VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Kontrola logu po vyčištění zaneřáděného NTB

https://forum.viry.cz:443/viewtopic.php?t=136969

Stránka 1 z 1

Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 19 bře 2014 23:37
od fanynek
Dobrý večer všem,
prosím o kontrolu logu systému známého, kterému jsem zachraňoval nakopnuté a zaneřáděné Widle před reinstalem.
Předem děkuji za vaši pomoc.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mates at 2014-03-19 23:29:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 155 GB (53%) free of 292 GB
Total RAM: 3767 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:29:31, on 19.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Users\Mates\AppData\Local\CatalinaGroup\Update\1.3.25.203\CatalinaCrashHandler.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera_crashreporter.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files\trend micro\Mates.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5v47521908
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN10645A& ... 99-243&t=4
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro prihlášení ke službe Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: EPSON V5 Service4(04) (EPSON_EB_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Torch Crash Handler (TorchCrashHandler) - TorchMedia Inc. - C:\Users\Mates\AppData\Local\Torch\Update\TorchCrashHandler.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7092 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 2117792
\??\C:\Windows\system32\conhost.exe "1580403891627207385-202145905131835056115370085799990356621130760226-1789713598
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE"
"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Users\Mates\AppData\Local\Torch\Update\TorchCrashHandler.exe
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Users\Mates\AppData\Local\CatalinaGroup\Update\1.3.25.203\CatalinaCrashHandler.exe" /crashhandler
C:\Windows\system32\msiexec.exe /V
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --ran-launcher /crash-reporter-parent-id=3332
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=gpu-process --channel="3332.0.780297076\2113042227" --crash-reporter-pid=800 --disable-image-transport-surface --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,5,14,27 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0046 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2622 --crash-reporter-pid=800 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=cs --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --enable-ignore-autocomplete-off --disable-delegated-renderer --crash-reporter-pid=800 --disable-accelerated-video-decode --channel="3332.2.1249627939\1996831226" /prefetch:673131151
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=cs --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --enable-ignore-autocomplete-off --disable-delegated-renderer --crash-reporter-pid=800 --disable-accelerated-video-decode --channel="3332.3.1315041493\217169375" /prefetch:673131151
"C:\Windows\system32\wuauclt.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Mates\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
C:\Windows\tasks\CatalinaGroupUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000Core.job
C:\Windows\tasks\CatalinaGroupUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000Core1cc714b7602491b.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-03-19 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-03-19 724512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-03-19 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-03-19 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-22 10920552]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 649608]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-10 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-10 392984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-10 417560]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-02-10 20924064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe -h -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Mates\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Mates\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2014-02-25 1821888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
C:\PROGRA~2\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-04-13 284696]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-06-22 968272]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-03-19 3854640]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-01-10 390656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-03-19 23:29:14 ----D---- C:\Program Files\trend micro
2014-03-19 23:29:13 ----D---- C:\rsit
2014-03-19 23:22:24 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-03-19 23:22:24 ----A---- C:\Windows\system32\mstscax.dll
2014-03-19 23:09:37 ----D---- C:\Users\Mates\AppData\Roaming\InstallShield
2014-03-19 22:57:54 ----D---- C:\ProgramData\Oracle
2014-03-19 17:37:19 ----D---- C:\Users\Mates\AppData\Roaming\AVAST Software
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-03-19 17:35:44 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-03-19 17:35:26 ----A---- C:\Windows\avastSS.scr
2014-03-19 17:35:17 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-03-19 17:34:58 ----D---- C:\Program Files\AVAST Software
2014-03-19 17:27:32 ----D---- C:\ProgramData\AVAST Software
2014-03-19 17:26:44 ----D---- C:\Windows\SYSWOW64\bitstreams
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\zlib1.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\ssleay32.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\pthreadVC2.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\pthreadGC2.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\libssh2.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\librtmp.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\libidn-11.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\libeay32.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\libcurl-4.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\cudart32_50_35.dll
2014-03-19 17:26:44 ----AS---- C:\Windows\SYSWOW64\acumnctmbmx.exe
2014-03-19 17:06:58 ----A---- C:\ProgramData\ntuser.dat
2014-03-19 16:28:53 ----A---- C:\Windows\system32\javaws.exe
2014-03-19 16:28:45 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-19 16:28:45 ----A---- C:\Windows\system32\javaw.exe
2014-03-19 16:28:45 ----A---- C:\Windows\system32\java.exe
2014-03-18 23:45:42 ----D---- C:\Windows\OEMTemp
2014-03-18 23:28:41 ----D---- C:\Users\Mates\AppData\Roaming\Malwarebytes
2014-03-18 23:28:31 ----D---- C:\ProgramData\Malwarebytes
2014-03-18 23:28:30 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 23:28:30 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-03-18 21:57:14 ----D---- C:\Program Files (x86)\Process Explorer_11.33
2014-03-18 21:55:35 ----D---- C:\Program Files\CCleaner
2014-03-18 21:47:15 ----D---- C:\Users\Mates\AppData\Roaming\Opera Software
2014-03-18 21:47:11 ----D---- C:\Program Files (x86)\Opera
2014-03-18 21:40:50 ----D---- C:\Users\Mates\AppData\Roaming\GlarySoft
2014-03-18 21:40:18 ----D---- C:\Program Files (x86)\Absolute Uninstaller
2014-03-18 21:36:49 ----D---- C:\Windows\pss
2014-03-18 21:32:09 ----D---- C:\ProgramData\Intel
2014-03-18 21:16:02 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-18 21:15:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-18 21:15:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-18 21:15:59 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-03-18 21:15:58 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-03-18 21:15:58 ----A---- C:\Windows\system32\tsgqec.dll
2014-03-18 21:15:57 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-03-18 21:15:57 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-03-18 21:15:57 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-03-18 21:15:57 ----A---- C:\Windows\system32\wksprtPS.dll
2014-03-18 21:15:57 ----A---- C:\Windows\system32\wksprt.exe
2014-03-18 21:15:57 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-03-18 21:15:57 ----A---- C:\Windows\system32\mstsc.exe
2014-03-18 21:15:57 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-03-18 21:15:55 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-03-18 21:15:55 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-03-18 21:12:56 ----D---- C:\ProgramData\Microsoft Help
