VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Pomalý boot + problém s diakritikou

https://forum.viry.cz:443/viewtopic.php?t=137158

Stránka 1 z 2

Pomalý boot + problém s diakritikou

Napsal: 30 bře 2014 18:37
od melonSVK
Zdravím,

v poslednom čase mám problém s diakritikou, keď PC dlhšie beží a píšem mäkčene a dĺžne pomocou klávesy vedľa Backspace, tak mi napíše niečo v zmysle ˇˇd, ´´l apod., prípadne nenapíše žiadnu diakritiku. K tomu mám pomalý booting PC, ale to môže byť aj spôsobené HW opotrebovaním disku, predsalen nie je najnovší :) Prikladám RSIT, vďaka za rady.

Logfile of random's system information tool 1.09 (written by random/random)
Run by melonsvk at 2014-03-30 19:35:09
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 165 GB (31%) free of 535 GB
Total RAM: 3951 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:35:19, on 30. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Connectify\DispatchUI.exe
C:\Program Files (x86)\Connectify\Connectify.exe
C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe
C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files (x86)\Aurora\firefox.exe
C:\Program Files (x86)\Aurora\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\trend micro\melonsvk.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.webisgreat.info/?pid=5 ... Z&unqvl=48
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.webisgreat.info/?pid=5 ... Z&unqvl=48
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache34.ics.muni.cz:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CrossriderApp0051386 - {11111111-1111-1111-1111-110511131186} - C:\Program Files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [mnctwgbfoSrv] C:\Windows\inf\mnctwgbfo.vbe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [winhotspot] C:\Program Files (x86)\winhotspot\1F70.tmp
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Startup: Firewall.exe
O4 - Startup: Firewall.exe.tmp
O4 - Global Startup: Virtual Router Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}: NameServer = 8.8.8.8,4.4.4.4
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Connectify - Connectify - C:\Program Files (x86)\Connectify\ConnectifyService.exe
O23 - Service: DirMngr - Unknown owner - C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30007 (IISADMIN) - Unknown owner - C:\Windows\system32\inetsrv\inetinfo.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VirtualRouterService (Virtual Router) - Chris Pietschmann (http://pietschsoft.com) - C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-20001 (WMSVC) - Unknown owner - C:\Windows\system32\inetsrv\wmsvc.exe (file missing)

--
End of file - 11607 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 26721184
\??\C:\Windows\system32\conhost.exe "16418372831180569320-63370955-178265028319351881871722769018912507162081476100
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Connectify\ConnectifyService.exe"
"taskhost.exe"
"C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe" --service
C:\Windows\system32\svchost.exe -k ftpsvc
C:\Windows\system32\inetsrv\inetinfo.exe
taskeng.exe {7FF35929-A678-4F44-9B89-F371BBA51C66}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"ConnectifyD.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
\??\C:\Windows\system32\conhost.exe "-1519514290212542423350586175134948017446959177-104126483-52538877778154438
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Greenshot\Greenshot.exe"
"C:\Program Files (x86)\Connectify\DispatchUI.exe"
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
"C:\Program Files (x86)\Connectify\Connectify.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
"C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe" -autorun
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\alg.exe
"C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.0.738085283\687742797" /prefetch:673131151
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.1.1220783892\281454800" /prefetch:673131151
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.2.931529645\1616593696" /prefetch:673131151
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4704.3.2100471715\528102524" /prefetch:673131151
C:\Windows\system32\msiexec.exe /V
"C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="4704.4.975686803\744279612" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19 --gpu-vendor-id=0x1002 --gpu-device-id=0x68e4 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.200.11.0 --lang=en-US --log-severity=disable /prefetch:822062411
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Aurora\firefox.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Aurora\plugin-container.exe" --channel=3312.229c6690.218531925 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Aurora\omni.ja" -appomni "C:\Program Files (x86)\Aurora\browser\omni.ja" -appdir "C:\Program Files (x86)\Aurora\browser" 1E05176855CC7D2F 3312 "\\.\pipe\gecko-crash-server-pipe.3312" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash5196.5B1792E0.17724 --host-broker-channel=Flash5196.5B1792E0.24118 --host-pid=5196 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=6140.0034F78C.338668509 --proxy-stub-channel=Flash5196.5B1792E0.17724 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Windows\system32\wuauclt.exe"
C:\Windows\servicing\TrustedInstaller.exe
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey CDCC5871-ACC3-15E9-9EC6-25EE7C1433FE -Reinvoke
"C:\Users\melonsvk\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default

prefs.js - "browser.startup.homepage" - "http://websearch.webisgreat.info/?pid=5 ... Z&unqvl=48"
prefs.js - "keyword.URL" - "http://websearch.webisgreat.info/?pid=5 ... =48&l=1&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL


C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\searchplugins\
WebSearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
FreeHD-Sport TV V9.0 - C:\Program Files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho64.dll [2014-02-12 949248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-03-03 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2013-09-13 878296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
FreeHD-Sport TV V9.0 - C:\Program Files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho.dll [2014-02-12 677888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-03-03 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2013-09-13 705240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 1727176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-09-08 489472]
"Greenshot"=C:\Program Files\Greenshot\Greenshot.exe [2012-10-30 462848]
"Connectify Dispatch"=C:\Program Files (x86)\Connectify\DispatchUI.exe [2013-09-24 2233120]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-09-03 444856]
"Connectify Hotspot"=C:\Program Files (x86)\Connectify\Connectify.exe [2013-09-24 4162336]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2014-02-25 1821888]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2013-12-06 20203904]
"winhotspot"=C:\Program Files (x86)\winhotspot\1F70.tmp [2014-01-20 158208]
"Spotify Web Helper"=C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-01-29 1171968]
"Spotify"=C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [2014-01-29 6118400]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [2013-10-17 3125280]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-02-10 20922016]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-09-05 766208]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2011-09-28 1039872]
"mnctwgbfoSrv"=C:\Windows\inf\mnctwgbfo.vbe [2014-01-19 1342]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Virtual Router Manager.lnk - C:\Windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe

C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Firewall.exe
Firewall.exe.tmp

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-03-30 19:35:11 ----D---- C:\Program Files\trend micro
2014-03-30 19:35:09 ----D---- C:\rsit
2014-03-30 19:29:28 ----RD---- C:\Program Files (x86)\Skype
2014-03-29 18:49:38 ----D---- C:\Program Files (x86)\Aurora
2014-03-27 23:19:30 ----D---- C:\Program Files (x86)\Git
2014-03-27 23:10:51 ----D---- C:\Users\melonsvk\AppData\Roaming\TortoiseSVN
2014-03-26 00:05:46 ----D---- C:\Users\melonsvk\AppData\Roaming\.kde
2014-03-25 23:59:48 ----D---- C:\Users\melonsvk\AppData\Roaming\gnupg
2014-03-25 23:59:44 ----D---- C:\ProgramData\GNU
2014-03-25 23:59:30 ----D---- C:\Program Files (x86)\GNU
2014-03-25 23:49:40 ----D---- C:\gnupg
2014-03-24 04:21:14 ----D---- C:\Program Files\Microsoft.NET
2014-03-24 04:04:46 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-24 04:04:46 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-24 04:03:50 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-03-23 22:09:48 ----D---- C:\Windows\temp
2014-03-23 22:09:46 ----A---- C:\ComboFix.txt
2014-03-23 22:04:16 ----SHD---- C:\$RECYCLE.BIN
2014-03-23 21:49:13 ----A---- C:\Windows\zip.exe
2014-03-23 21:49:13 ----A---- C:\Windows\SWSC.exe
2014-03-23 21:49:13 ----A---- C:\Windows\SWREG.exe
2014-03-23 21:49:13 ----A---- C:\Windows\sed.exe
2014-03-23 21:49:13 ----A---- C:\Windows\PEV.exe
2014-03-23 21:49:13 ----A---- C:\Windows\NIRCMD.exe
2014-03-23 21:49:13 ----A---- C:\Windows\MBR.exe
2014-03-23 21:49:13 ----A---- C:\Windows\grep.exe
2014-03-23 21:48:11 ----D---- C:\Qoobox
2014-03-23 21:47:02 ----D---- C:\Windows\erdnt
2014-03-23 20:56:59 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-03-23 20:56:53 ----D---- C:\Program Files\Microsoft Security Client
2014-03-19 15:04:16 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 10:27:45 ----D---- C:\Users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 10:27:34 ----D---- C:\ProgramData\Malwarebytes
2014-03-19 10:27:33 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-19 10:27:33 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-03-17 02:36:34 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-03-16 12:01:09 ----D---- C:\Program Files (x86)\AlLTubeNoAds
2014-03-14 16:46:56 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-14 16:46:56 ----A---- C:\Windows\system32\wer.dll
2014-03-14 16:46:54 ----A---- C:\Windows\system32\win32k.sys
2014-03-14 16:46:51 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-14 16:46:51 ----A---- C:\Windows\system32\iertutil.dll
2014-03-14 16:46:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-14 16:46:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 16:46:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-14 16:46:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-14 16:46:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-14 16:46:48 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-14 16:46:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-14 16:46:45 ----A---- C:\Windows\system32\urlmon.dll
2014-03-14 16:46:45 ----A---- C:\Windows\system32\iernonce.dll
2014-03-14 16:46:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-14 16:46:44 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-14 16:46:44 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-14 16:46:44 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-14 16:46:43 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-14 16:46:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-14 16:46:40 ----A---- C:\Windows\system32\iesetup.dll
2014-03-14 16:46:40 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-14 16:46:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-14 16:46:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-14 16:46:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-14 16:46:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-14 16:46:36 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-14 16:46:36 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-14 16:46:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-14 16:46:35 ----A---- C:\Windows\system32\ieui.dll
2014-03-14 16:46:35 ----A---- C:\Windows\system32\ieframe.dll
2014-03-14 16:46:33 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-14 16:46:33 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-14 16:46:32 ----A---- C:\Windows\system32\jscript9.dll
2014-03-14 16:46:31 ----A---- C:\Windows\system32\wininet.dll
2014-03-14 16:46:31 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-14 16:46:30 ----A---- C:\Windows\system32\msrating.dll
2014-03-14 16:46:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 16:46:29 ----A---- C:\Windows\system32\mshtml.dll
2014-03-14 16:41:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-14 16:41:56 ----A---- C:\Windows\system32\qedit.dll

