přesměrování na ultrafiles.net po druhé

Zpráva

Vr9 · #1 Příspěvek od **Vr9** » 27 Led 2014 13:53

Dobrý den, mám stejné problém jako uživatel Lgrep v tématu "přesměrování internetu" tzn. pokaždé když kliknu na nějaký odkaz na stránce tak mi to přesměruje na www.ultrafiles.net.....prosím o pomoc s řešením problému. reinstalovat widle se mi nechce. díky. mám win7 ulitmate x64 SP1

udělal sem Shortcut Cleaner:

Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
http://www.bleepingcomputer.com/downloa ... t-cleaner/

Windows Version: Windows 7 Ultimate Service Pack 1
Program started at: 01/26/2014 11:41:29 AM.

Scanning for registry hijacks:

* No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

Searching C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Users\Public\Desktop\

Searching C:\Users\Martin\Desktop

0 bad shortcuts found.

Program finished at: 01/26/2014 11:41:32 AM
Execution time: 0 hours(s), 0 minute(s), and 2 seconds(s)

Junkware Removal Tool:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Ultimate x64
Ran by Martin on ne 26.01.2014 at 11:48:24,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\icq service.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\secman.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\driverscanner
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\icqtoolbar.iehook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\icqtoolbar.iehook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\s
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\icqtoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\caphyon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\driverscanner_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\driverscanner_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ApnSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ApnSetup_RASMANCS
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\askpartnernetwork"

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\w3i"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\Martin\AppData\Roaming\drivercure"
Failed to delete: [Folder] "C:\Program Files (x86)\icq6toolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"
Successfully deleted: [Folder] "C:\Program Files (x86)\w3i"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Folder] "C:\ProgramData\AskPartnerNetwork"
Successfully deleted: [Folder] "C:\Program Files (x86)\askpartnernetwork"

~~~ FireFox

Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\9osfrke8.default\user.js
Successfully deleted the following from C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\9osfrke8.default\prefs.js

user_pref("extensions.SGT-V7.domain", "\"www.search.ask.com\"");
user_pref("extensions.TBPLATFORM_NS_PH.searchconf", "{\n \"google\" : {\n \"urlexp\" : \"hxxp(s)?:\\\\/\\\\/www\\\\.google\\\\..*\\\\/.*[?#&]q=([^&]+)\",\n \"rankomet
user_pref("surfcanyon.add_craigslist_images", true);
user_pref("surfcanyon.chummo_enabled", true);
user_pref("surfcanyon.deals_enabled", true);
user_pref("surfcanyon.display_coupons_enabled", false);
user_pref("surfcanyon.display_similar_product_images_enabled", true);
user_pref("surfcanyon.dynamic_preferences_timestamp", "1390730035283");
user_pref("surfcanyon.get_recs_on_sr_click", true);
user_pref("surfcanyon.initialized_chummo", true);
user_pref("surfcanyon.initialized_deals", true);
user_pref("surfcanyon.initialized_display_coupons", true);
user_pref("surfcanyon.initialized_display_similar_product_images", true);
user_pref("surfcanyon.initialized_roaming_suggestions", true);
user_pref("surfcanyon.initialized_search_accelerator", true);
user_pref("surfcanyon.initialized_search_links", true);
user_pref("surfcanyon.inst_id", "165973044799920145717578261471772");
user_pref("surfcanyon.inst_timestamp", "1372324577745");
user_pref("surfcanyon.last_displayed_refinements", "");
user_pref("surfcanyon.last_displayed_refinements_timestamp", "0");
user_pref("surfcanyon.last_seen_splash", "501");
user_pref("surfcanyon.max_num_recs", "3");
user_pref("surfcanyon.partner_code", "WTIFFRWO");
user_pref("surfcanyon.refinements_cache", "itunes/itunes:movies:ipod:itunes store:ios^davis cup 2013/davis cup 2013:teams:group:novak djokovic^guess/guess:women:accessories:je
user_pref("surfcanyon.rm_north", false);
user_pref("surfcanyon.rm_other", false);
user_pref("surfcanyon.roaming_suggestions_enabled", true);
user_pref("surfcanyon.search_accelerator_enabled", false);
user_pref("surfcanyon.search_links_enabled", true);
user_pref("surfcanyon.server_error_time", "");
user_pref("surfcanyon.server_error_url", "");
user_pref("surfcanyon.ss_page_links_enabled", true);
Emptied folder: C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\9osfrke8.default\minidumps [177 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 26.01.2014 at 11:51:34,05
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
AdwCleaner:

# AdwCleaner v3.017 - Report created 26/01/2014 at 12:08:24
# Updated 12/01/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Martin - MARTIN-PC
# Running from : C:\Users\Martin\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : APNMCP
Service Deleted : ICQ Service

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\ProgramData\Uniblue\DriverScanner
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Users\Martin\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Martin\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\{75623D5D-4683-402A-B610-AC4BAB767C86}
File Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\toolbar-tbplatform@alexa.com.xpi
File Deleted : C:\Users\Martin\AppData\Local\Temp\Uninstall.exe

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\ICQ\ICQToolbar
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKLM\Software\AskPartnerNetwork
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\Myfree Codec
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16490

-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\prefs.js ]

Line Deleted : user_pref("extensions.SGT-V7.domain", "\"www.search.ask.com\"");
Line Deleted : user_pref("extensions.enabledAddons", "toolbar-tbplatform%40alexa.com:2.1,%7B75623d5d-4683-402a-b610-ac4bab767c86%7D:5.2.2,%7Bea614400-e918-4741-9a97-7a972ff7c30b%7D:2.5.15,%7BF003DA68-8256-4b37-A6C4-[...]
Line Deleted : user_pref("icqtoolbar.showPc", false);
Line Deleted : user_pref("surfcanyon.add_craigslist_images", true);
Line Deleted : user_pref("surfcanyon.display_coupons_enabled", false);
Line Deleted : user_pref("surfcanyon.dynamic_preferences_timestamp", "1390734306250");
Line Deleted : user_pref("surfcanyon.get_recs_on_sr_click", true);
Line Deleted : user_pref("surfcanyon.inst_id", "56460422403928323063730249991129");
Line Deleted : user_pref("surfcanyon.inst_timestamp", "1390734306191");
Line Deleted : user_pref("surfcanyon.last_seen_splash", "522");
Line Deleted : user_pref("surfcanyon.max_num_recs", "3");
Line Deleted : user_pref("surfcanyon.partner_code", "SC");
Line Deleted : user_pref("surfcanyon.ss_page_links_enabled", false);

-\\ Google Chrome v

[ File : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [4696 octets] - [26/01/2014 12:07:45]
AdwCleaner[S0].txt - [4551 octets] - [26/01/2014 12:08:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4611 octets] ##########

Vr9 · #2 Příspěvek od **Vr9** » 27 Led 2014 14:04

dále jsem restartoval router a stáhl MBAM a udělal kontrolu. nic nemazal. čekám na posouzení.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.27.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Martin :: MARTIN-PC [administrátor]

27.1.2014 13:59:07
MBAM-log-2014-01-27 (14-03-06).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 210047
Uplynulý čas: 3 minut, 35 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 5
C:\ProgramData\YTD YouTube Downloader & Converter\ytd_installer.exe (PUP.Optional.Spigot.A) -> Nebyla provedena žádná instrukce.
C:\Users\Martin\AppData\Local\Temp\XvYhWiV1.exe.part (Adware.InstallBrain) -> Nebyla provedena žádná instrukce.
C:\Users\Martin\AppData\Local\Temp\Сodec Performer804287.exe (Adware.InstallBrain) -> Nebyla provedena žádná instrukce.
C:\Users\Martin\AppData\Local\Temp\ibtmpd366498\component_649 (PUP.Optional.SpeedAnalysis.A) -> Nebyla provedena žádná instrukce.
C:\Users\Martin\AppData\Local\Temp\is-MEBP9.tmp\precomp042.exe (Trojan.Agent.H) -> Nebyla provedena žádná instrukce.

(konec)

#3 Příspěvek od **vyosek** » 27 Led 2014 14:23

Zdravim

Nalezy smazte

Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna doamci verze

Vr9 · #4 Příspěvek od **Vr9** » 27 Led 2014 14:35

nálezy smazány.

Ano, systém je legální.

zatím to vypadá, že je vše v pořádku, přesměrování se již neděje. díky

#5 Příspěvek od **vyosek** » 27 Led 2014 14:36

Udelejte nyni kompletni kontrolu pomoci MBAM

Dejte log z FRSTL http://forum.viry.cz/viewtopic.php?f=13&t=133100

Vr9 · #6 Příspěvek od **Vr9** » 27 Led 2014 16:03

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Martin (administrator) on MARTIN-PC on 27-01-2014 16:02:01
Running from C:\Users\Martin\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\SysWOW64\ASGT.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Seagate) C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Seagate) C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Seagate) C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Allstar Group, s.r.o.) C:\Program Files\GamePark2\gpcl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ArcSoft Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(ABBYY (BIT Software)) C:\Program Files (x86)\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [4081008 2013-02-24] (ESET)
HKLM\...\Run: [Seagate Scheduler2 Service] - C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [395144 2011-04-29] (Seagate)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [2419512 2012-11-04] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [DiscWizardMonitor.exe] - C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe [2638128 2011-04-29] (Seagate)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-02] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-04-02] (cyberlink)
HKLM-x32\...\Run: [DelReg] - C:\Program Files (x86)\MSI\DualCoreCenter\DelReg.exe
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [FineReader7NewsReaderPro] - C:\Program Files (x86)\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe [278528 2003-09-12] (ABBYY (BIT Software))
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] ()
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-06-24] (ICQ, LLC.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1641896 2013-06-06] (Valve Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-12-25] (Google Inc.)

==================== Internet (Whitelisted) ====================

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.20

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: seznam.cz
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Martin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Martin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2013-11-14]
FF Extension: Ask Toolbar - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\toolbar_SGT-V7@apn.ask.com.xpi [2013-11-07]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-02-24]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-06-24]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-02-24]

Chrome:
=======
CHR HomePage: hxxp://seznam.cz/
CHR Plugin: (Shockwave Flash) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\32.0.1700.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Martin\AppData\Local\Google\Chrome\Application\32.0.1700.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Extension: (Dokumenty Google) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-24]
CHR Extension: (Disk Google) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-24]
CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-24]
CHR Extension: (Vyhledávání Google) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-24]
CHR Extension: (Logitech SetPoint) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd [2013-06-24]
CHR Extension: (Peněženka Google) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-06]
CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-24]
CHR HKLM-x32\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-24]

==================== Services (Whitelisted) =================

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [913144 2012-03-07] (ESET)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2013-06-28] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [214520 2014-01-26] ()

==================== Drivers (Whitelisted) ====================

R1 ArcSec; C:\Windows\System32\drivers\ArcSec.sys [312184 2010-09-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-24] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [209768 2012-03-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [148528 2012-03-14] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2012-03-14] (ESET)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-05-22] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-02] (Logitech Inc.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2013-06-24] (Acronis)
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl [146928 2010-04-02] (CyberLink Corp.)
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [x]
S3 MSIGreenPower; \??\C:\Program Files (x86)\MSI\DualCoreCenter\Green Power Center\NTGLM7X64.sys [x]
S3 MSIGreenPowerRushTop; \??\C:\Program Files (x86)\MSI\DualCoreCenter\Green Power Center\RushTop64.sys [x]
S3 RushTopDevice_J; \??\C:\Program Files (x86)\MSI\DualCoreCenter\Green Power Center\RushJ64.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-01-27 16:02 - 2014-01-27 16:02 - 00017259 _____ C:\Users\Martin\Desktop\FRST.txt
2014-01-27 16:01 - 2014-01-27 16:01 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-27 16:01 - 2014-01-27 16:01 - 00000000 ____D C:\FRST
2014-01-27 16:00 - 2014-01-27 16:00 - 02078208 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-01-26 12:07 - 2014-01-26 12:08 - 00000000 ____D C:\AdwCleaner
2014-01-26 11:51 - 2014-01-26 11:51 - 00006360 _____ C:\Users\Martin\Desktop\JRT.txt
2014-01-26 11:42 - 2014-01-26 11:42 - 00000000 ____D C:\Windows\ERUNT
2014-01-26 11:41 - 2014-01-26 11:41 - 00001794 _____ C:\sc-cleaner.txt
2014-01-26 11:40 - 2014-01-26 11:40 - 01236282 _____ C:\Users\Martin\Desktop\adwcleaner.exe
2014-01-26 11:40 - 2014-01-26 11:40 - 01037068 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-26 11:39 - 2014-01-26 11:39 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Martin\Desktop\sc-cleaner.exe
2014-01-24 12:45 - 2014-01-24 12:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Command & Conquer 3 Kane's Wrath
2014-01-24 12:44 - 2014-01-24 12:44 - 00001929 _____ C:\Users\Martin\Desktop\Command & Conquer 3 Kane's Wrath.lnk
2014-01-24 12:19 - 2014-01-24 12:19 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2014-01-24 12:17 - 2014-01-24 12:17 - 00001761 _____ C:\Users\Martin\Desktop\Command & Conquer 3.lnk
2014-01-24 12:13 - 2014-01-24 12:41 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2014-01-23 15:25 - 2014-01-23 15:25 - 00000846 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2014-01-23 15:25 - 2014-01-23 15:25 - 00000822 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-01-23 14:47 - 2014-01-23 15:21 - 00000000 ____D C:\Program Files\Battlefield 4
2014-01-22 15:37 - 2014-01-22 15:37 - 00001072 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-22 15:37 - 2009-02-20 00:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2014-01-21 13:57 - 2014-01-21 13:57 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00000000 ____D C:\Program Files (x86)\OpenAL
2014-01-21 13:55 - 2012-12-10 16:21 - 00163376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx
2014-01-21 13:55 - 2012-11-26 11:10 - 00221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx
2014-01-21 13:55 - 2012-07-06 20:03 - 00617816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx
2014-01-21 13:55 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71deu.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ita.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71fra.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71esp.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71enu.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71kor.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71jpn.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71cht.dll
2014-01-21 13:55 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71chs.dll
2014-01-21 13:55 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-01-21 13:55 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll
2014-01-21 13:55 - 2010-02-16 14:22 - 00659264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomct2.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00443488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshflxgd.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00415552 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00278352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00258880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00252240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatlst.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00222528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dblist32.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00218432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00215880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mci32.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00178512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmask32.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00170080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00136008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00126800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswinsck.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00119616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomm32.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00107840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstkprp.dll
2014-01-21 13:55 - 2010-02-16 14:22 - 00100160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\picclp32.ocx
2014-01-21 13:55 - 2010-02-16 14:22 - 00080208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx
2014-01-21 13:55 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ita.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70fra.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70esp.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70deu.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70enu.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70kor.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70jpn.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70cht.dll
2014-01-21 13:55 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70chs.dll
2014-01-21 13:55 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl70.dll
2014-01-21 13:55 - 2006-04-10 13:41 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomctl32.ocx
2014-01-21 13:55 - 2001-08-23 00:00 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll
2014-01-21 13:55 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb40032.dll
2014-01-21 13:55 - 1993-07-23 19:31 - 00210944 _____ C:\Windows\SysWOW64\msvcrt10.dll
2014-01-21 13:37 - 2014-01-21 13:37 - 00001220 _____ C:\Users\Public\Desktop\Crysis 3 v1.0.1.3.lnk
2014-01-21 13:21 - 2014-01-21 13:37 - 00000000 ____D C:\Program Files (x86)\Crysis 3 v1.0.1.3 - Repack by Danik1B9
2014-01-20 20:05 - 2014-01-20 20:13 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-20 20:05 - 2014-01-20 20:05 - 00000000 ____D C:\Users\Martin\Documents\StarCraft II
2014-01-20 20:03 - 2014-01-20 20:03 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-20 12:44 - 2014-01-20 12:47 - 00001822 _____ C:\Users\Public\Desktop\Need for Speed Rivals (64 bit).lnk
2014-01-17 13:55 - 2014-01-17 13:55 - 00000000 ____D C:\Users\Martin\AppData\Local\NVIDIA Corporation
2014-01-17 13:51 - 2014-01-23 14:45 - 00000000 ____D C:\Users\Martin\AppData\Local\NVIDIA
2014-01-17 13:51 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-17 13:51 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-17 13:49 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-17 13:49 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-17 13:49 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-17 13:49 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-17 13:49 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-17 13:49 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-17 13:49 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-17 13:49 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-17 07:49 - 2014-01-17 07:49 - 00000000 ____D C:\Users\Martin\Documents\Ghost Games
2014-01-17 07:28 - 2014-01-21 11:14 - 00000000 ____D C:\Program Files\Need for Speed Rivals
2014-01-16 12:10 - 2014-01-16 12:10 - 00000929 _____ C:\Users\Public\Desktop\Call of Duty - Ghosts.lnk
2014-01-16 10:36 - 2014-01-16 10:38 - 00000000 ____D C:\Users\Martin\Documents\Battlefield 4
2014-01-16 09:40 - 2014-01-16 09:40 - 00001125 _____ C:\Users\Martin\Desktop\Mafia II.lnk
2014-01-16 09:40 - 2014-01-16 09:40 - 00000000 ____D C:\Users\Martin\AppData\Local\2K Games
2014-01-16 09:30 - 2014-01-16 09:30 - 00001682 _____ C:\Users\Martin\Desktop\WRC4.lnk
2014-01-16 09:28 - 2014-01-16 09:40 - 00000000 ____D C:\Program Files (x86)\Mafia II Kompletní Edice
2014-01-16 09:20 - 2014-01-16 09:27 - 00000000 ____D C:\Program Files (x86)\WRC 4 FIA World Rally Championship
2014-01-09 23:19 - 2014-01-09 23:19 - 00001821 _____ C:\Users\Martin\Desktop\FineReader.lnk
2014-01-09 22:20 - 2014-01-09 22:25 - 00000000 ____D C:\Users\Martin\AppData\Local\ABBYY
2014-01-09 22:20 - 2014-01-09 22:20 - 00000000 ____D C:\Users\Martin\AppData\Roaming\ABBYY
2014-01-09 22:18 - 2014-01-09 22:18 - 00000000 ____D C:\ProgramData\ABBYY
2014-01-09 22:17 - 2014-01-09 22:19 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 7.0 Professional Edition
2014-01-06 17:33 - 2014-01-06 17:33 - 00001049 _____ C:\Users\Public\Desktop\ASUS GPU Tweak.lnk
2014-01-06 17:33 - 2014-01-06 17:33 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2014-01-06 17:33 - 2014-01-06 17:33 - 00000000 ____D C:\Program Files (x86)\ASUS
2014-01-06 17:32 - 2014-01-06 17:32 - 00000000 ____D C:\Windows\Downloaded Installations
2014-01-06 17:25 - 2014-01-06 17:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-06 17:24 - 2013-09-12 08:25 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-06 11:06 - 2013-09-12 16:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2014-01-06 11:06 - 2013-09-12 16:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2014-01-06 10:59 - 2013-12-19 06:01 - 03539040 _____ C:\Windows\system32\nvcoproc.bin
2014-01-05 16:56 - 2014-01-05 16:56 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Seagate
2014-01-01 23:09 - 2014-01-01 23:09 - 00001568 _____ C:\Users\Martin\Desktop\Vypnout.lnk
2014-01-01 23:07 - 2014-01-01 23:07 - 00000000 ____D C:\Program Files (x86)\Vypínač na dobrou noc
2013-12-29 17:57 - 2013-12-29 17:57 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo

==================== One Month Modified Files and Folders =======

2014-01-27 16:02 - 2014-01-27 16:02 - 00017259 _____ C:\Users\Martin\Desktop\FRST.txt
2014-01-27 16:01 - 2014-01-27 16:01 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-27 16:01 - 2014-01-27 16:01 - 00000000 ____D C:\FRST
2014-01-27 16:01 - 2013-06-26 20:40 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 16:00 - 2014-01-27 16:00 - 02078208 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-01-27 16:00 - 2013-02-24 16:42 - 01431654 _____ C:\Windows\WindowsUpdate.log
2014-01-27 15:56 - 2013-07-03 00:04 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-27 15:56 - 2013-06-24 21:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2014-01-27 15:55 - 2013-10-05 15:34 - 00000246 ____H C:\Windows\Tasks\C__tvonline.exe.job
2014-01-27 15:55 - 2013-06-26 20:40 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-27 15:55 - 2013-06-24 19:12 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-27 15:55 - 2010-11-21 04:47 - 00023662 _____ C:\Windows\PFRO.log
2014-01-27 15:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-27 15:55 - 2009-07-14 05:51 - 00027589 _____ C:\Windows\setupact.log
2014-01-27 15:53 - 2013-06-24 21:07 - 00000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2014-01-27 15:49 - 2013-12-25 19:43 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000UA.job
2014-01-27 15:46 - 2013-06-24 22:16 - 00000000 ____D C:\Torrenty
2014-01-27 15:08 - 2013-11-13 14:26 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-27 14:39 - 2009-07-14 05:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 14:39 - 2009-07-14 05:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 14:13 - 2013-06-25 13:02 - 00000000 ____D C:\ProgramData\YTD YouTube Downloader & Converter
2014-01-26 22:05 - 2013-06-25 12:31 - 00000000 ____D C:\Users\Martin\AppData\Local\FullTiltPoker
2014-01-26 22:05 - 2013-06-25 12:31 - 00000000 ____D C:\Program Files (x86)\Full Tilt Poker
2014-01-26 20:33 - 2013-06-28 19:58 - 00214520 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-26 20:33 - 2013-06-25 16:30 - 00214520 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-26 19:49 - 2013-12-25 19:43 - 00000914 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000Core.job
2014-01-26 12:08 - 2014-01-26 12:07 - 00000000 ____D C:\AdwCleaner
2014-01-26 12:08 - 2013-06-27 10:20 - 00000000 ____D C:\ProgramData\Uniblue
2014-01-26 12:08 - 2013-06-24 21:47 - 00000000 ____D C:\ProgramData\ICQ
2014-01-26 11:51 - 2014-01-26 11:51 - 00006360 _____ C:\Users\Martin\Desktop\JRT.txt
2014-01-26 11:42 - 2014-01-26 11:42 - 00000000 ____D C:\Windows\ERUNT
2014-01-26 11:41 - 2014-01-26 11:41 - 00001794 _____ C:\sc-cleaner.txt
2014-01-26 11:40 - 2014-01-26 11:40 - 01236282 _____ C:\Users\Martin\Desktop\adwcleaner.exe
2014-01-26 11:40 - 2014-01-26 11:40 - 01037068 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-26 11:39 - 2014-01-26 11:39 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Martin\Desktop\sc-cleaner.exe
2014-01-24 12:45 - 2014-01-24 12:45 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Command & Conquer 3 Kane's Wrath
2014-01-24 12:44 - 2014-01-24 12:44 - 00001929 _____ C:\Users\Martin\Desktop\Command & Conquer 3 Kane's Wrath.lnk
2014-01-24 12:44 - 2013-06-25 12:35 - 00187649 _____ C:\Windows\DirectX.log
2014-01-24 12:41 - 2014-01-24 12:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2014-01-24 12:19 - 2014-01-24 12:19 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2014-01-24 12:17 - 2014-01-24 12:17 - 00001761 _____ C:\Users\Martin\Desktop\Command & Conquer 3.lnk
2014-01-23 15:25 - 2014-01-23 15:25 - 00000846 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2014-01-23 15:25 - 2014-01-23 15:25 - 00000822 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-01-23 15:21 - 2014-01-23 14:47 - 00000000 ____D C:\Program Files\Battlefield 4
2014-01-23 14:45 - 2014-01-17 13:51 - 00000000 ____D C:\Users\Martin\AppData\Local\NVIDIA
2014-01-22 15:37 - 2014-01-22 15:37 - 00001072 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-22 15:37 - 2013-06-25 10:26 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2014-01-21 13:57 - 2014-01-21 13:57 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-21 13:57 - 2014-01-21 13:57 - 00000000 ____D C:\Program Files (x86)\OpenAL
2014-01-21 13:43 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-21 13:37 - 2014-01-21 13:37 - 00001220 _____ C:\Users\Public\Desktop\Crysis 3 v1.0.1.3.lnk
2014-01-21 13:37 - 2014-01-21 13:21 - 00000000 ____D C:\Program Files (x86)\Crysis 3 v1.0.1.3 - Repack by Danik1B9
2014-01-21 13:37 - 2013-06-30 11:50 - 00000000 ____D C:\Windows\SysWOW64\directx
2014-01-21 11:23 - 2013-06-24 19:56 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2014-01-21 11:22 - 2013-11-13 14:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-21 11:22 - 2013-11-13 14:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-21 11:22 - 2013-11-13 14:26 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-21 11:14 - 2014-01-17 07:28 - 00000000 ____D C:\Program Files\Need for Speed Rivals
2014-01-20 20:13 - 2014-01-20 20:05 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-20 20:05 - 2014-01-20 20:05 - 00000000 ____D C:\Users\Martin\Documents\StarCraft II
2014-01-20 20:03 - 2014-01-20 20:03 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-20 12:47 - 2014-01-20 12:44 - 00001822 _____ C:\Users\Public\Desktop\Need for Speed Rivals (64 bit).lnk
2014-01-17 13:55 - 2014-01-17 13:55 - 00000000 ____D C:\Users\Martin\AppData\Local\NVIDIA Corporation
2014-01-17 13:55 - 2013-06-24 19:11 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-17 13:51 - 2013-06-24 19:12 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-17 13:51 - 2013-06-24 18:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-17 11:02 - 2013-06-25 10:30 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2014-01-17 07:49 - 2014-01-17 07:49 - 00000000 ____D C:\Users\Martin\Documents\Ghost Games
2014-01-17 02:56 - 2013-06-24 21:41 - 00002378 _____ C:\Users\Martin\Desktop\Google Chrome.lnk
2014-01-16 12:10 - 2014-01-16 12:10 - 00000929 _____ C:\Users\Public\Desktop\Call of Duty - Ghosts.lnk
2014-01-16 10:38 - 2014-01-16 10:36 - 00000000 ____D C:\Users\Martin\Documents\Battlefield 4
2014-01-16 09:40 - 2014-01-16 09:40 - 00001125 _____ C:\Users\Martin\Desktop\Mafia II.lnk
2014-01-16 09:40 - 2014-01-16 09:40 - 00000000 ____D C:\Users\Martin\AppData\Local\2K Games
2014-01-16 09:40 - 2014-01-16 09:28 - 00000000 ____D C:\Program Files (x86)\Mafia II Kompletní Edice
2014-01-16 09:40 - 2013-06-30 13:21 - 00000000 ____D C:\Users\Martin\AppData\Local\SKIDROW
2014-01-16 09:30 - 2014-01-16 09:30 - 00001682 _____ C:\Users\Martin\Desktop\WRC4.lnk
2014-01-16 09:27 - 2014-01-16 09:20 - 00000000 ____D C:\Program Files (x86)\WRC 4 FIA World Rally Championship
2014-01-13 19:25 - 2013-06-27 10:15 - 00000954 _____ C:\Users\Martin\Desktop\Core Temp.lnk
2014-01-13 14:26 - 2013-06-24 19:33 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-01-13 14:26 - 2013-06-24 19:33 - 00001096 _____ C:\Windows\LkmdfCoInst.log
2014-01-09 23:19 - 2014-01-09 23:19 - 00001821 _____ C:\Users\Martin\Desktop\FineReader.lnk
2014-01-09 22:25 - 2014-01-09 22:20 - 00000000 ____D C:\Users\Martin\AppData\Local\ABBYY
2014-01-09 22:20 - 2014-01-09 22:20 - 00000000 ____D C:\Users\Martin\AppData\Roaming\ABBYY
2014-01-09 22:19 - 2014-01-09 22:17 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 7.0 Professional Edition
2014-01-09 22:18 - 2014-01-09 22:18 - 00000000 ____D C:\ProgramData\ABBYY
2014-01-09 19:31 - 2013-06-24 21:47 - 00000000 ____D C:\Users\Martin\AppData\Roaming\ICQ
2014-01-06 17:33 - 2014-01-06 17:33 - 00001049 _____ C:\Users\Public\Desktop\ASUS GPU Tweak.lnk
2014-01-06 17:33 - 2014-01-06 17:33 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2014-01-06 17:33 - 2014-01-06 17:33 - 00000000 ____D C:\Program Files (x86)\ASUS
2014-01-06 17:33 - 2013-06-24 21:15 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-06 17:32 - 2014-01-06 17:32 - 00000000 ____D C:\Windows\Downloaded Installations
2014-01-06 17:30 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-06 17:25 - 2014-01-06 17:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-05 16:56 - 2014-01-05 16:56 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Seagate
2014-01-02 10:11 - 2013-02-24 19:10 - 00666330 _____ C:\Windows\system32\perfh005.dat
2014-01-02 10:11 - 2013-02-24 19:10 - 00140012 _____ C:\Windows\system32\perfc005.dat
2014-01-02 10:11 - 2009-07-14 06:13 - 01576994 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-01 23:09 - 2014-01-01 23:09 - 00001568 _____ C:\Users\Martin\Desktop\Vypnout.lnk
2014-01-01 23:07 - 2014-01-01 23:07 - 00000000 ____D C:\Program Files (x86)\Vypínač na dobrou noc
2013-12-29 17:57 - 2013-12-29 17:57 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Martin\AppData\Local\Temp\GPU-Z.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Martin\AppData\Local\Temp\nvStInst.exe
C:\Users\Martin\AppData\Local\Temp\ose00000.exe
C:\Users\Martin\AppData\Local\Temp\patchw32.dll
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SCC.dll
C:\Users\Martin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Martin\AppData\Local\Temp\sfextra.dll
C:\Users\Martin\AppData\Local\Temp\SymCCIS.dll
C:\Users\Martin\AppData\Local\Temp\vlc-2.1.2-win32.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-01-19 00:34

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (System) (Fixed) (Total:561.87 GB) (Free:155.49 GB) NTFS
Drive d: (Data1) (Fixed) (Total:1486.03 GB) (Free:318.86 GB) NTFS
Drive e: (Data2) (Fixed) (Total:746.51 GB) (Free:276.15 GB) NTFS

Available physical RAM: 5963.89 MB
Total physical RAM: 8191.18 MB
Percentage of memory in use: 27%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2048 GB) (Disk ID: 6EA0766F)
Partition 1: (Not Active) - (Size=-603415642112) - (Type=07 NTFS)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=562 GB) - (Type=07 NTFS)
Disk: 1 (Size: 747 GB) (Disk ID: D8B1DEA9)
Partition 1: (Not Active) - (Size=747 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\C__tvonline.exe.job => C:\tvonline.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000Core.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000UA.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: ESET NOD32 Antivirus 5.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET NOD32 Antivirus 5.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Martin\Desktop" je 141 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#7 Příspěvek od **vyosek** » 27 Led 2014 19:05

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-02] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-04-02] (cyberlink)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [FineReader7NewsReaderPro] - C:\Program Files (x86)\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe [278528 2003-09-12] (ABBYY (BIT Software))
HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] ()
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-06-24] (ICQ, LLC.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1641896 2013-06-06] (Valve Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-12-25] (Google Inc.)

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

FF Extension: Ask Toolbar - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\toolbar_SGT-V7@apn.ask.com.xpi [2013-11-07]
CHR HKLM-x32\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-24]

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)

C:\Program Files (x86)\PANDORA.TV
2014-01-27 16:01 - 2014-01-27 16:01 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-26 11:41 - 2014-01-26 11:41 - 00001794 _____ C:\sc-cleaner.txt
2014-01-26 11:40 - 2014-01-26 11:40 - 01236282 _____ C:\Users\Martin\Desktop\adwcleaner.exe
2014-01-26 11:40 - 2014-01-26 11:40 - 01037068 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-26 11:39 - 2014-01-26 11:39 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Martin\Desktop\sc-cleaner.exe
2014-01-26 11:51 - 2014-01-26 11:51 - 00006360 _____ C:\Users\Martin\Desktop\JRT.txt
C:\Users\Martin\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Martin\AppData\Local\Temp\GPU-Z.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Martin\AppData\Local\Temp\nvStInst.exe
C:\Users\Martin\AppData\Local\Temp\ose00000.exe
C:\Users\Martin\AppData\Local\Temp\patchw32.dll
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SCC.dll
C:\Users\Martin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Martin\AppData\Local\Temp\sfextra.dll
C:\Users\Martin\AppData\Local\Temp\SymCCIS.dll
C:\Users\Martin\AppData\Local\Temp\vlc-2.1.2-win32.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\C__tvonline.exe.job => C:\tvonline.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000Core.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000UA.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Vr9 · #8 Příspěvek od **Vr9** » 28 Led 2014 12:04

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-01-2014 02
Ran by Martin at 2014-01-28 12:03:21 Run:1
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-02] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-04-02] (cyberlink)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [FineReader7NewsReaderPro] - C:\Program Files (x86)\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe [278528 2003-09-12] (ABBYY (BIT Software))
HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] ()
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-06-24] (ICQ, LLC.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1641896 2013-06-06] (Valve Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-12-25] (Google Inc.)

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

FF Extension: Ask Toolbar - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\toolbar_SGT-V7@apn.ask.com.xpi [2013-11-07]
CHR HKLM-x32\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-24]

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)

C:\Program Files (x86)\PANDORA.TV
2014-01-27 16:01 - 2014-01-27 16:01 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-26 11:41 - 2014-01-26 11:41 - 00001794 _____ C:\sc-cleaner.txt
2014-01-26 11:40 - 2014-01-26 11:40 - 01236282 _____ C:\Users\Martin\Desktop\adwcleaner.exe
2014-01-26 11:40 - 2014-01-26 11:40 - 01037068 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-26 11:39 - 2014-01-26 11:39 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Martin\Desktop\sc-cleaner.exe
2014-01-26 11:51 - 2014-01-26 11:51 - 00006360 _____ C:\Users\Martin\Desktop\JRT.txt
C:\Users\Martin\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Martin\AppData\Local\Temp\GPU-Z.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Martin\AppData\Local\Temp\nvStInst.exe
C:\Users\Martin\AppData\Local\Temp\ose00000.exe
C:\Users\Martin\AppData\Local\Temp\patchw32.dll
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SCC.dll
C:\Users\Martin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Martin\AppData\Local\Temp\sfextra.dll
C:\Users\Martin\AppData\Local\Temp\SymCCIS.dll
C:\Users\Martin\AppData\Local\Temp\vlc-2.1.2-win32.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\C__tvonline.exe.job => C:\tvonline.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000Core.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000UA.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\KiesTrayAgent => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BDRegion => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\FineReader7NewsReaderPro => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Pro Agent => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPDLR => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPreload => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => Value deleted successfully.
Default URLSearchHook was restored successfully .
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\ => Value deleted successfully.
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\9osfrke8.default\Extensions\toolbar_SGT-V7@apn.ask.com.xpi => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd => Key deleted successfully.
C:\ProgramData\Logitech\LogiSmoothChromeExt.crx => Moved successfully.
PanService => Service deleted successfully.
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
"C:\Users\Martin\Desktop\FRSTLauncher.exe" => File/Directory not found.
C:\sc-cleaner.txt => Moved successfully.
C:\Users\Martin\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Martin\Desktop\JRT.exe => Moved successfully.
C:\Users\Martin\Desktop\sc-cleaner.exe => Moved successfully.
C:\Users\Martin\Desktop\JRT.txt => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\fp_pl_pfs_installer.exe => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\GPU-Z.exe => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\nvSCPAPI64.dll => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\nvStInst.exe => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\patchw32.dll => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\SCC.dll => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\sfamcc00001.dll => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\sfextra.dll => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\SymCCIS.dll => Moved successfully.
C:\Users\Martin\AppData\Local\Temp\vlc-2.1.2-win32.exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\C__tvonline.exe.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706208566-3823113738-209939833-1000UA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

The system needs a manual reboot.

==== End of Fixlog ====

#9 Příspěvek od **vyosek** » 28 Led 2014 21:24

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Vr9 · #10 Příspěvek od **Vr9** » 29 Led 2014 10:23

Díky, uklizeno. Vše jede jak má.

#11 Příspěvek od **vyosek** » 29 Led 2014 10:44

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

přesměrování na ultrafiles.net po druhé

přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé

Re: přesměrování na ultrafiles.net po druhé