2014-03-18 21:07:03 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-03-18 21:07:02 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-03-13 20:20:43 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-13 20:20:42 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-13 20:20:42 ----A---- C:\Windows\system32\wer.dll
2014-03-13 20:20:40 ----A---- C:\Windows\system32\win32k.sys
2014-03-13 20:20:30 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-13 20:20:30 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-13 20:20:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-13 20:20:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-13 20:20:30 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-13 20:20:30 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-13 20:20:30 ----A---- C:\Windows\system32\iertutil.dll
2014-03-13 20:20:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 20:20:28 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-13 20:20:28 ----A---- C:\Windows\system32\iernonce.dll
2014-03-13 20:20:27 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-13 20:20:27 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-13 20:20:27 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-13 20:20:27 ----A---- C:\Windows\system32\urlmon.dll
2014-03-13 20:20:27 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-13 20:20:26 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-13 20:20:26 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-13 20:20:25 ----A---- C:\Windows\system32\iesetup.dll
2014-03-13 20:20:25 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-13 20:20:24 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-13 20:20:24 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-13 20:20:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-13 20:20:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-13 20:20:24 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-13 20:20:24 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-13 20:20:24 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-13 20:20:23 ----A---- C:\Windows\system32\ieui.dll
2014-03-13 20:20:23 ----A---- C:\Windows\system32\ieframe.dll
2014-03-13 20:20:22 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-13 20:20:22 ----A---- C:\Windows\system32\jscript9.dll
2014-03-13 20:20:22 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-13 20:20:21 ----A---- C:\Windows\system32\wininet.dll
2014-03-13 20:20:21 ----A---- C:\Windows\system32\msrating.dll
2014-03-13 20:20:21 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-13 20:20:20 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 20:20:20 ----A---- C:\Windows\system32\mshtml.dll
2014-03-13 20:18:55 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-13 20:18:55 ----A---- C:\Windows\system32\qedit.dll
2014-03-13 20:18:52 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-13 20:18:52 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-10 21:07:48 ----RD---- C:\Program Files (x86)\Skype
2014-03-10 21:07:44 ----D---- C:\ProgramData\Skype
2014-03-09 20:13:35 ----D---- C:\Users\Mates\AppData\Roaming\steamvr
2014-02-27 20:09:24 ----D---- C:\Windows\Migration
2014-02-27 19:06:10 ----D---- C:\Program Files (x86)\MediaViewV1
2014-02-23 20:19:25 ----A---- C:\extensions.ini
2014-02-23 20:18:23 ----D---- C:\Program Files (x86)\MediaViewerV1

======List of files/folders modified in the last 1 month======

2014-03-19 23:29:14 ----RD---- C:\Program Files
2014-03-19 23:24:55 ----SHD---- C:\Windows\Installer
2014-03-19 23:24:55 ----D---- C:\ProgramData\Google
2014-03-19 23:24:55 ----D---- C:\Program Files (x86)\Google
2014-03-19 23:24:02 ----D---- C:\Windows\Temp
2014-03-19 23:22:36 ----D---- C:\Windows\winsxs
2014-03-19 23:22:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-03-19 23:22:35 ----D---- C:\Windows\SysWOW64
2014-03-19 23:22:35 ----D---- C:\Windows\system32\cs-CZ
2014-03-19 23:22:35 ----D---- C:\Windows\System32
2014-03-19 23:21:35 ----D---- C:\Windows\system32\catroot
2014-03-19 23:20:11 ----D---- C:\Windows
2014-03-19 23:20:10 ----D---- C:\Windows\inf
2014-03-19 23:17:27 ----D---- C:\Program Files (x86)\Steam
2014-03-19 23:14:35 ----D---- C:\Windows\SoftwareDistribution
2014-03-19 23:12:32 ----D---- C:\Users\Mates\AppData\Roaming\Skype
2014-03-19 23:11:46 ----D---- C:\Windows\system32\config
2014-03-19 23:11:22 ----D---- C:\ProgramData\TorchCrashHandler
2014-03-19 23:11:21 ----A---- C:\Windows\SYSWOW64\log.txt
2014-03-19 23:10:57 ----D---- C:\Program Files (x86)\epson
2014-03-19 23:10:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-19 23:09:12 ----D---- C:\Windows\system32\DriverStore
2014-03-19 23:08:10 ----D---- C:\Program Files (x86)\EPSON Software
2014-03-19 23:07:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-03-19 22:58:06 ----D---- C:\Program Files (x86)\Common Files
2014-03-19 22:57:54 ----HD---- C:\ProgramData
2014-03-19 22:57:02 ----D---- C:\Users\Mates\AppData\Roaming\Adobe
2014-03-19 22:56:59 ----D---- C:\Program Files (x86)\Adobe
2014-03-19 18:12:36 ----D---- C:\Windows\system32\drivers
2014-03-19 17:36:04 ----D---- C:\Windows\Prefetch
2014-03-19 17:35:54 ----D---- C:\Windows\system32\Tasks
2014-03-19 17:35:26 ----A---- C:\Windows\system32\aswBoot.exe
2014-03-19 17:28:56 ----RD---- C:\Program Files (x86)
2014-03-19 17:16:38 ----D---- C:\Windows\system32\catroot2
2014-03-19 17:06:55 ----SHD---- C:\System Volume Information
2014-03-19 16:28:33 ----D---- C:\Program Files\Java
2014-03-19 16:00:37 ----D---- C:\ProgramData\boost_interprocess
2014-03-19 15:56:45 ----D---- C:\Users\Mates\AppData\Roaming\Seznam.cz
2014-03-19 15:40:06 ----D---- C:\Windows\system32\NDF
2014-03-19 12:51:33 ----D---- C:\Users\Mates\AppData\Roaming\DefaultTab
2014-03-19 02:49:27 ----D---- C:\Windows\rescache
2014-03-18 23:47:07 ----SD---- C:\Users\Mates\AppData\Roaming\Microsoft
2014-03-18 23:47:07 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-18 23:45:42 ----D---- C:\Program Files\Acer
2014-03-18 23:45:27 ----D---- C:\Program Files (x86)\Acer
2014-03-18 23:45:13 ----D---- C:\Program Files (x86)\Acer GameZone
2014-03-18 23:44:52 ----D---- C:\Program Files (x86)\NewTech Infosystems
2014-03-18 22:18:18 ----D---- C:\Windows\Panther
2014-03-18 22:18:18 ----D---- C:\Windows\Logs
2014-03-18 22:18:18 ----D---- C:\Windows\debug
2014-03-18 22:09:14 ----D---- C:\ProgramData\EPSON
2014-03-18 22:09:13 ----D---- C:\Users\Mates\AppData\Roaming\Epson
2014-03-18 22:05:32 ----D---- C:\ProgramData\EgisTec IPS
2014-03-18 21:28:49 ----D---- C:\Windows\SYSWOW64\wbem
2014-03-18 21:28:49 ----D---- C:\Windows\system32\wbem
2014-03-18 21:28:49 ----D---- C:\Windows\system32\drivers\en-US
2014-03-18 21:28:37 ----D---- C:\Users\Mates\AppData\Roaming\SoftGrid Client
2014-03-18 21:15:46 ----D---- C:\Program Files (x86)\Intel
2014-03-18 21:13:33 ----D---- C:\Windows\system32\MRT
2014-03-18 21:08:08 ----A---- C:\Windows\system32\MRT.exe
2014-03-14 17:36:22 ----D---- C:\Program Files\Internet Explorer
2014-03-14 17:36:22 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-14 04:45:58 ----D---- C:\Windows\L2Schemas
2014-03-14 04:45:56 ----HD---- C:\Windows\system32\GroupPolicy
2014-03-14 04:45:56 ----D---- C:\Windows\Tasks
2014-03-14 04:45:56 ----D---- C:\Windows\SYSWOW64\Macromed
2014-03-14 04:45:56 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-03-14 04:45:56 ----D---- C:\Windows\system32\wfp
2014-03-14 04:45:56 ----D---- C:\Windows\system32\Macromed
2014-03-14 04:45:40 ----D---- C:\Windows\AppCompat
2014-03-14 04:45:03 ----D---- C:\Windows\registration
2014-03-13 21:19:16 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-03-09 02:18:31 ----D---- C:\Windows\Microsoft.NET
2014-03-02 11:00:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-27 20:13:55 ----RSD---- C:\Windows\assembly
2014-02-27 20:09:35 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-27 20:09:35 ----D---- C:\Windows\system32\en-US
2014-02-27 20:09:24 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-03-19 445304]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-03-19 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-03-19 208928]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-03-19 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-03-19 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-03-19 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-03-19 423240]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-03-19 79184]
