00036664 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-11-24 19:57 - 2013-10-22 15:50 - 00030008 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-11-24 19:56 - 2013-11-24 19:57 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2012
2013-11-24 19:56 - 2013-11-24 19:56 - 00002215 _____ C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
2013-11-24 19:56 - 2013-11-24 19:56 - 00002189 _____ C:\Users\Public\Desktop\TuneUp Utilities 2012.lnk
2013-11-24 19:56 - 2013-10-22 15:50 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-11-24 19:56 - 2013-10-22 15:50 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-11-24 19:56 - 2013-10-22 15:50 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-11-24 19:39 - 2013-11-24 19:39 - 00000000 __SHD C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-11-24 18:21 - 2013-11-24 18:21 - 23597617 _____ C:\Users\Lucka\Downloads\Ikarus 256.50V LUX.rar
2013-11-24 17:02 - 2013-11-24 17:02 - 02232526 _____ C:\Users\Lucka\Downloads\Setra_S215UL_SYTCoachline_v1.0.zip
2013-11-24 16:37 - 2013-11-24 16:37 - 01639845 _____ C:\Users\Lucka\Downloads\Bogdan-A092.rar
2013-11-24 15:57 - 2013-11-24 15:57 - 15756532 _____ C:\Users\Lucka\Downloads\sor nb 12 Praha.rar
2013-11-24 13:41 - 2013-11-24 13:41 - 12457011 _____ ( ) C:\Users\Lucka\Downloads\a6c-rc3.1-setup.exe
2013-11-23 18:38 - 2013-11-23 18:38 - 00014461 _____ C:\Users\Lucka\Downloads\patch_citybus.rar
2013-11-23 18:35 - 2013-11-23 18:36 - 119015208 _____ C:\Users\Lucka\Downloads\Irisbus-Citelis.rar
2013-11-21 19:31 - 2013-11-22 07:29 - 00000000 ____D C:\Users\Lucka\Desktop\films
2013-11-21 18:04 - 2013-11-21 18:04 - 01050512 _____ (Unity Technologies ApS) C:\Users\Lucka\Downloads\UnityWebPlayer.exe
2013-11-21 17:17 - 2013-11-21 17:18 - 129970458 _____ C:\Users\Lucka\Downloads\torinogv_b10m_volvo_6x2.rar
2013-11-21 17:12 - 2013-11-21 17:16 - 50490945 _____ C:\Users\Lucka\Downloads\LionsCityDD.rar
2013-11-18 20:10 - 2013-11-18 20:17 - 11146267 _____ C:\Users\Lucka\Downloads\MAN-NL-202-BVG-Edition-v1.rar
2013-11-17 18:57 - 2013-11-17 19:05 - 56873261 _____ C:\Users\Lucka\Downloads\SORc10-5_v2-0.rar
2013-11-17 18:54 - 2013-11-17 19:50 - 51491554 _____ C:\Users\Lucka\Downloads\MB O405 Camo.zip.part
2013-11-17 18:54 - 2013-11-17 19:50 - 00031513 _____ C:\Users\Lucka\Downloads\MB O405 Camo.zip
2013-11-17 17:03 - 2013-11-17 17:03 - 00000000 ____D C:\Users\Lukasko\AppData\Roaming\Blender Foundation
2013-11-17 16:48 - 2013-11-17 16:48 - 00261059 _____ C:\Users\Lucka\Downloads\OMSI_C734_SAD_PO.rar
2013-11-17 14:30 - 2013-11-17 14:30 - 04017406 _____ C:\Users\Lucka\Downloads\TD_MB_O405N2_Patch_V1_02.rar
2013-11-17 14:19 - 2013-11-17 14:21 - 50332090 _____ C:\Users\Lucka\Downloads\Weyershausen_V1.rar
2013-11-17 13:01 - 2013-11-17 14:08 - 355490068 _____ C:\Users\Lucka\Downloads\Trotlov-V0.6-2013-by-hrejzadarmo.rar
2013-11-17 07:41 - 2013-11-17 07:41 - 01217817 _____ C:\Users\Lucka\Downloads\GOV---OMSI-MAN-Lion'S-City.rar
2013-11-17 07:37 - 2013-11-17 07:38 - 107667074 _____ C:\Users\Lucka\Downloads\Karosa B732 1.0.rar
2013-11-17 07:31 - 2013-11-17 07:31 - 02832862 _____ C:\Users\Lucka\Downloads\Karosa_C954E_SAD_PD.rar
2013-11-17 07:21 - 2013-11-17 07:21 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\Blender Foundation
2013-11-16 18:26 - 2013-11-16 18:28 - 107698327 _____ C:\Users\Lucka\Downloads\Setra_S_215_SL.rar
2013-11-16 18:19 - 2013-11-16 18:22 - 180557025 _____ C:\Users\Lucka\Downloads\Karosa_B931.rar
2013-11-16 18:18 - 2013-11-16 18:18 - 00000000 ____D C:\Users\Lukasko\.thumbnails
2013-11-16 16:47 - 2013-11-16 16:50 - 00001235 _____ C:\Users\Public\Desktop\Dokumentace k mapě Dolní Kounice.lnk
2013-11-16 16:42 - 2013-11-16 16:43 - 80096210 _____ () C:\Users\Lucka\Downloads\DolniKounice_mapa_v1-0_M(1).exe
2013-11-16 16:38 - 2013-11-16 16:38 - 00000000 ____D C:\Users\Lucka\.thumbnails
2013-11-16 16:37 - 2013-11-16 16:37 - 00002110 _____ C:\Users\Public\Desktop\Blender.lnk
