Pomalý boot + problém s diakritikou

Zpráva

melonSVK · #1 Příspěvek od **melonSVK** » 30 bře 2014 18:37

Zdravím,

v poslednom čase mám problém s diakritikou, keď PC dlhšie beží a píšem mäkčene a dĺžne pomocou klávesy vedľa Backspace, tak mi napíše niečo v zmysle ˇˇd, ´´l apod., prípadne nenapíše žiadnu diakritiku. K tomu mám pomalý booting PC, ale to môže byť aj spôsobené HW opotrebovaním disku, predsalen nie je najnovší

Prikladám RSIT, vďaka za rady.

Logfile of random's system information tool 1.09 (written by random/random)
Run by melonsvk at 2014-03-30 19:35:09
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 165 GB (31%) free of 535 GB
Total RAM: 3951 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:35:19, on 30. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Connectify\DispatchUI.exe
C:\Program Files (x86)\Connectify\Connectify.exe
C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe
C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files (x86)\Aurora\firefox.exe
C:\Program Files (x86)\Aurora\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\trend micro\melonsvk.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.webisgreat.info/?pid=5 ... Z&unqvl=48
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.webisgreat.info/?pid=5 ... Z&unqvl=48
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache34.ics.muni.cz:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CrossriderApp0051386 - {11111111-1111-1111-1111-110511131186} - C:\Program Files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [mnctwgbfoSrv] C:\Windows\inf\mnctwgbfo.vbe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [winhotspot] C:\Program Files (x86)\winhotspot\1F70.tmp
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Startup: Firewall.exe
O4 - Startup: Firewall.exe.tmp
O4 - Global Startup: Virtual Router Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}: NameServer = 8.8.8.8,4.4.4.4
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Connectify - Connectify - C:\Program Files (x86)\Connectify\ConnectifyService.exe
O23 - Service: DirMngr - Unknown owner - C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30007 (IISADMIN) - Unknown owner - C:\Windows\system32\inetsrv\inetinfo.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VirtualRouterService (Virtual Router) - Chris Pietschmann (http://pietschsoft.com) - C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-20001 (WMSVC) - Unknown owner - C:\Windows\system32\inetsrv\wmsvc.exe (file missing)

--
End of file - 11607 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 26721184
\??\C:\Windows\system32\conhost.exe "16418372831180569320-63370955-178265028319351881871722769018912507162081476100
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Connectify\ConnectifyService.exe"
"taskhost.exe"
"C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe" --service
C:\Windows\system32\svchost.exe -k ftpsvc
C:\Windows\system32\inetsrv\inetinfo.exe
taskeng.exe {7FF35929-A678-4F44-9B89-F371BBA51C66}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"ConnectifyD.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
\??\C:\Windows\system32\conhost.exe "-1519514290212542423350586175134948017446959177-104126483-52538877778154438
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Greenshot\Greenshot.exe"
"C:\Program Files (x86)\Connectify\DispatchUI.exe"
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
"C:\Program Files (x86)\Connectify\Connectify.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
"C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe" -autorun
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\alg.exe
"C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.0.738085283\687742797" /prefetch:673131151
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.1.1220783892\281454800" /prefetch:673131151
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.2.931529645\1616593696" /prefetch:673131151
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.3.2100471715\528102524" /prefetch:673131151
C:\Windows\system32\msiexec.exe /V
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="4704.4.975686803\744279612" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19 --gpu-vendor-id=0x1002 --gpu-device-id=0x68e4 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.200.11.0 --lang=en-US --log-severity=disable /prefetch:822062411
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Aurora\firefox.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Aurora\plugin-container.exe" --channel=3312.229c6690.218531925 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Aurora\omni.ja" -appomni "C:\Program Files (x86)\Aurora\browser\omni.ja" -appdir "C:\Program Files (x86)\Aurora\browser" 1E05176855CC7D2F 3312 "\\.\pipe\gecko-crash-server-pipe.3312" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash5196.5B1792E0.17724 --host-broker-channel=Flash5196.5B1792E0.24118 --host-pid=5196 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=6140.0034F78C.338668509 --proxy-stub-channel=Flash5196.5B1792E0.17724 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Windows\system32\wuauclt.exe"
C:\Windows\servicing\TrustedInstaller.exe
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey CDCC5871-ACC3-15E9-9EC6-25EE7C1433FE -Reinvoke
"C:\Users\melonsvk\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default

prefs.js - "browser.startup.homepage" - "http://websearch.webisgreat.info/?pid=5 ... Z&unqvl=48"
prefs.js - "keyword.URL" - "http://websearch.webisgreat.info/?pid=5 ... =48&l=1&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL

C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\searchplugins\
WebSearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
FreeHD-Sport TV V9.0 - C:\Program Files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho64.dll [2014-02-12 949248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-03-03 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2013-09-13 878296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
FreeHD-Sport TV V9.0 - C:\Program Files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho.dll [2014-02-12 677888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-03-03 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2013-09-13 705240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 1727176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-09-08 489472]
"Greenshot"=C:\Program Files\Greenshot\Greenshot.exe [2012-10-30 462848]
"Connectify Dispatch"=C:\Program Files (x86)\Connectify\DispatchUI.exe [2013-09-24 2233120]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-09-03 444856]
"Connectify Hotspot"=C:\Program Files (x86)\Connectify\Connectify.exe [2013-09-24 4162336]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2014-02-25 1821888]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2013-12-06 20203904]
"winhotspot"=C:\Program Files (x86)\winhotspot\1F70.tmp [2014-01-20 158208]
"Spotify Web Helper"=C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-01-29 1171968]
"Spotify"=C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [2014-01-29 6118400]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [2013-10-17 3125280]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-02-10 20922016]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-09-05 766208]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2011-09-28 1039872]
"mnctwgbfoSrv"=C:\Windows\inf\mnctwgbfo.vbe [2014-01-19 1342]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Virtual Router Manager.lnk - C:\Windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe

C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Firewall.exe
Firewall.exe.tmp

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-03-30 19:35:11 ----D---- C:\Program Files\trend micro
2014-03-30 19:35:09 ----D---- C:\rsit
2014-03-30 19:29:28 ----RD---- C:\Program Files (x86)\Skype
2014-03-29 18:49:38 ----D---- C:\Program Files (x86)\Aurora
2014-03-27 23:19:30 ----D---- C:\Program Files (x86)\Git
2014-03-27 23:10:51 ----D---- C:\Users\melonsvk\AppData\Roaming\TortoiseSVN
2014-03-26 00:05:46 ----D---- C:\Users\melonsvk\AppData\Roaming\.kde
2014-03-25 23:59:48 ----D---- C:\Users\melonsvk\AppData\Roaming\gnupg
2014-03-25 23:59:44 ----D---- C:\ProgramData\GNU
2014-03-25 23:59:30 ----D---- C:\Program Files (x86)\GNU
2014-03-25 23:49:40 ----D---- C:\gnupg
2014-03-24 04:21:14 ----D---- C:\Program Files\Microsoft.NET
2014-03-24 04:04:46 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-24 04:04:46 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-24 04:03:50 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-03-23 22:09:48 ----D---- C:\Windows\temp
2014-03-23 22:09:46 ----A---- C:\ComboFix.txt
2014-03-23 22:04:16 ----SHD---- C:\$RECYCLE.BIN
2014-03-23 21:49:13 ----A---- C:\Windows\zip.exe
2014-03-23 21:49:13 ----A---- C:\Windows\SWSC.exe
2014-03-23 21:49:13 ----A---- C:\Windows\SWREG.exe
2014-03-23 21:49:13 ----A---- C:\Windows\sed.exe
2014-03-23 21:49:13 ----A---- C:\Windows\PEV.exe
2014-03-23 21:49:13 ----A---- C:\Windows\NIRCMD.exe
2014-03-23 21:49:13 ----A---- C:\Windows\MBR.exe
2014-03-23 21:49:13 ----A---- C:\Windows\grep.exe
2014-03-23 21:48:11 ----D---- C:\Qoobox
2014-03-23 21:47:02 ----D---- C:\Windows\erdnt
2014-03-23 20:56:59 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-03-23 20:56:53 ----D---- C:\Program Files\Microsoft Security Client
2014-03-19 15:04:16 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 10:27:45 ----D---- C:\Users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 10:27:34 ----D---- C:\ProgramData\Malwarebytes
2014-03-19 10:27:33 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-19 10:27:33 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-03-17 02:36:34 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-03-16 12:01:09 ----D---- C:\Program Files (x86)\AlLTubeNoAds
2014-03-14 16:46:56 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-14 16:46:56 ----A---- C:\Windows\system32\wer.dll
2014-03-14 16:46:54 ----A---- C:\Windows\system32\win32k.sys
2014-03-14 16:46:51 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-14 16:46:51 ----A---- C:\Windows\system32\iertutil.dll
2014-03-14 16:46:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-14 16:46:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 16:46:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-14 16:46:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-14 16:46:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-14 16:46:48 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-14 16:46:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-14 16:46:45 ----A---- C:\Windows\system32\urlmon.dll
2014-03-14 16:46:45 ----A---- C:\Windows\system32\iernonce.dll
2014-03-14 16:46:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-14 16:46:44 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-14 16:46:44 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-14 16:46:44 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-14 16:46:43 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-14 16:46:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-14 16:46:40 ----A---- C:\Windows\system32\iesetup.dll
2014-03-14 16:46:40 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-14 16:46:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-14 16:46:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-14 16:46:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-14 16:46:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-14 16:46:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-14 16:46:36 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-14 16:46:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-14 16:46:35 ----A---- C:\Windows\system32\ieui.dll
2014-03-14 16:46:35 ----A---- C:\Windows\system32\ieframe.dll
2014-03-14 16:46:33 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-14 16:46:33 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-14 16:46:32 ----A---- C:\Windows\system32\jscript9.dll
2014-03-14 16:46:31 ----A---- C:\Windows\system32\wininet.dll
2014-03-14 16:46:31 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-14 16:46:30 ----A---- C:\Windows\system32\msrating.dll
2014-03-14 16:46:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 16:46:29 ----A---- C:\Windows\system32\mshtml.dll
2014-03-14 16:41:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-14 16:41:56 ----A---- C:\Windows\system32\qedit.dll

======List of files/folders modified in the last 1 month======

2014-03-30 19:35:11 ----RD---- C:\Program Files
2014-03-30 19:31:45 ----D---- C:\Windows\system32\config
2014-03-30 19:31:43 ----D---- C:\Windows\System32
2014-03-30 19:31:43 ----D---- C:\Windows\inf
2014-03-30 19:31:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-30 19:30:22 ----D---- C:\Users\melonsvk\AppData\Roaming\Skype
2014-03-30 19:29:35 ----SHD---- C:\Windows\Installer
2014-03-30 19:29:29 ----D---- C:\Program Files (x86)\Common Files
2014-03-30 19:29:28 ----RD---- C:\Program Files (x86)
2014-03-30 19:29:21 ----D---- C:\ProgramData\Skype
2014-03-30 19:28:34 ----D---- C:\Users\melonsvk\AppData\Roaming\Spotify
2014-03-30 19:28:14 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-30 19:26:01 ----D---- C:\Windows\Prefetch
2014-03-30 19:25:15 ----D---- C:\Windows\system32\inetsrv
2014-03-30 19:23:41 ----D---- C:\Program Files (x86)\Steam
2014-03-30 19:23:10 ----D---- C:\Windows
2014-03-29 22:28:57 ----D---- C:\Users\melonsvk\AppData\Roaming\AIMP3
2014-03-29 02:15:53 ----D---- C:\Users\melonsvk\AppData\Roaming\vlc
2014-03-27 12:03:43 ----SHD---- C:\System Volume Information
2014-03-25 23:59:44 ----D---- C:\ProgramData
2014-03-24 22:04:15 ----D---- C:\Program Files (x86)\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack
2014-03-24 22:03:30 ----D---- C:\Windows\AutoKMS
2014-03-24 04:21:47 ----RSD---- C:\Windows\assembly
2014-03-24 04:21:14 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-03-24 04:19:17 ----D---- C:\ProgramData\Microsoft Help
2014-03-24 04:16:58 ----D---- C:\Windows\winsxs
2014-03-24 04:15:21 ----D---- C:\Windows\SysWOW64
2014-03-24 04:14:06 ----D---- C:\Windows\Microsoft.NET
2014-03-23 22:18:16 ----D---- C:\Users\melonsvk\AppData\Roaming\DAEMON Tools Pro
2014-03-23 22:09:49 ----D---- C:\Windows\system32\drivers
2014-03-23 22:04:20 ----A---- C:\Windows\system.ini
2014-03-23 22:04:04 ----D---- C:\Windows\system32\drivers\etc
2014-03-23 21:57:01 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-23 21:57:01 ----D---- C:\Windows\AppPatch
2014-03-23 20:57:02 ----D---- C:\Windows\system32\catroot
2014-03-23 20:56:59 ----SD---- C:\ProgramData\Microsoft
2014-03-20 02:30:59 ----D---- C:\Program Files (x86)\Adobe Photoshop CS6 aktivtor
2014-03-20 02:28:45 ----D---- C:\Program Files (x86)\Cain
2014-03-19 03:54:07 ----D---- C:\Windows\system32\catroot2
2014-03-18 02:58:30 ----D---- C:\Windows\Tasks
2014-03-18 02:58:30 ----D---- C:\Windows\system32\Tasks
2014-03-17 02:35:45 ----D---- C:\ProgramData\SNT
2014-03-17 02:34:01 ----D---- C:\Program Files\Internet Explorer
2014-03-17 02:34:01 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-16 12:29:12 ----D---- C:\ProgramData\YoutubeAdblocker
2014-03-16 12:29:12 ----D---- C:\ProgramData\40f12ab00162f710
2014-03-16 12:25:06 ----D---- C:\ProgramData\VMware
2014-03-16 12:25:05 ----D---- C:\Program Files\Common Files
2014-03-16 12:24:54 ----D---- C:\Windows\system32\DriverStore
2014-03-16 12:23:36 ----D---- C:\Users\melonsvk\AppData\Roaming\VMware
2014-03-16 12:22:49 ----D---- C:\Program Files (x86)\SNT
2014-03-16 12:17:40 ----D---- C:\Program Files\Sandboxie
2014-03-16 12:17:04 ----D---- C:\Program Files (x86)\Opera
2014-03-16 12:17:02 ----D---- C:\Users\melonsvk\AppData\Roaming\Opera Software
2014-03-16 12:02:06 ----D---- C:\Program Files (x86)\SmartTweak
2014-03-16 12:01:10 ----D---- C:\ProgramData\AlLTubeNoAds
2014-03-12 04:47:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-03-08 01:55:53 ----D---- C:\Program Files (x86)\winhotspot
2014-03-04 12:48:19 ----SD---- C:\Users\melonsvk\AppData\Roaming\Microsoft
2014-03-01 12:22:05 ----D---- C:\Windows\system32\drivers\UMDF
2014-03-01 12:20:54 ----D---- C:\totalcmd

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 cnnctfy3;Connectify LightWeight Filter; C:\Windows\system32\DRIVERS\cnnctfy3.sys [2013-09-25 35352]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-02-06 283064]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-09-05 12653568]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-09-05 617984]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2013-09-14 3063360]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-09-08 515584]
R3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 vpcbus;Virtual PC Host Bus Service; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;USB Virtualization Connector Service; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz135;cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 vpcuxd;USB Virtualization Stub Service; C:\Windows\system32\DRIVERS\vpcuxd.sys [2010-11-20 16384]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-09-05 239616]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Connectify;Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [2013-09-24 487936]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DirMngr;DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [2013-10-07 218112]
R2 ftpsvc;@%windir%\system32\inetsrv\ftpres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2010-11-20 15872]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2010-09-08 271360]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-25 568512]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 116648]
S2 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 Virtual Router;VirtualRouterService; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [2013-02-10 12288]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 FileZilla Server;FileZilla Server FTP server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [2014-01-02 637440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-29 119408]
S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2013-08-22 37176]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-10 1255736]
S3 WMSVC;@%windir%\system32\inetsrv\iisres.dll,-20001; C:\Windows\system32\inetsrv\wmsvc.exe [2009-07-14 10752]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 30 bře 2014 18:40

Zdravim

Tu diakritiku zpusobuje havet

:arrow:Co se tyce ComboFixu, ktery jste pouzil, tak na zaklade licence a pravidel fora ptam, umite s nim pracovat (spusteni, rozlusteni logu, napsani skriptu)?

Licencni podminky ComboFixu hovori jasne "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"
Obrázek

Nebezpeci CFka

Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
Maze stopy po haveti, takze v logu z RSIT neni nic videt
Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal

melonSVK · #3 Příspěvek od **melonSVK** » 30 bře 2014 19:14

Combofix som použil niekedy v minulosti pri odstaňovaní iného problému, nie z vlastného presvedčenia.

#4 Příspěvek od **vyosek** » 30 bře 2014 19:22

ComboFix byl pouzit 2014-03-23 22:09:46 ale u nas jste naposledy resil problem 30 zář 2012 http://forum.viry.cz/viewtopic.php?f=30&t=124630

Takze jste jej musel bud pouzit sam nebo na pokyn nevim koho

Log z nej mi sem dejte, najdete jej v c:\combofix.txt

melonSVK · #5 Příspěvek od **melonSVK** » 30 bře 2014 20:58

ComboFix 14-03-23.01 - melonsvk . 03. 2014 20:52:39.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1033.18.3951.1019 [GMT 1:00]
Running from: c:\users\melonsvk\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\YoutubeAdblocker
c:\users\melonsvk\AppData\Local\10 Nov via AnySend.exe
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0\2
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\background.html
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\crossriderManifest.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\manifest.xml
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1_base.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1000020_analytics.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1000025_analyticsFront.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1000030_mz.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\17_jQuery.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\177_crossriderDashboard.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\180_bpo_serp_m.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\182_openUrl.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\183_tabsWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\207_dbWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\21_debug.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\22_resources.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\28_initializer.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\47_resources_background.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\64_appApiMessage.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\72_appApiValidation.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\userCode\background.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\userCode\extension.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\chromeCoreFilesIndex.txt
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\actions\1.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\icon128.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\icon16.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\icon48.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\cookie.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\chrome.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\message.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\monitor.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\pageAction.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\pageActionBG.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\background.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\app_api.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\bg_app_api.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\consts.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\cookie_store.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\crossriderAPI.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\delegate.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\events.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\extensionDataStore.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\installer.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\logFile.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\logging.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\onBGDocumentLoad.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\popupResource\newPopup.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\popupResource\popup.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\reports.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\storageWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\updateManager.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\util.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\xhr.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\main.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\platformVersion.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\manifest.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\popup.html
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\background.html
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\content.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\lsdb.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\manifest.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\oGs.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\000164.ldb
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\000169.ldb
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\000170.log
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\CURRENT
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\LOCK
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\LOG
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\LOG.old
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\MANIFEST-000168
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0.localstorage-journal
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0.localstorage
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage-journal
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_ctypes.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_elementtree.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_hashlib.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_multiprocessing.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_socket.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_ssl.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\pyexpat.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\pysqlite2._sqlite.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\python27.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\pythoncom27.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\PyWinTypes27.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\select.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\unicodedata.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32api.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32com.shell.shell.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32crypt.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32event.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32file.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32inet.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32pdh.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32pipe.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32process.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32profile.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32security.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32ts.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\windows._lib_cacheinvalidation.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._controls_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._core_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._gdi_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._html2.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._misc_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._windows_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._wizard.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxbase294u_net_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxbase294u_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_adv_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_core_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_html_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Files Created from 2014-02-23 to 2014-03-23 )))))))))))))))))))))))))))))))
.
.
2014-03-23 20:00 . 2014-03-23 20:00 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-03-23 20:00 . 2014-03-23 20:00 -------- d-----w- c:\users\DefaultAppPool\AppData\Local\temp
2014-03-23 18:59 . 2014-03-23 18:59 1031560 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C28082B6-6155-4811-B038-EF68439356B1}\gapaengine.dll
2014-03-23 18:59 . 2014-03-06 20:43 10521840 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{17027819-A82C-40B9-8E4D-9B098A0CA91F}\mpengine.dll
2014-03-23 18:56 . 2014-03-23 18:57 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-03-23 18:56 . 2014-03-23 18:57 -------- d-----w- c:\program files\Microsoft Security Client
2014-03-21 08:51 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28A3241D-79B8-49D4-8065-A1C54E202709}\mpengine.dll
2014-03-19 13:04 . 2014-03-19 14:26 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2014-03-19 08:27 . 2014-03-19 08:27 -------- d-----w- c:\users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 08:27 . 2014-03-19 08:27 -------- d-----w- c:\programdata\Malwarebytes
2014-03-19 08:27 . 2014-03-19 08:27 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-03-19 08:27 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-03-17 12:55 . 2014-03-22 16:56 -------- d-----w- c:\program files (x86)\Aurora
2014-03-16 10:01 . 2014-03-16 10:01 -------- d-----w- c:\program files (x86)\AlLTubeNoAds
2014-03-14 18:33 . 2014-03-14 18:33 245248 ----a-w- c:\users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe
2014-03-14 14:41 . 2014-02-04 02:32 624128 ----a-w- c:\windows\system32\qedit.dll
2014-03-14 14:41 . 2014-02-04 02:04 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-03-03 21:03 . 2014-03-03 21:03 647872 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX
2014-03-03 20:54 . 2014-03-03 16:53 1071088 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-12 02:47 . 2013-09-08 19:24 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-12 02:47 . 2013-09-08 19:24 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-06 12:25 . 2014-02-06 12:25 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-01-19 07:33 . 2013-09-08 19:28 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-12-24 23:09 . 2014-02-12 22:02 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-12-24 22:48 . 2014-02-12 22:02 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
2014-02-12 18:41 677888 ----a-w- c:\program files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2014-02-25 1821888]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2013-12-06 20203904]
"winhotspot"="c:\program files (x86)\winhotspot\1F70.tmp" [2014-01-19 158208]
"Spotify Web Helper"="c:\users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-01-29 1171968]
"Spotify"="c:\users\melonsvk\AppData\Roaming\Spotify\spotify.exe" [2014-01-29 6118400]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-09-05 766208]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2011-09-28 1039872]
"mnctwgbfoSrv"="c:\windows\inf\mnctwgbfo.vbe" [2014-01-19 1342]
.
c:\users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Firewall.exe [2014-3-14 245248]
Firewall.exe.tmp [2014-3-23 21028]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Virtual Router Manager.lnk - c:\windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe /min [2013-9-14 22486]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cpuz135;cpuz135;c:\users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys;c:\users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
R3 vpcuxd;USB Virtualization Stub Service;c:\windows\system32\DRIVERS\vpcuxd.sys;c:\windows\SYSNATIVE\DRIVERS\vpcuxd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WMSVC;Web Management Service;c:\windows\system32\inetsrv\wmsvc.exe;c:\windows\SYSNATIVE\inetsrv\wmsvc.exe [x]
S1 cnnctfy3;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy3.sys;c:\windows\SYSNATIVE\DRIVERS\cnnctfy3.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe;c:\program files (x86)\Connectify\ConnectifyService.exe [x]
S2 ftpsvc;Microsoft FTP Service;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 Virtual Router;VirtualRouterService;c:\program files (x86)\Virtual Router\VirtualRouterService.exe;c:\program files (x86)\Virtual Router\VirtualRouterService.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-04 04:42 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-03-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-08 02:47]
.
2014-03-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
- c:\users\melonsvk\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-06 18:33]
.
2014-03-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
- c:\users\melonsvk\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-06 18:33]
.
2014-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 15:23]
.
2014-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 15:23]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
2014-02-12 18:41 949248 ----a-w- c:\program files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-09-08 489472]
"Greenshot"="c:\program files\Greenshot\Greenshot.exe" [2012-10-30 462848]
"Connectify Dispatch"="c:\program files (x86)\Connectify\DispatchUI.exe" [2013-09-24 2233120]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-09-03 444856]
"Connectify Hotspot"="c:\program files (x86)\Connectify\Connectify.exe" [2013-09-24 4162336]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48
mStart Page = hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = cache34.ics.muni.cz:5555
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~1\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 147.251.208.1
TCP: Interfaces\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}: NameServer = 8.8.8.8,4.4.4.4
TCP: Interfaces\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}\759664960264255454: NameServer = 8.8.8.8,4.4.4.4
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\
FF - prefs.js: browser.search.defaulturl - hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=
FF - prefs.js: browser.startup.homepage - hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48
FF - prefs.js: keyword.URL - hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=
FF - prefs.js: network.proxy.ftp - cache34.ics.muni.cz
FF - prefs.js: network.proxy.ftp_port - 5555
FF - prefs.js: network.proxy.http - cache34.ics.muni.cz
FF - prefs.js: network.proxy.http_port - 5555
FF - prefs.js: network.proxy.socks - cache34.ics.muni.cz
FF - prefs.js: network.proxy.socks_port - 5555
FF - prefs.js: network.proxy.ssl - cache34.ics.muni.cz
FF - prefs.js: network.proxy.ssl_port - 5555
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Connectify\ConnectifyD.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Completion time: 2014-03-23 21:09:45 - machine was rebooted
ComboFix-quarantined-files.txt 2014-03-23 20:09
.
Pre-Run: 183 637 073 920 bytes free
Post-Run: 183 367 147 520 bytes free
.
- - End Of File - - FABB4760EF64DB210C748EAF763BA36D
A36C5E4F47E84449FF07ED3517B43A31

#6 Příspěvek od **vyosek** » 01 dub 2014 06:29

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

melonSVK · #7 Příspěvek od **melonSVK** » 01 dub 2014 18:06

# AdwCleaner v3.023 - Report created 01/04/2014 at 19:05:22
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : melonsvk - MY_PRECIOUS
# Running from : C:\Users\melonsvk\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\RegClean
Folder Deleted : C:\ProgramData\SNT
Folder Deleted : C:\ProgramData\YoutubeAdblocker
Folder Deleted : C:\ProgramData\greatsuaver
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\Program Files (x86)\SNT
Folder Deleted : C:\Program Files (x86)\FreeHD-Sport TV V9.0
Folder Deleted : C:\Program Files (x86)\greatsuaver
Folder Deleted : C:\Users\melonsvk\AppData\Local\torch
Folder Deleted : C:\Users\melonsvk\AppData\LocalLow\FreeHD-Sport TV V9.0
Folder Deleted : C:\Users\melonsvk\AppData\Roaming\SimilarSites
File Deleted : C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\searchplugins\WebSearch.xml
File Deleted : C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\user.js

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.Sandbox.1
Key Deleted : HKCU\Software\5cd8f17f4086744065eb0992a09e05a2
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522132286}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555135586}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566136686}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544134486}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5081f89c-7618-48ce-bc0b-8c65e830b8a9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5db91217-16c2-4a7a-b07f-4d11138b70ea}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cd9fff9-af8d-4851-b92a-a73fbb31187d}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{be34fd68-2ef0-49b9-98c7-90a72cf3149e}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d7a01b17-87c6-484a-822c-af4656a537c4}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511131186}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522132286}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555135586}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566136686}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5081f89c-7618-48ce-bc0b-8c65e830b8a9}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5db91217-16c2-4a7a-b07f-4d11138b70ea}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cd9fff9-af8d-4851-b92a-a73fbb31187d}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{be34fd68-2ef0-49b9-98c7-90a72cf3149e}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d7a01b17-87c6-484a-822c-af4656a537c4}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\smarttweak
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\WEDLMNGR
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\FreeHD-Sport TV V9.0
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\FreeHD-Sport TV V9.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA41BB14-E67B-1653-C57B-5CA99418A866}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FreeHD-Sport TV V9.0
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v

[ File : C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename,S", "WebSearch");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=");
Line Deleted : user_pref("browser.search.order.1", "WebSearch");
Line Deleted : user_pref("browser.search.order.1,S", "WebSearch");
Line Deleted : user_pref("browser.search.selectedEngine,S", "WebSearch");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48");
Line Deleted : user_pref("extensions.1Lr.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexOf[...]
Line Deleted : user_pref("extensions.HkeM2bU.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressba[...]
Line Deleted : user_pref("extensions.ZKnrPl0.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressba[...]
Line Deleted : user_pref("extensions.cmoGnvfcEN.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/res[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1442768b967242f5bd29fa50b0f10c98");
Line Deleted : user_pref("keyword.URL", "hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=");

-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : icon_url
Deleted : search_url
Deleted : keyword

*************************

AdwCleaner[R0].txt - [11542 octets] - [01/04/2014 19:02:40]
AdwCleaner[S0].txt - [8382 octets] - [01/04/2014 19:05:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8442 octets] ##########

#8 Příspěvek od **vyosek** » 01 dub 2014 19:28

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

melonSVK · #9 Příspěvek od **melonSVK** » 01 dub 2014 23:54

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by melonsvk on ut 01. 04. 2014 at 21:43:39,21.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\melonsvk\Desktop\zoek\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

1. 4. 2014 21:46:22 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\prefs.js:

Added to C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default\prefs.js:

Added to C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- Lines extensions.1Lr removed from prefs.js ----
user_pref("extensions.1Lr.epoch", "1394198110");
user_pref("extensions.1Lr.url", "http://discountgetdirect.ru/sync2/?q=hf ... a7rjrFqjwH
---- Lines extensions.HkeM2bU removed from prefs.js ----
user_pref("extensions.HkeM2bU.epoch", "1391981460");
user_pref("extensions.HkeM2bU.url", "http://getsync.info/sync2/?q=hfZ9ofV9CS ... sFrHaGpih7
---- Lines extensions.ZKnrPl0 removed from prefs.js ----
user_pref("extensions.ZKnrPl0.epoch", "1391981460");
user_pref("extensions.ZKnrPl0.url", "http://toolkitcomp.info/sync2/?q=hfZ9of ... aGrdYGrjrE
---- Lines extensions.cmoGnvfcEN removed from prefs.js ----
user_pref("extensions.cmoGnvfcEN.epoch", "1391981460");
user_pref("extensions.cmoGnvfcEN.url", "http://guardsetstarr.info/sync2/?q=hfZ9 ... jw9rdsEpds
---- FireFox user.js and prefs.js backups ----

prefs_201401.04._2159_.backup

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201401.04._2159_.backup

==== Deleting Files \ Folders ======================

C:\Users\melonsvk\AppData\LocalLow\{25AAAAA3-5B9A-4F44-D656-492E6C858E6C} deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{25AAAAA3-5B9A-4F44-D656-492E6C858E6C} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{25AAAAA3-5B9A-4F44-D656-492E6C858E6C} deleted
C:\PROGRA~3\40f12ab00162f710 deleted
C:\PROGRA~3\AlLTubeNoAds deleted
C:\PROGRA~2\AlLTubeNoAds deleted
C:\PROGRA~2\SmartTweak deleted
C:\PROGRA~2\GrabRez deleted
C:\PROGRA~2\SopCast deleted
C:\PROGRA~3\SetApp deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software deleted
C:\Users\melonsvk\Downloads\SopCast.zip deleted
C:\Users\melonsvk\Downloads\SoftonicDownloader_for_accessdiver.exe deleted
C:\Users\melonsvk\Downloads\SoftonicDownloader_for_winhotspot-virtual-wifi-router.exe deleted
C:\Users\melonsvk\Downloads\ULTIMATE OCR CRACKERS PACK.rar.exe deleted
"C:\PROGRA~3\hmjiajpoaioljahinpbfeopfolhgngfl\hmjiajpoaioljahinpbfeopfolhgngfl.crx" deleted
"C:\PROGRA~3\hmjiajpoaioljahinpbfeopfolhgngfl\update.xml" deleted
"C:\PROGRA~3\hmjiajpoaioljahinpbfeopfolhgngfl" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default
- HttpFox - %ProfilePath%\extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi
- ReloadEvery - %ProfilePath%\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
- Greasemonkey - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default
- Enigmail - %ProfilePath%\extensions\{847b3a00-7ab1-11d4-8f02-006008948af5}
- Instrument Test - %ProfilePath%\extensions\tbtestpilot@labs.mozilla.com.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash
87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies
2BF85B6162528E0635DD8D632EB975C8 - C:\Users\melonsvk\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll - Facebook Desktop

==== Chrome Look ======================

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
apdfllckaahabafndbhieahigkjlhalf - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[13. 02. 2014 16:55]

YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Administrator\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
Chrome In-App Payments service - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
YTBoOkMairk - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Guest\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
AlLTubeNoAds - melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl
YoutubeAdblocker - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf

==== Chrome Fix ======================

C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cfmoppincnpbihkkbniclpgaklpgfone_0.localstorage deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jkkenjlnjfemconejajakbijbheoffli_0.localstorage deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_okmbfaoiapckdnaigfceleflfhogclgl_0.localstorage deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pjekkekkacnihbkpdhdhmfhmpiinldcf_0.localstorage deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{1948D768-6063-402E-B914-67EE2407B7A6} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_13415"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\c6e42f97-3762-4030-a32d-89076ff12fc3 deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Guest\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Guest\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\melonsvk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\melonsvk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MKRUI79S will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\melonsvk\AppData\Local\Mozilla\Firefox\Profiles\uopr2aj9.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=534 folders=188 40320435 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\temp emptied successfully
C:\Users\Classic .NET AppPool\AppData\Local\temp emptied successfully
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\DefaultAppPool\AppData\Local\temp emptied successfully
C:\Users\Guest\AppData\Local\temp emptied successfully
C:\Users\HomeGroupUser$\AppData\Local\temp emptied successfully
C:\Users\melonsvk\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\CLASSI~1.NET\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\melonsvk\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\melonsvk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MKRUI79S" not found

==== EOF on st 02. 04. 2014 at 1:56:24,93 ======================

#10 Příspěvek od **vyosek** » 02 dub 2014 07:34

Poprosim FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

melonSVK · #11 Příspěvek od **melonSVK** » 02 dub 2014 14:23

Nech sa páči priateľu

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by melonsvk (administrator) on MY_PRECIOUS on 02-04-2014 15:25:09
Running from C:\Users\melonsvk\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Microsoft Corporation) C:\Windows\system32\inetsrv\inetinfo.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Chris Pietschmann (http://pietschsoft.com)) C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyD.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Connectify) C:\Program Files (x86)\Connectify\DispatchUI.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectify.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyGopher.exe
(Spotify Ltd) C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Spotify Ltd) C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft) C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Aurora\firefox.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files (x86)\Aurora\plugin-container.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Foxit Corporation) C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
() C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [489472 2010-09-08] (IDT, Inc.)
HKLM\...\Run: [Greenshot] - C:\Program Files\Greenshot\Greenshot.exe [462848 2012-10-30] (Greenshot)
HKLM\...\Run: [Connectify Dispatch] - C:\Program Files (x86)\Connectify\DispatchUI.exe [2233120 2013-09-24] (Connectify)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444856 2011-09-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Connectify Hotspot] - C:\Program Files (x86)\Connectify\Connectify.exe [4162336 2013-09-24] (Connectify)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1039872 2011-09-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mnctwgbfoSrv] - C:\Windows\inf\mnctwgbfo.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [winhotspot] - C:\Program Files (x86)\winhotspot\1F70.tmp [158208 2014-01-20] ()
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify Web Helper] - C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify] - C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe (Microsoft)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: cache34.ics.muni.cz:5555
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54868F0C7ACCE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {1948D768-6063-402E-B914-67EE2407B7A6} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 147.251.208.1
Tcpip\..\Interfaces\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}: [NameServer]8.8.8.8,4.4.4.4

FireFox:
========
FF ProfilePath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "backup.ftp", "cache34.ics.muni.cz"
FF NetworkProxy: "backup.ftp_port", 5555
FF NetworkProxy: "backup.socks", "cache34.ics.muni.cz"
FF NetworkProxy: "backup.socks_port", 5555
FF NetworkProxy: "backup.ssl", "cache34.ics.muni.cz"
FF NetworkProxy: "backup.ssl_port", 5555
FF NetworkProxy: "ftp", "cache34.ics.muni.cz"
FF NetworkProxy: "ftp_port", 5555
FF NetworkProxy: "http", "cache34.ics.muni.cz"
FF NetworkProxy: "http_port", 5555
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "cache34.ics.muni.cz"
FF NetworkProxy: "socks_port", 5555
FF NetworkProxy: "ssl", "cache34.ics.muni.cz"
FF NetworkProxy: "ssl_port", 5555
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\melonsvk\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: No Name - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\staged [2014-04-02]
FF Extension: HttpFox - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2014-03-31]
FF Extension: ReloadEvery - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-13]
FF Extension: Adblock Plus - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-08]
FF Extension: Greasemonkey - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-11-01]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Aurora\firefox.exe

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-24]
CHR Extension: (Disk Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-13]
CHR Extension: (YouTube) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-24]
CHR Extension: (Hľadať v Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-24]
CHR Extension: (Peňaženka Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-11]
CHR Extension: (Gmail) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-24]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-09-24] (Connectify)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] ()
S3 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [637440 2014-01-02] (FileZilla Project)
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [350720 2012-06-01] (Microsoft Corporation)
R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37176 2013-08-22] (The OpenVPN Project)
R2 Virtual Router; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (http://pietschsoft.com))
S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 wampapache; c:\wamp\bin\apache\apache2.4.4\bin\httpd.exe [24576 2013-06-23] (Apache Software Foundation)
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe [12867584 2013-06-23] ()
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [35352 2013-09-25] (Connectify)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-06] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-04-02 15:25 - 2014-04-02 15:25 - 00018557 _____ () C:\Users\melonsvk\Downloads\FRST.txt
2014-04-02 15:25 - 2014-04-02 15:25 - 00000000 ____D () C:\FRST
2014-04-02 15:24 - 2014-04-02 15:24 - 02157056 _____ (Farbar) C:\Users\melonsvk\Downloads\FRST64.exe
2014-04-02 01:55 - 2014-04-02 01:55 - 00000022 _____ () C:\Windows\S.dirmngr
2014-04-02 01:14 - 2014-04-02 01:14 - 00000000 ____D () C:\ProgramData\Sun
2014-04-02 01:13 - 2014-04-02 01:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-02 01:13 - 2014-04-02 01:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-02 01:11 - 2014-04-02 01:12 - 00921000 _____ (Oracle Corporation) C:\Users\melonsvk\Downloads\jxpiinstall.exe
2014-04-01 22:06 - 2014-04-01 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:45 - 2014-04-02 01:56 - 00032069 _____ () C:\zoek-results.log
2014-04-01 21:43 - 2014-04-01 22:04 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 19:02 - 2014-04-01 19:06 - 00000000 ____D () C:\AdwCleaner
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-03-31 20:53 - 2014-03-31 20:56 - 00000000 ____D () C:\wamp
2014-03-31 20:49 - 2014-03-31 20:49 - 40603386 _____ (Hervé Leclerc (HeL) ) C:\Users\melonsvk\Downloads\Wampserver2.4-x64.exe
2014-03-31 17:08 - 2014-04-02 09:16 - 00000000 ____D () C:\Program Files (x86)\Aurora
2014-03-30 22:43 - 2014-03-30 22:47 - 1609824256 _____ () C:\Users\melonsvk\Downloads\Dom.Hemingway.2013.DVDRip.XviD.AC3.CZ-TreZzoR.avi
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\rsit
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\Program Files\trend micro
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Skype
2014-03-29 21:10 - 2014-03-29 21:10 - 00089920 _____ () C:\Users\melonsvk\Downloads\wp-hide-post.zip
2014-03-29 21:10 - 2014-03-29 21:10 - 00000000 ____D () C:\Users\melonsvk\Downloads\wp-hide-post
2014-03-28 00:19 - 2014-03-28 00:19 - 00003990 _____ () C:\Users\melonsvk\Downloads\search-exclude.1.0.3.zip
2014-03-28 00:19 - 2014-03-28 00:19 - 00000000 ____D () C:\Users\melonsvk\Downloads\search-exclude.1.0.3
2014-03-27 23:19 - 2014-03-27 23:20 - 00000000 ____D () C:\Program Files (x86)\Git
2014-03-27 23:18 - 2014-03-27 23:18 - 15511958 _____ (The Git Development Community ) C:\Users\melonsvk\Downloads\Git-1.9.0-preview20140217.exe
2014-03-27 23:10 - 2014-03-27 23:10 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\TortoiseSVN
2014-03-27 22:43 - 2014-03-29 21:39 - 00000000 ____D () C:\Users\melonsvk\Desktop\highlife
2014-03-27 21:26 - 2014-03-27 21:40 - 507055586 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x06 Poslední den (The Last Day) CZ.avi
2014-03-27 20:56 - 2014-03-27 21:13 - 505991948 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x05 Fotostroj času (Timeslides) CZ.avi
2014-03-26 00:10 - 2014-03-26 00:10 - 00001211 _____ () C:\Users\melonsvk\AppData\Local\recently-used.xbel
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\.kde
2014-03-26 00:02 - 2014-03-26 00:02 - 00001840 _____ () C:\Users\melonsvk\Desktop\privatekeymail.txt
2014-03-26 00:02 - 2014-03-26 00:02 - 00000914 _____ () C:\Users\melonsvk\Desktop\pubkeymail.txt
2014-03-26 00:00 - 2014-03-26 00:03 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\gtk-2.0
2014-03-26 00:00 - 2014-03-26 00:00 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\GNU
2014-03-25 23:59 - 2014-03-30 13:45 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\gnupg
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\ProgramData\GNU
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\Program Files (x86)\GNU
2014-03-25 23:58 - 2014-03-25 23:58 - 29689992 _____ (g10 Code GmbH) C:\Users\melonsvk\Downloads\gpg4win-2.2.1.exe
2014-03-25 23:49 - 2014-03-25 23:49 - 00000000 ____D () C:\gnupg
2014-03-25 23:45 - 2014-03-25 23:45 - 01470222 _____ () C:\Users\melonsvk\Downloads\enigmail-1.6-sm+tb.xpi
2014-03-25 22:03 - 2014-03-25 22:03 - 01327006 _____ () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2.zip
2014-03-25 22:03 - 2014-03-25 22:03 - 00000000 ____D () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2
2014-03-25 20:50 - 2014-03-25 14:44 - 00026486 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.srt
2014-03-25 20:49 - 2014-03-25 20:50 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral
2014-03-25 20:29 - 2014-03-25 20:30 - 176945434 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.mp4
2014-03-25 20:28 - 2014-03-25 20:29 - 00047390 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral.zip
2014-03-24 22:03 - 2014-03-24 22:03 - 13897647 ____T ( ) C:\Users\melonsvk\Downloads\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack.exe72BEA13A
2014-03-24 22:03 - 2014-03-24 22:03 - 03222705 ____T () C:\Users\melonsvk\Downloads\wfuzz-2.0.tgzEE09CEA8
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-24 04:03 - 2014-03-24 04:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 22:18 - 2014-03-23 22:18 - 00000000 ____D () C:\Users\melonsvk\Downloads\Hutil210_ISO
2014-03-23 22:17 - 2014-03-23 22:17 - 01489873 _____ () C:\Users\melonsvk\Downloads\Hutil210_ISO.rar
2014-03-23 22:09 - 2014-03-23 22:09 - 00039459 _____ () C:\ComboFix.txt
2014-03-23 21:49 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-23 21:49 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-23 21:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-23 21:48 - 2014-03-23 22:09 - 00000000 ____D () C:\Qoobox
2014-03-23 21:47 - 2014-03-31 03:01 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-03-23 21:47 - 2014-03-23 22:07 - 00000000 ____D () C:\Windows\erdnt
2014-03-23 21:44 - 2014-03-23 21:45 - 05190773 ____R (Swearware) C:\Users\melonsvk\Downloads\ComboFix.exe
2014-03-23 20:56 - 2014-03-31 03:01 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-23 20:56 - 2014-03-31 03:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-03-23 20:56 - 2014-03-23 20:56 - 13696184 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\mseinstall.exe
2014-03-22 22:47 - 2014-03-22 22:47 - 00000000 ____D () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r
2014-03-22 22:46 - 2014-03-22 22:46 - 01524211 _____ () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r.rar
2014-03-22 22:45 - 2014-03-22 22:45 - 09668186 _____ () C:\Users\melonsvk\Downloads\Hitman v0.98.rar
2014-03-20 00:21 - 2014-03-20 00:36 - 727791522 _____ () C:\Users\melonsvk\Downloads\Šestý-smysl-CZ.avi.part
2014-03-19 22:21 - 2014-03-19 22:25 - 843019148 _____ () C:\Users\melonsvk\Downloads\Kostka-CZ-dabing---Horor--Mysteriózní,-Kanada,-1997-(nejlepsi-filmy.mypage.cz).avi
2014-03-19 22:18 - 2014-03-19 22:21 - 733603840 _____ () C:\Users\melonsvk\Downloads\FUNNY-GAMES-CZ.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244957184 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E04.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244789248 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E05.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244703232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E06.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244551680 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E02.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244496384 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E01.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244230144 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E03.avi
2014-03-19 21:31 - 2014-03-18 23:51 - 00028918 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.srt
2014-03-19 21:30 - 2014-03-19 21:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral
2014-03-19 21:29 - 2014-03-19 21:33 - 202051517 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.mp4
2014-03-19 21:29 - 2014-03-19 21:29 - 00050935 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral.zip
2014-03-19 21:00 - 2014-03-19 21:13 - 254260181 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E05.avi
2014-03-19 21:00 - 2014-03-19 21:12 - 257375497 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E02.avi
2014-03-19 21:00 - 2014-03-19 21:12 - 257031532 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E04.avi
2014-03-19 21:00 - 2014-03-19 21:11 - 258383856 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E01.avi
2014-03-19 21:00 - 2014-03-19 21:11 - 256556662 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E06.avi
2014-03-19 21:00 - 2014-03-19 21:11 - 256421029 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E03.avi
2014-03-19 20:03 - 2014-03-19 20:06 - 244867072 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E06.avi
2014-03-19 20:03 - 2014-03-19 20:06 - 244598784 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E05.avi
2014-03-19 20:03 - 2014-03-19 20:05 - 244934656 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E04.avi
2014-03-19 20:03 - 2014-03-19 20:05 - 244621312 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E03.avi
2014-03-19 20:02 - 2014-03-19 20:05 - 244930560 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E02.avi
2014-03-19 19:54 - 2014-03-19 19:56 - 244447232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E01.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 244938752 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E06.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 244375040 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E05.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 224359924 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E03.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 217567969 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E04.avi
2014-03-19 19:51 - 2014-03-19 19:56 - 244669440 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E02.avi
2014-03-19 19:51 - 2014-03-19 19:54 - 244792320 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E01.avi
2014-03-19 18:42 - 2014-03-19 18:43 - 244716032 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E06.avi
2014-03-19 18:18 - 2014-03-19 18:20 - 244709888 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E06.avi
2014-03-19 18:17 - 2014-03-19 18:19 - 244872704 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E05.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 245018112 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E03.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 244540416 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E01.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 244504064 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E02.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 244487168 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E04.avi
2014-03-19 18:15 - 2014-03-19 18:18 - 244521984 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E05.avi
2014-03-19 18:15 - 2014-03-19 18:17 - 245081600 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E04.avi
2014-03-19 18:07 - 2014-03-19 18:08 - 244969496 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E03.avi
2014-03-19 15:04 - 2014-03-19 16:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 10:27 - 2014-03-19 10:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\melonsvk\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-19 10:27 - 2014-03-19 10:27 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-19 10:27 - 2013-04-04 15:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-18 13:12 - 2014-03-18 13:12 - 01518833 _____ () C:\Users\melonsvk\Downloads\JTesseract.rar
2014-03-18 13:12 - 2014-03-18 13:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\JTesseract
2014-03-18 02:33 - 2014-03-18 02:34 - 244938316 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E02.avi
2014-03-18 02:26 - 2014-03-18 02:26 - 245016476 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E01.avi
2014-03-18 02:10 - 2014-03-18 02:10 - 15802593 _____ () C:\Users\melonsvk\Downloads\WitchdOCtoR.zip
2014-03-18 00:43 - 2014-03-18 00:43 - 00012683 _____ () C:\Users\melonsvk\Desktop\excel_graf.xlsx
2014-03-17 21:46 - 2014-03-04 12:43 - 00001743 _____ () C:\Users\melonsvk\Desktop\id_rsa
2014-03-17 21:20 - 2014-03-17 21:21 - 00000000 ____D () C:\Users\melonsvk\Downloads\securimage
2014-03-17 21:19 - 2014-03-17 21:19 - 07583247 _____ () C:\Users\melonsvk\Downloads\securimage.tar.gz
2014-03-17 02:36 - 2014-03-17 02:36 - 05061032 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-17 02:35 - 2014-04-02 01:55 - 00011966 _____ () C:\Windows\PFRO.log
2014-03-16 20:29 - 2014-03-28 21:14 - 00000000 ____D () C:\Users\melonsvk\Desktop\shareride
2014-03-16 18:42 - 2014-04-02 01:55 - 00000840 _____ () C:\Windows\setupact.log
2014-03-16 18:42 - 2014-03-16 18:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-16 12:05 - 2014-03-16 12:05 - 00112304 _____ () C:\Users\melonsvk\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 01:55 - 2014-03-12 01:19 - 00027570 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e20.hdtv.x264-excellence.cz.srt
2014-03-15 01:31 - 2014-03-15 01:31 - 00034210 _____ () C:\Users\melonsvk\Downloads\Two-and-a-Half-Men-S11E17(0000233494).srt
2014-03-15 01:12 - 2014-03-15 01:12 - 00048250 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x20_jingspiral.zip
2014-03-15 01:11 - 2014-03-15 01:16 - 206756398 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E20.HDTV.x264-EXCELLENCE.mp4
2014-03-15 01:06 - 2014-03-15 01:06 - 00035165 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.srt
2014-03-15 01:05 - 2014-03-15 01:10 - 187560935 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.mp4.part
2014-03-15 00:06 - 2014-03-15 00:17 - 00000000 ____D () C:\Users\melonsvk\Downloads\table_zebra
2014-03-15 00:06 - 2014-03-15 00:06 - 00020695 _____ () C:\Users\melonsvk\Downloads\table_zebra.zip
2014-03-14 16:46 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 16:46 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 16:46 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 16:46 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 16:46 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 16:46 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 16:46 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 16:46 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 16:46 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 16:46 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 16:46 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 16:46 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 16:46 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-14 16:46 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 16:46 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 16:46 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-14 16:46 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 16:46 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 16:46 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-14 16:46 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-14 16:46 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-14 16:46 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-14 16:46 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-14 16:46 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 16:46 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 16:46 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-14 16:46 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-14 16:46 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 16:46 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 16:46 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-14 16:46 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-14 16:46 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 16:46 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-14 16:46 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-14 16:46 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-14 16:46 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 16:46 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-14 16:46 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-14 16:46 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 16:46 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-14 16:46 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 16:46 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 16:46 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 16:41 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 16:41 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 00:40 - 2014-03-13 00:50 - 2505515392 _____ () C:\Users\melonsvk\Downloads\Osudovy-dotek---Butterfly-Effect-The-2004_CZ_Dabing.mkv
2014-03-13 00:36 - 2014-03-13 00:36 - 00097767 _____ () C:\Users\melonsvk\Downloads\Jackass-Presents-Bad-Grandpa(0000229754).srt
2014-03-13 00:35 - 2014-03-13 00:39 - 786983786 _____ () C:\Users\melonsvk\Downloads\Bad-Grandpa-2013-UNRATED-720p-WEB-DL-700MB-Ganool.mkv
2014-03-12 22:37 - 2014-03-12 22:48 - 175207650 _____ () C:\Users\melonsvk\Downloads\Simpsonovi-24x11-Stridani-porucniku.avi.part
2014-03-12 15:30 - 2014-03-12 15:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\Separ - Pirat (2014)
2014-03-12 15:26 - 2014-03-12 15:27 - 124680185 _____ () C:\Users\melonsvk\Downloads\Separ - Pirat (2014).rar
2014-03-10 18:12 - 2014-03-10 18:12 - 00674145 _____ () C:\Users\melonsvk\Downloads\Sentry1.0.zip
2014-03-10 16:03 - 2014-03-10 16:04 - 176830440 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x09_Konec-sveta_za_dvermi_XVID_CZ.avi
2014-03-10 02:16 - 2014-03-10 02:17 - 267405256 _____ () C:\Users\melonsvk\Downloads\02x01-Mala-Velka-Britanie.avi
2014-03-10 02:16 - 2014-03-10 02:17 - 254634802 _____ () C:\Users\melonsvk\Downloads\02x02-Mala-Velka-Britanie.avi
2014-03-08 21:55 - 2014-03-08 21:55 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpBB-3.0.12
2014-03-08 21:54 - 2014-03-08 21:54 - 02487985 _____ () C:\Users\melonsvk\Downloads\phpBB-3.0.12.zip
2014-03-08 21:15 - 2014-03-08 21:15 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages
2014-03-08 21:14 - 2014-03-08 21:15 - 08533786 _____ () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages.zip
2014-03-08 20:59 - 2014-03-08 20:59 - 01021432 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\NDP451-KB2859818-Web.exe
2014-03-08 20:54 - 2014-03-08 20:54 - 00001335 _____ () C:\Users\melonsvk\Downloads\simple-user-auth-1.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00002388 _____ () C:\Users\melonsvk\Downloads\loginsimple.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00000000 ____D () C:\Users\melonsvk\Downloads\loginsimple
2014-03-08 19:32 - 2014-03-08 19:32 - 193026000 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x07_Den_kdy_se_ochladila_Zeme_XVID_CZ.avi
2014-03-08 18:12 - 2014-03-08 18:12 - 00000367 _____ () C:\Users\melonsvk\Downloads\zaheslovani-stranky.zip
2014-03-08 18:12 - 2014-03-08 18:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\zaheslovani-stranky
2014-03-08 01:53 - 2014-03-08 01:55 - 842123264 _____ () C:\Users\melonsvk\Downloads\DISTURBIA---CZ-dvdrip.avi
2014-03-08 01:46 - 2014-03-08 01:46 - 119015516 _____ () C:\Users\melonsvk\Downloads\Je-super-mit-starsiho-brachu---sexincest.mp4
2014-03-08 01:44 - 2014-03-08 01:46 - 705609262 _____ () C:\Users\melonsvk\Downloads\CPP-Rebecca-Linares-Crew-2013-CZECH-TEEN-PORN-DVDRIP-HD-SEX-XXX-PORNO-CESKY-MOBILE-EXCLUSIVE-BIG-BOOBS-TITS-YOUNG-STREET-AMATEUR-HQ.mp4
2014-03-08 01:39 - 2014-03-08 01:43 - 1939795548 _____ () C:\Users\melonsvk\Downloads\Disturbia.2007.1080p.Bluray.x264.anoXmous.mp4
2014-03-07 20:28 - 2014-03-07 20:29 - 181312244 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x22_Vyroci_ve_vlaku_XVID_CZ.avi
2014-03-07 18:10 - 2014-03-07 18:10 - 00042667 _____ () C:\Users\melonsvk\Downloads\DenyHosts-2.6.tar.gz
2014-03-07 14:33 - 2014-03-07 14:39 - 1707004246 _____ () C:\Users\melonsvk\Downloads\Jen_na_sex__2008.avi.part
2014-03-07 14:04 - 2014-03-07 14:05 - 173180576 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x21_Saga_o_Carlovi_XVID_CZ.avi
2014-03-07 13:49 - 2014-03-07 13:49 - 178313974 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x20_Falesny_virtuos_XVID_CZ.avi
2014-03-07 01:24 - 2014-03-07 01:26 - 1551390720 _____ () C:\Users\melonsvk\Downloads\V-Bruggach-CZ-dabing.avi
2014-03-06 17:02 - 2014-03-06 17:02 - 00000000 ____D () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz
2014-03-06 17:01 - 2014-03-06 17:02 - 08282113 _____ () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz.rar
2014-03-05 00:37 - 2014-03-05 00:38 - 191138841 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.mp4
2014-03-05 00:37 - 2014-03-05 00:37 - 00031222 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.srt
2014-03-04 19:17 - 2014-03-04 19:18 - 444545299 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140224.mp4
2014-03-04 19:16 - 2014-03-04 19:19 - 617377795 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140217.mp4
2014-03-03 23:33 - 2014-03-03 23:38 - 981513568 _____ () C:\Users\melonsvk\Downloads\Proklety-Ostrov-cz-dabing.avi
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCT2.OCX
2014-03-03 22:54 - 2014-03-03 18:53 - 01071088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-03-03 18:53 - 2014-03-03 18:53 - 01071088 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCTL.OCX
2014-03-03 18:51 - 2014-03-03 18:51 - 00000000 ____D () C:\Users\melonsvk\Downloads\C-Force

==================== One Month Modified Files and Folders =======

2014-04-02 15:25 - 2014-04-02 15:25 - 00018557 _____ () C:\Users\melonsvk\Downloads\FRST.txt
2014-04-02 15:25 - 2014-04-02 15:25 - 00000000 ____D () C:\FRST
2014-04-02 15:24 - 2014-04-02 15:24 - 02157056 _____ (Farbar) C:\Users\melonsvk\Downloads\FRST64.exe
2014-04-02 15:24 - 2013-09-08 21:39 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Skype
2014-04-02 14:57 - 2014-01-29 16:27 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Spotify
2014-04-02 14:47 - 2013-09-08 21:24 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-02 14:41 - 2013-09-11 17:23 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-02 14:38 - 2013-10-06 20:33 - 00000940 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
2014-04-02 14:29 - 2013-09-08 21:08 - 01280591 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 10:41 - 2013-09-11 17:23 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-02 09:16 - 2014-03-31 17:08 - 00000000 ____D () C:\Program Files (x86)\Aurora
2014-04-02 03:33 - 2014-01-19 20:15 - 00004982 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for my_precious-melonsvk my_precious
2014-04-02 02:02 - 2009-07-14 07:13 - 00874520 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-02 01:57 - 2013-12-17 22:35 - 00000000 ___RD () C:\Users\melonsvk\Disk Google
2014-04-02 01:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-04-02 01:56 - 2014-04-01 21:45 - 00032069 _____ () C:\zoek-results.log
2014-04-02 01:56 - 2013-09-19 12:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-02 01:56 - 2013-09-14 23:41 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-04-02 01:55 - 2014-04-02 01:55 - 00000022 _____ () C:\Windows\S.dirmngr
2014-04-02 01:55 - 2014-03-17 02:35 - 00011966 _____ () C:\Windows\PFRO.log
2014-04-02 01:55 - 2014-03-16 18:42 - 00000840 _____ () C:\Windows\setupact.log
2014-04-02 01:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 01:14 - 2014-04-02 01:14 - 00000000 ____D () C:\ProgramData\Sun
2014-04-02 01:13 - 2014-04-02 01:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-02 01:13 - 2014-04-02 01:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-02 01:12 - 2014-04-02 01:11 - 00921000 _____ (Oracle Corporation) C:\Users\melonsvk\Downloads\jxpiinstall.exe
2014-04-02 01:05 - 2009-07-14 06:45 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-02 01:05 - 2009-07-14 06:45 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-01 22:14 - 2013-09-08 21:30 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\AIMP3
2014-04-01 22:04 - 2014-04-01 21:43 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 22:06 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 20:38 - 2013-10-06 20:33 - 00000918 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
2014-04-01 19:06 - 2014-04-01 19:02 - 00000000 ____D () C:\AdwCleaner
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-04-01 03:47 - 2013-09-11 14:15 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\vlc
2014-04-01 02:45 - 2013-09-08 21:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-01 02:42 - 2013-10-10 02:05 - 00000600 _____ () C:\Users\melonsvk\AppData\Roaming\winscp.rnd
2014-03-31 21:25 - 2013-10-10 01:25 - 00000600 _____ () C:\Users\melonsvk\AppData\Local\PUTTY.RND
2014-03-31 20:56 - 2014-03-31 20:53 - 00000000 ____D () C:\wamp
2014-03-31 20:49 - 2014-03-31 20:49 - 40603386 _____ (Hervé Leclerc (HeL) ) C:\Users\melonsvk\Downloads\Wampserver2.4-x64.exe
2014-03-31 15:49 - 2013-10-07 14:26 - 00000000 ____D () C:\Users\melonsvk\Desktop\BAKALARKA
2014-03-31 03:01 - 2014-03-23 21:47 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-03-31 03:01 - 2014-03-23 20:56 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-31 03:01 - 2014-03-23 20:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-03-30 22:47 - 2014-03-30 22:43 - 1609824256 _____ () C:\Users\melonsvk\Downloads\Dom.Hemingway.2013.DVDRip.XviD.AC3.CZ-TreZzoR.avi
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\rsit
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\Program Files\trend micro
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Skype
2014-03-30 19:29 - 2013-09-08 21:38 - 00000000 ____D () C:\ProgramData\Skype
2014-03-30 13:45 - 2014-03-25 23:59 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\gnupg
2014-03-29 21:45 - 2013-09-08 21:12 - 00000000 ____D () C:\Users\melonsvk
2014-03-29 21:39 - 2014-03-27 22:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\highlife
2014-03-29 21:10 - 2014-03-29 21:10 - 00089920 _____ () C:\Users\melonsvk\Downloads\wp-hide-post.zip
2014-03-29 21:10 - 2014-03-29 21:10 - 00000000 ____D () C:\Users\melonsvk\Downloads\wp-hide-post
2014-03-28 21:14 - 2014-03-16 20:29 - 00000000 ____D () C:\Users\melonsvk\Desktop\shareride
2014-03-28 00:19 - 2014-03-28 00:19 - 00003990 _____ () C:\Users\melonsvk\Downloads\search-exclude.1.0.3.zip
2014-03-28 00:19 - 2014-03-28 00:19 - 00000000 ____D () C:\Users\melonsvk\Downloads\search-exclude.1.0.3
2014-03-27 23:20 - 2014-03-27 23:19 - 00000000 ____D () C:\Program Files (x86)\Git
2014-03-27 23:18 - 2014-03-27 23:18 - 15511958 _____ (The Git Development Community ) C:\Users\melonsvk\Downloads\Git-1.9.0-preview20140217.exe
2014-03-27 23:10 - 2014-03-27 23:10 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\TortoiseSVN
2014-03-27 21:40 - 2014-03-27 21:26 - 507055586 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x06 Poslední den (The Last Day) CZ.avi
2014-03-27 21:13 - 2014-03-27 20:56 - 505991948 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x05 Fotostroj času (Timeslides) CZ.avi
2014-03-26 00:10 - 2014-03-26 00:10 - 00001211 _____ () C:\Users\melonsvk\AppData\Local\recently-used.xbel
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\.kde
2014-03-26 00:03 - 2014-03-26 00:00 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\gtk-2.0
2014-03-26 00:02 - 2014-03-26 00:02 - 00001840 _____ () C:\Users\melonsvk\Desktop\privatekeymail.txt
2014-03-26 00:02 - 2014-03-26 00:02 - 00000914 _____ () C:\Users\melonsvk\Desktop\pubkeymail.txt
2014-03-26 00:00 - 2014-03-26 00:00 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\GNU
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\ProgramData\GNU
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\Program Files (x86)\GNU
2014-03-25 23:58 - 2014-03-25 23:58 - 29689992 _____ (g10 Code GmbH) C:\Users\melonsvk\Downloads\gpg4win-2.2.1.exe
2014-03-25 23:49 - 2014-03-25 23:49 - 00000000 ____D () C:\gnupg
2014-03-25 23:45 - 2014-03-25 23:45 - 01470222 _____ () C:\Users\melonsvk\Downloads\enigmail-1.6-sm+tb.xpi
2014-03-25 22:03 - 2014-03-25 22:03 - 01327006 _____ () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2.zip
2014-03-25 22:03 - 2014-03-25 22:03 - 00000000 ____D () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2
2014-03-25 20:50 - 2014-03-25 20:49 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral
2014-03-25 20:30 - 2014-03-25 20:29 - 176945434 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.mp4
2014-03-25 20:29 - 2014-03-25 20:28 - 00047390 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral.zip
2014-03-25 14:44 - 2014-03-25 20:50 - 00026486 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.srt
2014-03-25 02:16 - 2014-01-29 16:30 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Spotify
2014-03-24 22:04 - 2014-02-06 14:20 - 00000000 ____D () C:\Program Files (x86)\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack
2014-03-24 22:03 - 2014-03-24 22:03 - 13897647 ____T ( ) C:\Users\melonsvk\Downloads\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack.exe72BEA13A
2014-03-24 22:03 - 2014-03-24 22:03 - 03222705 ____T () C:\Users\melonsvk\Downloads\wfuzz-2.0.tgzEE09CEA8
2014-03-24 22:03 - 2013-09-14 17:06 - 00000000 ____D () C:\Windows\AutoKMS
2014-03-24 11:40 - 2013-11-20 22:25 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\TSVNCache
2014-03-24 04:19 - 2013-09-14 16:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-24 04:03 - 2014-03-24 04:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 22:18 - 2014-03-23 22:18 - 00000000 ____D () C:\Users\melonsvk\Downloads\Hutil210_ISO
2014-03-23 22:18 - 2014-02-06 14:25 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\DAEMON Tools Pro
2014-03-23 22:17 - 2014-03-23 22:17 - 01489873 _____ () C:\Users\melonsvk\Downloads\Hutil210_ISO.rar
2014-03-23 22:09 - 2014-03-23 22:09 - 00039459 _____ () C:\ComboFix.txt
2014-03-23 22:09 - 2014-03-23 21:48 - 00000000 ____D () C:\Qoobox
2014-03-23 22:09 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-03-23 22:07 - 2014-03-23 21:47 - 00000000 ____D () C:\Windows\erdnt
2014-03-23 22:04 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-03-23 21:45 - 2014-03-23 21:44 - 05190773 ____R (Swearware) C:\Users\melonsvk\Downloads\ComboFix.exe
2014-03-23 20:56 - 2014-03-23 20:56 - 13696184 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\mseinstall.exe
2014-03-22 22:47 - 2014-03-22 22:47 - 00000000 ____D () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r
2014-03-22 22:46 - 2014-03-22 22:46 - 01524211 _____ () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r.rar
2014-03-22 22:45 - 2014-03-22 22:45 - 09668186 _____ () C:\Users\melonsvk\Downloads\Hitman v0.98.rar
2014-03-20 02:30 - 2013-09-19 20:08 - 00000000 ____D () C:\Program Files (x86)\Adobe Photoshop CS6 aktivtor
2014-03-20 02:28 - 2014-02-07 02:01 - 00000000 ____D () C:\Program Files (x86)\Cain
2014-03-20 00:36 - 2014-03-20 00:21 - 727791522 _____ () C:\Users\melonsvk\Downloads\Šestý-smysl-CZ.avi.part
2014-03-19 22:25 - 2014-03-19 22:21 - 843019148 _____ () C:\Users\melonsvk\Downloads\Kostka-CZ-dabing---Horor--Mysteriózní,-Kanada,-1997-(nejlepsi-filmy.mypage.cz).avi
2014-03-19 22:21 - 2014-03-19 22:18 - 733603840 _____ () C:\Users\melonsvk\Downloads\FUNNY-GAMES-CZ.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244957184 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E04.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244789248 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E05.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244703232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E06.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244551680 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E02.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244496384 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E01.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244230144 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E03.avi
2014-03-19 21:33 - 2014-03-19 21:29 - 202051517 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.mp4
2014-03-19 21:30 - 2014-03-19 21:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral
2014-03-19 21:29 - 2014-03-19 21:29 - 00050935 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral.zip
2014-03-19 21:13 - 2014-03-19 21:00 - 254260181 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E05.avi
2014-03-19 21:12 - 2014-03-19 21:00 - 257375497 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E02.avi
2014-03-19 21:12 - 2014-03-19 21:00 - 257031532 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E04.avi
2014-03-19 21:11 - 2014-03-19 21:00 - 258383856 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E01.avi
2014-03-19 21:11 - 2014-03-19 21:00 - 256556662 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E06.avi
2014-03-19 21:11 - 2014-03-19 21:00 - 256421029 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E03.avi
2014-03-19 20:06 - 2014-03-19 20:03 - 244867072 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E06.avi
2014-03-19 20:06 - 2014-03-19 20:03 - 244598784 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E05.avi
2014-03-19 20:05 - 2014-03-19 20:03 - 244934656 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E04.avi
2014-03-19 20:05 - 2014-03-19 20:03 - 244621312 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E03.avi
2014-03-19 20:05 - 2014-03-19 20:02 - 244930560 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E02.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 244938752 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E06.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 244375040 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E05.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 224359924 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E03.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 217567969 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E04.avi
2014-03-19 19:56 - 2014-03-19 19:54 - 244447232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E01.avi
2014-03-19 19:56 - 2014-03-19 19:51 - 244669440 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E02.avi
2014-03-19 19:54 - 2014-03-19 19:51 - 244792320 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E01.avi
2014-03-19 18:43 - 2014-03-19 18:42 - 244716032 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E06.avi
2014-03-19 18:20 - 2014-03-19 18:18 - 244709888 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E06.avi
2014-03-19 18:19 - 2014-03-19 18:17 - 244872704 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E05.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 245018112 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E03.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 244540416 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E01.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 244504064 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E02.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 244487168 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E04.avi
2014-03-19 18:18 - 2014-03-19 18:15 - 244521984 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E05.avi
2014-03-19 18:17 - 2014-03-19 18:15 - 245081600 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E04.avi
2014-03-19 18:08 - 2014-03-19 18:07 - 244969496 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E03.avi
2014-03-19 16:26 - 2014-03-19 15:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 10:27 - 2014-03-19 10:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\melonsvk\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-19 10:27 - 2014-03-19 10:27 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 23:51 - 2014-03-19 21:31 - 00028918 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.srt
2014-03-18 13:12 - 2014-03-18 13:12 - 01518833 _____ () C:\Users\melonsvk\Downloads\JTesseract.rar
2014-03-18 13:12 - 2014-03-18 13:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\JTesseract
2014-03-18 02:59 - 2014-02-18 04:14 - 00003846 _____ () C:\Windows\System32\Tasks\Sleep
2014-03-18 02:34 - 2014-03-18 02:33 - 244938316 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E02.avi
2014-03-18 02:26 - 2014-03-18 02:26 - 245016476 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E01.avi
2014-03-18 02:10 - 2014-03-18 02:10 - 15802593 _____ () C:\Users\melonsvk\Downloads\WitchdOCtoR.zip
2014-03-18 00:43 - 2014-03-18 00:43 - 00012683 _____ () C:\Users\melonsvk\Desktop\excel_graf.xlsx
2014-03-17 21:21 - 2014-03-17 21:20 - 00000000 ____D () C:\Users\melonsvk\Downloads\securimage
2014-03-17 21:19 - 2014-03-17 21:19 - 07583247 _____ () C:\Users\melonsvk\Downloads\securimage.tar.gz
2014-03-17 11:50 - 2014-02-06 15:56 - 00000348 _____ () C:\Users\melonsvk\rgmnr
2014-03-17 02:36 - 2014-03-17 02:36 - 05061032 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-16 20:37 - 2014-02-20 16:06 - 00000000 ____D () C:\Users\melonsvk\Desktop\print_venezia
2014-03-16 18:42 - 2014-03-16 18:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-16 12:25 - 2014-02-19 21:36 - 00000000 ____D () C:\ProgramData\VMware
2014-03-16 12:23 - 2014-02-19 22:10 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\VMware
2014-03-16 12:17 - 2014-01-28 01:56 - 00000000 ____D () C:\Program Files\Sandboxie
2014-03-16 12:17 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Opera Software
2014-03-16 12:17 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Opera Software
2014-03-16 12:17 - 2014-01-04 00:22 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-16 12:15 - 2013-09-08 21:12 - 00000000 ___RD () C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-16 12:05 - 2014-03-16 12:05 - 00112304 _____ () C:\Users\melonsvk\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 01:31 - 2014-03-15 01:31 - 00034210 _____ () C:\Users\melonsvk\Downloads\Two-and-a-Half-Men-S11E17(0000233494).srt
2014-03-15 01:16 - 2014-03-15 01:11 - 206756398 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E20.HDTV.x264-EXCELLENCE.mp4
2014-03-15 01:12 - 2014-03-15 01:12 - 00048250 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x20_jingspiral.zip
2014-03-15 01:10 - 2014-03-15 01:05 - 187560935 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.mp4.part
2014-03-15 01:06 - 2014-03-15 01:06 - 00035165 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.srt
2014-03-15 00:17 - 2014-03-15 00:06 - 00000000 ____D () C:\Users\melonsvk\Downloads\table_zebra
2014-03-15 00:06 - 2014-03-15 00:06 - 00020695 _____ () C:\Users\melonsvk\Downloads\table_zebra.zip
2014-03-14 16:42 - 2009-07-14 07:08 - 00017088 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-13 00:50 - 2014-03-13 00:40 - 2505515392 _____ () C:\Users\melonsvk\Downloads\Osudovy-dotek---Butterfly-Effect-The-2004_CZ_Dabing.mkv
2014-03-13 00:39 - 2014-03-13 00:35 - 786983786 _____ () C:\Users\melonsvk\Downloads\Bad-Grandpa-2013-UNRATED-720p-WEB-DL-700MB-Ganool.mkv
2014-03-13 00:36 - 2014-03-13 00:36 - 00097767 _____ () C:\Users\melonsvk\Downloads\Jackass-Presents-Bad-Grandpa(0000229754).srt
2014-03-12 22:48 - 2014-03-12 22:37 - 175207650 _____ () C:\Users\melonsvk\Downloads\Simpsonovi-24x11-Stridani-porucniku.avi.part
2014-03-12 15:30 - 2014-03-12 15:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\Separ - Pirat (2014)
2014-03-12 15:27 - 2014-03-12 15:26 - 124680185 _____ () C:\Users\melonsvk\Downloads\Separ - Pirat (2014).rar
2014-03-12 04:47 - 2013-09-08 21:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 04:47 - 2013-09-08 21:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 04:47 - 2013-09-08 21:24 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 01:19 - 2014-03-15 01:55 - 00027570 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e20.hdtv.x264-excellence.cz.srt
2014-03-11 09:52 - 2013-09-27 10:53 - 00133928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NisDrvWFP.sys
2014-03-10 18:12 - 2014-03-10 18:12 - 00674145 _____ () C:\Users\melonsvk\Downloads\Sentry1.0.zip
2014-03-10 16:04 - 2014-03-10 16:03 - 176830440 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x09_Konec-sveta_za_dvermi_XVID_CZ.avi
2014-03-10 02:17 - 2014-03-10 02:16 - 267405256 _____ () C:\Users\melonsvk\Downloads\02x01-Mala-Velka-Britanie.avi
2014-03-10 02:17 - 2014-03-10 02:16 - 254634802 _____ () C:\Users\melonsvk\Downloads\02x02-Mala-Velka-Britanie.avi
2014-03-08 21:55 - 2014-03-08 21:55 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpBB-3.0.12
2014-03-08 21:54 - 2014-03-08 21:54 - 02487985 _____ () C:\Users\melonsvk\Downloads\phpBB-3.0.12.zip
2014-03-08 21:15 - 2014-03-08 21:15 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages
2014-03-08 21:15 - 2014-03-08 21:14 - 08533786 _____ () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages.zip
2014-03-08 20:59 - 2014-03-08 20:59 - 01021432 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\NDP451-KB2859818-Web.exe
2014-03-08 20:54 - 2014-03-08 20:54 - 00001335 _____ () C:\Users\melonsvk\Downloads\simple-user-auth-1.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00002388 _____ () C:\Users\melonsvk\Downloads\loginsimple.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00000000 ____D () C:\Users\melonsvk\Downloads\loginsimple
2014-03-08 19:32 - 2014-03-08 19:32 - 193026000 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x07_Den_kdy_se_ochladila_Zeme_XVID_CZ.avi
2014-03-08 18:12 - 2014-03-08 18:12 - 00000367 _____ () C:\Users\melonsvk\Downloads\zaheslovani-stranky.zip
2014-03-08 18:12 - 2014-03-08 18:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\zaheslovani-stranky
2014-03-08 01:55 - 2014-03-08 01:53 - 842123264 _____ () C:\Users\melonsvk\Downloads\DISTURBIA---CZ-dvdrip.avi
2014-03-08 01:55 - 2014-01-01 21:36 - 00000000 ____D () C:\Program Files (x86)\winhotspot
2014-03-08 01:46 - 2014-03-08 01:46 - 119015516 _____ () C:\Users\melonsvk\Downloads\Je-super-mit-starsiho-brachu---sexincest.mp4
2014-03-08 01:46 - 2014-03-08 01:44 - 705609262 _____ () C:\Users\melonsvk\Downloads\CPP-Rebecca-Linares-Crew-2013-CZECH-TEEN-PORN-DVDRIP-HD-SEX-XXX-PORNO-CESKY-MOBILE-EXCLUSIVE-BIG-BOOBS-TITS-YOUNG-STREET-AMATEUR-HQ.mp4
2014-03-08 01:43 - 2014-03-08 01:39 - 1939795548 _____ () C:\Users\melonsvk\Downloads\Disturbia.2007.1080p.Bluray.x264.anoXmous.mp4
2014-03-07 20:29 - 2014-03-07 20:28 - 181312244 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x22_Vyroci_ve_vlaku_XVID_CZ.avi
2014-03-07 18:10 - 2014-03-07 18:10 - 00042667 _____ () C:\Users\melonsvk\Downloads\DenyHosts-2.6.tar.gz
2014-03-07 14:39 - 2014-03-07 14:33 - 1707004246 _____ () C:\Users\melonsvk\Downloads\Jen_na_sex__2008.avi.part
2014-03-07 14:05 - 2014-03-07 14:04 - 173180576 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x21_Saga_o_Carlovi_XVID_CZ.avi
2014-03-07 13:49 - 2014-03-07 13:49 - 178313974 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x20_Falesny_virtuos_XVID_CZ.avi
2014-03-07 01:26 - 2014-03-07 01:24 - 1551390720 _____ () C:\Users\melonsvk\Downloads\V-Bruggach-CZ-dabing.avi
2014-03-06 17:02 - 2014-03-06 17:02 - 00000000 ____D () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz
2014-03-06 17:02 - 2014-03-06 17:01 - 08282113 _____ () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz.rar
2014-03-05 01:03 - 2014-01-31 01:38 - 00000000 ___RD () C:\Users\melonsvk\Virtual Machines
2014-03-05 00:38 - 2014-03-05 00:37 - 191138841 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.mp4
2014-03-05 00:37 - 2014-03-05 00:37 - 00031222 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.srt
2014-03-04 19:19 - 2014-03-04 19:16 - 617377795 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140217.mp4
2014-03-04 19:18 - 2014-03-04 19:17 - 444545299 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140224.mp4
2014-03-04 12:43 - 2014-03-17 21:46 - 00001743 _____ () C:\Users\melonsvk\Desktop\id_rsa
2014-03-03 23:38 - 2014-03-03 23:33 - 981513568 _____ () C:\Users\melonsvk\Downloads\Proklety-Ostrov-cz-dabing.avi
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCT2.OCX
2014-03-03 18:53 - 2014-03-03 22:54 - 01071088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-03-03 18:53 - 2014-03-03 18:53 - 01071088 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCTL.OCX
2014-03-03 18:51 - 2014-03-03 18:51 - 00000000 ____D () C:\Users\melonsvk\Downloads\C-Force

Some content of TEMP:
====================
C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-03-31 02:15

==================== End Of Log ============================

#12 Příspěvek od **vyosek** » 02 dub 2014 18:23

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444856 2011-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1039872 2011-09-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mnctwgbfoSrv] - C:\Windows\inf\mnctwgbfo.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [winhotspot] - C:\Program Files (x86)\winhotspot\1F70.tmp [158208 2014-01-20] ()
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify Web Helper] - C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify] - C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe (Microsoft)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54868F0C7ACCE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {1948D768-6063-402E-B914-67EE2407B7A6} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

FF Extension: HttpFox - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2014-03-31]
FF Extension: ReloadEvery - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-13]

CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

2014-04-01 22:06 - 2014-04-01 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:45 - 2014-04-02 01:56 - 00032069 _____ () C:\zoek-results.log
2014-04-01 21:43 - 2014-04-01 22:04 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe

C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll
C:\Windows\inf\mnctwgbfo.vbe
C:\Users\melonsvk\AppData\Roaming\Spotify

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

melonSVK · #13 Příspěvek od **melonSVK** » 02 dub 2014 21:50

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by melonsvk at 2014-04-02 22:46:49 Run:1
Running from C:\Users\melonsvk\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444856 2011-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1039872 2011-09-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mnctwgbfoSrv] - C:\Windows\inf\mnctwgbfo.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [winhotspot] - C:\Program Files (x86)\winhotspot\1F70.tmp [158208 2014-01-20] ()
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify Web Helper] - C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify] - C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe (Microsoft)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54868F0C7ACCE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {1948D768-6063-402E-B914-67EE2407B7A6} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

FF Extension: HttpFox - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2014-03-31]
FF Extension: ReloadEvery - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-13]

CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

2014-04-01 22:06 - 2014-04-01 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:45 - 2014-04-02 01:56 - 00032069 _____ () C:\zoek-results.log
2014-04-01 21:43 - 2014-04-01 22:04 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe

C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll
C:\Windows\inf\mnctwgbfo.vbe
C:\Users\melonsvk\AppData\Roaming\Spotify

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mnctwgbfoSrv => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveSync => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\winhotspot => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify Web Helper => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Pro Agent => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP => Value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1948D768-6063-402E-B914-67EE2407B7A6} => Key deleted successfully.
HKCR\CLSID\{1948D768-6063-402E-B914-67EE2407B7A6} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi => Moved successfully.
HKCU\SOFTWARE\Google\Chrome\Extensions\apdfllckaahabafndbhieahigkjlhalf => Key deleted successfully.
C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx => Moved successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
catchme => Service deleted successfully.
cpuz135 => Service deleted successfully.
vmci => Service deleted successfully.
VMnetAdapter => Service deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\melonsvk\Desktop\zoek => Moved successfully.
C:\Users\melonsvk\Desktop\zoek.zip => Moved successfully.
C:\Users\melonsvk\Downloads\adwcleaner.exe => Moved successfully.
C:\Users\melonsvk\Downloads\RSITx64.exe => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll => Moved successfully.
C:\Windows\inf\mnctwgbfo.vbe => Moved successfully.

"C:\Users\melonsvk\AppData\Roaming\Spotify" directory move:

C:\Users\melonsvk\AppData\Roaming\Spotify\inst_ver.dat => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\prefs => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\running => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\SpotifyLauncher.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\watchdog.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\ad.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\guistate => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\local-files.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\prefs => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\social_manager.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\track-player.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\watch-sources.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\suggest\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\suggest\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search-single\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search-single\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\radio\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\radio\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\profile\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\profile\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\playlist-header\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\playlist-header\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\onboarding-popup\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\onboarding-popup\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\notification-center\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\notification-center\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\messages\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\messages\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\feed\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\feed\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\discover\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\discover\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\browse\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\browse\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\artist\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\artist\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\album\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\album\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\apps.zip => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\cef.pak => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\d3dcompiler_43.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\d3dcompiler_46.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\devtools_resources.pak => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\icudt.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\libcef.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\libEGL.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\libGLESv2.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\resources.zip => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\locales\en-US.pak => Moved successfully.
Could not move "C:\Users\melonsvk\AppData\Roaming\Spotify" directory. => Scheduled to move on reboot.

C:\Windows\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job => Moved successfully.
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job => Moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-04-02 22:51:42)<=

C:\Users\melonsvk\AppData\Roaming\Spotify => Moved successfully.

==== End of Fixlog ====

#14 Příspěvek od **vyosek** » 03 dub 2014 09:10

¨Jak se chova PC??

melonSVK · #15 Příspěvek od **melonSVK** » 03 dub 2014 13:14

Zatiaľ to funguje všetko. Dúfam že sa to už neprejaví

Ďakujem veľmi krásne.

VIRY.CZ

Pomalý boot + problém s diakritikou

Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou

Re: Pomalý boot + problém s diakritikou