R3 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-03-19 84816]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-06-03 4171328]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-10 12311904]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-22 2399848]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-02-03 271872]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-03-31 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-03-19 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-03-19 109048]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2011-11-02 179296]
R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2011-11-02 151648]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-18 268824]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 TorchCrashHandler;Torch Crash Handler; C:\Users\Mates\AppData\Local\Torch\Update\TorchCrashHandler.exe [2014-01-27 1208832]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-13 257928]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-07-13 655624]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-25 568512]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 19 bře 2014 23:54
od vyosek
Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 20 bře 2014 09:28
od fanynek
Dobrý den, děkuji za pomoc a zde je log z JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Mates on ct 20.03.2014 at 8:37:04,79
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-3876268418-2431904502-1245825481-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilivid
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\torch
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\torch
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\torch.exe
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}



~~~ Files

Successfully deleted: [File] "C:\Users\Mates\AppData\Roaming\microsoft\windows\start menu\programs\ilivid.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\ProgramData\torchcrashhandler"
Successfully deleted: [Folder] "C:\Users\Mates\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\Mates\appdata\local\ilivid"
Successfully deleted: [Folder] "C:\Users\Mates\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\Mates\appdata\local\torch"



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ct 20.03.2014 at 8:45:21,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 20 bře 2014 09:29
od fanynek
... a zde z Adw Cleaneru:

# AdwCleaner v3.022 - Report created 20/03/2014 at 08:50:03
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Mates - MATES-PC
# Running from : C:\Users\Mates\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : torchcrashhandler

***** [ Files / Folders ] *****

[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\Users\Mates\AppData\Local\genienext
Folder Deleted : C:\Users\Mates\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Mates\AppData\LocalLow\AVG Security Toolbar
Folder Deleted : C:\Users\Mates\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Folder Deleted : C:\Users\Mates\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\torch
Folder Deleted : C:\Users\Mates\Documents\Mobogenie
File Deleted : C:\Users\Mates\AppData\Local\Temp\Uninstall.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\iLivid.torrent
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsemngr.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsermngr.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bundlesweetimsetup.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cltmngsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta babylon.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta tb.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta2.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltainstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltasetup.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb_2501-c733154b.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iminentsetup.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweetimsetup.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tbdelta.exetoolbar783881609.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\torch

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Google Chrome v

[ File : C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : search_url
Deleted : keyword

*************************

AdwCleaner[R0].txt - [4685 octets] - [20/03/2014 08:48:01]
AdwCleaner[S0].txt - [4702 octets] - [20/03/2014 08:50:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4762 octets] ##########

Hezký den... :-)

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 20 bře 2014 14:07
od vyosek
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 20 bře 2014 15:56
od fanynek
Zdravím, zde je log ze Zoek a děkuji.


Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Mates on ct 20.03.2014 at 15:36:42,00.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Mates\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3876268418-2431904502-1245825481-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_USERS\S-1-5-21-3876268418-2431904502-1245825481-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3876268418-2431904502-1245825481-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted
C:\Users\Mates\daemonprocess.txt deleted
C:\Users\Mates\.android deleted
C:\PROGRA~2\GUT7178.tmp deleted
C:\PROGRA~2\GUM7177.tmp deleted
C:\PROGRA~2\MediaViewV1 deleted
C:\PROGRA~2\MediaViewerV1 deleted
C:\extensions.sqlite deleted
C:\extensions.ini deleted
C:\PROGRA~3\OberonGameConsole deleted
C:\Users\Mates\AppData\Local\cache deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\wininit.ini deleted
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job deleted
C:\windows\SysNative\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv deleted
C:\windows\SysNative\tasks\DTReg deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
ecihlbinhkaiccagkppdmnckoihmclgf - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1915\ch\MediaViewerV1alpha1915.crx[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[19.03.2014 17:35]
lnbdomfjonjdblgcakkcahfenndkeeme - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2784\ch\MediaViewV1alpha2784.crx[]

Save to 4shared - Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Extensions\adnkagodbfngmdajbbocegjnllfmdaie
Downloads - Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Extensions\dcagnhpbnggmbihndfkkhfjojgbaaedo
Proxy - Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Extensions\hpofinfdicogoakggciidggcikhgklcj
Branding - Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Extensions\oocjgdbfocddoflggljlfmpapfiiccak

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACA ... 5v47521908"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{5C2FD775-B973-48C1-8013-C8E3254781ED} WebHledani Url="http://www.webhledani.cz/results.aspx?i ... earchTerms}"
{67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google Url="http://www.google.com/search?sourceid=i ... CZ411CZ411"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Preferences was reset successfully
C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Web Data was reset successfully
C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ecihlbinhkaiccagkppdmnckoihmclgf deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\lnbdomfjonjdblgcakkcahfenndkeeme deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Mates\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Mates\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Mates\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Cache emptied successfully
C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=421 folders=47 109052572 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Mates\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Mates\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ct 20.03.2014 at 15:58:44,26 ======================

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 20 bře 2014 16:12
od vyosek
Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 20 bře 2014 16:43
od fanynek
Zde log z FRST...

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Mates (administrator) on MATES-PC on 20-03-2014 16:46:08
Running from C:\Users\Mates\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
() C:\Program Files (x86)\Opera\20.0.1387.82\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(forum.viry.cz) C:\Users\Mates\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronic Corp.)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [968272 2010-06-22] (Dritek System Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-03-19] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3876268418-2431904502-1245825481-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20924064 2014-02-10] (Skype Technologies S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {5C2FD775-B973-48C1-8013-C8E3254781ED} URL = http://www.webhledani.cz/results.aspx?i ... earchTerms}
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... CZ411CZ411
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-03-19]
CHR Extension: (Safe Money) - C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-03-19]
CHR Extension: (Dangerous Websites Blocker) - C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-03-19]
CHR Extension: (Virtual Keyboard) - C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-03-19]
CHR Extension: (Anti-Banner) - C:\Users\Mates\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-03-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-03-19]
CHR StartMenuInternet: Google Chrome - C:\Users\Mates\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-19] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-03-19] (AVAST Software)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-03-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-03-19] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [445304 2014-03-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-03-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-03-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-03-19] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-03-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-03-19] ()
S3 cpuz130; \??\C:\Users\Mates\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-20 16:46 - 2014-03-20 16:46 - 00010105 _____ () C:\Users\Mates\Desktop\FRST.txt
2014-03-20 16:45 - 2014-03-20 16:46 - 00000000 ____D () C:\FRST
2014-03-20 16:45 - 2014-03-20 16:45 - 00029696 _____ () C:\Users\Mates\AppData\Local\MSGBOX.EXE
2014-03-20 16:45 - 2014-03-20 16:45 - 00015327 _____ () C:\Users\Mates\Desktop\LM.bat
2014-03-20 16:44 - 2014-03-20 16:44 - 00112640 _____ (forum.viry.cz) C:\Users\Mates\Desktop\FRSTLauncher.exe
2014-03-20 16:39 - 2014-03-20 16:39 - 02157056 _____ (Farbar) C:\Users\Mates\Desktop\FRST64.exe
2014-03-20 16:30 - 2014-03-20 16:30 - 00002096 _____ () C:\Users\Public\Desktop\3DMark06.lnk
2014-03-20 16:30 - 2007-08-20 11:05 - 00012744 ____R (EnTech Taiwan) C:\Windows\system32\Drivers\Entech64.sys
2014-03-20 16:29 - 2014-03-20 16:29 - 00000000 ____D () C:\Windows\SysWOW64\Futuremark
2014-03-20 16:29 - 2014-03-20 16:29 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-20 16:29 - 2004-10-25 20:02 - 00021664 _____ (EnTech Taiwan) C:\Windows\SysWOW64\Drivers\Entech.sys
2014-03-20 16:29 - 2004-06-22 15:44 - 00005632 _____ (EnTech Taiwan) C:\Windows\SysWOW64\Drivers\Entech64.sys
2014-03-20 16:29 - 2001-11-19 19:05 - 00003972 _____ () C:\Windows\SysWOW64\Drivers\PciBus.sys
2014-03-20 16:29 - 1999-11-02 10:01 - 00006173 _____ () C:\Windows\SysWOW64\Drivers\Entech.vxd
2014-03-20 15:59 - 2014-03-20 15:59 - 00008972 _____ () C:\Users\Mates\Desktop\zoek-results.txt
2014-03-20 15:55 - 2014-03-20 15:36 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-20 15:37 - 2014-03-20 15:58 - 00008972 _____ () C:\zoek-results.log
2014-03-20 15:36 - 2014-03-20 15:53 - 00000000 ____D () C:\zoek_backup
2014-03-20 15:35 - 2014-03-20 15:35 - 01285120 _____ () C:\Users\Mates\Desktop\zoek.exe
2014-03-20 08:55 - 2014-03-20 08:55 - 00004870 _____ () C:\Users\Mates\Desktop\AdwCleaner[S0].txt
2014-03-20 08:47 - 2014-03-20 08:50 - 00000000 ____D () C:\AdwCleaner
2014-03-20 08:45 - 2014-03-20 08:45 - 00003951 _____ () C:\Users\Mates\Desktop\JRT.txt
2014-03-20 08:37 - 2014-03-20 08:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-20 08:34 - 2014-03-20 06:32 - 01950720 _____ () C:\Users\Mates\Desktop\adwcleaner.exe
2014-03-20 08:34 - 2014-03-20 06:31 - 01037734 _____ (Thisisu) C:\Users\Mates\Desktop\JRT.exe
2014-03-20 06:54 - 2014-03-20 06:54 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-20 06:50 - 2014-03-20 06:50 - 00001330 _____ () C:\Windows\DIFx.log
2014-03-20 06:50 - 2014-03-20 06:50 - 00000000 ____D () C:\Windows\SysWOW64\AGEIA
2014-03-20 06:50 - 2014-03-20 06:50 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-20 06:48 - 2014-03-20 06:49 - 00251434 _____ () C:\Windows\DirectX.log
2014-03-19 23:53 - 2014-03-20 15:57 - 00002732 _____ () C:\Windows\PFRO.log
2014-03-19 23:36 - 2014-03-19 23:36 - 00020951 _____ () C:\Users\Mates\Desktop\info.txt
2014-03-19 23:29 - 2014-03-19 23:29 - 00000000 ____D () C:\rsit
2014-03-19 23:29 - 2014-03-19 23:29 - 00000000 ____D () C:\Program Files\trend micro
2014-03-19 23:28 - 2014-03-19 23:28 - 00935175 _____ () C:\Users\Mates\Desktop\RSITx64.exe
2014-03-19 23:22 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-19 23:22 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-19 23:20 - 2014-03-20 15:58 - 00001126 _____ () C:\Windows\setupact.log
2014-03-19 23:20 - 2014-03-19 23:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-19 23:16 - 2014-03-19 23:16 - 00066796 _____ () C:\Users\Mates\Documents\cc_20140319_231601.reg
2014-03-19 23:13 - 2014-03-20 16:28 - 00174068 _____ () C:\Windows\WindowsUpdate.log
2014-03-19 23:09 - 2014-03-19 23:09 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\InstallShield
2014-03-19 22:57 - 2014-03-19 22:57 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-03-19 22:57 - 2014-03-19 22:57 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-03-19 22:57 - 2014-03-19 22:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-19 17:47 - 2014-03-19 17:47 - 00000003 _____ () C:\Users\Mates\stut
2014-03-19 17:45 - 2014-03-19 17:45 - 00000339 _____ () C:\Users\Mates\rgut
2014-03-19 17:37 - 2014-03-19 17:37 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\AVAST Software
2014-03-19 17:36 - 2014-03-19 17:36 - 00002036 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-03-19 17:36 - 2014-03-19 17:36 - 00001976 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-03-19 17:35 - 2014-03-20 00:01 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-19 17:35 - 2014-03-19 17:35 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00445304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-19 17:35 - 2014-03-19 17:35 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-03-19 17:34 - 2014-03-19 17:34 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-19 17:27 - 2014-03-19 17:27 - 00000000 ____D () C:\Users\Mates\Documents\Avast_key to 2016
2014-03-19 17:27 - 2014-03-19 17:27 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-19 17:26 - 2014-03-19 17:26 - 00000000 ____D () C:\Windows\SysWOW64\bitstreams
2014-03-19 17:26 - 2014-03-05 22:19 - 00007670 ____S () C:\Windows\SysWOW64\mnctmbmx.vbe
2014-03-19 17:26 - 2013-12-10 00:30 - 10236928 ____S () C:\Windows\SysWOW64\acumnctmbmx.exe
2014-03-19 17:26 - 2013-10-26 20:30 - 01704448 ____S (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2014-03-19 17:26 - 2013-10-26 20:30 - 00538126 ____S () C:\Windows\SysWOW64\libcurl-4.dll
2014-03-19 17:26 - 2013-10-26 20:30 - 00364544 ____S (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2014-03-19 17:26 - 2013-10-26 20:30 - 00192512 ____S () C:\Windows\SysWOW64\libidn-11.dll
2014-03-19 17:26 - 2013-10-26 20:30 - 00171008 ____S (The libssh2 library, http://www.libssh2.org/) C:\Windows\SysWOW64\libssh2.dll
2014-03-19 17:26 - 2013-10-26 20:30 - 00133632 ____S () C:\Windows\SysWOW64\librtmp.dll
2014-03-19 17:26 - 2013-10-26 20:30 - 00044727 ____S () C:\Windows\SysWOW64\diablo130302.cl
2014-03-19 17:26 - 2013-10-26 20:30 - 00043810 ____S () C:\Windows\SysWOW64\poclbm130302.cl
2014-03-19 17:26 - 2013-10-26 20:30 - 00030802 ____S () C:\Windows\SysWOW64\diakgcn121016.cl
2014-03-19 17:26 - 2013-10-26 20:30 - 00023825 ____S () C:\Windows\SysWOW64\scrypt130511.cl
2014-03-19 17:26 - 2013-10-26 20:30 - 00013062 ____S () C:\Windows\SysWOW64\phatk121016.cl
2014-03-19 17:26 - 2013-06-12 15:15 - 00119888 ____S (Open Source Software community LGPL) C:\Windows\SysWOW64\pthreadGC2.dll
2014-03-19 17:26 - 2013-06-12 15:15 - 00100864 ____S () C:\Windows\SysWOW64\zlib1.dll
2014-03-19 17:26 - 2012-09-25 23:46 - 00472424 ____S (NVIDIA Corporation) C:\Windows\SysWOW64\cudart32_50_35.dll
2014-03-19 17:26 - 2012-05-27 01:36 - 00055808 ____S (Open Source Software community LGPL) C:\Windows\SysWOW64\pthreadVC2.dll
2014-03-19 16:31 - 2014-03-19 16:33 - 00000027 _____ () C:\Users\Mates\Documents\Nový textový dokument.txt
2014-03-19 16:28 - 2014-03-19 16:28 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-19 16:28 - 2014-03-19 16:28 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-19 16:28 - 2014-03-19 16:28 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-19 16:28 - 2014-03-19 16:28 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-19 05:28 - 2014-03-19 05:28 - 00262144 _____ () C:\Windows\system32\config\elam
2014-03-18 23:28 - 2014-03-18 23:28 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-18 23:28 - 2014-03-18 23:28 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Malwarebytes
2014-03-18 23:28 - 2014-03-18 23:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-18 23:28 - 2014-03-18 23:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 23:28 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-18 22:26 - 2014-03-19 18:13 - 00001893 _____ () C:\Users\Mates\Desktop\Process Explorer.lnk
2014-03-18 22:19 - 2014-03-18 22:19 - 00078150 _____ () C:\Users\Mates\Documents\cc_20140318_221916.reg
2014-03-18 21:57 - 2014-03-18 22:28 - 00000000 ____D () C:\Program Files (x86)\Process Explorer_11.33
2014-03-18 21:55 - 2014-03-19 15:52 - 00000870 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-18 21:55 - 2014-03-18 21:55 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-18 21:55 - 2014-03-18 21:55 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-18 21:47 - 2014-03-20 15:30 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-18 21:47 - 2014-03-18 21:47 - 00001137 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-03-18 21:47 - 2014-03-18 21:47 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Opera Software
2014-03-18 21:47 - 2014-03-18 21:47 - 00000000 ____D () C:\Users\Mates\AppData\Local\Opera Software
2014-03-18 21:45 - 2014-03-18 21:46 - 34759416 _____ (Opera Software ASA) C:\Users\Mates\Downloads\Opera_20.0.1387.64_Setup.exe
2014-03-18 21:40 - 2014-03-18 22:24 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\GlarySoft
2014-03-18 21:40 - 2014-03-18 21:40 - 00001026 _____ () C:\Users\Mates\Desktop\Absolute Uninstaller.lnk
2014-03-18 21:36 - 2014-03-19 15:54 - 00000000 ____D () C:\Windows\pss
2014-03-18 21:32 - 2014-03-18 21:32 - 00000000 ____D () C:\ProgramData\Intel
2014-03-18 21:16 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-18 21:15 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-18 21:15 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-18 21:15 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-18 21:15 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-18 21:15 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-18 21:15 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-18 21:15 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-18 21:15 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-18 21:15 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-03-18 21:15 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-18 21:15 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-18 21:15 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-03-18 21:15 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-18 21:15 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-18 21:15 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-03-18 21:12 - 2014-03-18 21:12 - 00000000 ____D () C:\Users\Mates\AppData\Local\Microsoft Help
2014-03-18 21:12 - 2014-03-18 21:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-18 21:07 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-18 21:07 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-15 18:51 - 2014-03-15 18:51 - 00000222 _____ () C:\Users\Mates\Desktop\HAWKEN.url