2013-11-16 16:37 - 2013-11-16 16:37 - 00000000 ____D C:\Users\Tatik\AppData\Roaming\Blender Foundation
2013-11-16 16:37 - 2013-11-16 16:37 - 00000000 ____D C:\Users\Tatik\.thumbnails
2013-11-16 16:37 - 2013-11-16 16:37 - 00000000 ____D C:\Program Files (x86)\Blender Foundation
2013-11-16 16:35 - 2013-11-16 16:35 - 20895813 _____ C:\Users\Lucka\Downloads\blender-2.57b-release-windows32.exe
2013-11-16 16:19 - 2013-11-16 16:21 - 89876569 _____ C:\Users\Lucka\Downloads\Dennis_Enviro500.zip
2013-11-16 16:19 - 2013-11-16 16:19 - 00214952 ___SH (Deposit Files) C:\Users\Lucka\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp
2013-11-16 15:39 - 2013-11-16 15:39 - 75260480 _____ C:\Users\Lucka\Downloads\Karosa-C954E.rar
2013-11-16 15:36 - 2013-11-16 15:37 - 75443145 _____ C:\Users\Lucka\Downloads\Jelcz-M125M.7z
2013-11-16 15:33 - 2013-11-16 15:35 - 29142114 _____ C:\Users\Lucka\Downloads\Ikarus 250.12.rar
2013-11-16 15:33 - 2013-11-16 15:33 - 06347729 _____ C:\Users\Lucka\Downloads\Ikarus 250.12(1).rar.part
2013-11-16 15:33 - 2013-11-16 15:33 - 04776131 _____ C:\Users\Lucka\Downloads\Ikarus 250.12(2).rar.part
2013-11-16 14:26 - 2013-11-16 14:26 - 31817594 _____ C:\Users\Lucka\Downloads\Mercedes_Vario_812D.rar
2013-11-16 14:21 - 2013-11-16 14:22 - 32222222 _____ C:\Users\Lucka\Downloads\Ikarus 260.rar
2013-11-16 14:16 - 2013-11-16 14:18 - 87997143 _____ C:\Users\Lucka\Downloads\Mercedes_New_2.5.1.rar
2013-11-16 14:05 - 2013-11-16 14:06 - 68618100 _____ C:\Users\Lucka\Downloads\Man_Caetano.exe
2013-11-16 14:01 - 2013-11-16 14:02 - 34791129 _____ C:\Users\Lucka\Downloads\SU_15.rar
2013-11-16 13:56 - 2013-11-16 13:56 - 80096210 _____ () C:\Users\Lucka\Downloads\DolniKounice_mapa_v1-0_M.exe
2013-11-16 13:56 - 2013-11-16 13:56 - 01937824 _____ C:\Users\Lucka\Downloads\mers 313cdi.rar.part
2013-11-16 13:44 - 2013-11-16 13:45 - 72760915 _____ C:\Users\Lucka\Downloads\Tedom_C12 - verzia 1.0.0.rar
2013-11-16 13:27 - 2013-11-16 13:27 - 76738918 _____ C:\Users\Lukasko\Downloads\Mercedes-O520-Cito-OMSI-v1.zip
2013-11-14 20:06 - 2013-11-14 20:06 - 00000000 ____D C:\Users\Lukasko\Desktop\Credo_BC11
2013-11-14 20:04 - 2013-11-14 20:04 - 39517928 _____ C:\Users\Lukasko\Downloads\Credo BC11 v2 - By SnyperD(1).rar
2013-11-14 19:26 - 2013-11-14 19:26 - 00000000 ____D C:\Users\Lucka\Desktop\Credo_BC11
2013-11-14 19:25 - 2013-11-14 19:26 - 39517928 _____ C:\Users\Lucka\Downloads\Credo BC11 v2 - By SnyperD.rar
2013-11-14 19:23 - 2013-11-16 18:20 - 88863952 _____ C:\Users\Lucka\Downloads\Karosa_B931.rar.part
2013-11-14 18:45 - 2013-11-24 20:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-11-14 18:41 - 2013-11-14 18:42 - 39517928 _____ C:\Users\Lukasko\Downloads\Credo BC11 v2 - By SnyperD.rar
2013-11-14 18:38 - 2013-11-14 18:39 - 72760915 _____ C:\Users\Lukasko\Downloads\Tedom_C12 - verzia 1.0.0.rar
2013-11-14 18:01 - 2013-11-14 18:01 - 00000585 _____ C:\Users\Lukasko\Desktop\OMSI - Editor.lnk
2013-11-14 17:37 - 2013-11-17 14:22 - 00000000 ____D C:\m-r-software
2013-11-14 17:37 - 2013-11-14 17:37 - 00000569 _____ C:\Users\Public\Desktop\OMSI.lnk
2013-11-13 07:29 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-13 07:29 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-13 07:29 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-13 07:29 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-13 07:29 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-13 07:29 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-13 07:29 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-13 07:29 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-13 07:29 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-13 07:29 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-13 07:29 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 07:29 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 06:50 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 06:50 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 06:50 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 06:50 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 06:50 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 06:48 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 06:48 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 06:48 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 06:47 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 06:47 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 06:47 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 06:47 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 06:47 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 06:47 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 06:47 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 06:47 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 06:47 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 06:47 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 06:47 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 06:47 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 06:47 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 06:47 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 06:47 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 06:47 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 06:47 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 06:47 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 06:47 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 06:47 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 06:46 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 06:46 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-12 18:25 - 2013-11-12 18:25 - 00111220 _____ C:\Users\Lucka\Downloads\Seriály - Voyo.sk - Videoarchív televízie Markíza s jedinečnou ponukou filmov, seriálov a relácií - Búrlivé víno 01 - 01.01.2013.htm
2013-11-12 18:25 - 2013-11-12 18:25 - 00000000 ____D C:\Users\Lucka\Downloads\Seriály - Voyo.sk - Videoarchív televízie Markíza s jedinečnou ponukou filmov, seriálov a relácií - Búrlivé víno 01 - 01.01.2013_subory
2013-11-09 07:59 - 2013-11-09 07:59 - 00000000 ____D C:\Users\Lucka\AppData\Local\LucasArts
2013-11-08 20:35 - 2013-11-08 20:35 - 00000000 ____D C:\Users\Lukasko\Documents\Euro Truck Simulator
2013-11-08 19:55 - 2013-11-08 19:56 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\flightgear.org
2013-11-07 07:14 - 2013-11-07 07:14 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\Forklift Truck Simulator 2009
2013-11-04 06:56 - 2013-11-04 06:56 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-11-04 06:56 - 2013-11-04 06:56 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-11-03 17:14 - 2012-10-04 00:00 - 00660992 _____ (CANON INC.) C:\Windows\system32\CNAC9EMD.DLL
2013-11-03 17:14 - 2012-09-03 00:00 - 00486400 _____ (CANON INC.) C:\Windows\system32\CNAP2LMD.DLL
2013-11-03 17:14 - 2010-10-15 00:00 - 01289728 _____ (CANON INC.) C:\Windows\system32\CNAP1NSD.DLL
2013-11-03 17:13 - 2013-11-03 17:15 - 00000000 ____D C:\Program Files\Canon
2013-11-03 17:12 - 2013-11-03 17:12 - 16633408 _____ C:\Users\Lukasko\Downloads\LBP7200Cd_7200Cdn_R150_V110_W64_uk_EN_1.exe
2013-11-03 17:12 - 2013-11-03 17:12 - 00000000 ____D C:\Users\Lukasko\Downloads\LBP7200Cd_7200Cdn_R150_V110_W64_uk_EN_1
2013-11-03 16:53 - 2013-11-03 18:52 - 00000000 ____D C:\Users\Lukasko\diela
2013-11-03 10:23 - 2013-11-03 09:44 - 00002655 _____ C:\Users\Lukasko\Desktop\Microsoft Office PowerPoint 2007.lnk
2013-11-03 10:22 - 2013-11-03 10:22 - 00002657 _____ C:\Users\Lukasko\Desktop\Microsoft Office Excel 2007.lnk
2013-11-03 10:22 - 2013-11-03 09:44 - 00002743 _____ C:\Users\Lukasko\Desktop\Microsoft Office Word 2007.lnk
2013-11-03 09:52 - 2013-11-03 09:52 - 00002523 _____ C:\Users\Lucka\Desktop\Microsoft Office 2007 Nastavenie jazyka.lnk
2013-11-03 09:52 - 2013-11-03 09:52 - 00000000 ____D C:\Users\Lucka\Documents\Poznámkové bloky programu OneNote
2013-11-03 09:43 - 2013-11-04 06:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-11-03 09:43 - 2013-11-03 09:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-11-03 09:41 - 2013-11-13 07:29 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-03 09:41 - 2013-11-03 09:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-11-03 09:41 - 2013-11-03 09:41 - 00000000 ____D C:\Users\Tatik\AppData\Local\Microsoft Help
2013-11-03 09:41 - 2013-11-03 09:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-03 09:40 - 2013-11-03 09:40 - 00000000 ___RD C:\MSOCache
2013-10-28 07:22 - 2013-10-28 07:22 - 00001784 _____ C:\Users\Lucka\Desktop\Vysokozdvižný vozík.lnk
2013-10-27 19:14 - 2013-10-27 19:14 - 00001784 _____ C:\Users\Lukasko\Desktop\Vysokozdvižný vozík.lnk
2013-10-27 19:14 - 2013-10-27 19:14 - 00001760 _____ C:\Users\Tatik\Desktop\Vysokozdvižný vozík.lnk
2013-10-27 19:14 - 2013-10-27 19:14 - 00000000 ____D C:\Users\Lukasko\AppData\Roaming\Forklift Truck Simulator 2009

==================== One Month Modified Files and Folders =======

2013-11-26 00:39 - 2013-11-26 00:39 - 00017331 _____ C:\Users\Tatik\Downloads\FRST.txt
2013-11-26 00:39 - 2012-12-23 23:14 - 00658296 _____ C:\Windows\system32\perfh005.dat
2013-11-26 00:39 - 2012-12-23 23:14 - 00139982 _____ C:\Windows\system32\perfc005.dat
2013-11-26 00:39 - 2009-07-14 06:13 - 01576554 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-26 00:38 - 2013-11-26 00:38 - 00000000 ____D C:\FRST
2013-11-26 00:37 - 2013-11-26 00:37 - 01958474 _____ (Farbar) C:\Users\Tatik\Downloads\FRST64.exe
2013-11-26 00:36 - 2012-09-07 13:34 - 01913197 _____ C:\Windows\WindowsUpdate.log
2013-11-26 00:33 - 2013-11-26 00:33 - 00000000 ___RD C:\Users\Tatik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-11-26 00:33 - 2012-12-16 00:37 - 00003410 _____ C:\Windows\System32\Tasks\229B350D-034F-4c01-BAF2-3EA03DCAE0B9
2013-11-26 00:33 - 2012-09-07 13:33 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-26 00:33 - 2012-09-07 12:05 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-11-26 00:33 - 2012-09-07 12:05 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-11-26 00:33 - 2012-09-07 12:00 - 00000000 ____D C:\Program Files (x86)\AlienRespawn
2013-11-26 00:33 - 2012-09-07 11:55 - 00000000 ____D C:\ProgramData\Bigfoot Networks
2013-11-26 00:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-26 00:33 - 2009-07-14 05:51 - 00068422 _____ C:\Windows\setupact.log
2013-11-25 22:04 - 2013-09-13 19:53 - 00004376 _____ C:\Users\Tatik\daemonprocess.txt
2013-11-25 21:46 - 2012-09-07 11:40 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-25 21:02 - 2009-07-14 05:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-25 21:02 - 2009-07-14 05:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-25 20:54 - 2013-11-25 20:52 - 00000000 ____D C:\AdwCleaner
2013-11-25 20:51 - 2013-11-25 20:51 - 01091882 _____ C:\Users\Tatik\Downloads\adwcleaner.exe
2013-11-25 20:49 - 2013-11-25 20:49 - 00000654 _____ C:\Users\Tatik\Desktop\JRT.txt
2013-11-25 20:00 - 2012-09-19 22:10 - 00000000 ____D C:\Users\Tatik\Documents\Bluetooth Folder
2013-11-25 19:59 - 2010-11-21 04:47 - 00103292 _____ C:\Windows\PFRO.log
2013-11-25 19:41 - 2013-11-25 19:41 - 00000000 ___RD C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-11-25 19:41 - 2012-12-25 06:36 - 00067848 _____ C:\Users\Lucka\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 19:41 - 2012-12-16 00:45 - 00000000 ____D C:\Users\Lukasko\Documents\Bluetooth Folder
2013-11-25 19:28 - 2013-11-25 19:19 - 00000191 _____ C:\Users\Tatik\Downloads\ckfiles.txt
2013-11-25 19:16 - 2013-11-25 19:16 - 00468480 _____ () C:\Users\Tatik\Downloads\ckscanner.exe
2013-11-25 19:08 - 2012-09-19 22:06 - 00067848 _____ C:\Users\Tatik\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 19:06 - 2013-09-14 05:53 - 00028364 _____ C:\Users\Lukasko\daemonprocess.txt
2013-11-25 07:12 - 2013-09-06 18:01 - 00000000 ____D C:\Users\Lukasko\AppData\Roaming\TuneUp Software
2013-11-25 07:07 - 2012-12-16 00:45 - 00067848 _____ C:\Users\Lukasko\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 07:06 - 2009-07-14 05:45 - 00316504 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-25 01:41 - 2013-11-25 01:40 - 00000000 ____D C:\rsit
2013-11-25 01:41 - 2013-11-25 01:40 - 00000000 ____D C:\Program Files\trend micro
2013-11-25 01:40 - 2013-11-25 19:39 - 00935175 _____ C:\Users\Lucka\Desktop\RSITx64.exe
2013-11-25 01:40 - 2013-11-25 01:40 - 00935175 _____ C:\Users\Tatik\Downloads\RSITx64.exe
2013-11-25 00:53 - 2013-11-25 00:49 - 00000000 ____D C:\Users\Tatik\Desktop\RK_Quarantine
2013-11-25 00:50 - 2012-12-25 06:36 - 00000000 ___RD C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-25 00:45 - 2013-11-25 00:45 - 03679744 _____ C:\Users\Tatik\Downloads\RogueKiller.exe
2013-11-24 23:53 - 2013-09-14 05:56 - 00016142 _____ C:\Users\Lucka\daemonprocess.txt
2013-11-24 23:47 - 2013-11-24 22:59 - 00001788 _____ C:\sc-cleaner.txt
2013-11-24 23:41 - 2012-09-19 23:02 - 00000000 ____D C:\Users\Tatik\AppData\Roaming\Mozilla
2013-11-24 23:40 - 2013-11-24 23:40 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-24 23:40 - 2013-11-24 23:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-24 23:40 - 2013-11-24 20:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-24 23:25 - 2013-11-24 23:25 - 23825872 _____ (Mozilla) C:\Users\Tatik\Downloads\Firefox Setup 25.0.1.exe
2013-11-24 23:20 - 2012-09-19 22:06 - 00000000 ____D C:\Users\Tatik
2013-11-24 23:19 - 2013-11-24 23:18 - 00002102 _____ C:\Windows\logboot_24.11.2013.tureg.log
2013-11-24 23:19 - 2009-07-14 03:34 - 65011712 _____ C:\Windows\system32\config\SOFTWARE_tureg_old
2013-11-24 23:19 - 2009-07-14 03:34 - 17039360 _____ C:\Windows\system32\config\SYSTEM_tureg_old
2013-11-24 23:19 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY_tureg_old
2013-11-24 23:18 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM_tureg_old
2013-11-24 23:18 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT_tureg_old
2013-11-24 23:00 - 2013-11-24 23:00 - 00000000 ____D C:\Windows\ERUNT
2013-11-24 22:59 - 2013-11-24 22:59 - 00000000 ____D C:\Users\Tatik\Desktop\sc-cleaner
2013-11-24 22:59 - 2012-09-19 22:09 - 00001419 _____ C:\Users\Tatik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-24 22:58 - 2013-11-24 22:58 - 01034531 _____ (Thisisu) C:\Users\Tatik\Downloads\JRT.exe
2013-11-24 22:57 - 2013-11-24 22:57 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Tatik\Downloads\sc-cleaner.exe
2013-11-24 22:28 - 2013-11-24 22:16 - 00000000 ____D C:\Users\Tatik\AppData\Local\NPE
2013-11-24 22:28 - 2012-12-25 06:36 - 00000000 ____D C:\Users\Lucka
2013-11-24 22:28 - 2012-12-16 00:44 - 00000000 ____D C:\Users\Lukasko
2013-11-24 22:16 - 2012-12-16 00:22 - 00000000 ____D C:\ProgramData\Norton
2013-11-24 22:15 - 2013-11-24 22:15 - 03053496 _____ (Symantec Corporation) C:\Users\Tatik\Downloads\NPE.exe
2013-11-24 21:23 - 2013-11-24 21:23 - 00000000 ____D C:\Users\Lucka\Desktop\Staré údaje Firefoxu
2013-11-24 20:56 - 2013-09-07 06:28 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\TuneUp Software
2013-11-24 20:43 - 2013-11-14 18:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-11-24 19:57 - 2013-11-24 19:56 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2012
2013-11-24 19:56 - 2013-11-24 19:56 - 00002215 _____ C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
2013-11-24 19:56 - 2013-11-24 19:56 - 00002189 _____ C:\Users\Public\Desktop\TuneUp Utilities 2012.lnk
2013-11-24 19:56 - 2013-09-06 17:48 - 00000000 ____D C:\Users\Tatik\AppData\Roaming\TuneUp Software
2013-11-24 19:56 - 2013-09-06 17:48 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-11-24 19:39 - 2013-11-24 19:39 - 00000000 __SHD C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-11-24 18:21 - 2013-11-24 18:21 - 23597617 _____ C:\Users\Lucka\Downloads\Ikarus 256.50V LUX.rar
2013-11-24 17:02 - 2013-11-24 17:02 - 02232526 _____ C:\Users\Lucka\Downloads\Setra_S215UL_SYTCoachline_v1.0.zip
2013-11-24 16:37 - 2013-11-24 16:37 - 01639845 _____ C:\Users\Lucka\Downloads\Bogdan-A092.rar
2013-11-24 16:17 - 2013-01-07 18:19 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\vlc
2013-11-24 15:57 - 2013-11-24 15:57 - 15756532 _____ C:\Users\Lucka\Downloads\sor nb 12 Praha.rar
2013-11-24 13:41 - 2013-11-24 13:41 - 12457011 _____ ( ) C:\Users\Lucka\Downloads\a6c-rc3.1-setup.exe
2013-11-24 10:50 - 2012-12-25 06:36 - 00000000 ____D C:\Users\Lucka\Documents\Bluetooth Folder
2013-11-24 07:59 - 2012-12-25 06:36 - 00000000 ____D C:\Users\Lucka\AppData\Local\VirtualStore
2013-11-23 18:38 - 2013-11-23 18:38 - 00014461 _____ C:\Users\Lucka\Downloads\patch_citybus.rar
2013-11-23 18:36 - 2013-11-23 18:35 - 119015208 _____ C:\Users\Lucka\Downloads\Irisbus-Citelis.rar
2013-11-22 07:29 - 2013-11-21 19:31 - 00000000 ____D C:\Users\Lucka\Desktop\films
2013-11-21 18:04 - 2013-11-21 18:04 - 01050512 _____ (Unity Technologies ApS) C:\Users\Lucka\Downloads\UnityWebPlayer.exe
2013-11-21 17:18 - 2013-11-21 17:17 - 129970458 _____ C:\Users\Lucka\Downloads\torinogv_b10m_volvo_6x2.rar
2013-11-21 17:16 - 2013-11-21 17:12 - 50490945 _____ C:\Users\Lucka\Downloads\LionsCityDD.rar
2013-11-21 06:57 - 2009-07-14 06:08 - 00032580 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-18 20:17 - 2013-11-18 20:10 - 11146267 _____ C:\Users\Lucka\Downloads\MAN-NL-202-BVG-Edition-v1.rar
2013-11-17 19:50 - 2013-11-17 18:54 - 51491554 _____ C:\Users\Lucka\Downloads\MB O405 Camo.zip.part
2013-11-17 19:50 - 2013-11-17 18:54 - 00031513 _____ C:\Users\Lucka\Downloads\MB O405 Camo.zip
2013-11-17 19:05 - 2013-11-17 18:57 - 56873261 _____ C:\Users\Lucka\Downloads\SORc10-5_v2-0.rar
2013-11-17 17:17 - 2013-01-01 09:57 - 00000000 ____D C:\Users\Lukasko\AppData\Local\CrashDumps
2013-11-17 17:03 - 2013-11-17 17:03 - 00000000 ____D C:\Users\Lukasko\AppData\Roaming\Blender Foundation
2013-11-17 16:53 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2013-11-17 16:48 - 2013-11-17 16:48 - 00261059 _____ C:\Users\Lucka\Downloads\OMSI_C734_SAD_PO.rar
2013-11-17 14:30 - 2013-11-17 14:30 - 04017406 _____ C:\Users\Lucka\Downloads\TD_MB_O405N2_Patch_V1_02.rar
2013-11-17 14:22 - 2013-11-14 17:37 - 00000000 ____D C:\m-r-software
2013-11-17 14:21 - 2013-11-17 14:19 - 50332090 _____ C:\Users\Lucka\Downloads\Weyershausen_V1.rar
2013-11-17 14:08 - 2013-11-17 13:01 - 355490068 _____ C:\Users\Lucka\Downloads\Trotlov-V0.6-2013-by-hrejzadarmo.rar
2013-11-17 12:58 - 2012-12-16 00:45 - 00000000 ____D C:\Users\Lukasko\AppData\Local\VirtualStore
2013-11-17 07:41 - 2013-11-17 07:41 - 01217817 _____ C:\Users\Lucka\Downloads\GOV---OMSI-MAN-Lion'S-City.rar
2013-11-17 07:38 - 2013-11-17 07:37 - 107667074 _____ C:\Users\Lucka\Downloads\Karosa B732 1.0.rar
2013-11-17 07:31 - 2013-11-17 07:31 - 02832862 _____ C:\Users\Lucka\Downloads\Karosa_C954E_SAD_PD.rar
2013-11-17 07:21 - 2013-11-17 07:21 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\Blender Foundation
2013-11-16 18:28 - 2013-11-16 18:26 - 107698327 _____ C:\Users\Lucka\Downloads\Setra_S_215_SL.rar
2013-11-16 18:22 - 2013-11-16 18:19 - 180557025 _____ C:\Users\Lucka\Downloads\Karosa_B931.rar
2013-11-16 18:20 - 2013-11-14 19:23 - 88863952 _____ C:\Users\Lucka\Downloads\Karosa_B931.rar.part
2013-11-16 18:18 - 2013-11-16 18:18 - 00000000 ____D C:\Users\Lukasko\.thumbnails
2013-11-16 16:50 - 2013-11-16 16:47 - 00001235 _____ C:\Users\Public\Desktop\Dokumentace k mapě Dolní Kounice.lnk
2013-11-16 16:43 - 2013-11-16 16:42 - 80096210 _____ () C:\Users\Lucka\Downloads\DolniKounice_mapa_v1-0_M(1).exe
2013-11-16 16:38 - 2013-11-16 16:38 - 00000000 ____D C:\Users\Lucka\.thumbnails
2013-11-16 16:37 - 2013-11-16 16:37 - 00002110 _____ C:\Users\Public\Desktop\Blender.lnk
2013-11-16 16:37 - 2013-11-16 16:37 - 00000000 ____D C:\Users\Tatik\AppData\Roaming\Blender Foundation
2013-11-16 16:37 - 2013-11-16 16:37 - 00000000 ____D C:\Users\Tatik\.thumbnails
2013-11-16 16:37 - 2013-11-16 16:37 - 00000000 ____D C:\Program Files (x86)\Blender Foundation
2013-11-16 16:35 - 2013-11-16 16:35 - 20895813 _____ C:\Users\Lucka\Downloads\blender-2.57b-release-windows32.exe
2013-11-16 16:21 - 2013-11-16 16:19 - 89876569 _____ C:\Users\Lucka\Downloads\Dennis_Enviro500.zip
2013-11-16 16:19 - 2013-11-16 16:19 - 00214952 ___SH (Deposit Files) C:\Users\Lucka\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp
2013-11-16 15:39 - 2013-11-16 15:39 - 75260480 _____ C:\Users\Lucka\Downloads\Karosa-C954E.rar
2013-11-16 15:37 - 2013-11-16 15:36 - 75443145 _____ C:\Users\Lucka\Downloads\Jelcz-M125M.7z
2013-11-16 15:35 - 2013-11-16 15:33 - 29142114 _____ C:\Users\Lucka\Downloads\Ikarus 250.12.rar
2013-11-16 15:33 - 2013-11-16 15:33 - 06347729 _____ C:\Users\Lucka\Downloads\Ikarus 250.12(1).rar.part
2013-11-16 15:33 - 2013-11-16 15:33 - 04776131 _____ C:\Users\Lucka\Downloads\Ikarus 250.12(2).rar.part
2013-11-16 14:26 - 2013-11-16 14:26 - 31817594 _____ C:\Users\Lucka\Downloads\Mercedes_Vario_812D.rar
2013-11-16 14:22 - 2013-11-16 14:21 - 32222222 _____ C:\Users\Lucka\Downloads\Ikarus 260.rar
2013-11-16 14:18 - 2013-11-16 14:16 - 87997143 _____ C:\Users\Lucka\Downloads\Mercedes_New_2.5.1.rar
2013-11-16 14:06 - 2013-11-16 14:05 - 68618100 _____ C:\Users\Lucka\Downloads\Man_Caetano.exe
2013-11-16 14:02 - 2013-11-16 14:01 - 34791129 _____ C:\Users\Lucka\Downloads\SU_15.rar
2013-11-16 13:56 - 2013-11-16 13:56 - 80096210 _____ () C:\Users\Lucka\Downloads\DolniKounice_mapa_v1-0_M.exe
2013-11-16 13:56 - 2013-11-16 13:56 - 01937824 _____ C:\Users\Lucka\Downloads\mers 313cdi.rar.part
2013-11-16 13:45 - 2013-11-16 13:44 - 72760915 _____ C:\Users\Lucka\Downloads\Tedom_C12 - verzia 1.0.0.rar
2013-11-16 13:27 - 2013-11-16 13:27 - 76738918 _____ C:\Users\Lukasko\Downloads\Mercedes-O520-Cito-OMSI-v1.zip
2013-11-16 04:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-14 20:06 - 2013-11-14 20:06 - 00000000 ____D C:\Users\Lukasko\Desktop\Credo_BC11
2013-11-14 20:04 - 2013-11-14 20:04 - 39517928 _____ C:\Users\Lukasko\Downloads\Credo BC11 v2 - By SnyperD(1).rar
2013-11-14 19:26 - 2013-11-14 19:26 - 00000000 ____D C:\Users\Lucka\Desktop\Credo_BC11
2013-11-14 19:26 - 2013-11-14 19:25 - 39517928 _____ C:\Users\Lucka\Downloads\Credo BC11 v2 - By SnyperD.rar
2013-11-14 18:42 - 2013-11-14 18:41 - 39517928 _____ C:\Users\Lukasko\Downloads\Credo BC11 v2 - By SnyperD.rar
2013-11-14 18:39 - 2013-11-14 18:38 - 72760915 _____ C:\Users\Lukasko\Downloads\Tedom_C12 - verzia 1.0.0.rar
2013-11-14 18:06 - 2012-12-24 20:07 - 00000000 ____D C:\Users\Lukasko\Desktop\HRY
2013-11-14 18:01 - 2013-11-14 18:01 - 00000585 _____ C:\Users\Lukasko\Desktop\OMSI - Editor.lnk
2013-11-14 17:40 - 2012-12-24 20:25 - 00000779 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-11-14 17:37 - 2013-11-14 17:37 - 00000569 _____ C:\Users\Public\Desktop\OMSI.lnk
2013-11-14 17:37 - 2012-09-07 11:51 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2013-11-14 17:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2013-11-14 17:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sk-SK
2013-11-13 07:29 - 2013-11-03 09:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 07:28 - 2013-08-21 06:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 07:27 - 2012-09-19 22:30 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-12 18:25 - 2013-11-12 18:25 - 00111220 _____ C:\Users\Lucka\Downloads\Seriály - Voyo.sk - Videoarchív televízie Markíza s jedinečnou ponukou filmov, seriálov a relácií - Búrlivé víno 01 - 01.01.2013.htm
2013-11-12 18:25 - 2013-11-12 18:25 - 00000000 ____D C:\Users\Lucka\Downloads\Seriály - Voyo.sk - Videoarchív televízie Markíza s jedinečnou ponukou filmov, seriálov a relácií - Búrlivé víno 01 - 01.01.2013_subory
2013-11-12 07:24 - 2013-10-22 06:07 - 00000000 ____D C:\Users\Lucka\Documents\SCANIA Truck Driving Simulator
2013-11-09 07:59 - 2013-11-09 07:59 - 00000000 ____D C:\Users\Lucka\AppData\Local\LucasArts
2013-11-08 20:35 - 2013-11-08 20:35 - 00000000 ____D C:\Users\Lukasko\Documents\Euro Truck Simulator
2013-11-08 20:32 - 2013-10-16 19:11 - 00000000 ____D C:\Users\Lukasko\Documents\SCANIA Truck Driving Simulator
2013-11-08 19:56 - 2013-11-08 19:55 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\flightgear.org
2013-11-07 07:14 - 2013-11-07 07:14 - 00000000 ____D C:\Users\Lucka\AppData\Roaming\Forklift Truck Simulator 2009
2013-11-05 19:35 - 2013-10-19 20:48 - 00000000 ____D C:\Users\Tatik\AppData\Roaming\flightgear.org
2013-11-05 19:07 - 2013-01-24 21:12 - 00000000 ____D C:\Users\Tatik\AppData\Local\CrashDumps
2013-11-04 06:56 - 2013-11-04 06:56 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-11-04 06:56 - 2013-11-04 06:56 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-11-04 06:55 - 2013-11-03 09:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-11-03 18:52 - 2013-11-03 16:53 - 00000000 ____D C:\Users\Lukasko\diela
2013-11-03 17:15 - 2013-11-03 17:13 - 00000000 ____D C:\Program Files\Canon
2013-11-03 17:12 - 2013-11-03 17:12 - 16633408 _____ C:\Users\Lukasko\Downloads\LBP7200Cd_7200Cdn_R150_V110_W64_uk_EN_1.exe
2013-11-03 17:12 - 2013-11-03 17:12 - 00000000 ____D C:\Users\Lukasko\Downloads\LBP7200Cd_7200Cdn_R150_V110_W64_uk_EN_1
2013-11-03 10:22 - 2013-11-03 10:22 - 00002657 _____ C:\Users\Lukasko\Desktop\Microsoft Office Excel 2007.lnk
2013-11-03 09:52 - 2013-11-03 09:52 - 00002523 _____ C:\Users\Lucka\Desktop\Microsoft Office 2007 Nastavenie jazyka.lnk
2013-11-03 09:52 - 2013-11-03 09:52 - 00000000 ____D C:\Users\Lucka\Documents\Poznámkové bloky programu OneNote
2013-11-03 09:44 - 2013-11-03 10:23 - 00002655 _____ C:\Users\Lukasko\Desktop\Microsoft Office PowerPoint 2007.lnk
2013-11-03 09:44 - 2013-11-03 10:22 - 00002743 _____ C:\Users\Lukasko\Desktop\Microsoft Office Word 2007.lnk
2013-11-03 09:44 - 2012-09-19 23:02 - 00000000 ____D C:\Users\Tatik\AppData\Local\Mozilla
2013-11-03 09:43 - 2013-11-03 09:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-11-03 09:43 - 2013-11-03 09:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-11-03 09:43 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-11-03 09:41 - 2013-11-03 09:41 - 00000000 ____D C:\Users\Tatik\AppData\Local\Microsoft Help
2013-11-03 09:41 - 2013-11-03 09:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-03 09:41 - 2010-11-21 08:16 - 00000000 ____D C:\Windows\ShellNew
2013-11-03 09:40 - 2013-11-03 09:40 - 00000000 ___RD C:\MSOCache
2013-11-02 12:02 - 2013-01-01 09:44 - 00000000 ____D C:\Users\Lukasko\Documents\Bus Driver
2013-11-01 13:56 - 2013-01-17 18:51 - 00000053 _____ C:\Users\Lukasko\Desktop\Config.ini
2013-10-30 18:03 - 2013-01-04 19:06 - 00000000 ____D C:\Users\Lukasko\AppData\Roaming\vlc
2013-10-30 07:50 - 2013-09-18 16:14 - 00000000 ____D C:\Windows\System32\Tasks\Norton Family
2013-10-30 07:45 - 2012-12-16 00:37 - 00000000 ____D C:\Windows\system32\Drivers\NSMx64
2013-10-28 07:22 - 2013-10-28 07:22 - 00001784 _____ C:\Users\Lucka\Desktop\Vysokozdvižný vozík.lnk
2013-10-27 19:14 - 2013-10-27 19:14 - 00001784 _____ C:\Users\Lukasko\Desktop\Vysokozdvižný vozík.lnk
2013-10-27 19:14 - 2013-10-27 19:14 - 00001760 _____ C:\Users\Tatik\Desktop\Vysokozdvižný vozík.lnk
2013-10-27 19:14 - 2013-10-27 19:14 - 00000000 ____D C:\Users\Lukasko\AppData\Roaming\Forklift Truck Simulator 2009
2013-10-27 19:12 - 2012-12-24 20:20 - 00000000 ____D C:\TopCD

Some content of TEMP:
====================
C:\Users\Tatik\AppData\Local\Temp\ntdll_dump.dll
C:\Users\Tatik\AppData\Local\Temp\Quarantine.exe
C:\Users\Tatik\AppData\Local\Temp\uninst1.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-11-20 19:44

==================== End Of Log ============================

#15 Příspěvek od **vyosek** » 26 lis 2013 07:24

V prve rade, navod pise, at je FRST na plose

Running from C:\Users\Tatik\Downloads

Za druhe, mate mit stahnuty FRSTLauncher

Vy jste stahl jen FRST a ne i FRSTLauncher a ten jste pak ani tedy ani nespustil

Ty navody nejsou psane pro legraci, nase poteseni a zabavu

VIRY.CZ

Do Search, Dalesearch vo Firefoxe

Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe

Re: Do Search, Dalesearch vo Firefoxe