======List of files/folders modified in the last 1 month======

2014-03-30 19:35:11 ----RD---- C:\Program Files
2014-03-30 19:31:45 ----D---- C:\Windows\system32\config
2014-03-30 19:31:43 ----D---- C:\Windows\System32
2014-03-30 19:31:43 ----D---- C:\Windows\inf
2014-03-30 19:31:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-30 19:30:22 ----D---- C:\Users\melonsvk\AppData\Roaming\Skype
2014-03-30 19:29:35 ----SHD---- C:\Windows\Installer
2014-03-30 19:29:29 ----D---- C:\Program Files (x86)\Common Files
2014-03-30 19:29:28 ----RD---- C:\Program Files (x86)
2014-03-30 19:29:21 ----D---- C:\ProgramData\Skype
2014-03-30 19:28:34 ----D---- C:\Users\melonsvk\AppData\Roaming\Spotify
2014-03-30 19:28:14 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-30 19:26:01 ----D---- C:\Windows\Prefetch
2014-03-30 19:25:15 ----D---- C:\Windows\system32\inetsrv
2014-03-30 19:23:41 ----D---- C:\Program Files (x86)\Steam
2014-03-30 19:23:10 ----D---- C:\Windows
2014-03-29 22:28:57 ----D---- C:\Users\melonsvk\AppData\Roaming\AIMP3
2014-03-29 02:15:53 ----D---- C:\Users\melonsvk\AppData\Roaming\vlc
2014-03-27 12:03:43 ----SHD---- C:\System Volume Information
2014-03-25 23:59:44 ----D---- C:\ProgramData
2014-03-24 22:04:15 ----D---- C:\Program Files (x86)\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack
2014-03-24 22:03:30 ----D---- C:\Windows\AutoKMS
2014-03-24 04:21:47 ----RSD---- C:\Windows\assembly
2014-03-24 04:21:14 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-03-24 04:19:17 ----D---- C:\ProgramData\Microsoft Help
2014-03-24 04:16:58 ----D---- C:\Windows\winsxs
2014-03-24 04:15:21 ----D---- C:\Windows\SysWOW64
2014-03-24 04:14:06 ----D---- C:\Windows\Microsoft.NET
2014-03-23 22:18:16 ----D---- C:\Users\melonsvk\AppData\Roaming\DAEMON Tools Pro
2014-03-23 22:09:49 ----D---- C:\Windows\system32\drivers
2014-03-23 22:04:20 ----A---- C:\Windows\system.ini
2014-03-23 22:04:04 ----D---- C:\Windows\system32\drivers\etc
2014-03-23 21:57:01 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-23 21:57:01 ----D---- C:\Windows\AppPatch
2014-03-23 20:57:02 ----D---- C:\Windows\system32\catroot
2014-03-23 20:56:59 ----SD---- C:\ProgramData\Microsoft
2014-03-20 02:30:59 ----D---- C:\Program Files (x86)\Adobe Photoshop CS6 aktivtor
2014-03-20 02:28:45 ----D---- C:\Program Files (x86)\Cain
2014-03-19 03:54:07 ----D---- C:\Windows\system32\catroot2
2014-03-18 02:58:30 ----D---- C:\Windows\Tasks
2014-03-18 02:58:30 ----D---- C:\Windows\system32\Tasks
2014-03-17 02:35:45 ----D---- C:\ProgramData\SNT
2014-03-17 02:34:01 ----D---- C:\Program Files\Internet Explorer
2014-03-17 02:34:01 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-16 12:29:12 ----D---- C:\ProgramData\YoutubeAdblocker
2014-03-16 12:29:12 ----D---- C:\ProgramData\40f12ab00162f710
2014-03-16 12:25:06 ----D---- C:\ProgramData\VMware
2014-03-16 12:25:05 ----D---- C:\Program Files\Common Files
2014-03-16 12:24:54 ----D---- C:\Windows\system32\DriverStore
2014-03-16 12:23:36 ----D---- C:\Users\melonsvk\AppData\Roaming\VMware
2014-03-16 12:22:49 ----D---- C:\Program Files (x86)\SNT
2014-03-16 12:17:40 ----D---- C:\Program Files\Sandboxie
2014-03-16 12:17:04 ----D---- C:\Program Files (x86)\Opera
2014-03-16 12:17:02 ----D---- C:\Users\melonsvk\AppData\Roaming\Opera Software
2014-03-16 12:02:06 ----D---- C:\Program Files (x86)\SmartTweak
2014-03-16 12:01:10 ----D---- C:\ProgramData\AlLTubeNoAds
2014-03-12 04:47:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-03-08 01:55:53 ----D---- C:\Program Files (x86)\winhotspot
2014-03-04 12:48:19 ----SD---- C:\Users\melonsvk\AppData\Roaming\Microsoft
2014-03-01 12:22:05 ----D---- C:\Windows\system32\drivers\UMDF
2014-03-01 12:20:54 ----D---- C:\totalcmd

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 cnnctfy3;Connectify LightWeight Filter; C:\Windows\system32\DRIVERS\cnnctfy3.sys [2013-09-25 35352]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-02-06 283064]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-09-05 12653568]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-09-05 617984]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2013-09-14 3063360]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-09-08 515584]
R3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 vpcbus;Virtual PC Host Bus Service; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;USB Virtualization Connector Service; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz135;cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 vpcuxd;USB Virtualization Stub Service; C:\Windows\system32\DRIVERS\vpcuxd.sys [2010-11-20 16384]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-09-05 239616]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Connectify;Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [2013-09-24 487936]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DirMngr;DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [2013-10-07 218112]
R2 ftpsvc;@%windir%\system32\inetsrv\ftpres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2010-11-20 15872]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2010-09-08 271360]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-25 568512]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 116648]
S2 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 Virtual Router;VirtualRouterService; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [2013-02-10 12288]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 FileZilla Server;FileZilla Server FTP server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [2014-01-02 637440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-29 119408]
S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2013-08-22 37176]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-10 1255736]
S3 WMSVC;@%windir%\system32\inetsrv\iisres.dll,-20001; C:\Windows\system32\inetsrv\wmsvc.exe [2009-07-14 10752]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

-----------------EOF-----------------

Re: Pomalý boot + problém s diakritikou

Napsal: 30 bře 2014 18:40
od vyosek
Zdravim :)

:arrow: Tu diakritiku zpusobuje havet :arcisit:


:arrow:Co se tyce ComboFixu, ktery jste pouzil, tak na zaklade licence a pravidel fora ptam, umite s nim pracovat (spusteni, rozlusteni logu, napsani skriptu)?

:arrow: Licencni podminky ComboFixu hovori jasne "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"
Obrázek

:arrow: Nebezpeci CFka
  • Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
  • Maze stopy po haveti, takze v logu z RSIT neni nic videt
  • Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
  • CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
  • CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal

Re: Pomalý boot + problém s diakritikou

Napsal: 30 bře 2014 19:14
od melonSVK
Combofix som použil niekedy v minulosti pri odstaňovaní iného problému, nie z vlastného presvedčenia. :-)

Re: Pomalý boot + problém s diakritikou

Napsal: 30 bře 2014 19:22
od vyosek
:arrow: ComboFix byl pouzit 2014-03-23 22:09:46 ale u nas jste naposledy resil problem 30 zář 2012 http://forum.viry.cz/viewtopic.php?f=30&t=124630

:arrow: Takze jste jej musel bud pouzit sam nebo na pokyn nevim koho

:arrow: Log z nej mi sem dejte, najdete jej v c:\combofix.txt

Re: Pomalý boot + problém s diakritikou

Napsal: 30 bře 2014 20:58
od melonSVK
ComboFix 14-03-23.01 - melonsvk . 03. 2014 20:52:39.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1033.18.3951.1019 [GMT 1:00]
Running from: c:\users\melonsvk\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\YoutubeAdblocker
c:\users\melonsvk\AppData\Local\10 Nov via AnySend.exe
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0\2
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\background.html
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\crossriderManifest.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\manifest.xml
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1_base.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1000020_analytics.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1000025_analyticsFront.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\1000030_mz.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\17_jQuery.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\177_crossriderDashboard.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\180_bpo_serp_m.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\182_openUrl.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\183_tabsWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\207_dbWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\21_debug.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\22_resources.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\28_initializer.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\47_resources_background.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\64_appApiMessage.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\72_appApiValidation.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\userCode\background.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\extensionData\userCode\extension.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\chromeCoreFilesIndex.txt
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\actions\1.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\icon128.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\icon16.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\icons\icon48.png
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\cookie.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\chrome.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\message.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\monitor.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\pageAction.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\api\pageActionBG.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\background.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\app_api.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\bg_app_api.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\consts.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\cookie_store.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\crossriderAPI.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\delegate.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\events.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\extensionDataStore.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\installer.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\logFile.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\logging.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\onBGDocumentLoad.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\popupResource\newPopup.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\popupResource\popup.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\reports.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\storageWrapper.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\updateManager.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\util.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\lib\xhr.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\main.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\js\platformVersion.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\manifest.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\clkckblnmlbemmgefidhlmjcfboijafe\1.26.11_0\popup.html
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\background.html
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\content.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\lsdb.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\manifest.json
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl\2.4_0\oGs.js
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\000164.ldb
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\000169.ldb
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\000170.log
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\CURRENT
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\LOCK
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\LOG
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\LOG.old
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\clkckblnmlbemmgefidhlmjcfboijafe\MANIFEST-000168
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0.localstorage-journal
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_clkckblnmlbemmgefidhlmjcfboijafe_0.localstorage
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage-journal
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage
c:\users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_ctypes.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_elementtree.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_hashlib.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_multiprocessing.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_socket.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\_ssl.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\pyexpat.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\pysqlite2._sqlite.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\python27.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\pythoncom27.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\PyWinTypes27.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\select.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\unicodedata.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32api.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32com.shell.shell.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32crypt.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32event.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32file.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32inet.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32pdh.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32pipe.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32process.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32profile.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32security.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\win32ts.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\windows._lib_cacheinvalidation.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._controls_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._core_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._gdi_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._html2.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._misc_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._windows_.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wx._wizard.pyd
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxbase294u_net_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxbase294u_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_adv_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_core_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_html_vc90.dll
c:\users\melonsvk\AppData\Local\Temp\_MEI32922\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Files Created from 2014-02-23 to 2014-03-23 )))))))))))))))))))))))))))))))
.
.
2014-03-23 20:00 . 2014-03-23 20:00 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-03-23 20:00 . 2014-03-23 20:00 -------- d-----w- c:\users\DefaultAppPool\AppData\Local\temp
2014-03-23 18:59 . 2014-03-23 18:59 1031560 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C28082B6-6155-4811-B038-EF68439356B1}\gapaengine.dll
2014-03-23 18:59 . 2014-03-06 20:43 10521840 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{17027819-A82C-40B9-8E4D-9B098A0CA91F}\mpengine.dll
2014-03-23 18:56 . 2014-03-23 18:57 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-03-23 18:56 . 2014-03-23 18:57 -------- d-----w- c:\program files\Microsoft Security Client
2014-03-21 08:51 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28A3241D-79B8-49D4-8065-A1C54E202709}\mpengine.dll
2014-03-19 13:04 . 2014-03-19 14:26 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2014-03-19 08:27 . 2014-03-19 08:27 -------- d-----w- c:\users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 08:27 . 2014-03-19 08:27 -------- d-----w- c:\programdata\Malwarebytes
2014-03-19 08:27 . 2014-03-19 08:27 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-03-19 08:27 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-03-17 12:55 . 2014-03-22 16:56 -------- d-----w- c:\program files (x86)\Aurora
2014-03-16 10:01 . 2014-03-16 10:01 -------- d-----w- c:\program files (x86)\AlLTubeNoAds
2014-03-14 18:33 . 2014-03-14 18:33 245248 ----a-w- c:\users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe
2014-03-14 14:41 . 2014-02-04 02:32 624128 ----a-w- c:\windows\system32\qedit.dll
2014-03-14 14:41 . 2014-02-04 02:04 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-03-03 21:03 . 2014-03-03 21:03 647872 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX
2014-03-03 20:54 . 2014-03-03 16:53 1071088 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-12 02:47 . 2013-09-08 19:24 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-12 02:47 . 2013-09-08 19:24 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-06 12:25 . 2014-02-06 12:25 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-01-19 07:33 . 2013-09-08 19:28 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-12-24 23:09 . 2014-02-12 22:02 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-12-24 22:48 . 2014-02-12 22:02 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
2014-02-12 18:41 677888 ----a-w- c:\program files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2014-02-25 1821888]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2013-12-06 20203904]
"winhotspot"="c:\program files (x86)\winhotspot\1F70.tmp" [2014-01-19 158208]
"Spotify Web Helper"="c:\users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-01-29 1171968]
"Spotify"="c:\users\melonsvk\AppData\Roaming\Spotify\spotify.exe" [2014-01-29 6118400]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-09-05 766208]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2011-09-28 1039872]
"mnctwgbfoSrv"="c:\windows\inf\mnctwgbfo.vbe" [2014-01-19 1342]
.
c:\users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Firewall.exe [2014-3-14 245248]
Firewall.exe.tmp [2014-3-23 21028]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Virtual Router Manager.lnk - c:\windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe /min [2013-9-14 22486]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cpuz135;cpuz135;c:\users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys;c:\users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
R3 vpcuxd;USB Virtualization Stub Service;c:\windows\system32\DRIVERS\vpcuxd.sys;c:\windows\SYSNATIVE\DRIVERS\vpcuxd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WMSVC;Web Management Service;c:\windows\system32\inetsrv\wmsvc.exe;c:\windows\SYSNATIVE\inetsrv\wmsvc.exe [x]
S1 cnnctfy3;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy3.sys;c:\windows\SYSNATIVE\DRIVERS\cnnctfy3.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe;c:\program files (x86)\Connectify\ConnectifyService.exe [x]
S2 ftpsvc;Microsoft FTP Service;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 Virtual Router;VirtualRouterService;c:\program files (x86)\Virtual Router\VirtualRouterService.exe;c:\program files (x86)\Virtual Router\VirtualRouterService.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-04 04:42 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-03-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-08 02:47]
.
2014-03-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
- c:\users\melonsvk\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-06 18:33]
.
2014-03-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
- c:\users\melonsvk\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-06 18:33]
.
2014-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 15:23]
.
2014-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-11 15:23]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}]
2014-02-12 18:41 949248 ----a-w- c:\program files (x86)\FreeHD-Sport TV V9.0\FreeHD-Sport TV V9.0-bho64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 09:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-09-08 489472]
"Greenshot"="c:\program files\Greenshot\Greenshot.exe" [2012-10-30 462848]
"Connectify Dispatch"="c:\program files (x86)\Connectify\DispatchUI.exe" [2013-09-24 2233120]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-09-03 444856]
"Connectify Hotspot"="c:\program files (x86)\Connectify\Connectify.exe" [2013-09-24 4162336]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48
mStart Page = hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = cache34.ics.muni.cz:5555
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~1\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 147.251.208.1
TCP: Interfaces\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}: NameServer = 8.8.8.8,4.4.4.4
TCP: Interfaces\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}\759664960264255454: NameServer = 8.8.8.8,4.4.4.4
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\
FF - prefs.js: browser.search.defaulturl - hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=
FF - prefs.js: browser.startup.homepage - hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48
FF - prefs.js: keyword.URL - hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=
FF - prefs.js: network.proxy.ftp - cache34.ics.muni.cz
FF - prefs.js: network.proxy.ftp_port - 5555
FF - prefs.js: network.proxy.http - cache34.ics.muni.cz
FF - prefs.js: network.proxy.http_port - 5555
FF - prefs.js: network.proxy.socks - cache34.ics.muni.cz
FF - prefs.js: network.proxy.socks_port - 5555
FF - prefs.js: network.proxy.ssl - cache34.ics.muni.cz
FF - prefs.js: network.proxy.ssl_port - 5555
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Connectify\ConnectifyD.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Completion time: 2014-03-23 21:09:45 - machine was rebooted
ComboFix-quarantined-files.txt 2014-03-23 20:09
.
Pre-Run: 183 637 073 920 bytes free
Post-Run: 183 367 147 520 bytes free
.
- - End Of File - - FABB4760EF64DB210C748EAF763BA36D
A36C5E4F47E84449FF07ED3517B43A31