2014-03-13 20:20 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 20:20 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 20:20 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 20:20 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 20:20 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 20:20 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 20:20 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 20:20 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 20:20 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 20:20 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 20:20 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 20:20 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 20:20 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 20:20 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 20:20 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 20:20 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 20:20 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 20:20 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 20:20 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 20:20 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 20:20 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 20:20 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 20:20 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 20:20 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 20:20 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 20:20 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 20:20 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 20:20 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 20:20 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 20:20 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 20:20 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 20:20 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 20:20 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 20:20 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 20:20 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 20:20 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 20:20 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 20:20 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 20:20 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 20:20 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 20:20 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 20:20 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 20:20 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 20:20 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 20:18 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 20:18 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 20:18 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 20:18 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-10 21:08 - 2014-03-14 04:43 - 00000000 ____D () C:\Users\Mates\AppData\Local\Skype
2014-03-10 21:07 - 2014-03-19 00:16 - 00002731 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-10 21:07 - 2014-03-19 00:16 - 00000000 ____D () C:\ProgramData\Skype
2014-03-10 21:07 - 2014-03-14 04:43 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-10 21:05 - 2014-03-10 21:05 - 34828960 _____ (Skype Technologies S.A.) C:\Users\Mates\Downloads\SkypeSetupFull.exe
2014-03-10 10:43 - 2014-03-10 10:43 - 00000000 ____D () C:\Users\Mates\Documents\FIFA 11
2014-03-09 20:13 - 2014-03-09 20:13 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\steamvr
2014-02-27 19:07 - 2014-03-18 22:31 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-23 20:29 - 2014-02-23 20:29 - 05755959 _____ () C:\Users\Mates\Downloads\Sauna.wmv.wmv.wmv
2014-02-23 20:29 - 2014-02-23 20:29 - 05755959 _____ () C:\Users\Mates\Downloads\Sauna.wmv.wmv (1).wmv
2014-02-23 20:29 - 2014-02-23 20:29 - 02228615 _____ () C:\Users\Mates\Downloads\Vybita_autobaterie_-_ruske_startovani_auta.wmv
2014-02-23 20:29 - 2014-02-23 20:29 - 02228615 _____ () C:\Users\Mates\Downloads\Vybita_autobaterie_-_ruske_startovani_auta (1).wmv

==================== One Month Modified Files and Folders =======

2014-03-20 16:46 - 2014-03-20 16:46 - 00010105 _____ () C:\Users\Mates\Desktop\FRST.txt
2014-03-20 16:46 - 2014-03-20 16:45 - 00000000 ____D () C:\FRST
2014-03-20 16:45 - 2014-03-20 16:45 - 00029696 _____ () C:\Users\Mates\AppData\Local\MSGBOX.EXE
2014-03-20 16:45 - 2014-03-20 16:45 - 00015327 _____ () C:\Users\Mates\Desktop\LM.bat
2014-03-20 16:44 - 2014-03-20 16:44 - 00112640 _____ (forum.viry.cz) C:\Users\Mates\Desktop\FRSTLauncher.exe
2014-03-20 16:39 - 2014-03-20 16:39 - 02157056 _____ (Farbar) C:\Users\Mates\Desktop\FRST64.exe
2014-03-20 16:30 - 2014-03-20 16:30 - 00002096 _____ () C:\Users\Public\Desktop\3DMark06.lnk
2014-03-20 16:29 - 2014-03-20 16:29 - 00000000 ____D () C:\Windows\SysWOW64\Futuremark
2014-03-20 16:29 - 2014-03-20 16:29 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-20 16:29 - 2010-07-13 12:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-20 16:28 - 2014-03-19 23:13 - 00174068 _____ () C:\Windows\WindowsUpdate.log
2014-03-20 16:23 - 2010-12-23 11:49 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-20 16:19 - 2014-02-05 23:14 - 00000938 _____ () C:\Windows\Tasks\CatalinaGroupUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000UA.job
2014-03-20 16:19 - 2013-03-04 16:37 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-20 15:59 - 2014-03-20 15:59 - 00008972 _____ () C:\Users\Mates\Desktop\zoek-results.txt
2014-03-20 15:59 - 2012-07-17 11:43 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Skype
2014-03-20 15:58 - 2014-03-20 15:37 - 00008972 _____ () C:\zoek-results.log
2014-03-20 15:58 - 2014-03-19 23:20 - 00001126 _____ () C:\Windows\setupact.log
2014-03-20 15:58 - 2010-12-23 11:49 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-20 15:58 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-20 15:57 - 2014-03-19 23:53 - 00002732 _____ () C:\Windows\PFRO.log
2014-03-20 15:53 - 2014-03-20 15:36 - 00000000 ____D () C:\zoek_backup
2014-03-20 15:53 - 2010-12-22 17:08 - 00000000 ____D () C:\Users\Mates
2014-03-20 15:48 - 2010-12-23 12:00 - 00000962 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000UA.job
2014-03-20 15:36 - 2014-03-20 15:55 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-20 15:35 - 2014-03-20 15:35 - 01285120 _____ () C:\Users\Mates\Desktop\zoek.exe
2014-03-20 15:35 - 2011-09-12 13:57 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000Core1cc714b7602491b.job
2014-03-20 15:31 - 2010-09-24 07:46 - 00674046 _____ () C:\Windows\system32\perfh005.dat
2014-03-20 15:31 - 2010-09-24 07:46 - 00146224 _____ () C:\Windows\system32\perfc005.dat
2014-03-20 15:31 - 2009-07-14 06:13 - 01586002 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-20 15:30 - 2014-03-18 21:47 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-20 08:55 - 2014-03-20 08:55 - 00004870 _____ () C:\Users\Mates\Desktop\AdwCleaner[S0].txt
2014-03-20 08:50 - 2014-03-20 08:47 - 00000000 ____D () C:\AdwCleaner
2014-03-20 08:45 - 2014-03-20 08:45 - 00003951 _____ () C:\Users\Mates\Desktop\JRT.txt
2014-03-20 08:37 - 2014-03-20 08:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-20 06:54 - 2014-03-20 06:54 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-20 06:50 - 2014-03-20 06:50 - 00001330 _____ () C:\Windows\DIFx.log
2014-03-20 06:50 - 2014-03-20 06:50 - 00000000 ____D () C:\Windows\SysWOW64\AGEIA
2014-03-20 06:50 - 2014-03-20 06:50 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-20 06:49 - 2014-03-20 06:48 - 00251434 _____ () C:\Windows\DirectX.log
2014-03-20 06:32 - 2014-03-20 08:34 - 01950720 _____ () C:\Users\Mates\Desktop\adwcleaner.exe
2014-03-20 06:31 - 2014-03-20 08:34 - 01037734 _____ (Thisisu) C:\Users\Mates\Desktop\JRT.exe
2014-03-20 00:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-20 00:01 - 2014-03-19 17:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-19 23:53 - 2010-07-13 12:56 - 00000000 ____D () C:\Program Files\Google
2014-03-19 23:53 - 2010-07-13 12:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-19 23:36 - 2014-03-19 23:36 - 00020951 _____ () C:\Users\Mates\Desktop\info.txt
2014-03-19 23:29 - 2014-03-19 23:29 - 00000000 ____D () C:\rsit
2014-03-19 23:29 - 2014-03-19 23:29 - 00000000 ____D () C:\Program Files\trend micro
2014-03-19 23:28 - 2014-03-19 23:28 - 00935175 _____ () C:\Users\Mates\Desktop\RSITx64.exe
2014-03-19 23:24 - 2010-12-22 17:32 - 00000000 ____D () C:\Users\Mates\AppData\Local\Google
2014-03-19 23:24 - 2010-07-13 12:56 - 00000000 ____D () C:\ProgramData\Google
2014-03-19 23:20 - 2014-03-19 23:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-19 23:19 - 2014-02-05 23:14 - 00000886 _____ () C:\Windows\Tasks\CatalinaGroupUpdateTaskUserS-1-5-21-3876268418-2431904502-1245825481-1000Core.job
2014-03-19 23:17 - 2014-01-09 19:06 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-19 23:16 - 2014-03-19 23:16 - 00066796 _____ () C:\Users\Mates\Documents\cc_20140319_231601.reg
2014-03-19 23:10 - 2013-07-16 11:11 - 00000000 ____D () C:\Program Files (x86)\epson
2014-03-19 23:09 - 2014-03-19 23:09 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\InstallShield
2014-03-19 23:08 - 2013-07-16 11:07 - 00000000 ____D () C:\Program Files (x86)\EPSON Software
2014-03-19 22:57 - 2014-03-19 22:57 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-03-19 22:57 - 2014-03-19 22:57 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-03-19 22:57 - 2014-03-19 22:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-19 22:57 - 2010-12-22 18:00 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Adobe
2014-03-19 22:56 - 2011-10-20 08:20 - 00000000 ____D () C:\Users\Mates\AppData\Local\Adobe
2014-03-19 22:56 - 2010-07-13 13:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-19 18:13 - 2014-03-18 22:26 - 00001893 _____ () C:\Users\Mates\Desktop\Process Explorer.lnk
2014-03-19 17:47 - 2014-03-19 17:47 - 00000003 _____ () C:\Users\Mates\stut
2014-03-19 17:45 - 2014-03-19 17:45 - 00000339 _____ () C:\Users\Mates\rgut
2014-03-19 17:37 - 2014-03-19 17:37 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\AVAST Software
2014-03-19 17:36 - 2014-03-19 17:36 - 00002036 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-03-19 17:36 - 2014-03-19 17:36 - 00001976 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-03-19 17:35 - 2014-03-19 17:35 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00445304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-19 17:35 - 2014-03-19 17:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-19 17:35 - 2014-03-19 17:35 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-03-19 17:35 - 2011-04-30 15:42 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-19 17:34 - 2014-03-19 17:34 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-19 17:27 - 2014-03-19 17:27 - 00000000 ____D () C:\Users\Mates\Documents\Avast_key to 2016
2014-03-19 17:27 - 2014-03-19 17:27 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-19 17:26 - 2014-03-19 17:26 - 00000000 ____D () C:\Windows\SysWOW64\bitstreams
2014-03-19 16:33 - 2014-03-19 16:31 - 00000027 _____ () C:\Users\Mates\Documents\Nový textový dokument.txt
2014-03-19 16:28 - 2014-03-19 16:28 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-19 16:28 - 2014-03-19 16:28 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-19 16:28 - 2014-03-19 16:28 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-19 16:28 - 2014-03-19 16:28 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-19 16:28 - 2012-11-30 15:34 - 00000000 ____D () C:\Program Files\Java
2014-03-19 15:56 - 2014-02-05 23:25 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Seznam.cz
2014-03-19 15:54 - 2014-03-18 21:36 - 00000000 ____D () C:\Windows\pss
2014-03-19 15:52 - 2014-03-18 21:55 - 00000870 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-19 15:52 - 2010-12-23 15:45 - 00000860 _____ () C:\Users\Mates\Desktop\FlatOut2.lnk
2014-03-19 15:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-19 05:28 - 2014-03-19 05:28 - 00262144 _____ () C:\Windows\system32\config\elam
2014-03-19 03:07 - 2014-02-05 23:48 - 00000270 __RSH () C:\Users\Mates\ntuser.pol
2014-03-19 00:16 - 2014-03-10 21:07 - 00002731 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-19 00:16 - 2014-03-10 21:07 - 00000000 ____D () C:\ProgramData\Skype
2014-03-18 23:45 - 2010-07-13 12:55 - 00000000 ____D () C:\Program Files\Acer
2014-03-18 23:45 - 2010-07-13 12:54 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-03-18 23:45 - 2010-07-13 12:45 - 00000000 ____D () C:\Program Files (x86)\Acer GameZone
2014-03-18 23:44 - 2010-07-13 13:02 - 00000000 ____D () C:\Program Files (x86)\NewTech Infosystems
2014-03-18 23:28 - 2014-03-18 23:28 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-18 23:28 - 2014-03-18 23:28 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Malwarebytes
2014-03-18 23:28 - 2014-03-18 23:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-18 23:28 - 2014-03-18 23:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 22:31 - 2014-02-27 19:07 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-03-18 22:28 - 2014-03-18 21:57 - 00000000 ____D () C:\Program Files (x86)\Process Explorer_11.33
2014-03-18 22:24 - 2014-03-18 21:40 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\GlarySoft
2014-03-18 22:20 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-18 22:20 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-18 22:19 - 2014-03-18 22:19 - 00078150 _____ () C:\Users\Mates\Documents\cc_20140318_221916.reg
2014-03-18 22:18 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther
2014-03-18 22:09 - 2013-07-16 11:39 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Epson
2014-03-18 22:09 - 2013-07-16 11:04 - 00000000 ____D () C:\ProgramData\EPSON
2014-03-18 22:05 - 2010-07-13 12:57 - 00000000 ____D () C:\ProgramData\EgisTec IPS
2014-03-18 21:55 - 2014-03-18 21:55 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-18 21:55 - 2014-03-18 21:55 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-18 21:47 - 2014-03-18 21:47 - 00001137 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-03-18 21:47 - 2014-03-18 21:47 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Opera Software
2014-03-18 21:47 - 2014-03-18 21:47 - 00000000 ____D () C:\Users\Mates\AppData\Local\Opera Software
2014-03-18 21:46 - 2014-03-18 21:45 - 34759416 _____ (Opera Software ASA) C:\Users\Mates\Downloads\Opera_20.0.1387.64_Setup.exe
2014-03-18 21:40 - 2014-03-18 21:40 - 00001026 _____ () C:\Users\Mates\Desktop\Absolute Uninstaller.lnk
2014-03-18 21:32 - 2014-03-18 21:32 - 00000000 ____D () C:\ProgramData\Intel
2014-03-18 21:28 - 2012-05-17 09:46 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\SoftGrid Client
2014-03-18 21:15 - 2010-07-13 12:32 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-18 21:13 - 2013-08-17 15:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 21:12 - 2014-03-18 21:12 - 00000000 ____D () C:\Users\Mates\AppData\Local\Microsoft Help
2014-03-18 21:12 - 2014-03-18 21:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-18 21:08 - 2012-05-03 21:23 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-16 13:48 - 2014-01-29 20:13 - 00000938 _____ () C:\Users\Mates\AppData\Local\_settings.ini
2014-03-15 19:21 - 2011-02-17 00:48 - 00000000 ____D () C:\Users\Mates\Documents\My Games
2014-03-15 18:51 - 2014-03-15 18:51 - 00000222 _____ () C:\Users\Mates\Desktop\HAWKEN.url
2014-03-15 18:51 - 2014-01-09 19:24 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-15 17:50 - 2010-12-23 12:01 - 00002372 _____ () C:\Users\Mates\Desktop\google chrome.lnk
2014-03-14 17:38 - 2009-07-14 05:45 - 00268944 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 04:45 - 2012-02-15 20:15 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-14 04:45 - 2010-07-13 13:02 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-14 04:45 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-14 04:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-14 04:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-14 04:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\L2Schemas
2014-03-14 04:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-14 04:43 - 2014-03-10 21:08 - 00000000 ____D () C:\Users\Mates\AppData\Local\Skype
2014-03-14 04:43 - 2014-03-10 21:07 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-13 21:19 - 2013-03-04 16:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-13 21:19 - 2013-03-04 16:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-13 21:19 - 2013-03-04 16:37 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-10 21:05 - 2014-03-10 21:05 - 34828960 _____ (Skype Technologies S.A.) C:\Users\Mates\Downloads\SkypeSetupFull.exe
2014-03-10 10:43 - 2014-03-10 10:43 - 00000000 ____D () C:\Users\Mates\Documents\FIFA 11
2014-03-09 20:13 - 2014-03-09 20:13 - 00000000 ____D () C:\Users\Mates\AppData\Roaming\steamvr
2014-03-05 22:19 - 2014-03-19 17:26 - 00007670 ____S () C:\Windows\SysWOW64\mnctmbmx.vbe
2014-03-02 11:00 - 2012-05-17 09:45 - 01553554 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-01 07:05 - 2014-03-13 20:20 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 20:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 20:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 20:20 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 20:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 20:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 20:20 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 20:20 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 20:20 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 20:20 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 20:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 20:20 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 20:20 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 20:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 20:20 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 20:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 20:20 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 20:20 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 20:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 20:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 20:20 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 20:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 20:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 20:20 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 20:20 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 20:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 20:20 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 20:20 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 20:20 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 20:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 20:20 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 20:20 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 20:20 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 20:20 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 20:20 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 20:20 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 20:20 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 20:20 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 20:20 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 20:20 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-23 20:29 - 2014-02-23 20:29 - 05755959 _____ () C:\Users\Mates\Downloads\Sauna.wmv.wmv.wmv
2014-02-23 20:29 - 2014-02-23 20:29 - 05755959 _____ () C:\Users\Mates\Downloads\Sauna.wmv.wmv (1).wmv
2014-02-23 20:29 - 2014-02-23 20:29 - 02228615 _____ () C:\Users\Mates\Downloads\Vybita_autobaterie_-_ruske_startovani_auta.wmv
2014-02-23 20:29 - 2014-02-23 20:29 - 02228615 _____ () C:\Users\Mates\Downloads\Vybita_autobaterie_-_ruske_startovani_auta (1).wmv
2014-02-19 17:31 - 2009-07-14 06:08 - 00032546 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 00:18

==================== End Of Log ============================

Re: Kontrola logu po vyčištění zaneřáděného NTB

Napsal: 22 bře 2014 08:52
od vyosek
:arrow: S tim nelegalnim Avastem udelame co :???: :?:
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz