VIRY.CZ

Dobrý den, mám svůj počítač už dva roky, tak bych si ho rád nechal jen preventivně zkontrolovat. Předem děkuji.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2013 01
Ran by hp (administrator) on HP-PC on 11-12-2013 13:11:01
Running from C:\Users\hp\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe
(TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-20] (IDT, Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [AutoKMS] - C:\Windows\AutoKMS.exe [615936 2013-05-22] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKCU\...\Run: [RGSC] - C:\Pet\Hry nainstalované\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\RunOnce: [Application Restart #0] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --enable-npn-http --use-system-ssl --prerender=disabled --flag-switches-begin --flag-switches-end --restore-last-session --flag-switches-begin --flag-switches-end --flag-switches-begin --flag-switches-end [863184 2013-12-04] (Google Inc.)
MountPoints2: {20d3e0ac-350a-11e3-a151-2c41380442d4} - G:\LaunchU3.exe -a
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [QLBController] - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [333728 2012-06-20] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)

==================== Internet (Whitelisted) ====================

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100

Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "hxxp://seznam.cz/"
CHR DefaultSearchKeyword: google.cz
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Extension: (Google Drive) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Google Wallet) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2013-12-05] (BitRaider, LLC)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-06-20] (Hewlett-Packard Company)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-05-08] ()
R2 RelevantKnowledge; C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [186136 2013-08-16] (TMRG, Inc.)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-12-06] (DT Soft Ltd)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1064184 2012-09-23] (Sunplus)
S3 bcgame; system32\drivers\bcgame.sys [x]
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-11 13:11 - 2013-12-11 13:11 - 00009805 _____ C:\Users\hp\Desktop\FRST.txt
2013-12-11 13:10 - 2013-12-11 13:10 - 00029696 _____ C:\Users\hp\AppData\Local\MSGBOX.EXE
2013-12-11 13:10 - 2013-12-11 13:10 - 00015327 _____ C:\Users\hp\Desktop\LM.bat
2013-12-11 13:10 - 2013-12-11 13:10 - 00000000 ____D C:\FRST
2013-12-11 13:02 - 2013-12-11 13:02 - 00112640 _____ (forum.viry.cz) C:\Users\hp\Desktop\FRSTLauncher.exe
2013-12-11 13:01 - 2013-12-11 13:02 - 01928212 _____ (Farbar) C:\Users\hp\Desktop\FRST64.exe
2013-12-10 10:59 - 2013-12-10 10:59 - 00000000 ____D C:\Users\hp\Desktop\Nostalgie [Andrej Tarkovskij] (1983)
2013-12-05 17:45 - 2013-12-05 17:45 - 00000000 ____D C:\Users\hp\AppData\Local\SWTORPerf
2013-12-05 17:43 - 2013-12-05 17:44 - 00000000 ____D C:\Users\Public\Documents\BitRaider
2013-12-05 17:43 - 2013-12-05 17:44 - 00000000 ____D C:\ProgramData\BitRaider
2013-12-04 17:05 - 2013-12-04 17:05 - 00000000 ____D C:\Users\hp\Documents\Rockstar Games
2013-12-04 17:05 - 2013-12-04 17:05 - 00000000 ____D C:\Users\hp\AppData\Local\Chromium
2013-11-30 08:21 - 2013-11-30 08:21 - 00000000 ____D C:\Users\hp\Documents\ConvertXtoDVD
2013-11-30 08:19 - 2013-11-30 08:25 - 00000055 _____ C:\Users\hp\AppData\Roaming\pcouffin.log
2013-11-30 08:18 - 2013-11-30 08:25 - 00099384 _____ C:\Users\hp\AppData\Roaming\inst.exe
2013-11-30 08:18 - 2013-11-30 08:25 - 00082816 _____ (VSO Software) C:\Users\hp\AppData\Roaming\pcouffin.sys
2013-11-30 08:18 - 2013-11-30 08:25 - 00007859 _____ C:\Users\hp\AppData\Roaming\pcouffin.cat
2013-11-30 08:18 - 2013-11-30 08:25 - 00000000 ____D C:\Users\hp\AppData\Roaming\Vso
2013-11-30 08:18 - 2013-11-30 08:25 - 00000000 ____D C:\Program Files (x86)\vso
2013-11-30 08:18 - 2013-11-30 08:19 - 00000000 ____D C:\Users\hp\Documents\PcSetup
2013-11-30 08:18 - 2013-11-30 08:19 - 00000000 ____D C:\ProgramData\VSO
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Users\hp\AppData\Roaming\Real
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Users\hp\AppData\Local\Real
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\ProgramData\Real
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Program Files (x86)\Real Alternative
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-11-30 08:12 - 2007-12-21 03:00 - 00278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2013-11-30 08:12 - 2007-12-21 03:00 - 00185688 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-11-30 08:12 - 2007-12-21 03:00 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-11-30 08:12 - 2007-12-21 03:00 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-11-30 08:12 - 2007-06-03 14:31 - 00010752 _____ C:\Windows\SysWOW64\ff_vfw.dll
2013-11-30 08:12 - 2007-04-24 17:30 - 00060273 _____ (Open Source Software community project) C:\Windows\SysWOW64\pthreadGC2.dll
2013-11-30 08:12 - 2006-12-10 23:32 - 00000547 _____ C:\Windows\SysWOW64\ff_vfw.dll.manifest
2013-11-30 07:04 - 2013-11-30 07:04 - 00003584 _____ C:\Users\hp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-30 06:56 - 2013-11-30 06:56 - 00000000 ____D C:\videodvdmaker
2013-11-30 06:56 - 2013-11-30 06:56 - 00000000 ____D C:\Users\hp\AppData\Roaming\Video DVD Maker FREE
2013-11-27 10:28 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-27 10:25 - 2013-11-27 10:25 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-27 10:25 - 2013-11-27 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-27 10:25 - 2013-11-27 10:25 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-27 10:25 - 2013-11-27 10:25 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-27 10:25 - 2013-11-27 10:25 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-27 10:25 - 2013-11-27 10:25 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-27 10:25 - 2013-11-27 10:25 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-27 10:25 - 2013-11-27 10:25 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-27 10:25 - 2013-11-27 10:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-27 10:25 - 2013-11-27 10:25 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-27 10:25 - 2013-11-27 10:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-27 10:23 - 2013-11-27 10:29 - 00011300 _____ C:\Windows\IE11_main.log
2013-11-20 22:51 - 2013-11-20 22:54 - 00000000 ____D C:\Users\hp\Desktop\L'Ecume des jours - LS
2013-11-14 08:04 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 08:04 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 08:04 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 08:04 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 08:04 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 08:04 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 08:04 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 08:04 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 08:04 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 08:03 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 08:03 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 08:03 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 08:03 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 08:03 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 08:03 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 08:03 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 08:03 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 08:03 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 08:03 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 08:03 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 08:03 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 08:03 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 08:03 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 08:03 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 08:03 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 08:03 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 08:03 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 08:03 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 08:03 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 08:03 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 13:01 - 2013-11-13 13:02 - 00000000 ____D C:\Users\hp\Desktop\Flashka

==================== One Month Modified Files and Folders =======

2013-12-11 13:11 - 2013-12-11 13:11 - 00009805 _____ C:\Users\hp\Desktop\FRST.txt
2013-12-11 13:10 - 2013-12-11 13:10 - 00029696 _____ C:\Users\hp\AppData\Local\MSGBOX.EXE
2013-12-11 13:10 - 2013-12-11 13:10 - 00015327 _____ C:\Users\hp\Desktop\LM.bat
2013-12-11 13:10 - 2013-12-11 13:10 - 00000000 ____D C:\FRST
2013-12-11 13:02 - 2013-12-11 13:02 - 00112640 _____ (forum.viry.cz) C:\Users\hp\Desktop\FRSTLauncher.exe
2013-12-11 13:02 - 2013-12-11 13:01 - 01928212 _____ (Farbar) C:\Users\hp\Desktop\FRST64.exe
2013-12-11 12:54 - 2012-12-06 16:44 - 00000944 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-11 12:33 - 2012-12-05 09:58 - 02072381 _____ C:\Windows\WindowsUpdate.log
2013-12-11 12:29 - 2012-12-06 16:44 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-11 12:18 - 2012-12-08 17:01 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-10 16:07 - 2013-04-12 01:46 - 00000000 ____D C:\Program Files (x86)\RelevantKnowledge
2013-12-10 14:19 - 2009-07-14 05:45 - 00015024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-10 14:19 - 2009-07-14 05:45 - 00015024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-10 14:17 - 2009-07-14 16:18 - 00667108 _____ C:\Windows\system32\perfh005.dat
2013-12-10 14:17 - 2009-07-14 16:18 - 00140514 _____ C:\Windows\system32\perfc005.dat
2013-12-10 14:17 - 2009-07-14 06:13 - 01578962 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-10 14:11 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-10 14:11 - 2009-07-14 05:51 - 00047482 _____ C:\Windows\setupact.log
2013-12-10 14:08 - 2012-12-10 21:03 - 00000000 ____D C:\Users\hp\AppData\Roaming\vlc
2013-12-10 10:59 - 2013-12-10 10:59 - 00000000 ____D C:\Users\hp\Desktop\Nostalgie [Andrej Tarkovskij] (1983)
2013-12-06 08:56 - 2012-12-06 17:28 - 00053860 _____ C:\Windows\PFRO.log
2013-12-05 19:53 - 2013-05-12 23:01 - 00000663 _____ C:\Users\hp\Documents\Uninstall STAR WARS The Old Republic.log
2013-12-05 17:45 - 2013-12-05 17:45 - 00000000 ____D C:\Users\hp\AppData\Local\SWTORPerf
2013-12-05 17:44 - 2013-12-05 17:43 - 00000000 ____D C:\Users\Public\Documents\BitRaider
2013-12-05 17:44 - 2013-12-05 17:43 - 00000000 ____D C:\ProgramData\BitRaider
2013-12-05 17:08 - 2013-05-08 23:32 - 00000000 ____D C:\ProgramData\Orbit
2013-12-05 17:08 - 2013-02-28 12:24 - 00000000 ____D C:\Users\hp\Documents\My Games
2013-12-04 17:05 - 2013-12-04 17:05 - 00000000 ____D C:\Users\hp\Documents\Rockstar Games
2013-12-04 17:05 - 2013-12-04 17:05 - 00000000 ____D C:\Users\hp\AppData\Local\Chromium
2013-11-30 08:25 - 2013-11-30 08:19 - 00000055 _____ C:\Users\hp\AppData\Roaming\pcouffin.log
2013-11-30 08:25 - 2013-11-30 08:18 - 00099384 _____ C:\Users\hp\AppData\Roaming\inst.exe
2013-11-30 08:25 - 2013-11-30 08:18 - 00082816 _____ (VSO Software) C:\Users\hp\AppData\Roaming\pcouffin.sys
2013-11-30 08:25 - 2013-11-30 08:18 - 00007859 _____ C:\Users\hp\AppData\Roaming\pcouffin.cat
2013-11-30 08:25 - 2013-11-30 08:18 - 00000000 ____D C:\Users\hp\AppData\Roaming\Vso
2013-11-30 08:25 - 2013-11-30 08:18 - 00000000 ____D C:\Program Files (x86)\vso
2013-11-30 08:21 - 2013-11-30 08:21 - 00000000 ____D C:\Users\hp\Documents\ConvertXtoDVD
2013-11-30 08:19 - 2013-11-30 08:18 - 00000000 ____D C:\Users\hp\Documents\PcSetup
2013-11-30 08:19 - 2013-11-30 08:18 - 00000000 ____D C:\ProgramData\VSO
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Users\hp\AppData\Roaming\Real
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Users\hp\AppData\Local\Real
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\ProgramData\Real
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Program Files (x86)\Real Alternative
2013-11-30 08:12 - 2013-11-30 08:12 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-11-30 07:04 - 2013-11-30 07:04 - 00003584 _____ C:\Users\hp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-30 06:56 - 2013-11-30 06:56 - 00000000 ____D C:\videodvdmaker
2013-11-30 06:56 - 2013-11-30 06:56 - 00000000 ____D C:\Users\hp\AppData\Roaming\Video DVD Maker FREE
2013-11-27 22:47 - 2012-12-05 10:01 - 00001397 _____ C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-27 22:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-27 20:49 - 2012-12-06 16:44 - 00003940 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-27 20:49 - 2012-12-06 16:44 - 00003688 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-27 10:29 - 2013-11-27 10:23 - 00011300 _____ C:\Windows\IE11_main.log
2013-11-27 10:25 - 2013-11-27 10:25 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-27 10:25 - 2013-11-27 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-27 10:25 - 2013-11-27 10:25 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-27 10:25 - 2013-11-27 10:25 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-27 10:25 - 2013-11-27 10:25 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-27 10:25 - 2013-11-27 10:25 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-27 10:25 - 2013-11-27 10:25 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-27 10:25 - 2013-11-27 10:25 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-27 10:25 - 2013-11-27 10:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-27 10:25 - 2013-11-27 10:25 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-27 10:25 - 2013-11-27 10:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-27 10:25 - 2013-11-27 10:25 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-27 10:25 - 2013-11-27 10:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-21 13:21 - 2013-09-24 15:59 - 00000000 ____D C:\Users\hp\Desktop\Hrozby
2013-11-20 22:54 - 2013-11-20 22:51 - 00000000 ____D C:\Users\hp\Desktop\L'Ecume des jours - LS
2013-11-18 00:01 - 2012-12-07 00:49 - 00000000 ____D C:\Users\hp\AppData\Roaming\BitLord
2013-11-17 19:47 - 2012-12-07 00:37 - 00000000 ____D C:\Users\hp\Documents\BitLord
2013-11-16 10:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-15 08:43 - 2012-12-06 17:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 13:02 - 2013-11-13 13:01 - 00000000 ____D C:\Users\hp\Desktop\Flashka
2013-11-13 12:25 - 2013-09-24 16:05 - 00000000 ____D C:\Users\hp\Desktop\Aleš - Hrozby
2013-11-11 05:50 - 2012-12-06 16:48 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\hp\AppData\Local\Temp\AutoRun.exe
C:\Users\hp\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\hp\AppData\Local\Temp\bassmod.dll
C:\Users\hp\AppData\Local\Temp\eauninstall.exe
C:\Users\hp\AppData\Local\Temp\The Battle for Middle-earth_uninst.exe
C:\Users\hp\AppData\Local\Temp\tmp8471.exe
C:\Users\hp\AppData\Local\Temp\_is9FD0.exe
C:\Users\hp\AppData\Local\Temp\_isED6B.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-16 16:42

Zdravím, stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po té proběhne sken a po jeho skončení klikni na Report a to co na Tebe vypadne mi sem zkopíruj.


Pak použij Mbam z mého podpisu a také i z něj mi sem dej log, předem nic nemazat !

Adw Cleaner:

# AdwCleaner v3.015 - Report created 11/12/2013 at 19:09:39
# Updated 10/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : hp - HP-PC
# Running from : C:\Users\hp\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : RelevantKnowledge

***** [ Files / Folders ] *****

Folder Found C:\Program Files (x86)\BitLord 2
Folder Found C:\Program Files (x86)\RelevantKnowledge
Folder Found C:\ProgramData\apn
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
Folder Found C:\Users\hp\AppData\Roaming\BitLord
Folder Found C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord
Folder Found C:\Users\hp\AppData\Roaming\OpenCandy
Folder Found C:\Users\hp\Documents\BitLord

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\Software\InstallIQ
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D08D9F98-1C78-4704-87E6-368B0023D831}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1469 octets] - [11/12/2013 19:06:02]
AdwCleaner[R1].txt - [1389 octets] - [11/12/2013 19:09:39]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1449 octets] ##########

Mbam:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.12.11.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
hp :: HP-PC [administrátor]

Ochrana: Povolena

11.12.2013 19:12:58
MBAM-log-2013-12-11 (19-17-29).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 222431
Uplynulý čas: 3 minut, 50 sekund

Nalezené procesy v paměti: 4
C:\Program Files (x86)\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> 2268 -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe (PUP.Adware.RelevantKnowledge) -> 4592 -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe (PUP.Adware.RelevantKnowledge) -> 4656 -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe (PUP.Adware.RelevantKnowledge) -> 3672 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 1
C:\Windows\System32\rlls.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.

Nalezené klíče v registru: 2
HKLM\SYSTEM\CurrentControlSet\Services\RelevantKnowledge (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 4
C:\Program Files (x86)\RelevantKnowledge (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Users\hp\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\hp\AppData\Roaming\OpenCandy\43071AB4777E499DB37EBE33195BCD6F (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 21
C:\Windows\System32\rlls.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Users\hp\Local Settings\Temporary Internet Files\Content.IE5\Y3BCZQXX\vioplayer2_d3795643[1].exe (PUP.Optional.InstallIQ) -> Nebyla provedena žádná instrukce.
C:\Windows\AutoKMS.exe (Riskware.Keygen) -> Nebyla provedena žádná instrukce.
C:\Windows\System32\rlls.dll (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Windows\SysWOW64\rlls.dll (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\ncncf.dat (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\nscf.dat (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\readme.txt (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlls.dll (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rlls64.dll (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\RelevantKnowledge\rloci.bin (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Users\hp\AppData\Roaming\OpenCandy\43071AB4777E499DB37EBE33195BCD6F\TuneUpUtilities2013_2200329_cs-CZ.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)

Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po té proběhne sken a po jeho skončení klikni na Report a to co na Tebe vypadne mi sem zkopíruj.


To co Mbam našel nech vše smazat a pak mi sem dej zase log.

AdwCleaner:

# AdwCleaner v3.015 - Report created 11/12/2013 at 22:10:07
# Updated 10/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : hp - HP-PC
# Running from : C:\Users\hp\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found C:\Program Files (x86)\BitLord 2
Folder Found C:\ProgramData\apn
Folder Found C:\Users\hp\AppData\Roaming\BitLord
Folder Found C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord
Folder Found C:\Users\hp\Documents\BitLord

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\Software\InstallIQ

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1469 octets] - [11/12/2013 19:06:02]
AdwCleaner[R1].txt - [1529 octets] - [11/12/2013 19:09:39]
AdwCleaner[R2].txt - [1113 octets] - [11/12/2013 22:10:07]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1173 octets] ##########

Znovu spusť AdwCleaner ale tentokrát klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zase zkopíruj Report.


Pak bych ještě rád viděl ten log z Mbam po smazání.

AdwCleaner:

# AdwCleaner v3.015 - Report created 13/12/2013 at 13:20:36
# Updated 10/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : hp - HP-PC
# Running from : C:\Users\hp\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\Program Files (x86)\BitLord 2
Folder Deleted : C:\Users\hp\AppData\Roaming\BitLord
Folder Deleted : C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord
Folder Deleted : C:\Users\hp\Documents\BitLord

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\Software\InstallIQ

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1469 octets] - [11/12/2013 19:06:02]
AdwCleaner[R1].txt - [1529 octets] - [11/12/2013 19:09:39]
AdwCleaner[R2].txt - [1253 octets] - [11/12/2013 22:10:07]
AdwCleaner[R3].txt - [1313 octets] - [13/12/2013 13:20:07]
AdwCleaner[S0].txt - [1258 octets] - [13/12/2013 13:20:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1318 octets] ##########

Mbam:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.12.11.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
hp :: HP-PC [administrátor]

Ochrana: Povolena

13.12.2013 13:24:18
mbam-log-2013-12-13 (13-24-18).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 221988
Uplynulý čas: 4 minut, 50 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

Potom, co zapnu ComboFix jako správce, tak okamžitě začne nějaké načítání, které se vždy ve stejném místě zasekne. Ve zmíněném návodu jsem nenašel nic co by se o tomto zmiňovalo, takže nevím, co dělám špatně.

Zkus ho spustit v Nouzovém režimu.