Re: Pomalý boot + problém s diakritikou

Napsal: 01 dub 2014 06:29
od vyosek
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Re: Pomalý boot + problém s diakritikou

Napsal: 01 dub 2014 18:06
od melonSVK
# AdwCleaner v3.023 - Report created 01/04/2014 at 19:05:22
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : melonsvk - MY_PRECIOUS
# Running from : C:\Users\melonsvk\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\RegClean
Folder Deleted : C:\ProgramData\SNT
Folder Deleted : C:\ProgramData\YoutubeAdblocker
Folder Deleted : C:\ProgramData\greatsuaver
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\Program Files (x86)\SNT
Folder Deleted : C:\Program Files (x86)\FreeHD-Sport TV V9.0
Folder Deleted : C:\Program Files (x86)\greatsuaver
Folder Deleted : C:\Users\melonsvk\AppData\Local\torch
Folder Deleted : C:\Users\melonsvk\AppData\LocalLow\FreeHD-Sport TV V9.0
Folder Deleted : C:\Users\melonsvk\AppData\Roaming\SimilarSites
File Deleted : C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\searchplugins\WebSearch.xml
File Deleted : C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0051386.Sandbox.1
Key Deleted : HKCU\Software\5cd8f17f4086744065eb0992a09e05a2
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522132286}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555135586}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566136686}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544134486}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511131186}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5081f89c-7618-48ce-bc0b-8c65e830b8a9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5db91217-16c2-4a7a-b07f-4d11138b70ea}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cd9fff9-af8d-4851-b92a-a73fbb31187d}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{be34fd68-2ef0-49b9-98c7-90a72cf3149e}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d7a01b17-87c6-484a-822c-af4656a537c4}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511131186}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522132286}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555135586}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566136686}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131186}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5081f89c-7618-48ce-bc0b-8c65e830b8a9}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5db91217-16c2-4a7a-b07f-4d11138b70ea}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cd9fff9-af8d-4851-b92a-a73fbb31187d}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{be34fd68-2ef0-49b9-98c7-90a72cf3149e}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d7a01b17-87c6-484a-822c-af4656a537c4}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\smarttweak
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\WEDLMNGR
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\FreeHD-Sport TV V9.0
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\FreeHD-Sport TV V9.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA41BB14-E67B-1653-C57B-5CA99418A866}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FreeHD-Sport TV V9.0
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v

[ File : C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename,S", "WebSearch");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=");
Line Deleted : user_pref("browser.search.order.1", "WebSearch");
Line Deleted : user_pref("browser.search.order.1,S", "WebSearch");
Line Deleted : user_pref("browser.search.selectedEngine,S", "WebSearch");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48");
Line Deleted : user_pref("extensions.1Lr.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexOf[...]
Line Deleted : user_pref("extensions.HkeM2bU.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressba[...]
Line Deleted : user_pref("extensions.ZKnrPl0.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressba[...]
Line Deleted : user_pref("extensions.cmoGnvfcEN.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/res[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1442768b967242f5bd29fa50b0f10c98");
Line Deleted : user_pref("keyword.URL", "hxxp://websearch.webisgreat.info/?pid=512&r=2014/02/06&hid=13469219172995012004&lg=EN&cc=CZ&unqvl=48&l=1&q=");

-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : icon_url
Deleted : search_url
Deleted : keyword

*************************

AdwCleaner[R0].txt - [11542 octets] - [01/04/2014 19:02:40]
AdwCleaner[S0].txt - [8382 octets] - [01/04/2014 19:05:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8442 octets] ##########

Re: Pomalý boot + problém s diakritikou

Napsal: 01 dub 2014 19:28
od vyosek
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: Pomalý boot + problém s diakritikou

Napsal: 01 dub 2014 23:54
od melonSVK
Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by melonsvk on ut 01. 04. 2014 at 21:43:39,21.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\melonsvk\Desktop\zoek\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

1. 4. 2014 21:46:22 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\prefs.js:

Added to C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default\prefs.js:

Added to C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- Lines extensions.1Lr removed from prefs.js ----
user_pref("extensions.1Lr.epoch", "1394198110");
user_pref("extensions.1Lr.url", "http://discountgetdirect.ru/sync2/?q=hf ... a7rjrFqjwH
---- Lines extensions.HkeM2bU removed from prefs.js ----
user_pref("extensions.HkeM2bU.epoch", "1391981460");
user_pref("extensions.HkeM2bU.url", "http://getsync.info/sync2/?q=hfZ9ofV9CS ... sFrHaGpih7
---- Lines extensions.ZKnrPl0 removed from prefs.js ----
user_pref("extensions.ZKnrPl0.epoch", "1391981460");
user_pref("extensions.ZKnrPl0.url", "http://toolkitcomp.info/sync2/?q=hfZ9of ... aGrdYGrjrE
---- Lines extensions.cmoGnvfcEN removed from prefs.js ----
user_pref("extensions.cmoGnvfcEN.epoch", "1391981460");
user_pref("extensions.cmoGnvfcEN.url", "http://guardsetstarr.info/sync2/?q=hfZ9 ... jw9rdsEpds
---- FireFox user.js and prefs.js backups ----

prefs_201401.04._2159_.backup

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201401.04._2159_.backup

==== Deleting Files \ Folders ======================

C:\Users\melonsvk\AppData\LocalLow\{25AAAAA3-5B9A-4F44-D656-492E6C858E6C} deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{25AAAAA3-5B9A-4F44-D656-492E6C858E6C} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{25AAAAA3-5B9A-4F44-D656-492E6C858E6C} deleted
C:\PROGRA~3\40f12ab00162f710 deleted
C:\PROGRA~3\AlLTubeNoAds deleted
C:\PROGRA~2\AlLTubeNoAds deleted
C:\PROGRA~2\SmartTweak deleted
C:\PROGRA~2\GrabRez deleted
C:\PROGRA~2\SopCast deleted
C:\PROGRA~3\SetApp deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software deleted
C:\Users\melonsvk\Downloads\SopCast.zip deleted
C:\Users\melonsvk\Downloads\SoftonicDownloader_for_accessdiver.exe deleted
C:\Users\melonsvk\Downloads\SoftonicDownloader_for_winhotspot-virtual-wifi-router.exe deleted
C:\Users\melonsvk\Downloads\ULTIMATE OCR CRACKERS PACK.rar.exe deleted
"C:\PROGRA~3\hmjiajpoaioljahinpbfeopfolhgngfl\hmjiajpoaioljahinpbfeopfolhgngfl.crx" deleted
"C:\PROGRA~3\hmjiajpoaioljahinpbfeopfolhgngfl\update.xml" deleted
"C:\PROGRA~3\hmjiajpoaioljahinpbfeopfolhgngfl" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default
- HttpFox - %ProfilePath%\extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi
- ReloadEvery - %ProfilePath%\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
- Greasemonkey - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi

ProfilePath: C:\Users\melonsvk\AppData\Roaming\Thunderbird\Profiles\s1p6cm2e.default
- Enigmail - %ProfilePath%\extensions\{847b3a00-7ab1-11d4-8f02-006008948af5}
- Instrument Test - %ProfilePath%\extensions\tbtestpilot@labs.mozilla.com.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash
87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies
2BF85B6162528E0635DD8D632EB975C8 - C:\Users\melonsvk\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll - Facebook Desktop


==== Chrome Look ======================

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
apdfllckaahabafndbhieahigkjlhalf - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[13. 02. 2014 16:55]

YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Administrator\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Administrator\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Administrator\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Administrator\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Administrator\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
Chrome In-App Payments service - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
YTBoOkMairk - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - Guest\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - Guest\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - Guest\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - Guest\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - Guest\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
YoutubeAdblocker - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf
AlLTubeNoAds - melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl
YoutubeAdblocker - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone
Yoono Twitter Facebook LinkedIn Youtube - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli
YTBoOkMairk - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi
SNT - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl
webbsaeve - melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf

==== Chrome Fix ======================

C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjiajpoaioljahinpbfeopfolhgngfl deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hmjiajpoaioljahinpbfeopfolhgngfl_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfmoppincnpbihkkbniclpgaklpgfone deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cfmoppincnpbihkkbniclpgaklpgfone_0.localstorage deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jkkenjlnjfemconejajakbijbheoffli_0.localstorage deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\oedgedkpfpcjghdnlaaokdefaclmfeoi deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\okmbfaoiapckdnaigfceleflfhogclgl deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_okmbfaoiapckdnaigfceleflfhogclgl_0.localstorage deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\melonsvk\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pjekkekkacnihbkpdhdhmfhmpiinldcf deleted successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pjekkekkacnihbkpdhdhmfhmpiinldcf_0.localstorage deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{1948D768-6063-402E-B914-67EE2407B7A6} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_13415"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\c6e42f97-3762-4030-a32d-89076ff12fc3 deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Guest\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Guest\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\melonsvk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\melonsvk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MKRUI79S will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\melonsvk\AppData\Local\Mozilla\Firefox\Profiles\uopr2aj9.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=534 folders=188 40320435 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\temp emptied successfully
C:\Users\Classic .NET AppPool\AppData\Local\temp emptied successfully
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\DefaultAppPool\AppData\Local\temp emptied successfully
C:\Users\Guest\AppData\Local\temp emptied successfully
C:\Users\HomeGroupUser$\AppData\Local\temp emptied successfully
C:\Users\melonsvk\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\CLASSI~1.NET\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\melonsvk\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\melonsvk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MKRUI79S" not found

==== EOF on st 02. 04. 2014 at 1:56:24,93 ======================

Re: Pomalý boot + problém s diakritikou

Napsal: 02 dub 2014 07:34
od vyosek
Poprosim FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Re: Pomalý boot + problém s diakritikou

Napsal: 02 dub 2014 14:23
od melonSVK
Nech sa páči priateľu ;)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by melonsvk (administrator) on MY_PRECIOUS on 02-04-2014 15:25:09
Running from C:\Users\melonsvk\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Microsoft Corporation) C:\Windows\system32\inetsrv\inetinfo.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Chris Pietschmann (http://pietschsoft.com)) C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyD.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Connectify) C:\Program Files (x86)\Connectify\DispatchUI.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectify.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyGopher.exe
(Spotify Ltd) C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Spotify Ltd) C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft) C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Aurora\firefox.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files (x86)\Aurora\plugin-container.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Foxit Corporation) C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
() C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [489472 2010-09-08] (IDT, Inc.)
HKLM\...\Run: [Greenshot] - C:\Program Files\Greenshot\Greenshot.exe [462848 2012-10-30] (Greenshot)
HKLM\...\Run: [Connectify Dispatch] - C:\Program Files (x86)\Connectify\DispatchUI.exe [2233120 2013-09-24] (Connectify)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444856 2011-09-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Connectify Hotspot] - C:\Program Files (x86)\Connectify\Connectify.exe [4162336 2013-09-24] (Connectify)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1039872 2011-09-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mnctwgbfoSrv] - C:\Windows\inf\mnctwgbfo.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [winhotspot] - C:\Program Files (x86)\winhotspot\1F70.tmp [158208 2014-01-20] ()
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify Web Helper] - C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify] - C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe (Microsoft)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: cache34.ics.muni.cz:5555
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54868F0C7ACCE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {1948D768-6063-402E-B914-67EE2407B7A6} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 147.251.208.1
Tcpip\..\Interfaces\{8D99CD24-35C1-4794-9F89-0E7FDDA3DBE8}: [NameServer]8.8.8.8,4.4.4.4

FireFox:
========
FF ProfilePath: C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "backup.ftp", "cache34.ics.muni.cz"
FF NetworkProxy: "backup.ftp_port", 5555
FF NetworkProxy: "backup.socks", "cache34.ics.muni.cz"
FF NetworkProxy: "backup.socks_port", 5555
FF NetworkProxy: "backup.ssl", "cache34.ics.muni.cz"
FF NetworkProxy: "backup.ssl_port", 5555
FF NetworkProxy: "ftp", "cache34.ics.muni.cz"
FF NetworkProxy: "ftp_port", 5555
FF NetworkProxy: "http", "cache34.ics.muni.cz"
FF NetworkProxy: "http_port", 5555
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "cache34.ics.muni.cz"
FF NetworkProxy: "socks_port", 5555
FF NetworkProxy: "ssl", "cache34.ics.muni.cz"
FF NetworkProxy: "ssl_port", 5555
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\melonsvk\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: No Name - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\staged [2014-04-02]
FF Extension: HttpFox - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2014-03-31]
FF Extension: ReloadEvery - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-13]
FF Extension: Adblock Plus - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-08]
FF Extension: Greasemonkey - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-11-01]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Aurora\firefox.exe

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-24]
CHR Extension: (Disk Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-13]
CHR Extension: (YouTube) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-24]
CHR Extension: (Hľadať v Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-24]
CHR Extension: (Peňaženka Google) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-11]
CHR Extension: (Gmail) - C:\Users\melonsvk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-24]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-09-24] (Connectify)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] ()
S3 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [637440 2014-01-02] (FileZilla Project)
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [350720 2012-06-01] (Microsoft Corporation)
R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37176 2013-08-22] (The OpenVPN Project)
R2 Virtual Router; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (http://pietschsoft.com))
S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 wampapache; c:\wamp\bin\apache\apache2.4.4\bin\httpd.exe [24576 2013-06-23] (Apache Software Foundation)
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe [12867584 2013-06-23] ()
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [35352 2013-09-25] (Connectify)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-06] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-02 15:25 - 2014-04-02 15:25 - 00018557 _____ () C:\Users\melonsvk\Downloads\FRST.txt
2014-04-02 15:25 - 2014-04-02 15:25 - 00000000 ____D () C:\FRST
2014-04-02 15:24 - 2014-04-02 15:24 - 02157056 _____ (Farbar) C:\Users\melonsvk\Downloads\FRST64.exe
2014-04-02 01:55 - 2014-04-02 01:55 - 00000022 _____ () C:\Windows\S.dirmngr
2014-04-02 01:14 - 2014-04-02 01:14 - 00000000 ____D () C:\ProgramData\Sun
2014-04-02 01:13 - 2014-04-02 01:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-02 01:13 - 2014-04-02 01:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-02 01:11 - 2014-04-02 01:12 - 00921000 _____ (Oracle Corporation) C:\Users\melonsvk\Downloads\jxpiinstall.exe
2014-04-01 22:06 - 2014-04-01 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:45 - 2014-04-02 01:56 - 00032069 _____ () C:\zoek-results.log
2014-04-01 21:43 - 2014-04-01 22:04 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 19:02 - 2014-04-01 19:06 - 00000000 ____D () C:\AdwCleaner
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-03-31 20:53 - 2014-03-31 20:56 - 00000000 ____D () C:\wamp
2014-03-31 20:49 - 2014-03-31 20:49 - 40603386 _____ (Hervé Leclerc (HeL) ) C:\Users\melonsvk\Downloads\Wampserver2.4-x64.exe
2014-03-31 17:08 - 2014-04-02 09:16 - 00000000 ____D () C:\Program Files (x86)\Aurora
2014-03-30 22:43 - 2014-03-30 22:47 - 1609824256 _____ () C:\Users\melonsvk\Downloads\Dom.Hemingway.2013.DVDRip.XviD.AC3.CZ-TreZzoR.avi
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\rsit
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\Program Files\trend micro
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Skype
2014-03-29 21:10 - 2014-03-29 21:10 - 00089920 _____ () C:\Users\melonsvk\Downloads\wp-hide-post.zip
2014-03-29 21:10 - 2014-03-29 21:10 - 00000000 ____D () C:\Users\melonsvk\Downloads\wp-hide-post
2014-03-28 00:19 - 2014-03-28 00:19 - 00003990 _____ () C:\Users\melonsvk\Downloads\search-exclude.1.0.3.zip
2014-03-28 00:19 - 2014-03-28 00:19 - 00000000 ____D () C:\Users\melonsvk\Downloads\search-exclude.1.0.3
2014-03-27 23:19 - 2014-03-27 23:20 - 00000000 ____D () C:\Program Files (x86)\Git
2014-03-27 23:18 - 2014-03-27 23:18 - 15511958 _____ (The Git Development Community ) C:\Users\melonsvk\Downloads\Git-1.9.0-preview20140217.exe
2014-03-27 23:10 - 2014-03-27 23:10 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\TortoiseSVN
2014-03-27 22:43 - 2014-03-29 21:39 - 00000000 ____D () C:\Users\melonsvk\Desktop\highlife
2014-03-27 21:26 - 2014-03-27 21:40 - 507055586 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x06 Poslední den (The Last Day) CZ.avi
2014-03-27 20:56 - 2014-03-27 21:13 - 505991948 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x05 Fotostroj času (Timeslides) CZ.avi
2014-03-26 00:10 - 2014-03-26 00:10 - 00001211 _____ () C:\Users\melonsvk\AppData\Local\recently-used.xbel
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\.kde
2014-03-26 00:02 - 2014-03-26 00:02 - 00001840 _____ () C:\Users\melonsvk\Desktop\privatekeymail.txt
2014-03-26 00:02 - 2014-03-26 00:02 - 00000914 _____ () C:\Users\melonsvk\Desktop\pubkeymail.txt
2014-03-26 00:00 - 2014-03-26 00:03 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\gtk-2.0
2014-03-26 00:00 - 2014-03-26 00:00 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\GNU
2014-03-25 23:59 - 2014-03-30 13:45 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\gnupg
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\ProgramData\GNU
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\Program Files (x86)\GNU
2014-03-25 23:58 - 2014-03-25 23:58 - 29689992 _____ (g10 Code GmbH) C:\Users\melonsvk\Downloads\gpg4win-2.2.1.exe
2014-03-25 23:49 - 2014-03-25 23:49 - 00000000 ____D () C:\gnupg
2014-03-25 23:45 - 2014-03-25 23:45 - 01470222 _____ () C:\Users\melonsvk\Downloads\enigmail-1.6-sm+tb.xpi
2014-03-25 22:03 - 2014-03-25 22:03 - 01327006 _____ () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2.zip
2014-03-25 22:03 - 2014-03-25 22:03 - 00000000 ____D () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2
2014-03-25 20:50 - 2014-03-25 14:44 - 00026486 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.srt
2014-03-25 20:49 - 2014-03-25 20:50 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral
2014-03-25 20:29 - 2014-03-25 20:30 - 176945434 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.mp4
2014-03-25 20:28 - 2014-03-25 20:29 - 00047390 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral.zip
2014-03-24 22:03 - 2014-03-24 22:03 - 13897647 ____T ( ) C:\Users\melonsvk\Downloads\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack.exe72BEA13A
2014-03-24 22:03 - 2014-03-24 22:03 - 03222705 ____T () C:\Users\melonsvk\Downloads\wfuzz-2.0.tgzEE09CEA8
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-24 04:03 - 2014-03-24 04:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 22:18 - 2014-03-23 22:18 - 00000000 ____D () C:\Users\melonsvk\Downloads\Hutil210_ISO
2014-03-23 22:17 - 2014-03-23 22:17 - 01489873 _____ () C:\Users\melonsvk\Downloads\Hutil210_ISO.rar
2014-03-23 22:09 - 2014-03-23 22:09 - 00039459 _____ () C:\ComboFix.txt
2014-03-23 21:49 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-23 21:49 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-23 21:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-23 21:49 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-23 21:48 - 2014-03-23 22:09 - 00000000 ____D () C:\Qoobox
2014-03-23 21:47 - 2014-03-31 03:01 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-03-23 21:47 - 2014-03-23 22:07 - 00000000 ____D () C:\Windows\erdnt
2014-03-23 21:44 - 2014-03-23 21:45 - 05190773 ____R (Swearware) C:\Users\melonsvk\Downloads\ComboFix.exe
2014-03-23 20:56 - 2014-03-31 03:01 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-23 20:56 - 2014-03-31 03:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-03-23 20:56 - 2014-03-23 20:56 - 13696184 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\mseinstall.exe
2014-03-22 22:47 - 2014-03-22 22:47 - 00000000 ____D () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r
2014-03-22 22:46 - 2014-03-22 22:46 - 01524211 _____ () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r.rar
2014-03-22 22:45 - 2014-03-22 22:45 - 09668186 _____ () C:\Users\melonsvk\Downloads\Hitman v0.98.rar
2014-03-20 00:21 - 2014-03-20 00:36 - 727791522 _____ () C:\Users\melonsvk\Downloads\Šestý-smysl-CZ.avi.part
2014-03-19 22:21 - 2014-03-19 22:25 - 843019148 _____ () C:\Users\melonsvk\Downloads\Kostka-CZ-dabing---Horor--Mysteriózní,-Kanada,-1997-(nejlepsi-filmy.mypage.cz).avi
2014-03-19 22:18 - 2014-03-19 22:21 - 733603840 _____ () C:\Users\melonsvk\Downloads\FUNNY-GAMES-CZ.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244957184 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E04.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244789248 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E05.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244703232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E06.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244551680 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E02.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244496384 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E01.avi
2014-03-19 22:05 - 2014-03-19 22:09 - 244230144 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E03.avi
2014-03-19 21:31 - 2014-03-18 23:51 - 00028918 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.srt
2014-03-19 21:30 - 2014-03-19 21:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral
2014-03-19 21:29 - 2014-03-19 21:33 - 202051517 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.mp4
2014-03-19 21:29 - 2014-03-19 21:29 - 00050935 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral.zip
2014-03-19 21:00 - 2014-03-19 21:13 - 254260181 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E05.avi
2014-03-19 21:00 - 2014-03-19 21:12 - 257375497 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E02.avi
2014-03-19 21:00 - 2014-03-19 21:12 - 257031532 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E04.avi
2014-03-19 21:00 - 2014-03-19 21:11 - 258383856 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E01.avi
2014-03-19 21:00 - 2014-03-19 21:11 - 256556662 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E06.avi
2014-03-19 21:00 - 2014-03-19 21:11 - 256421029 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E03.avi
2014-03-19 20:03 - 2014-03-19 20:06 - 244867072 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E06.avi
2014-03-19 20:03 - 2014-03-19 20:06 - 244598784 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E05.avi
2014-03-19 20:03 - 2014-03-19 20:05 - 244934656 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E04.avi
2014-03-19 20:03 - 2014-03-19 20:05 - 244621312 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E03.avi
2014-03-19 20:02 - 2014-03-19 20:05 - 244930560 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E02.avi
2014-03-19 19:54 - 2014-03-19 19:56 - 244447232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E01.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 244938752 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E06.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 244375040 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E05.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 224359924 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E03.avi
2014-03-19 19:51 - 2014-03-19 19:57 - 217567969 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E04.avi
2014-03-19 19:51 - 2014-03-19 19:56 - 244669440 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E02.avi
2014-03-19 19:51 - 2014-03-19 19:54 - 244792320 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E01.avi
2014-03-19 18:42 - 2014-03-19 18:43 - 244716032 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E06.avi
2014-03-19 18:18 - 2014-03-19 18:20 - 244709888 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E06.avi
2014-03-19 18:17 - 2014-03-19 18:19 - 244872704 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E05.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 245018112 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E03.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 244540416 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E01.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 244504064 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E02.avi
2014-03-19 18:16 - 2014-03-19 18:19 - 244487168 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E04.avi
2014-03-19 18:15 - 2014-03-19 18:18 - 244521984 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E05.avi
2014-03-19 18:15 - 2014-03-19 18:17 - 245081600 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E04.avi
2014-03-19 18:07 - 2014-03-19 18:08 - 244969496 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E03.avi
2014-03-19 15:04 - 2014-03-19 16:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 10:27 - 2014-03-19 10:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\melonsvk\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-19 10:27 - 2014-03-19 10:27 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-19 10:27 - 2013-04-04 15:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-18 13:12 - 2014-03-18 13:12 - 01518833 _____ () C:\Users\melonsvk\Downloads\JTesseract.rar
2014-03-18 13:12 - 2014-03-18 13:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\JTesseract
2014-03-18 02:33 - 2014-03-18 02:34 - 244938316 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E02.avi
2014-03-18 02:26 - 2014-03-18 02:26 - 245016476 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E01.avi
2014-03-18 02:10 - 2014-03-18 02:10 - 15802593 _____ () C:\Users\melonsvk\Downloads\WitchdOCtoR.zip
2014-03-18 00:43 - 2014-03-18 00:43 - 00012683 _____ () C:\Users\melonsvk\Desktop\excel_graf.xlsx
2014-03-17 21:46 - 2014-03-04 12:43 - 00001743 _____ () C:\Users\melonsvk\Desktop\id_rsa
2014-03-17 21:20 - 2014-03-17 21:21 - 00000000 ____D () C:\Users\melonsvk\Downloads\securimage
2014-03-17 21:19 - 2014-03-17 21:19 - 07583247 _____ () C:\Users\melonsvk\Downloads\securimage.tar.gz
2014-03-17 02:36 - 2014-03-17 02:36 - 05061032 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-17 02:35 - 2014-04-02 01:55 - 00011966 _____ () C:\Windows\PFRO.log
2014-03-16 20:29 - 2014-03-28 21:14 - 00000000 ____D () C:\Users\melonsvk\Desktop\shareride
2014-03-16 18:42 - 2014-04-02 01:55 - 00000840 _____ () C:\Windows\setupact.log
2014-03-16 18:42 - 2014-03-16 18:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-16 12:05 - 2014-03-16 12:05 - 00112304 _____ () C:\Users\melonsvk\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 01:55 - 2014-03-12 01:19 - 00027570 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e20.hdtv.x264-excellence.cz.srt
2014-03-15 01:31 - 2014-03-15 01:31 - 00034210 _____ () C:\Users\melonsvk\Downloads\Two-and-a-Half-Men-S11E17(0000233494).srt
2014-03-15 01:12 - 2014-03-15 01:12 - 00048250 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x20_jingspiral.zip
2014-03-15 01:11 - 2014-03-15 01:16 - 206756398 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E20.HDTV.x264-EXCELLENCE.mp4
2014-03-15 01:06 - 2014-03-15 01:06 - 00035165 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.srt
2014-03-15 01:05 - 2014-03-15 01:10 - 187560935 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.mp4.part
2014-03-15 00:06 - 2014-03-15 00:17 - 00000000 ____D () C:\Users\melonsvk\Downloads\table_zebra
2014-03-15 00:06 - 2014-03-15 00:06 - 00020695 _____ () C:\Users\melonsvk\Downloads\table_zebra.zip
2014-03-14 16:46 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 16:46 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 16:46 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 16:46 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 16:46 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 16:46 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 16:46 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 16:46 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 16:46 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 16:46 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 16:46 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 16:46 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 16:46 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-14 16:46 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 16:46 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 16:46 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-14 16:46 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 16:46 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 16:46 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-14 16:46 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-14 16:46 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-14 16:46 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-14 16:46 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-14 16:46 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 16:46 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 16:46 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-14 16:46 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-14 16:46 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 16:46 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 16:46 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-14 16:46 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-14 16:46 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 16:46 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-14 16:46 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-14 16:46 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-14 16:46 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 16:46 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-14 16:46 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-14 16:46 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 16:46 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-14 16:46 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 16:46 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 16:46 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 16:41 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 16:41 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 00:40 - 2014-03-13 00:50 - 2505515392 _____ () C:\Users\melonsvk\Downloads\Osudovy-dotek---Butterfly-Effect-The-2004_CZ_Dabing.mkv
2014-03-13 00:36 - 2014-03-13 00:36 - 00097767 _____ () C:\Users\melonsvk\Downloads\Jackass-Presents-Bad-Grandpa(0000229754).srt
2014-03-13 00:35 - 2014-03-13 00:39 - 786983786 _____ () C:\Users\melonsvk\Downloads\Bad-Grandpa-2013-UNRATED-720p-WEB-DL-700MB-Ganool.mkv
2014-03-12 22:37 - 2014-03-12 22:48 - 175207650 _____ () C:\Users\melonsvk\Downloads\Simpsonovi-24x11-Stridani-porucniku.avi.part
2014-03-12 15:30 - 2014-03-12 15:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\Separ - Pirat (2014)
2014-03-12 15:26 - 2014-03-12 15:27 - 124680185 _____ () C:\Users\melonsvk\Downloads\Separ - Pirat (2014).rar
2014-03-10 18:12 - 2014-03-10 18:12 - 00674145 _____ () C:\Users\melonsvk\Downloads\Sentry1.0.zip
2014-03-10 16:03 - 2014-03-10 16:04 - 176830440 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x09_Konec-sveta_za_dvermi_XVID_CZ.avi
2014-03-10 02:16 - 2014-03-10 02:17 - 267405256 _____ () C:\Users\melonsvk\Downloads\02x01-Mala-Velka-Britanie.avi
2014-03-10 02:16 - 2014-03-10 02:17 - 254634802 _____ () C:\Users\melonsvk\Downloads\02x02-Mala-Velka-Britanie.avi
2014-03-08 21:55 - 2014-03-08 21:55 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpBB-3.0.12
2014-03-08 21:54 - 2014-03-08 21:54 - 02487985 _____ () C:\Users\melonsvk\Downloads\phpBB-3.0.12.zip
2014-03-08 21:15 - 2014-03-08 21:15 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages
2014-03-08 21:14 - 2014-03-08 21:15 - 08533786 _____ () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages.zip
2014-03-08 20:59 - 2014-03-08 20:59 - 01021432 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\NDP451-KB2859818-Web.exe
2014-03-08 20:54 - 2014-03-08 20:54 - 00001335 _____ () C:\Users\melonsvk\Downloads\simple-user-auth-1.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00002388 _____ () C:\Users\melonsvk\Downloads\loginsimple.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00000000 ____D () C:\Users\melonsvk\Downloads\loginsimple
2014-03-08 19:32 - 2014-03-08 19:32 - 193026000 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x07_Den_kdy_se_ochladila_Zeme_XVID_CZ.avi
2014-03-08 18:12 - 2014-03-08 18:12 - 00000367 _____ () C:\Users\melonsvk\Downloads\zaheslovani-stranky.zip
2014-03-08 18:12 - 2014-03-08 18:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\zaheslovani-stranky
2014-03-08 01:53 - 2014-03-08 01:55 - 842123264 _____ () C:\Users\melonsvk\Downloads\DISTURBIA---CZ-dvdrip.avi
2014-03-08 01:46 - 2014-03-08 01:46 - 119015516 _____ () C:\Users\melonsvk\Downloads\Je-super-mit-starsiho-brachu---sexincest.mp4
2014-03-08 01:44 - 2014-03-08 01:46 - 705609262 _____ () C:\Users\melonsvk\Downloads\CPP-Rebecca-Linares-Crew-2013-CZECH-TEEN-PORN-DVDRIP-HD-SEX-XXX-PORNO-CESKY-MOBILE-EXCLUSIVE-BIG-BOOBS-TITS-YOUNG-STREET-AMATEUR-HQ.mp4
2014-03-08 01:39 - 2014-03-08 01:43 - 1939795548 _____ () C:\Users\melonsvk\Downloads\Disturbia.2007.1080p.Bluray.x264.anoXmous.mp4
2014-03-07 20:28 - 2014-03-07 20:29 - 181312244 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x22_Vyroci_ve_vlaku_XVID_CZ.avi
2014-03-07 18:10 - 2014-03-07 18:10 - 00042667 _____ () C:\Users\melonsvk\Downloads\DenyHosts-2.6.tar.gz
2014-03-07 14:33 - 2014-03-07 14:39 - 1707004246 _____ () C:\Users\melonsvk\Downloads\Jen_na_sex__2008.avi.part
2014-03-07 14:04 - 2014-03-07 14:05 - 173180576 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x21_Saga_o_Carlovi_XVID_CZ.avi
2014-03-07 13:49 - 2014-03-07 13:49 - 178313974 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x20_Falesny_virtuos_XVID_CZ.avi
2014-03-07 01:24 - 2014-03-07 01:26 - 1551390720 _____ () C:\Users\melonsvk\Downloads\V-Bruggach-CZ-dabing.avi
2014-03-06 17:02 - 2014-03-06 17:02 - 00000000 ____D () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz
2014-03-06 17:01 - 2014-03-06 17:02 - 08282113 _____ () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz.rar
2014-03-05 00:37 - 2014-03-05 00:38 - 191138841 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.mp4
2014-03-05 00:37 - 2014-03-05 00:37 - 00031222 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.srt
2014-03-04 19:17 - 2014-03-04 19:18 - 444545299 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140224.mp4
2014-03-04 19:16 - 2014-03-04 19:19 - 617377795 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140217.mp4
2014-03-03 23:33 - 2014-03-03 23:38 - 981513568 _____ () C:\Users\melonsvk\Downloads\Proklety-Ostrov-cz-dabing.avi
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCT2.OCX
2014-03-03 22:54 - 2014-03-03 18:53 - 01071088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-03-03 18:53 - 2014-03-03 18:53 - 01071088 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCTL.OCX
2014-03-03 18:51 - 2014-03-03 18:51 - 00000000 ____D () C:\Users\melonsvk\Downloads\C-Force

==================== One Month Modified Files and Folders =======

2014-04-02 15:25 - 2014-04-02 15:25 - 00018557 _____ () C:\Users\melonsvk\Downloads\FRST.txt
2014-04-02 15:25 - 2014-04-02 15:25 - 00000000 ____D () C:\FRST
2014-04-02 15:24 - 2014-04-02 15:24 - 02157056 _____ (Farbar) C:\Users\melonsvk\Downloads\FRST64.exe
2014-04-02 15:24 - 2013-09-08 21:39 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Skype
2014-04-02 14:57 - 2014-01-29 16:27 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Spotify
2014-04-02 14:47 - 2013-09-08 21:24 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-02 14:41 - 2013-09-11 17:23 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-02 14:38 - 2013-10-06 20:33 - 00000940 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
2014-04-02 14:29 - 2013-09-08 21:08 - 01280591 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 10:41 - 2013-09-11 17:23 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-02 09:16 - 2014-03-31 17:08 - 00000000 ____D () C:\Program Files (x86)\Aurora
2014-04-02 03:33 - 2014-01-19 20:15 - 00004982 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for my_precious-melonsvk my_precious
2014-04-02 02:02 - 2009-07-14 07:13 - 00874520 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-02 01:57 - 2013-12-17 22:35 - 00000000 ___RD () C:\Users\melonsvk\Disk Google
2014-04-02 01:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-04-02 01:56 - 2014-04-01 21:45 - 00032069 _____ () C:\zoek-results.log
2014-04-02 01:56 - 2013-09-19 12:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-02 01:56 - 2013-09-14 23:41 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-04-02 01:55 - 2014-04-02 01:55 - 00000022 _____ () C:\Windows\S.dirmngr
2014-04-02 01:55 - 2014-03-17 02:35 - 00011966 _____ () C:\Windows\PFRO.log
2014-04-02 01:55 - 2014-03-16 18:42 - 00000840 _____ () C:\Windows\setupact.log
2014-04-02 01:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 01:14 - 2014-04-02 01:14 - 00000000 ____D () C:\ProgramData\Sun
2014-04-02 01:13 - 2014-04-02 01:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-02 01:13 - 2014-04-02 01:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-02 01:13 - 2014-04-02 01:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-02 01:12 - 2014-04-02 01:11 - 00921000 _____ (Oracle Corporation) C:\Users\melonsvk\Downloads\jxpiinstall.exe
2014-04-02 01:05 - 2009-07-14 06:45 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-02 01:05 - 2009-07-14 06:45 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-01 22:14 - 2013-09-08 21:30 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\AIMP3
2014-04-01 22:04 - 2014-04-01 21:43 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 22:06 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 20:38 - 2013-10-06 20:33 - 00000918 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
2014-04-01 19:06 - 2014-04-01 19:02 - 00000000 ____D () C:\AdwCleaner
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-04-01 03:47 - 2013-09-11 14:15 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\vlc
2014-04-01 02:45 - 2013-09-08 21:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-01 02:42 - 2013-10-10 02:05 - 00000600 _____ () C:\Users\melonsvk\AppData\Roaming\winscp.rnd
2014-03-31 21:25 - 2013-10-10 01:25 - 00000600 _____ () C:\Users\melonsvk\AppData\Local\PUTTY.RND
2014-03-31 20:56 - 2014-03-31 20:53 - 00000000 ____D () C:\wamp
2014-03-31 20:49 - 2014-03-31 20:49 - 40603386 _____ (Hervé Leclerc (HeL) ) C:\Users\melonsvk\Downloads\Wampserver2.4-x64.exe
2014-03-31 15:49 - 2013-10-07 14:26 - 00000000 ____D () C:\Users\melonsvk\Desktop\BAKALARKA
2014-03-31 03:01 - 2014-03-23 21:47 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-03-31 03:01 - 2014-03-23 20:56 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-31 03:01 - 2014-03-23 20:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-03-30 22:47 - 2014-03-30 22:43 - 1609824256 _____ () C:\Users\melonsvk\Downloads\Dom.Hemingway.2013.DVDRip.XviD.AC3.CZ-TreZzoR.avi
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\rsit
2014-03-30 19:35 - 2014-03-30 19:35 - 00000000 ____D () C:\Program Files\trend micro
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-30 19:29 - 2014-03-30 19:29 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Skype
2014-03-30 19:29 - 2013-09-08 21:38 - 00000000 ____D () C:\ProgramData\Skype
2014-03-30 13:45 - 2014-03-25 23:59 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\gnupg
2014-03-29 21:45 - 2013-09-08 21:12 - 00000000 ____D () C:\Users\melonsvk
2014-03-29 21:39 - 2014-03-27 22:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\highlife
2014-03-29 21:10 - 2014-03-29 21:10 - 00089920 _____ () C:\Users\melonsvk\Downloads\wp-hide-post.zip
2014-03-29 21:10 - 2014-03-29 21:10 - 00000000 ____D () C:\Users\melonsvk\Downloads\wp-hide-post
2014-03-28 21:14 - 2014-03-16 20:29 - 00000000 ____D () C:\Users\melonsvk\Desktop\shareride
2014-03-28 00:19 - 2014-03-28 00:19 - 00003990 _____ () C:\Users\melonsvk\Downloads\search-exclude.1.0.3.zip
2014-03-28 00:19 - 2014-03-28 00:19 - 00000000 ____D () C:\Users\melonsvk\Downloads\search-exclude.1.0.3
2014-03-27 23:20 - 2014-03-27 23:19 - 00000000 ____D () C:\Program Files (x86)\Git
2014-03-27 23:18 - 2014-03-27 23:18 - 15511958 _____ (The Git Development Community ) C:\Users\melonsvk\Downloads\Git-1.9.0-preview20140217.exe
2014-03-27 23:10 - 2014-03-27 23:10 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\TortoiseSVN
2014-03-27 21:40 - 2014-03-27 21:26 - 507055586 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x06 Poslední den (The Last Day) CZ.avi
2014-03-27 21:13 - 2014-03-27 20:56 - 505991948 _____ () C:\Users\melonsvk\Downloads\Červený trpaslík 03x05 Fotostroj času (Timeslides) CZ.avi
2014-03-26 00:10 - 2014-03-26 00:10 - 00001211 _____ () C:\Users\melonsvk\AppData\Local\recently-used.xbel
2014-03-26 00:05 - 2014-03-26 00:05 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\.kde
2014-03-26 00:03 - 2014-03-26 00:00 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\gtk-2.0
2014-03-26 00:02 - 2014-03-26 00:02 - 00001840 _____ () C:\Users\melonsvk\Desktop\privatekeymail.txt
2014-03-26 00:02 - 2014-03-26 00:02 - 00000914 _____ () C:\Users\melonsvk\Desktop\pubkeymail.txt
2014-03-26 00:00 - 2014-03-26 00:00 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\GNU
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\ProgramData\GNU
2014-03-25 23:59 - 2014-03-25 23:59 - 00000000 ____D () C:\Program Files (x86)\GNU
2014-03-25 23:58 - 2014-03-25 23:58 - 29689992 _____ (g10 Code GmbH) C:\Users\melonsvk\Downloads\gpg4win-2.2.1.exe
2014-03-25 23:49 - 2014-03-25 23:49 - 00000000 ____D () C:\gnupg
2014-03-25 23:45 - 2014-03-25 23:45 - 01470222 _____ () C:\Users\melonsvk\Downloads\enigmail-1.6-sm+tb.xpi
2014-03-25 22:03 - 2014-03-25 22:03 - 01327006 _____ () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2.zip
2014-03-25 22:03 - 2014-03-25 22:03 - 00000000 ____D () C:\Users\melonsvk\Downloads\gnupg-w32cli-1.2.2
2014-03-25 20:50 - 2014-03-25 20:49 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral
2014-03-25 20:30 - 2014-03-25 20:29 - 176945434 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.mp4
2014-03-25 20:29 - 2014-03-25 20:28 - 00047390 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x22_jingspiral.zip
2014-03-25 14:44 - 2014-03-25 20:50 - 00026486 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e22.hdtv.x264-killers.srt
2014-03-25 02:16 - 2014-01-29 16:30 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Spotify
2014-03-24 22:04 - 2014-02-06 14:20 - 00000000 ____D () C:\Program Files (x86)\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack
2014-03-24 22:03 - 2014-03-24 22:03 - 13897647 ____T ( ) C:\Users\melonsvk\Downloads\DAEMON.Tools.Pro.Advanced.v5.4.0.0377+Crack.exe72BEA13A
2014-03-24 22:03 - 2014-03-24 22:03 - 03222705 ____T () C:\Users\melonsvk\Downloads\wfuzz-2.0.tgzEE09CEA8
2014-03-24 22:03 - 2013-09-14 17:06 - 00000000 ____D () C:\Windows\AutoKMS
2014-03-24 11:40 - 2013-11-20 22:25 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\TSVNCache
2014-03-24 04:19 - 2013-09-14 16:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-24 04:08 - 2014-03-24 04:08 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-24 04:04 - 2014-03-24 04:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-24 04:03 - 2014-03-24 04:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-23 22:18 - 2014-03-23 22:18 - 00000000 ____D () C:\Users\melonsvk\Downloads\Hutil210_ISO
2014-03-23 22:18 - 2014-02-06 14:25 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\DAEMON Tools Pro
2014-03-23 22:17 - 2014-03-23 22:17 - 01489873 _____ () C:\Users\melonsvk\Downloads\Hutil210_ISO.rar
2014-03-23 22:09 - 2014-03-23 22:09 - 00039459 _____ () C:\ComboFix.txt
2014-03-23 22:09 - 2014-03-23 21:48 - 00000000 ____D () C:\Qoobox
2014-03-23 22:09 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-03-23 22:07 - 2014-03-23 21:47 - 00000000 ____D () C:\Windows\erdnt
2014-03-23 22:04 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-03-23 21:45 - 2014-03-23 21:44 - 05190773 ____R (Swearware) C:\Users\melonsvk\Downloads\ComboFix.exe
2014-03-23 20:56 - 2014-03-23 20:56 - 13696184 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\mseinstall.exe
2014-03-22 22:47 - 2014-03-22 22:47 - 00000000 ____D () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r
2014-03-22 22:46 - 2014-03-22 22:46 - 01524211 _____ () C:\Users\melonsvk\Downloads\Sentry MBA TUT by Talk3r.rar
2014-03-22 22:45 - 2014-03-22 22:45 - 09668186 _____ () C:\Users\melonsvk\Downloads\Hitman v0.98.rar
2014-03-20 02:30 - 2013-09-19 20:08 - 00000000 ____D () C:\Program Files (x86)\Adobe Photoshop CS6 aktivtor
2014-03-20 02:28 - 2014-02-07 02:01 - 00000000 ____D () C:\Program Files (x86)\Cain
2014-03-20 00:36 - 2014-03-20 00:21 - 727791522 _____ () C:\Users\melonsvk\Downloads\Šestý-smysl-CZ.avi.part
2014-03-19 22:25 - 2014-03-19 22:21 - 843019148 _____ () C:\Users\melonsvk\Downloads\Kostka-CZ-dabing---Horor--Mysteriózní,-Kanada,-1997-(nejlepsi-filmy.mypage.cz).avi
2014-03-19 22:21 - 2014-03-19 22:18 - 733603840 _____ () C:\Users\melonsvk\Downloads\FUNNY-GAMES-CZ.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244957184 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E04.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244789248 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E05.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244703232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E06.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244551680 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E02.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244496384 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E01.avi
2014-03-19 22:09 - 2014-03-19 22:05 - 244230144 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S06E03.avi
2014-03-19 21:33 - 2014-03-19 21:29 - 202051517 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.mp4
2014-03-19 21:30 - 2014-03-19 21:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral
2014-03-19 21:29 - 2014-03-19 21:29 - 00050935 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x21_jingspiral.zip
2014-03-19 21:13 - 2014-03-19 21:00 - 254260181 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E05.avi
2014-03-19 21:12 - 2014-03-19 21:00 - 257375497 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E02.avi
2014-03-19 21:12 - 2014-03-19 21:00 - 257031532 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E04.avi
2014-03-19 21:11 - 2014-03-19 21:00 - 258383856 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E01.avi
2014-03-19 21:11 - 2014-03-19 21:00 - 256556662 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E06.avi
2014-03-19 21:11 - 2014-03-19 21:00 - 256421029 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S05E03.avi
2014-03-19 20:06 - 2014-03-19 20:03 - 244867072 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E06.avi
2014-03-19 20:06 - 2014-03-19 20:03 - 244598784 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E05.avi
2014-03-19 20:05 - 2014-03-19 20:03 - 244934656 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E04.avi
2014-03-19 20:05 - 2014-03-19 20:03 - 244621312 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E03.avi
2014-03-19 20:05 - 2014-03-19 20:02 - 244930560 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E02.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 244938752 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E06.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 244375040 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E05.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 224359924 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E03.avi
2014-03-19 19:57 - 2014-03-19 19:51 - 217567969 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E04.avi
2014-03-19 19:56 - 2014-03-19 19:54 - 244447232 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S04E01.avi
2014-03-19 19:56 - 2014-03-19 19:51 - 244669440 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E02.avi
2014-03-19 19:54 - 2014-03-19 19:51 - 244792320 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S03E01.avi
2014-03-19 18:43 - 2014-03-19 18:42 - 244716032 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E06.avi
2014-03-19 18:20 - 2014-03-19 18:18 - 244709888 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E06.avi
2014-03-19 18:19 - 2014-03-19 18:17 - 244872704 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E05.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 245018112 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E03.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 244540416 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E01.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 244504064 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E02.avi
2014-03-19 18:19 - 2014-03-19 18:16 - 244487168 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S02E04.avi
2014-03-19 18:18 - 2014-03-19 18:15 - 244521984 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E05.avi
2014-03-19 18:17 - 2014-03-19 18:15 - 245081600 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E04.avi
2014-03-19 18:08 - 2014-03-19 18:07 - 244969496 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E03.avi
2014-03-19 16:26 - 2014-03-19 15:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 10:27 - 2014-03-19 10:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\melonsvk\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-19 10:27 - 2014-03-19 10:27 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-19 10:27 - 2014-03-19 10:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 23:51 - 2014-03-19 21:31 - 00028918 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E21.HDTV.x264-EXCELLENCE.srt
2014-03-18 13:12 - 2014-03-18 13:12 - 01518833 _____ () C:\Users\melonsvk\Downloads\JTesseract.rar
2014-03-18 13:12 - 2014-03-18 13:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\JTesseract
2014-03-18 02:59 - 2014-02-18 04:14 - 00003846 _____ () C:\Windows\System32\Tasks\Sleep
2014-03-18 02:34 - 2014-03-18 02:33 - 244938316 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E02.avi
2014-03-18 02:26 - 2014-03-18 02:26 - 245016476 _____ () C:\Users\melonsvk\Downloads\Cerveny-trpaslik-S01E01.avi
2014-03-18 02:10 - 2014-03-18 02:10 - 15802593 _____ () C:\Users\melonsvk\Downloads\WitchdOCtoR.zip
2014-03-18 00:43 - 2014-03-18 00:43 - 00012683 _____ () C:\Users\melonsvk\Desktop\excel_graf.xlsx
2014-03-17 21:21 - 2014-03-17 21:20 - 00000000 ____D () C:\Users\melonsvk\Downloads\securimage
2014-03-17 21:19 - 2014-03-17 21:19 - 07583247 _____ () C:\Users\melonsvk\Downloads\securimage.tar.gz
2014-03-17 11:50 - 2014-02-06 15:56 - 00000348 _____ () C:\Users\melonsvk\rgmnr
2014-03-17 02:36 - 2014-03-17 02:36 - 05061032 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-16 20:37 - 2014-02-20 16:06 - 00000000 ____D () C:\Users\melonsvk\Desktop\print_venezia
2014-03-16 18:42 - 2014-03-16 18:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-16 12:25 - 2014-02-19 21:36 - 00000000 ____D () C:\ProgramData\VMware
2014-03-16 12:23 - 2014-02-19 22:10 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\VMware
2014-03-16 12:17 - 2014-01-28 01:56 - 00000000 ____D () C:\Program Files\Sandboxie
2014-03-16 12:17 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\melonsvk\AppData\Roaming\Opera Software
2014-03-16 12:17 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\melonsvk\AppData\Local\Opera Software
2014-03-16 12:17 - 2014-01-04 00:22 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-16 12:15 - 2013-09-08 21:12 - 00000000 ___RD () C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-16 12:05 - 2014-03-16 12:05 - 00112304 _____ () C:\Users\melonsvk\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-15 01:31 - 2014-03-15 01:31 - 00034210 _____ () C:\Users\melonsvk\Downloads\Two-and-a-Half-Men-S11E17(0000233494).srt
2014-03-15 01:16 - 2014-03-15 01:11 - 206756398 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E20.HDTV.x264-EXCELLENCE.mp4
2014-03-15 01:12 - 2014-03-15 01:12 - 00048250 _____ () C:\Users\melonsvk\Downloads\titulky_himym_9x20_jingspiral.zip
2014-03-15 01:10 - 2014-03-15 01:05 - 187560935 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.mp4.part
2014-03-15 01:06 - 2014-03-15 01:06 - 00035165 _____ () C:\Users\melonsvk\Downloads\Two.and.a.Half.Men.S11E16.HDTV.x264-LOL.srt
2014-03-15 00:17 - 2014-03-15 00:06 - 00000000 ____D () C:\Users\melonsvk\Downloads\table_zebra
2014-03-15 00:06 - 2014-03-15 00:06 - 00020695 _____ () C:\Users\melonsvk\Downloads\table_zebra.zip
2014-03-14 16:42 - 2009-07-14 07:08 - 00017088 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-13 00:50 - 2014-03-13 00:40 - 2505515392 _____ () C:\Users\melonsvk\Downloads\Osudovy-dotek---Butterfly-Effect-The-2004_CZ_Dabing.mkv
2014-03-13 00:39 - 2014-03-13 00:35 - 786983786 _____ () C:\Users\melonsvk\Downloads\Bad-Grandpa-2013-UNRATED-720p-WEB-DL-700MB-Ganool.mkv
2014-03-13 00:36 - 2014-03-13 00:36 - 00097767 _____ () C:\Users\melonsvk\Downloads\Jackass-Presents-Bad-Grandpa(0000229754).srt
2014-03-12 22:48 - 2014-03-12 22:37 - 175207650 _____ () C:\Users\melonsvk\Downloads\Simpsonovi-24x11-Stridani-porucniku.avi.part
2014-03-12 15:30 - 2014-03-12 15:30 - 00000000 ____D () C:\Users\melonsvk\Downloads\Separ - Pirat (2014)
2014-03-12 15:27 - 2014-03-12 15:26 - 124680185 _____ () C:\Users\melonsvk\Downloads\Separ - Pirat (2014).rar
2014-03-12 04:47 - 2013-09-08 21:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 04:47 - 2013-09-08 21:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 04:47 - 2013-09-08 21:24 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 01:19 - 2014-03-15 01:55 - 00027570 _____ () C:\Users\melonsvk\Downloads\how.i.met.your.mother.s09e20.hdtv.x264-excellence.cz.srt
2014-03-11 09:52 - 2013-09-27 10:53 - 00133928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NisDrvWFP.sys
2014-03-10 18:12 - 2014-03-10 18:12 - 00674145 _____ () C:\Users\melonsvk\Downloads\Sentry1.0.zip
2014-03-10 16:04 - 2014-03-10 16:03 - 176830440 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x09_Konec-sveta_za_dvermi_XVID_CZ.avi
2014-03-10 02:17 - 2014-03-10 02:16 - 267405256 _____ () C:\Users\melonsvk\Downloads\02x01-Mala-Velka-Britanie.avi
2014-03-10 02:17 - 2014-03-10 02:16 - 254634802 _____ () C:\Users\melonsvk\Downloads\02x02-Mala-Velka-Britanie.avi
2014-03-08 21:55 - 2014-03-08 21:55 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpBB-3.0.12
2014-03-08 21:54 - 2014-03-08 21:54 - 02487985 _____ () C:\Users\melonsvk\Downloads\phpBB-3.0.12.zip
2014-03-08 21:15 - 2014-03-08 21:15 - 00000000 ____D () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages
2014-03-08 21:15 - 2014-03-08 21:14 - 08533786 _____ () C:\Users\melonsvk\Downloads\phpMyAdmin-4.1.9-all-languages.zip
2014-03-08 20:59 - 2014-03-08 20:59 - 01021432 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\NDP451-KB2859818-Web.exe
2014-03-08 20:54 - 2014-03-08 20:54 - 00001335 _____ () C:\Users\melonsvk\Downloads\simple-user-auth-1.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00002388 _____ () C:\Users\melonsvk\Downloads\loginsimple.rar
2014-03-08 20:50 - 2014-03-08 20:50 - 00000000 ____D () C:\Users\melonsvk\Downloads\loginsimple
2014-03-08 19:32 - 2014-03-08 19:32 - 193026000 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x07_Den_kdy_se_ochladila_Zeme_XVID_CZ.avi
2014-03-08 18:12 - 2014-03-08 18:12 - 00000367 _____ () C:\Users\melonsvk\Downloads\zaheslovani-stranky.zip
2014-03-08 18:12 - 2014-03-08 18:12 - 00000000 ____D () C:\Users\melonsvk\Downloads\zaheslovani-stranky
2014-03-08 01:55 - 2014-03-08 01:53 - 842123264 _____ () C:\Users\melonsvk\Downloads\DISTURBIA---CZ-dvdrip.avi
2014-03-08 01:55 - 2014-01-01 21:36 - 00000000 ____D () C:\Program Files (x86)\winhotspot
2014-03-08 01:46 - 2014-03-08 01:46 - 119015516 _____ () C:\Users\melonsvk\Downloads\Je-super-mit-starsiho-brachu---sexincest.mp4
2014-03-08 01:46 - 2014-03-08 01:44 - 705609262 _____ () C:\Users\melonsvk\Downloads\CPP-Rebecca-Linares-Crew-2013-CZECH-TEEN-PORN-DVDRIP-HD-SEX-XXX-PORNO-CESKY-MOBILE-EXCLUSIVE-BIG-BOOBS-TITS-YOUNG-STREET-AMATEUR-HQ.mp4
2014-03-08 01:43 - 2014-03-08 01:39 - 1939795548 _____ () C:\Users\melonsvk\Downloads\Disturbia.2007.1080p.Bluray.x264.anoXmous.mp4
2014-03-07 20:29 - 2014-03-07 20:28 - 181312244 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x22_Vyroci_ve_vlaku_XVID_CZ.avi
2014-03-07 18:10 - 2014-03-07 18:10 - 00042667 _____ () C:\Users\melonsvk\Downloads\DenyHosts-2.6.tar.gz
2014-03-07 14:39 - 2014-03-07 14:33 - 1707004246 _____ () C:\Users\melonsvk\Downloads\Jen_na_sex__2008.avi.part
2014-03-07 14:05 - 2014-03-07 14:04 - 173180576 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x21_Saga_o_Carlovi_XVID_CZ.avi
2014-03-07 13:49 - 2014-03-07 13:49 - 178313974 _____ () C:\Users\melonsvk\Downloads\Simpsonovi_24x20_Falesny_virtuos_XVID_CZ.avi
2014-03-07 01:26 - 2014-03-07 01:24 - 1551390720 _____ () C:\Users\melonsvk\Downloads\V-Bruggach-CZ-dabing.avi
2014-03-06 17:02 - 2014-03-06 17:02 - 00000000 ____D () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz
2014-03-06 17:02 - 2014-03-06 17:01 - 08282113 _____ () C:\Users\melonsvk\Downloads\filmey-com-connectify-pro-7-3-2-30404-pres-MultiLoad.cz.rar
2014-03-05 01:03 - 2014-01-31 01:38 - 00000000 ___RD () C:\Users\melonsvk\Virtual Machines
2014-03-05 00:38 - 2014-03-05 00:37 - 191138841 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.mp4
2014-03-05 00:37 - 2014-03-05 00:37 - 00031222 _____ () C:\Users\melonsvk\Downloads\How.I.Met.Your.Mother.S09E19.HDTV.x264-EXCELLENCE.srt
2014-03-04 19:19 - 2014-03-04 19:16 - 617377795 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140217.mp4
2014-03-04 19:18 - 2014-03-04 19:17 - 444545299 _____ () C:\Users\melonsvk\Downloads\MB104-D3-20140224.mp4
2014-03-04 12:43 - 2014-03-17 21:46 - 00001743 _____ () C:\Users\melonsvk\Desktop\id_rsa
2014-03-03 23:38 - 2014-03-03 23:33 - 981513568 _____ () C:\Users\melonsvk\Downloads\Proklety-Ostrov-cz-dabing.avi
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-03-03 23:03 - 2014-03-03 23:03 - 00647872 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCT2.OCX
2014-03-03 18:53 - 2014-03-03 22:54 - 01071088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-03-03 18:53 - 2014-03-03 18:53 - 01071088 _____ (Microsoft Corporation) C:\Users\melonsvk\Downloads\MSCOMCTL.OCX
2014-03-03 18:51 - 2014-03-03 18:51 - 00000000 ____D () C:\Users\melonsvk\Downloads\C-Force

Some content of TEMP:
====================
C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 02:15

==================== End Of Log ============================

Re: Pomalý boot + problém s diakritikou

Napsal: 02 dub 2014 18:23
od vyosek
:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444856 2011-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1039872 2011-09-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mnctwgbfoSrv] - C:\Windows\inf\mnctwgbfo.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [winhotspot] - C:\Program Files (x86)\winhotspot\1F70.tmp [158208 2014-01-20] ()
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify Web Helper] - C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify] - C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe (Microsoft)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54868F0C7ACCE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {1948D768-6063-402E-B914-67EE2407B7A6} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

FF Extension: HttpFox - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2014-03-31]
FF Extension: ReloadEvery - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-13]

CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

2014-04-01 22:06 - 2014-04-01 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:45 - 2014-04-02 01:56 - 00032069 _____ () C:\zoek-results.log
2014-04-01 21:43 - 2014-04-01 22:04 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe

C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll
C:\Windows\inf\mnctwgbfo.vbe
C:\Users\melonsvk\AppData\Roaming\Spotify

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt

Re: Pomalý boot + problém s diakritikou

Napsal: 02 dub 2014 21:50
od melonSVK
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by melonsvk at 2014-04-02 22:46:49 Run:1
Running from C:\Users\melonsvk\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444856 2011-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1039872 2011-09-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mnctwgbfoSrv] - C:\Windows\inf\mnctwgbfo.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [winhotspot] - C:\Program Files (x86)\winhotspot\1F70.tmp [158208 2014-01-20] ()
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify Web Helper] - C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Spotify] - C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-29] (Spotify Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe (Microsoft)
Startup: C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE54868F0C7ACCE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {1948D768-6063-402E-B914-67EE2407B7A6} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

FF Extension: HttpFox - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2014-03-31]
FF Extension: ReloadEvery - C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-13]

CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Users\melonsvk\AppData\Local\Temp\Rar$EX75.616\pcwiz_x64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

2014-04-01 22:06 - 2014-04-01 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-01 21:45 - 2014-04-02 01:56 - 00032069 _____ () C:\zoek-results.log
2014-04-01 21:43 - 2014-04-01 22:04 - 00000000 ____D () C:\zoek_backup
2014-04-01 21:43 - 2014-04-01 21:43 - 00000000 ____D () C:\Users\melonsvk\Desktop\zoek
2014-04-01 21:42 - 2014-04-01 21:42 - 04095370 _____ () C:\Users\melonsvk\Desktop\zoek.zip
2014-04-01 19:02 - 2014-04-01 19:02 - 01426178 _____ () C:\Users\melonsvk\Downloads\adwcleaner.exe
2014-03-30 19:33 - 2014-03-30 19:33 - 00935175 _____ () C:\Users\melonsvk\Downloads\RSITx64.exe

C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll
C:\Windows\inf\mnctwgbfo.vbe
C:\Users\melonsvk\AppData\Roaming\Spotify

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mnctwgbfoSrv => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveSync => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\winhotspot => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify Web Helper => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Pro Agent => Value deleted successfully.
HKU\S-1-5-21-630410970-3409253043-4037834172-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firewall.exe.tmp => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP => Value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1948D768-6063-402E-B914-67EE2407B7A6} => Key deleted successfully.
HKCR\CLSID\{1948D768-6063-402E-B914-67EE2407B7A6} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Mozilla\Firefox\Profiles\uopr2aj9.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi => Moved successfully.
HKCU\SOFTWARE\Google\Chrome\Extensions\apdfllckaahabafndbhieahigkjlhalf => Key deleted successfully.
C:\Users\melonsvk\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx => Moved successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
catchme => Service deleted successfully.
cpuz135 => Service deleted successfully.
vmci => Service deleted successfully.
VMnetAdapter => Service deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\melonsvk\Desktop\zoek => Moved successfully.
C:\Users\melonsvk\Desktop\zoek.zip => Moved successfully.
C:\Users\melonsvk\Downloads\adwcleaner.exe => Moved successfully.
C:\Users\melonsvk\Downloads\RSITx64.exe => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\Checkupdate.exe => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\Foxit Reader Updater.exe => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\gcapi_dll.dll => Moved successfully.
C:\Users\melonsvk\AppData\Local\Temp\gtapi_signed.dll => Moved successfully.
C:\Windows\inf\mnctwgbfo.vbe => Moved successfully.

"C:\Users\melonsvk\AppData\Roaming\Spotify" directory move:

C:\Users\melonsvk\AppData\Roaming\Spotify\inst_ver.dat => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\prefs => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\running => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\spotify.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\SpotifyLauncher.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\watchdog.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\ad.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\guistate => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\local-files.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\prefs => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\social_manager.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\track-player.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\watch-sources.bnk => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\suggest\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\suggest\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search-single\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search-single\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\search\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\radio\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\radio\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\profile\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\profile\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\playlist-header\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\playlist-header\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\onboarding-popup\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\onboarding-popup\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\notification-center\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\notification-center\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\messages\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\messages\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\feed\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\feed\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\discover\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\discover\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\browse\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\browse\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\artist\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\artist\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\album\Cookies => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Users\11128198112-user\Apps\album\Cookies-journal => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\apps.zip => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\cef.pak => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\d3dcompiler_43.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\d3dcompiler_46.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\devtools_resources.pak => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\icudt.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\libcef.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\libEGL.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\libGLESv2.dll => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\resources.zip => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyHelper.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe => Moved successfully.
C:\Users\melonsvk\AppData\Roaming\Spotify\Data\locales\en-US.pak => Moved successfully.
Could not move "C:\Users\melonsvk\AppData\Roaming\Spotify" directory. => Scheduled to move on reboot.

C:\Windows\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000Core.job => Moved successfully.
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-630410970-3409253043-4037834172-1000UA.job => Moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-04-02 22:51:42)<=

C:\Users\melonsvk\AppData\Roaming\Spotify => Moved successfully.

==== End of Fixlog ====

Re: Pomalý boot + problém s diakritikou

Napsal: 03 dub 2014 09:10
od vyosek
¨Jak se chova PC??

Re: Pomalý boot + problém s diakritikou

Napsal: 03 dub 2014 13:14
od melonSVK
Zatiaľ to funguje všetko. Dúfam že sa to už neprejaví :idea: Ďakujem veľmi krásne.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz