VIRY.CZ

Zdravím prosím o kontrolu logu. počítač je pomalý, asi tam mám nějaké svinstvo

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014
Ran by Pepik (administrator) on PEPIK-PC on 11-05-2014 12:21:27
Running from C:\Users\Pepik\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7546072 2014-03-10] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
HKLM-x32\...\Run: [mncgkdxSrv] => C:\Windows\SysWOW64\mncgkdx.vbe [7670 2014-03-05] ()
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [DApp] => C:\Program Files\PCDApp\start.vbs [178 2014-04-10] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-06] (AVAST Software)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-10] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-05-02] (Google Inc.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Facebook Update] => C:\Users\Pepik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-27] (Facebook Inc.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-27] (Electronic Arts)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1825984 2014-04-24] (Valve Corporation)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6503704 2013-12-05] (SUPERAntiSpyware)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\CurrentVersion\Windows: [Load] C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe <===== ATTENTION
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {833ec002-a04a-11e2-8da3-c86000792557} - E:\setup.exe
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {b50e24b1-9e94-11e2-8d1d-c86000792557} - E:\autorun.exe
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {ffb7cf52-5439-11e2-ba2b-c86000792557} - E:\autorun.exe
AppInit_DLLs: c:\progra~3\bitguard\2.7.1769.27\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll => c:\progra~3\bitguard\2.7.1769.27\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll File Not Found
AppInit_DLLs: c:\windows\system32\guard64.dll => c:\windows\system32\guard64.dll File Not Found
AppInit_DLLs-x32: c:\progra~2\supporter\supporter.dll => "c:\progra~2\supporter\supporter.dll" File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/search?q={searchT ... d=ie7&rlz=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKCU - DefaultScope {7D354AC1-2FB0-4D23-B867-21627CCD5C62} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_5
SearchScopes: HKCU - {1B2E87B0-8DAB-45B5-A414-329D1D26476F} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... ckSearch_5
SearchScopes: HKCU - {1D86703D-3DED-42B4-8BD2-D78B29049633} URL = http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5
SearchScopes: HKCU - {223F95F3-EB7B-4880-8ADC-EA118F010431} URL = http://websearch.ask.com/redirect?clien ... 1263DBD0BD
SearchScopes: HKCU - {2B1758B6-7B32-44A0-A3A9-52A665933792} URL = http://searchou.com/?q={searchTerms}&id ... 2557&r=332
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {4DEF944F-7C67-44FB-9EF5-B067D2DFC33E} URL = http://encyklopedie.seznam.cz/search?q= ... ckSearch_5
SearchScopes: HKCU - {799201C7-2B5F-465C-8593-3881227F3BC1} URL = http://tv.seznam.cz/hledej?w={searchTer ... ckSearch_5
SearchScopes: HKCU - {7D354AC1-2FB0-4D23-B867-21627CCD5C62} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_5
SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://us.search.yahoo.com/search?p={se ... chr-comodo
SearchScopes: HKCU - {90D8F416-9C5F-4F82-9CD1-F4D8B5CD9963} URL = http://www.mapy.cz/?query={searchTerms} ... ckSearch_5
SearchScopes: HKCU - {9ED6DD98-279E-442D-90E1-40CD40B341B8} URL = http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5
SearchScopes: HKCU - {9F231022-D4FF-4673-939D-C3CF86BA0C32} URL = http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5
SearchScopes: HKCU - {D5DC694A-17A9-4AC6-B0B6-DB858C9795DA} URL = http://www.novinky.cz/hledej?w={searchT ... ckSearch_5
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: CostMin - {7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} - C:\Program Files (x86)\CostMin\BV.x64.dll ()
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: CostMin - {7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} - C:\Program Files (x86)\CostMin\BV.dll ()
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 94.229.92.40 94.229.92.30
Tcpip\..\Interfaces\{F181256A-5E09-4E55-9D74-4F9891AC0F3B}: [NameServer]8.26.56.26,156.154.70.22

FireFox:
========
FF ProfilePath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202
FF user.js: detected! => C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\user.js
FF DefaultSearchEngine: Yahoo
FF Homepage: www.seznam.cz
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @ogplanet.com/npOGPPlugin - C:\Windows\system32\npOGPPlugin.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Pepik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Users\Pepik\AppData\Roaming\Flatcast\NpFv522.dll (1 mal 1 Software GmbH)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv522.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Pepik\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: CostMin - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\mlcxx2h8mx@mhjsnzjfxa.org [2014-04-30]
FF Extension: Seznam lištička - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-05-02]
FF Extension: Kinotip! Finder and Dowloander! - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\sracka@pica.cz.xpi [2014-04-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-05-10]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-06]
FF HKCU\...\Firefox\Extensions: [mlyrics@pnyj.net] - C:\Program Files (x86)\M-Lyrics\FF\
FF Extension: M-Lyrics - C:\Program Files (x86)\M-Lyrics\FF\ []

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-11]
CHR Extension: (Disk Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-11]
CHR Extension: (YouTube) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-11]
CHR Extension: (Vyhledávání Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-11]
CHR Extension: (avast! Online Security) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-11]
CHR Extension: (Skype Click to Call) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-08-19]
CHR Extension: (Peněženka Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-07]
CHR Extension: (Gmail) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-11]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [ogoocamnhedgmkaapmjkkioohkedbecm] - C:\Program Files (x86)\M-Lyrics\Chrome.crx [2014-04-11]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-11] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-06] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [544768 2009-08-24] (mst software GmbH, Germany)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11904 2000-01-01] (Advanced Micro Devices Inc.)
S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-06] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-06] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-06] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2014-02-06] ()
S3 EagleX64; No ImagePath
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2013-05-25] (Highresolution Enterprises [www.highrez.co.uk])
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2014-02-06] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15712 2013-05-06] ()
S3 MSICDSetup; \??\D:\CDriver64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-11 12:21 - 2014-05-11 12:21 - 00021854 _____ () C:\Users\Pepik\Desktop\FRST.txt
2014-05-11 12:20 - 2014-05-11 12:21 - 00000000 ____D () C:\FRST
2014-05-11 12:20 - 2014-05-11 12:20 - 00112640 _____ (forum.viry.cz) C:\Users\Pepik\Desktop\FRSTLauncher.exe
2014-05-11 12:19 - 2014-05-11 12:19 - 02066432 _____ (Farbar) C:\Users\Pepik\Desktop\FRST64.exe
2014-05-11 12:17 - 2014-05-11 12:17 - 00015327 _____ () C:\Users\Pepik\Desktop\LM.bat
2014-05-11 12:14 - 2014-05-11 12:17 - 00029696 _____ () C:\Users\Pepik\AppData\Local\MSGBOX.EXE
2014-05-11 11:25 - 2014-05-11 12:21 - 754253140 _____ () C:\Users\Pepik\Desktop\Do-útoku-(Over-the-Top,-1987,-český-dabing).mpg.part
2014-05-10 17:45 - 2014-05-10 17:45 - 00001036 _____ () C:\Users\Public\Desktop\Hitman Absolution - Professional Edition.lnk
2014-05-10 17:45 - 2014-05-10 17:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX
2014-05-10 16:40 - 2014-02-16 03:03 - 951468032 _____ () C:\Users\Pepik\Desktop\Hitman Absolution - Professional Edition (2012).iso
2014-05-10 15:53 - 2014-05-10 15:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 09:11 - 2014-05-09 09:11 - 00000003 _____ () C:\Users\Pepik\stut
2014-05-09 09:09 - 2014-05-11 12:01 - 00000510 _____ () C:\Users\Pepik\rgut
2014-05-09 09:07 - 2014-05-11 11:59 - 00000280 _____ () C:\Windows\setupact.log
2014-05-09 09:07 - 2014-05-09 09:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-09 09:06 - 2014-05-09 09:06 - 00000328 _____ () C:\Windows\PFRO.log
2014-05-06 19:38 - 2014-05-06 19:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 14:51 - 2014-05-06 14:51 - 00001824 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-05-06 14:51 - 2014-05-06 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-05-06 14:50 - 2014-05-11 09:25 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-06 14:50 - 2014-05-06 14:50 - 00001972 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\AVAST Software
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-05-06 14:49 - 2014-05-06 14:49 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-06 14:49 - 2014-05-06 14:49 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-06 14:49 - 2014-05-06 14:49 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-06 14:47 - 2014-05-06 14:48 - 28876264 _____ (SUPERAntiSpyware) C:\Users\Pepik\Downloads\SUPERAntiSpyware.exe
2014-05-06 14:42 - 2014-05-06 14:45 - 88882192 _____ (AVAST Software) C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe
2014-05-06 14:26 - 2014-05-06 14:26 - 00030126 _____ () C:\Users\Pepik\Documents\cc_20140506_142605.reg
2014-05-06 14:21 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 14:21 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-03 22:48 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 22:48 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 22:48 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 22:48 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 22:14 - 2014-05-02 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman Arkham Origins Cold Cold Heart
2014-05-02 16:07 - 2014-05-02 16:07 - 00000000 ____D () C:\Users\Pepik\Documents\Activision
2014-05-02 16:06 - 2014-05-02 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Amazing Spider-Man 2
2014-05-02 14:43 - 2014-05-02 14:43 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-05-02 13:58 - 2014-05-02 14:37 - 00000000 ____D () C:\Program Files (x86)\Batman Arkham Origins
2014-04-30 18:41 - 2014-04-30 18:43 - 00000000 ____D () C:\Users\Pepik\Documents\Cubase Projects
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\VST3 Presets
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\ProgramData\Steinberg
2014-04-30 10:25 - 2014-05-09 09:10 - 00000000 ____D () C:\Program Files (x86)\Supporter
2014-04-30 10:25 - 2014-05-08 10:25 - 00000000 ____D () C:\Program Files\PCDApp
2014-04-30 10:25 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-04-30 10:24 - 2014-05-08 11:55 - 00000000 ____D () C:\ProgramData\CostMin
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Packages
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\ProgramData\d30e5b060b0deb7e
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Program Files (x86)\CostMin
2014-04-26 20:50 - 2014-04-26 22:00 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlvtoConverter
2014-04-26 20:50 - 2014-04-26 20:50 - 00000000 ____D () C:\Users\Pepik\AppData\Local\FlvtoYoutubeDownloader
2014-04-26 20:48 - 2014-04-26 20:48 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader
2014-04-26 20:45 - 2014-04-26 20:48 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader
2014-04-25 20:32 - 2014-04-25 20:32 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2014-04-25 20:32 - 2013-03-12 12:47 - 01431552 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\rewire.dll
2014-04-24 19:52 - 2014-04-30 18:03 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Steinberg
2014-04-24 13:45 - 2014-04-30 10:28 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2014-04-24 13:43 - 2014-04-25 20:32 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics
2014-04-24 13:43 - 2014-04-25 20:02 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\Documents\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlowStone
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files\Image-Line
2014-04-24 13:39 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieUserList
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieSiteList
2014-04-23 22:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 22:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-23 22:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-23 22:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 22:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-23 22:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-23 22:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-23 22:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-23 22:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-23 22:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 22:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 22:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 22:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 22:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-23 22:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-23 22:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-23 22:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-23 22:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 22:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 22:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-23 22:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-23 22:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 22:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-23 22:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-23 22:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-23 22:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-23 22:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-23 22:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-23 22:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-23 22:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-23 22:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 22:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-23 22:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-23 22:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-23 22:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-23 22:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-23 22:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-23 22:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-23 22:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-23 22:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-23 22:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-23 22:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-23 22:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-23 22:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\Windows\SysWOW64\bitstreams
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sleeping dogs cz iso
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 3.5.9 CZ pln verze!!! - by kopiha
2014-04-23 12:28 - 2014-03-05 22:19 - 00007670 ____S () C:\Windows\SysWOW64\mncgkdx.vbe
2014-04-23 12:28 - 2013-12-10 00:30 - 10236928 ____S () C:\Windows\SysWOW64\acumncgkdx.exe
2014-04-23 12:28 - 2013-10-26 20:30 - 01704448 ____S (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00972814 ____S () C:\Windows\SysWOW64\dcgmncgkdx.exe
2014-04-23 12:28 - 2013-10-26 20:30 - 00538126 ____S () C:\Windows\SysWOW64\libcurl-4.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00364544 ____S (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00192512 ____S () C:\Windows\SysWOW64\libidn-11.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00171008 ____S (The libssh2 library, http://www.libssh2.org/) C:\Windows\SysWOW64\libssh2.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00133632 ____S () C:\Windows\SysWOW64\librtmp.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00044727 ____S () C:\Windows\SysWOW64\diablo130302.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00043810 ____S () C:\Windows\SysWOW64\poclbm130302.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00030802 ____S () C:\Windows\SysWOW64\diakgcn121016.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00023825 ____S () C:\Windows\SysWOW64\scrypt130511.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00013062 ____S () C:\Windows\SysWOW64\phatk121016.cl
2014-04-23 12:28 - 2013-07-18 16:06 - 00187904 ____S () C:\Windows\SysWOW64\lcpmncgkdx.exe
2014-04-23 12:28 - 2013-06-12 15:15 - 00119888 ____S (Open Source Software community LGPL) C:\Windows\SysWOW64\pthreadGC2.dll
2014-04-23 12:28 - 2013-06-12 15:15 - 00100864 ____S () C:\Windows\SysWOW64\zlib1.dll
2014-04-23 12:28 - 2012-09-25 23:46 - 00472424 ____S (NVIDIA Corporation) C:\Windows\SysWOW64\cudart32_50_35.dll
2014-04-23 12:28 - 2012-05-27 01:36 - 00055808 ____S (Open Source Software community LGPL) C:\Windows\SysWOW64\pthreadVC2.dll
2014-04-21 16:20 - 2014-05-08 10:18 - 00000000 ____D () C:\Users\Pepik\Desktop\sw-the-force-unleashed-2-v1.0-trainer-plus5
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\Documents\LucasArts
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\AppData\Local\LucasArts
2014-04-19 13:35 - 2014-05-08 17:27 - 00000000 ____D () C:\Users\Pepik\Desktop\psp program
2014-04-17 14:30 - 2014-04-17 14:30 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Criterion Games
2014-04-15 11:43 - 2014-04-15 11:46 - 00000000 ____D () C:\Users\Pepik\AppData\Local\GameSpy
2014-04-15 11:42 - 2014-04-15 11:42 - 00000093 _____ () C:\Users\Pepik\AppData\Local\fusioncache.dat
2014-04-14 19:25 - 2014-04-14 19:25 - 00669184 _____ () C:\Windows\SysWOW64\pbsvc.exe
2014-04-14 16:15 - 2014-04-14 16:15 - 00000000 ____D () C:\Users\Pepik\Documents\Thief

==================== One Month Modified Files and Folders =======

2014-05-11 12:22 - 2013-02-10 13:20 - 00000000 ____D () C:\Users\Pepik\AppData\Local\PMB Files
2014-05-11 12:21 - 2014-05-11 12:21 - 00021854 _____ () C:\Users\Pepik\Desktop\FRST.txt
2014-05-11 12:21 - 2014-05-11 12:20 - 00000000 ____D () C:\FRST
2014-05-11 12:21 - 2014-05-11 11:25 - 754253140 _____ () C:\Users\Pepik\Desktop\Do-útoku-(Over-the-Top,-1987,-český-dabing).mpg.part
2014-05-11 12:20 - 2014-05-11 12:20 - 00112640 _____ (forum.viry.cz) C:\Users\Pepik\Desktop\FRSTLauncher.exe
2014-05-11 12:19 - 2014-05-11 12:19 - 02066432 _____ (Farbar) C:\Users\Pepik\Desktop\FRST64.exe
2014-05-11 12:19 - 2013-01-01 19:59 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-11 12:18 - 2013-01-11 15:33 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Skype
2014-05-11 12:17 - 2014-05-11 12:17 - 00015327 _____ () C:\Users\Pepik\Desktop\LM.bat
2014-05-11 12:17 - 2014-05-11 12:14 - 00029696 _____ () C:\Users\Pepik\AppData\Local\MSGBOX.EXE
2014-05-11 12:08 - 2009-07-14 06:45 - 00021312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-11 12:08 - 2009-07-14 06:45 - 00021312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-11 12:05 - 2013-03-27 22:37 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Seznam.cz
2014-05-11 12:04 - 2013-01-01 18:35 - 01273179 _____ () C:\Windows\WindowsUpdate.log
2014-05-11 12:02 - 2013-10-13 09:22 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-11 12:01 - 2014-05-09 09:09 - 00000510 _____ () C:\Users\Pepik\rgut
2014-05-11 12:00 - 2013-10-25 14:32 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-11 12:00 - 2013-09-10 18:46 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-11 12:00 - 2013-01-01 19:59 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-11 11:59 - 2014-05-09 09:07 - 00000280 _____ () C:\Windows\setupact.log
2014-05-11 11:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-11 09:54 - 2013-07-27 09:49 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4270906320-3087370871-1829774614-1000UA.job
2014-05-11 09:54 - 2013-07-27 09:49 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4270906320-3087370871-1829774614-1000Core.job
2014-05-11 09:29 - 2013-01-04 18:29 - 00000000 ____D () C:\ProgramData\Origin
2014-05-11 09:25 - 2014-05-06 14:50 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-11 09:22 - 2013-07-26 16:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 23:18 - 2014-03-03 22:54 - 00001112 _____ () C:\Users\Pepik\AppData\Local\MRDownloader.nast
2014-05-10 23:18 - 2013-06-06 21:39 - 00000000 ____D () C:\Users\Pepik\Desktop\pokemon 1996
2014-05-10 17:45 - 2014-05-10 17:45 - 00001036 _____ () C:\Users\Public\Desktop\Hitman Absolution - Professional Edition.lnk
2014-05-10 17:45 - 2014-05-10 17:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX
2014-05-10 15:53 - 2014-05-10 15:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 09:11 - 2014-05-09 09:11 - 00000003 _____ () C:\Users\Pepik\stut
2014-05-09 09:11 - 2013-01-01 19:05 - 00000000 ____D () C:\Users\Pepik
2014-05-09 09:10 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files (x86)\Supporter
2014-05-09 09:07 - 2014-05-09 09:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-09 09:06 - 2014-05-09 09:06 - 00000328 _____ () C:\Windows\PFRO.log
2014-05-08 17:27 - 2014-04-19 13:35 - 00000000 ____D () C:\Users\Pepik\Desktop\psp program
2014-05-08 12:17 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-08 12:15 - 2013-09-19 16:25 - 00000000 ____D () C:\HRY
2014-05-08 11:55 - 2014-04-30 10:24 - 00000000 ____D () C:\ProgramData\CostMin
2014-05-08 11:31 - 2013-07-14 20:22 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\update_tc
2014-05-08 11:21 - 2013-09-21 15:15 - 00000000 ____D () C:\Users\Pepik\AppData\Local\avgchrome
2014-05-08 11:18 - 2013-05-12 15:04 - 00000000 ____D () C:\Program Files (x86)\M-Lyrics
2014-05-08 11:01 - 2014-01-24 23:10 - 00000000 ____D () C:\Users\Pepik\AppData\Local\genienext
2014-05-08 11:01 - 2013-06-24 20:04 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\StarTrekPC
2014-05-08 11:01 - 2013-06-13 20:41 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\File Scout
2014-05-08 11:01 - 2013-03-29 11:28 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Ashampoo
2014-05-08 10:25 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files\PCDApp
2014-05-08 10:18 - 2014-04-21 16:20 - 00000000 ____D () C:\Users\Pepik\Desktop\sw-the-force-unleashed-2-v1.0-trainer-plus5
2014-05-07 21:24 - 2013-01-06 23:26 - 00000000 ____D () C:\Users\Pepik\Documents\My Games
2014-05-06 19:38 - 2014-05-06 19:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 14:51 - 2014-05-06 14:51 - 00001824 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-05-06 14:51 - 2014-05-06 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-05-06 14:51 - 2013-01-17 14:29 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-05-06 14:50 - 2014-05-06 14:50 - 00001972 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\AVAST Software
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-05-06 14:49 - 2014-05-06 14:49 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-06 14:49 - 2014-05-06 14:49 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-06 14:49 - 2014-05-06 14:49 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-06 14:48 - 2014-05-06 14:47 - 28876264 _____ (SUPERAntiSpyware) C:\Users\Pepik\Downloads\SUPERAntiSpyware.exe
2014-05-06 14:48 - 2013-01-01 21:10 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-06 14:45 - 2014-05-06 14:42 - 88882192 _____ (AVAST Software) C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe
2014-05-06 14:26 - 2014-05-06 14:26 - 00030126 _____ () C:\Users\Pepik\Documents\cc_20140506_142605.reg
2014-05-05 16:32 - 2014-03-03 22:56 - 00013100 _____ () C:\Users\Pepik\AppData\Local\MRDownloader.err
2014-05-05 07:55 - 2010-11-21 11:27 - 00677706 _____ () C:\Windows\system32\perfh005.dat
2014-05-05 07:55 - 2010-11-21 11:27 - 00146624 _____ () C:\Windows\system32\perfc005.dat
2014-05-05 07:55 - 2009-07-14 07:13 - 01612368 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-02 22:14 - 2014-05-02 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman Arkham Origins Cold Cold Heart
2014-05-02 16:07 - 2014-05-02 16:07 - 00000000 ____D () C:\Users\Pepik\Documents\Activision
2014-05-02 16:07 - 2013-03-13 19:31 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Activision
2014-05-02 16:06 - 2014-05-02 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Amazing Spider-Man 2
2014-05-02 14:45 - 2013-03-25 22:07 - 00000000 ____D () C:\Users\Pepik\Desktop\prokramy 2
2014-05-02 14:43 - 2014-05-02 14:43 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-05-02 14:37 - 2014-05-02 13:58 - 00000000 ____D () C:\Program Files (x86)\Batman Arkham Origins
2014-05-02 13:55 - 2013-01-01 19:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-30 18:43 - 2014-04-30 18:41 - 00000000 ____D () C:\Users\Pepik\Documents\Cubase Projects
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\VST3 Presets
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\ProgramData\Steinberg
2014-04-30 18:03 - 2014-04-24 19:52 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Steinberg
2014-04-30 10:28 - 2014-04-24 13:45 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2014-04-30 10:25 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Packages
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\ProgramData\d30e5b060b0deb7e
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Program Files (x86)\CostMin
2014-04-30 10:24 - 2013-01-01 19:59 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Google
2014-04-30 08:24 - 2013-01-01 20:12 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-29 16:01 - 2014-05-03 22:48 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-03 22:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-03 22:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-03 22:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 14:02 - 2013-10-13 09:22 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 14:02 - 2013-01-01 19:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 14:02 - 2013-01-01 19:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-28 10:34 - 2014-03-26 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-26 22:00 - 2014-04-26 20:50 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlvtoConverter
2014-04-26 20:50 - 2014-04-26 20:50 - 00000000 ____D () C:\Users\Pepik\AppData\Local\FlvtoYoutubeDownloader
2014-04-26 20:48 - 2014-04-26 20:48 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader
2014-04-26 20:48 - 2014-04-26 20:45 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader
2014-04-26 17:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-25 20:32 - 2014-04-25 20:32 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2014-04-25 20:32 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics
2014-04-25 20:02 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\Documents\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlowStone
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files\Image-Line
2014-04-24 13:43 - 2014-04-24 13:39 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieUserList
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieSiteList
2014-04-23 22:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-23 20:46 - 2013-02-25 18:33 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-04-23 20:35 - 2013-02-25 18:23 - 00282512 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-04-23 15:53 - 2013-09-10 15:54 - 00000000 ____D () C:\Users\Pepik\Documents\NHL09
2014-04-23 12:36 - 2013-01-01 19:05 - 00000000 ___RD () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 12:35 - 2013-02-19 16:30 - 00001043 _____ () C:\Users\Pepik\Desktop\KMPlayer.lnk
2014-04-23 12:35 - 2013-01-03 19:52 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\OpenCandy
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\Windows\SysWOW64\bitstreams
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sleeping dogs cz iso
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 3.5.9 CZ pln verze!!! - by kopiha
2014-04-23 11:33 - 2013-01-19 13:21 - 00944400 _____ () C:\Users\Pepik\AppData\Local\SRDownloader.err
2014-04-23 11:33 - 2013-01-03 16:24 - 00001128 _____ () C:\Users\Pepik\AppData\Local\SRDownloader.nast
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\Documents\LucasArts
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\AppData\Local\LucasArts
2014-04-20 21:04 - 2013-05-13 12:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-19 15:50 - 2013-02-17 21:12 - 00000000 ____D () C:\Users\Pepik\Desktop\Nová složka
2014-04-17 14:30 - 2014-04-17 14:30 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Criterion Games
2014-04-17 14:28 - 2013-02-28 22:03 - 00002676 _____ () C:\Windows\SysWOW64\ealregsnapshot1.reg
2014-04-16 08:08 - 2013-01-01 19:39 - 00059136 _____ () C:\Users\Pepik\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-16 08:08 - 2009-07-14 06:45 - 04828736 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-15 11:46 - 2014-04-15 11:43 - 00000000 ____D () C:\Users\Pepik\AppData\Local\GameSpy
2014-04-15 11:42 - 2014-04-15 11:42 - 00000093 _____ () C:\Users\Pepik\AppData\Local\fusioncache.dat
2014-04-14 19:55 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-14 19:29 - 2013-03-10 13:20 - 01636282 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-14 19:29 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-14 19:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-14 19:25 - 2014-04-14 19:25 - 00669184 _____ () C:\Windows\SysWOW64\pbsvc.exe
2014-04-14 16:15 - 2014-04-14 16:15 - 00000000 ____D () C:\Users\Pepik\Documents\Thief
2014-04-14 08:37 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-14 08:36 - 2013-01-09 19:09 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Adobe
2014-04-14 04:24 - 2014-05-06 14:21 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 14:21 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Users\Pepik\AppData\Roaming\CamLayout.ini
C:\Users\Pepik\AppData\Roaming\CamShapes.ini
C:\Users\Pepik\AppData\Roaming\CamStudio.Producer.Data.ini


Some content of TEMP:
====================
C:\Users\Pepik\AppData\Local\Temp\CH.dll
C:\Users\Pepik\AppData\Local\Temp\Copy.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-06 16:54

==================== End Of Log ============================

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Pepik on ne 11.05.2014 at 13:30:52,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\1clickdownload
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ctoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\filescout
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\fixcleaner
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\privitizevpninstalldates
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\startsearch
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\m-lyrics
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\ctoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\fixcleaner
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installcore
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\privitizevpn_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\privitizevpn_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\systweakasp_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\systweakasp_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_cheat-engine_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_cheat-engine_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_kmplayer_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_kmplayer_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_cheat-engine_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_cheat-engine_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_kmplayer_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_kmplayer_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{223F95F3-EB7B-4880-8ADC-EA118F010431}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2B1758B6-7B32-44A0-A3A9-52A665933792}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7D354AC1-2FB0-4D23-B867-21627CCD5C62}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\pip"



~~~ Files

Successfully deleted: [File] "C:\Users\Pepik\appdata\local\google\chrome\user data\default\bprotectorpreferences"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\costmin"
Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\softsafe"
Successfully deleted: [Folder] "C:\ProgramData\trymedia"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\appgraffiti"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\file scout"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\fixcleaner"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\newnext.me"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Program Files (x86)\costmin"
Successfully deleted: [Folder] "C:\Program Files (x86)\fixcleaner"
Successfully deleted: [Folder] "C:\Program Files (x86)\m-lyrics"
Successfully deleted: [Folder] "C:\Program Files (x86)\mobogenie"
Successfully deleted: [Folder] "C:\Users\Pepik\AppData\Roaming\microsoft\windows\start menu\programs\mobogenie"



~~~ FireFox

Successfully deleted: [File] C:\Users\Pepik\AppData\Roaming\mozilla\firefox\profiles\64vte39p.default-1379707421202\user.js
Successfully deleted: [File] C:\Users\Pepik\AppData\Roaming\mozilla\firefox\profiles\64vte39p.default-1379707421202\bprotector_extensions.sqlite
Successfully deleted the following from C:\Users\Pepik\AppData\Roaming\mozilla\firefox\profiles\64vte39p.default-1379707421202\prefs.js

user_pref("extensions.3lFp.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"sumorobo.net\")>-1||url
Emptied folder: C:\Users\Pepik\AppData\Roaming\mozilla\firefox\profiles\64vte39p.default-1379707421202\minidumps [93 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 11.05.2014 at 13:40:53,25
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.207 - Report created 11/05/2014 at 14:11:07
# Updated 05/05/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Pepik - PEPIK-PC
# Running from : C:\Users\Pepik\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\FoxTab
Folder Deleted : C:\Program Files (x86)\Supporter
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\ASPNET\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\torch
Folder Deleted : C:\Users\Pepik\AppData\Local\apn
Folder Deleted : C:\Users\Pepik\AppData\Local\genienext
Folder Deleted : C:\Users\Pepik\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Pepik\AppData\Local\torch
Folder Deleted : C:\Users\Pepik\AppData\Roaming\FoxTab
Folder Deleted : C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Folder Deleted : C:\Users\Pepik\Documents\Mobogenie
Folder Deleted : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\Extensions\staged\{5ebdca98-43b3-45bb-87e0-716029fb42ab}
Folder Deleted : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\Extensions\staged\{5ebdca98-43b3-45bb-87e0-716029fb42ab}
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\user.js
File Deleted : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\*\shell\filescout
Key Deleted : HKLM\SOFTWARE\Classes\CostMin.CostMin
Key Deleted : HKLM\SOFTWARE\Classes\CostMin.CostMin.2.2
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKCU\Software\584dcdee73deb48
Key Deleted : HKCU\Software\a183effb9edff58c3a634835777e6331
Key Deleted : HKLM\SOFTWARE\584dcdee73deb48
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{be0fb33b}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F5F003B-C71B-72E3-42B4-DE51AB079EB2}
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\supporter\supporter.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\2.7.1769.27\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v29.0.1 (cs)

[ File : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\prefs.js ]

Line Deleted : user_pref("extensions.3lFp.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf(\"mindri.com\")>[...]

[ File : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\prefs.js ]


[ File : C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\prefs.js ]


-\\ Google Chrome v34.0.1847.131

[ File : C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=PTV&o=15184&locale=en_EU&apn_uid=7cce8fac-2377-4846-a4ac-b37d8fc42f8d&apn_ptnrs=%5ERY&apn_sauid=F5BE3940-3D97-437E-9D68-091263DBD0BD&apn_dtid=%5EYYYYYY%5EV2%5ECZ&q={searchTerms}

*************************

AdwCleaner[R0].txt - [5492 octets] - [11/05/2014 13:41:46]
AdwCleaner[S0].txt - [5251 octets] - [11/05/2014 14:11:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5311 octets] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Pepik on ne 11.05.2014 at 14:33:25,54.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pepik\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

11.5.2014 14:34:45 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Mozilla\Firefox\Extensions\mlyrics@pnyj.net deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\prefs.js:
user_pref("browser.startup.homepage", "www.seznam.cz");
user_pref("browser.search.defaultenginename", "Yahoo");
user_pref("browser.search.useDBForOrder", "false");

Added to C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\prefs.js:
user_pref("browser.search.defaultenginename", "Yahoo");

Added to C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\prefs.js:
user_pref("browser.search.defaultenginename", "Yahoo");

Added to C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202

user.js not found
---- Lines extensions.3lFp removed from prefs.js ----
user_pref("extensions.3lFp.epoch", "1399897118");
user_pref("extensions.3lFp.url", "http://directwebfile.info/sync2/?q=hfZ9 ... EqjwFrjsFq
---- FireFox user.js and prefs.js backups ----

prefs_11.05.2014_1448_.backup

ProfilePath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_11.05.2014_1448_.backup

ProfilePath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_11.05.2014_1448_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted
C:\Users\Pepik\AppData\LocalLow\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} deleted
C:\Users\Pepik\AppData\Local\Packages\windows_ie_ac_001\AC\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} deleted
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\pref.js deleted
C:\Users\Pepik\AppData\Roaming\CamStudio.Producer.Data.ini deleted
C:\Users\Pepik\AppData\Roaming\CamStudio.Producer.ini deleted
C:\Users\Pepik\AppData\Roaming\RipEditBurn.ini deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Pepik\AppData\Local\nwhb-v9.4.15.crx deleted
C:\Users\Pepik\AppData\Local\avgchrome deleted
C:\Users\Pepik\AppData\Local\cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Batman Arkham Origins Cold Cold Heart deleted
C:\Windows\Syswow64\tmp3D7F.tmp deleted
C:\Windows\Syswow64\tmp3D9F.tmp deleted
C:\Windows\Syswow64\tmp8C19.tmp deleted
C:\Windows\Syswow64\tmp8C2A.tmp deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted
C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\iod9i0vy.default\extensions\staged deleted
C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\j8nje9k2.default\extensions\staged deleted
C:\Users\Pepik\Desktop\MRDownloader.exe deleted
C:\Users\Pepik\Desktop\prokramy 2\SoftonicDownloader_for_utorrent.exe deleted
C:\Users\Pepik\AppData\Local\MSGBOX.EXE deleted
C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\mlcxx2h8mx@mhjsnzjfxa.org deleted
"C:\PROGRA~3\d30e5b060b0deb7e\{2F5F003B-C71B-72E3-42B4-DE51AB079EB2}" deleted
"C:\PROGRA~3\d30e5b060b0deb7e" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [06.05.2014 14:49]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Seznam litika - %ProfilePath%\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
- Kinotip Finder and Dowloander - %ProfilePath%\extensions\sracka@pica.cz.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202
9FD6A1990289B9290563CA069CB74EF9 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll - Shockwave Flash
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\Pepik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
2EA4B85EF64CA48B792FEF23AEEF7DC1 - C:\Users\Pepik\AppData\Roaming\Mozilla\plugins\NpFv530.dll - Flatcast Viewer Plugin 5.3.0.784
517021D1BCA1962ABF09099014A7D87D - C:\Windows\SysWoW64\npOGPPlugin.dll - OGPlanet Game Plugin
89725040FD5D5C517F6BEB473E24F017 - C:\Users\Pepik\AppData\Roaming\Flatcast\NpFv522.dll - Flatcast Viewer Plugin 5.2.2.454
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[06.05.2014 14:49]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11.04.2014 19:46]
ogoocamnhedgmkaapmjkkioohkedbecm - C:\Program Files (x86)\M-Lyrics\Chrome.crx[]

CostMin - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - Pepik\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
avast Online Security - Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Skype Click to Call - Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
CostMin - Pepik\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
CostMin - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg
Docs - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Skype for Chromium - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
M-Lyrics - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogoocamnhedgmkaapmjkkioohkedbecm

==== Chrome Fix ======================

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogoocamnhedgmkaapmjkkioohkedbecm deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Pepik\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully
C:\Users\Pepik\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ppleofcedgiedcfmnepeokfhcdclaecg deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.google.com/search?q={searchT ... d=ie7&rlz="
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{1B2E87B0-8DAB-45B5-A414-329D1D26476F} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... ckSearch_5"
{1D86703D-3DED-42B4-8BD2-D78B29049633} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5"
{4DEF944F-7C67-44FB-9EF5-B067D2DFC33E} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... ckSearch_5"
{57D956CD-8CFD-40F2-8BD3-67C712F47701} Bing Url="http://www.bing.com/search?FORM=UP21DF& ... -SearchBox"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
{799201C7-2B5F-465C-8593-3881227F3BC1} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... ckSearch_5"
{90D8F416-9C5F-4F82-9CD1-F4D8B5CD9963} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... ckSearch_5"
{9ED6DD98-279E-442D-90E1-40CD40B341B8} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5"
{9F231022-D4FF-4673-939D-C3CF86BA0C32} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5"
{D5DC694A-17A9-4AC6-B0B6-DB858C9795DA} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... ckSearch_5"

==== Reset Google Chrome ======================

C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\Pepik\Desktop\Cheat Engine.lnk - C:\HRY\programy\Cheat Engine 6.2\Cheat Engine.exe
C:\Users\Pepik\Desktop\Game Maker.lnk - C:\Program Files (x86)\Game_Maker8\Game_Maker.exe
C:\Users\Pepik\Desktop\KMPlayer.lnk - C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
C:\Users\Pepik\Desktop\MSI Afterburner.lnk - C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Users\Pepik\Desktop\Počítač.lnk -
C:\Users\Pepik\Desktop\pokemon 1996\Batman Arkham Origins Cold Cold Heart.lnk - C:\HRY\KONAMI\Batman Arkham Origins Cold Cold Heart\SinglePlayer\Binaries\Win32\BatmanOrigins.exe
C:\Users\Pepik\Desktop\pokemon 1996\Hitman Absolution - Professional Edition.lnk - C:\HRY\KONAMI\Hitman Absolution - Professional Edition\HMA.exe
C:\Users\Pepik\Desktop\pokemon 1996\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Pepik\Desktop\pokemon 1996\The Amazing Spider-Man 2.lnk - C:\HRY\KONAMI\The Amazing Spider-Man 2\ASM2Launcher.exe
C:\Users\Pepik\Desktop\pokemon 1996\NHL 2013\EA Sports\NHL 09\Hex Editor Neo.lnk - C:\Program Files (x86)\HHD Software\Hex Editor Neo\HexFrame.exe
C:\Users\Pepik\Desktop\prokramy 2\GeekBuddy.lnk - C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe "unit_manager.exe" "lps-ca"
C:\Users\Pepik\Desktop\prokramy 2\Nero BurnLite 10.lnk - C:\Windows\Installer\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}\ScStartSmartDeskto_3AF47A4E14DF4546B1449D27245505A0.exe
C:\Users\Pepik\Desktop\prokramy 2\NETGATE Registry Cleaner.lnk - C:\Program Files\NETGATE\Registry Cleaner\RegistryCleaner.exe
C:\Users\Pepik\Desktop\prokramy 2\Origin.lnk - C:\Program Files (x86)\Origin\Origin.exe
C:\Users\Pepik\Desktop\prokramy 2\Picasa 3.lnk - C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
C:\Users\Pepik\Desktop\prokramy 2\Skype.lnk - C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
C:\Users\Pepik\Desktop\prokramy 2\Uplay.lnk - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe
C:\Users\Pepik\Desktop\prokramy 2\Video Search.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe /VIDEOSEARCH
C:\Users\Pepik\Desktop\prokramy 2\Voice Cloak Plus Trial.lnk - C:\Program Files (x86)\Blaze Audio\Voice Cloak Plus Trial\VoiceCloakPlus.exe
C:\Users\Pepik\Desktop\psp program\FL Studio 11.lnk - C:\Program Files (x86)\Image-Line\FL Studio 11\FL.exe
C:\Users\Pepik\Desktop\psp program\Flvto Youtube Downloader.lnk - C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe
C:\Users\Pepik\Desktop\psp program\PSX2PSP v.1.4.2\Batch mode.lnk - C:\Users\Pepik\Desktop\psp program\PSX2PSP v.1.4.2\PSX2PSP.exe /batch
C:\Users\Pepik\Desktop\psp program\PSX2PSP v.1.4.2\Clasic mode.lnk - C:\Users\Pepik\Desktop\psp program\PSX2PSP v.1.4.2\PSX2PSP.exe /clasic
C:\Users\Pepik\Desktop\psp program\PSX2PSP v.1.4.2\Theme mode.lnk - C:\Users\Pepik\Desktop\psp program\PSX2PSP v.1.4.2\PSX2PSP.exe /theme

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Adobe Reader X.lnk - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\Public\Desktop\Ashampoo WinOptimizer 6.lnk - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\WO6.exe
C:\Users\Public\Desktop\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\Public\Desktop\avast Free Antivirus.lnk -
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2\ASIO4ALL v2 Off-Line Settings.lnk - C:\Program Files (x86)\ASIO4ALL v2\a4apanel.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk - C:\Users\Pepik\AppData\Roaming\Dropbox\bin\Dropbox.exe /home
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk - C:\Users\Pepik\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader\Flvto Youtube Downloader.lnk - C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader\Uninstall Flvto Youtube Downloader.lnk - C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader\UninstallFlvtoYoutubeDownloader.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\IL Download Manager.lnk - C:\Program Files (x86)\Image-Line\Downloader\ILDownloadManager.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\More....lnk - C:\Program Files (x86)\Image-Line\Shared\Start
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer\KMPlayer Setup Wizard.lnk - C:\Program Files (x86)\The KMPlayer\KMPSetup.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer\KMPlayer.lnk - C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer\Uninstall KMPlayer.lnk - C:\Program Files (x86)\The KMPlayer\uninstall.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk - C:\Program Files (x86)\Image-Line\FL Studio 11\FL.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk - C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk - C:\Windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast\avast Free Antivirus.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 3.5.9 CZ pln verze - by kopiha.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line\More....lnk - C:\Program Files (x86)\Image-Line\Shared\Start
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis\Action\User Manual JP.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sleeping dogs cz iso\sleeping dogs cz iso.lnk - C:\HRY\KONAMI\sleeping dogs cz iso\sleeping dogs cz iso.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX\Hitman Absolution - Professional Edition\Hitman Absolution - Professional Edition.lnk - C:\HRY\KONAMI\Hitman Absolution - Professional Edition\HMA.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX\Hitman Absolution - Professional Edition\Uninstall Hitman Absolution - Professional Edition.lnk - C:\HRY\KONAMI\Hitman Absolution - Professional Edition\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk - C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Free Edition.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Help.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe /register
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Amazing Spider-Man 2\The Amazing Spider-Man 2.lnk - C:\HRY\KONAMI\The Amazing Spider-Man 2\ASM2Launcher.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Amazing Spider-Man 2\Uninstall.lnk - C:\HRY\KONAMI\The Amazing Spider-Man 2\unins000.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\4Media 2D to 3D Video Converter.lnk - C:\hry\programy\2D to 3D Video Converter\3dvcloader.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ashampoo WinOptimizer 6.lnk - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\WO6.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\jetAudio.lnk - C:\Program Files (x86)\JetAudio\JetAudio.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\KMPlayer.lnk - C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mutant.lnk - C:\hry\Mutant\bin\Game.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk - C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Programe Tv x64.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.programe-tv.eu/
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\KMPlayer.exe.lnk - C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\MRDownloader.lnk - C:\Users\Pepik\Desktop\MRDownloader.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Správce zvuku Realtek HD.lnk -
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Uplay.lnk - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1

==== shortcuts After Repair ======================

C:\Users\Pepik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Programe Tv x64.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ogoocamnhedgmkaapmjkkioohkedbecm deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0ZF5WQP0 will be deleted at reboot
C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ECV4124H will be deleted at reboot
C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3ENFWDO will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Pepik\AppData\Local\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=120 folders=60 21762593 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Pepik\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Pepik\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found
"C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0ZF5WQP0" not found
"C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ECV4124H" not found
"C:\Users\Pepik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3ENFWDO" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on ne 11.05.2014 at 14:57:15,23 ======================

Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014
Ran by Pepik (administrator) on PEPIK-PC on 11-05-2014 15:12:15
Running from C:\Users\Pepik\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7546072 2014-03-10] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
HKLM-x32\...\Run: [mncgkdxSrv] => C:\Windows\SysWOW64\mncgkdx.vbe [7670 2014-03-05] ()
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [DApp] => C:\Program Files\PCDApp\start.vbs [178 2014-04-10] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-06] (AVAST Software)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-10] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-05-02] (Google Inc.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Facebook Update] => C:\Users\Pepik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-27] (Facebook Inc.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-27] (Electronic Arts)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1825984 2014-04-24] (Valve Corporation)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6503704 2013-12-05] (SUPERAntiSpyware)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\CurrentVersion\Windows: [Load] C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe <===== ATTENTION
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {833ec002-a04a-11e2-8da3-c86000792557} - E:\setup.exe
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {b50e24b1-9e94-11e2-8d1d-c86000792557} - E:\autorun.exe
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {ffb7cf52-5439-11e2-ba2b-c86000792557} - E:\autorun.exe
AppInit_DLLs: c:\windows\system32\guard64.dll => c:\windows\system32\guard64.dll File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/search?q={searchT ... d=ie7&rlz=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... KB_csCZ534
SearchScopes: HKCU - {1B2E87B0-8DAB-45B5-A414-329D1D26476F} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... ckSearch_5
SearchScopes: HKCU - {1D86703D-3DED-42B4-8BD2-D78B29049633} URL = http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5
SearchScopes: HKCU - {4DEF944F-7C67-44FB-9EF5-B067D2DFC33E} URL = http://encyklopedie.seznam.cz/search?q= ... ckSearch_5
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... KB_csCZ534
SearchScopes: HKCU - {799201C7-2B5F-465C-8593-3881227F3BC1} URL = http://tv.seznam.cz/hledej?w={searchTer ... ckSearch_5
SearchScopes: HKCU - {90D8F416-9C5F-4F82-9CD1-F4D8B5CD9963} URL = http://www.mapy.cz/?query={searchTerms} ... ckSearch_5
SearchScopes: HKCU - {9ED6DD98-279E-442D-90E1-40CD40B341B8} URL = http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5
SearchScopes: HKCU - {9F231022-D4FF-4673-939D-C3CF86BA0C32} URL = http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5
SearchScopes: HKCU - {D5DC694A-17A9-4AC6-B0B6-DB858C9795DA} URL = http://www.novinky.cz/hledej?w={searchT ... ckSearch_5
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: CostMin - {7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} - C:\Program Files (x86)\CostMin\BV.x64.dll No File
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 94.229.92.40 94.229.92.30
Tcpip\..\Interfaces\{F181256A-5E09-4E55-9D74-4F9891AC0F3B}: [NameServer]8.26.56.26,156.154.70.22

FireFox:
========
FF ProfilePath: C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://seznam.cz
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @ogplanet.com/npOGPPlugin - C:\Windows\system32\npOGPPlugin.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Pepik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Users\Pepik\AppData\Roaming\Flatcast\NpFv522.dll (1 mal 1 Software GmbH)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv522.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Pepik\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-05-02]
FF Extension: Kinotip! Finder and Dowloander! - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\sracka@pica.cz.xpi [2014-04-19]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-05-10]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-06]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-11]
CHR Extension: (Disk Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-11]
CHR Extension: (YouTube) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-11]
CHR Extension: (Vyhledávání Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-11]
CHR Extension: (avast! Online Security) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-11]
CHR Extension: (Skype Click to Call) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-05-11]
CHR Extension: (Peněženka Google) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-07]
CHR Extension: (Gmail) - C:\Users\Pepik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-11]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-11] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-06] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [544768 2009-08-24] (mst software GmbH, Germany)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11904 2000-01-01] (Advanced Micro Devices Inc.)
S3 AODDriver4.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-06] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-06] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2014-02-06] ()
S3 EagleX64; No ImagePath
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2013-05-25] (Highresolution Enterprises [www.highrez.co.uk])
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2014-02-06] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15712 2013-05-06] ()
S3 MSICDSetup; \??\D:\CDriver64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-11 14:54 - 2014-05-11 14:33 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-11 14:34 - 2014-05-11 14:57 - 00033206 _____ () C:\zoek-results.log
2014-05-11 14:33 - 2014-05-11 14:56 - 00000000 ____D () C:\zoek_backup
2014-05-11 14:32 - 2014-05-11 14:32 - 01285120 _____ () C:\Users\Pepik\Desktop\zoek.exe
2014-05-11 13:42 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-11 13:41 - 2014-05-11 14:11 - 00000000 ____D () C:\AdwCleaner
2014-05-11 13:40 - 2014-05-11 13:40 - 00009074 _____ () C:\Users\Pepik\Desktop\JRT.txt
2014-05-11 13:30 - 2014-05-11 13:30 - 00000000 ____D () C:\Windows\ERUNT
2014-05-11 13:28 - 2014-05-11 13:28 - 01316991 _____ () C:\Users\Pepik\Desktop\adwcleaner.exe
2014-05-11 13:28 - 2014-05-11 13:28 - 01016261 _____ (Thisisu) C:\Users\Pepik\Desktop\JRT.exe
2014-05-11 12:27 - 2014-05-11 12:37 - 938774528 _____ () C:\Users\Pepik\Desktop\Do-útoku-(Over-the-Top,-1987,-český-dabing).mpg
2014-05-11 12:22 - 2014-05-11 12:22 - 00037686 _____ () C:\Users\Pepik\Desktop\Addition.txt
2014-05-11 12:21 - 2014-05-11 15:12 - 00020314 _____ () C:\Users\Pepik\Desktop\FRST.txt
2014-05-11 12:20 - 2014-05-11 15:12 - 00000000 ____D () C:\FRST
2014-05-11 12:20 - 2014-05-11 12:20 - 00112640 _____ (forum.viry.cz) C:\Users\Pepik\Desktop\FRSTLauncher.exe
2014-05-11 12:19 - 2014-05-11 12:19 - 02066432 _____ (Farbar) C:\Users\Pepik\Desktop\FRST64.exe
2014-05-11 12:17 - 2014-05-11 12:17 - 00015327 _____ () C:\Users\Pepik\Desktop\LM.bat
2014-05-10 17:45 - 2014-05-10 17:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX
2014-05-10 15:53 - 2014-05-10 15:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 09:11 - 2014-05-09 09:11 - 00000003 _____ () C:\Users\Pepik\stut
2014-05-09 09:09 - 2014-05-11 14:59 - 00000510 _____ () C:\Users\Pepik\rgut
2014-05-09 09:07 - 2014-05-11 14:56 - 00000392 _____ () C:\Windows\setupact.log
2014-05-09 09:07 - 2014-05-09 09:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-09 09:06 - 2014-05-11 14:56 - 00000976 _____ () C:\Windows\PFRO.log
2014-05-06 19:38 - 2014-05-06 19:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 14:51 - 2014-05-06 14:51 - 00001824 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-05-06 14:51 - 2014-05-06 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-05-06 14:50 - 2014-05-11 09:25 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-06 14:50 - 2014-05-06 14:50 - 00001972 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\AVAST Software
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-05-06 14:49 - 2014-05-06 14:49 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-06 14:49 - 2014-05-06 14:49 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-06 14:49 - 2014-05-06 14:49 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-06 14:47 - 2014-05-06 14:48 - 28876264 _____ (SUPERAntiSpyware) C:\Users\Pepik\Downloads\SUPERAntiSpyware.exe
2014-05-06 14:42 - 2014-05-06 14:45 - 88882192 _____ (AVAST Software) C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe
2014-05-06 14:26 - 2014-05-06 14:26 - 00030126 _____ () C:\Users\Pepik\Documents\cc_20140506_142605.reg
2014-05-06 14:21 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 14:21 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-03 22:48 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 22:48 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 22:48 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 22:48 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 16:07 - 2014-05-02 16:07 - 00000000 ____D () C:\Users\Pepik\Documents\Activision
2014-05-02 16:06 - 2014-05-02 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Amazing Spider-Man 2
2014-05-02 14:43 - 2014-05-02 14:43 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-05-02 13:58 - 2014-05-02 14:37 - 00000000 ____D () C:\Program Files (x86)\Batman Arkham Origins
2014-04-30 18:41 - 2014-04-30 18:43 - 00000000 ____D () C:\Users\Pepik\Documents\Cubase Projects
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\VST3 Presets
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\ProgramData\Steinberg
2014-04-30 10:25 - 2014-05-08 10:25 - 00000000 ____D () C:\Program Files\PCDApp
2014-04-30 10:25 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Packages
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator
2014-04-26 20:50 - 2014-04-26 22:00 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlvtoConverter
2014-04-26 20:50 - 2014-04-26 20:50 - 00000000 ____D () C:\Users\Pepik\AppData\Local\FlvtoYoutubeDownloader
2014-04-26 20:48 - 2014-04-26 20:48 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader
2014-04-26 20:45 - 2014-04-26 20:48 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader
2014-04-25 20:32 - 2014-04-25 20:32 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2014-04-25 20:32 - 2013-03-12 12:47 - 01431552 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\rewire.dll
2014-04-24 19:52 - 2014-04-30 18:03 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Steinberg
2014-04-24 13:45 - 2014-04-30 10:28 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2014-04-24 13:43 - 2014-04-25 20:32 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics
2014-04-24 13:43 - 2014-04-25 20:02 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\Documents\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlowStone
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files\Image-Line
2014-04-24 13:39 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieUserList
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieSiteList
2014-04-23 22:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-23 22:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-23 22:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-23 22:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-23 22:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-23 22:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-23 22:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-23 22:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-23 22:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-23 22:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-23 22:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-23 22:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-23 22:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-23 22:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-23 22:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-23 22:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-23 22:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-23 22:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-23 22:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-23 22:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-23 22:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-23 22:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-23 22:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-23 22:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-23 22:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-23 22:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-23 22:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-23 22:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-23 22:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-23 22:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-23 22:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-23 22:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-23 22:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-23 22:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-23 22:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-23 22:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-23 22:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-23 22:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-23 22:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-23 22:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-23 22:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-23 22:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-23 22:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-23 22:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\Windows\SysWOW64\bitstreams
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sleeping dogs cz iso
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 3.5.9 CZ pln verze!!! - by kopiha
2014-04-23 12:28 - 2014-03-05 22:19 - 00007670 ____S () C:\Windows\SysWOW64\mncgkdx.vbe
2014-04-23 12:28 - 2013-12-10 00:30 - 10236928 ____S () C:\Windows\SysWOW64\acumncgkdx.exe
2014-04-23 12:28 - 2013-10-26 20:30 - 01704448 ____S (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00972814 ____S () C:\Windows\SysWOW64\dcgmncgkdx.exe
2014-04-23 12:28 - 2013-10-26 20:30 - 00538126 ____S () C:\Windows\SysWOW64\libcurl-4.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00364544 ____S (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00192512 ____S () C:\Windows\SysWOW64\libidn-11.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00171008 ____S (The libssh2 library, http://www.libssh2.org/) C:\Windows\SysWOW64\libssh2.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00133632 ____S () C:\Windows\SysWOW64\librtmp.dll
2014-04-23 12:28 - 2013-10-26 20:30 - 00044727 ____S () C:\Windows\SysWOW64\diablo130302.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00043810 ____S () C:\Windows\SysWOW64\poclbm130302.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00030802 ____S () C:\Windows\SysWOW64\diakgcn121016.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00023825 ____S () C:\Windows\SysWOW64\scrypt130511.cl
2014-04-23 12:28 - 2013-10-26 20:30 - 00013062 ____S () C:\Windows\SysWOW64\phatk121016.cl
2014-04-23 12:28 - 2013-07-18 16:06 - 00187904 ____S () C:\Windows\SysWOW64\lcpmncgkdx.exe
2014-04-23 12:28 - 2013-06-12 15:15 - 00119888 ____S (Open Source Software community LGPL) C:\Windows\SysWOW64\pthreadGC2.dll
2014-04-23 12:28 - 2013-06-12 15:15 - 00100864 ____S () C:\Windows\SysWOW64\zlib1.dll
2014-04-23 12:28 - 2012-09-25 23:46 - 00472424 ____S (NVIDIA Corporation) C:\Windows\SysWOW64\cudart32_50_35.dll
2014-04-23 12:28 - 2012-05-27 01:36 - 00055808 ____S (Open Source Software community LGPL) C:\Windows\SysWOW64\pthreadVC2.dll
2014-04-21 16:20 - 2014-05-08 10:18 - 00000000 ____D () C:\Users\Pepik\Desktop\sw-the-force-unleashed-2-v1.0-trainer-plus5
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\Documents\LucasArts
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\AppData\Local\LucasArts
2014-04-19 13:35 - 2014-05-08 17:27 - 00000000 ____D () C:\Users\Pepik\Desktop\psp program
2014-04-17 14:30 - 2014-04-17 14:30 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Criterion Games
2014-04-15 11:43 - 2014-04-15 11:46 - 00000000 ____D () C:\Users\Pepik\AppData\Local\GameSpy
2014-04-15 11:42 - 2014-04-15 11:42 - 00000093 _____ () C:\Users\Pepik\AppData\Local\fusioncache.dat
2014-04-14 19:25 - 2014-04-14 19:25 - 00669184 _____ () C:\Windows\SysWOW64\pbsvc.exe
2014-04-14 16:15 - 2014-04-14 16:15 - 00000000 ____D () C:\Users\Pepik\Documents\Thief

==================== One Month Modified Files and Folders =======

2014-05-11 15:12 - 2014-05-11 12:21 - 00020314 _____ () C:\Users\Pepik\Desktop\FRST.txt
2014-05-11 15:12 - 2014-05-11 12:20 - 00000000 ____D () C:\FRST
2014-05-11 15:12 - 2013-02-10 13:20 - 00000000 ____D () C:\Users\Pepik\AppData\Local\PMB Files
2014-05-11 15:04 - 2009-07-14 06:45 - 00021312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-11 15:04 - 2009-07-14 06:45 - 00021312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-11 15:02 - 2013-10-13 09:22 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-11 15:02 - 2013-03-27 22:37 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Seznam.cz
2014-05-11 15:02 - 2013-01-04 18:29 - 00000000 ____D () C:\ProgramData\Origin
2014-05-11 15:00 - 2013-01-01 18:35 - 01286443 _____ () C:\Windows\WindowsUpdate.log
2014-05-11 14:59 - 2014-05-09 09:09 - 00000510 _____ () C:\Users\Pepik\rgut
2014-05-11 14:58 - 2013-01-11 15:33 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Skype
2014-05-11 14:57 - 2014-05-11 14:34 - 00033206 _____ () C:\zoek-results.log
2014-05-11 14:57 - 2013-10-25 14:32 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-11 14:57 - 2013-09-10 18:46 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-11 14:56 - 2014-05-11 14:33 - 00000000 ____D () C:\zoek_backup
2014-05-11 14:56 - 2014-05-09 09:07 - 00000392 _____ () C:\Windows\setupact.log
2014-05-11 14:56 - 2014-05-09 09:06 - 00000976 _____ () C:\Windows\PFRO.log
2014-05-11 14:56 - 2013-01-01 19:59 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-11 14:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-11 14:48 - 2013-03-25 22:07 - 00000000 ____D () C:\Users\Pepik\Desktop\prokramy 2
2014-05-11 14:33 - 2014-05-11 14:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-11 14:32 - 2014-05-11 14:32 - 01285120 _____ () C:\Users\Pepik\Desktop\zoek.exe
2014-05-11 14:23 - 2014-03-03 22:54 - 00003480 _____ () C:\Users\Pepik\AppData\Local\MRDownloader.nast
2014-05-11 14:19 - 2013-01-01 19:59 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-11 14:11 - 2014-05-11 13:41 - 00000000 ____D () C:\AdwCleaner
2014-05-11 13:40 - 2014-05-11 13:40 - 00009074 _____ () C:\Users\Pepik\Desktop\JRT.txt
2014-05-11 13:30 - 2014-05-11 13:30 - 00000000 ____D () C:\Windows\ERUNT
2014-05-11 13:28 - 2014-05-11 13:28 - 01316991 _____ () C:\Users\Pepik\Desktop\adwcleaner.exe
2014-05-11 13:28 - 2014-05-11 13:28 - 01016261 _____ (Thisisu) C:\Users\Pepik\Desktop\JRT.exe
2014-05-11 12:54 - 2013-07-27 09:49 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4270906320-3087370871-1829774614-1000UA.job
2014-05-11 12:37 - 2014-05-11 12:27 - 938774528 _____ () C:\Users\Pepik\Desktop\Do-útoku-(Over-the-Top,-1987,-český-dabing).mpg
2014-05-11 12:30 - 2013-06-06 21:39 - 00000000 ____D () C:\Users\Pepik\Desktop\pokemon 1996
2014-05-11 12:22 - 2014-05-11 12:22 - 00037686 _____ () C:\Users\Pepik\Desktop\Addition.txt
2014-05-11 12:20 - 2014-05-11 12:20 - 00112640 _____ (forum.viry.cz) C:\Users\Pepik\Desktop\FRSTLauncher.exe
2014-05-11 12:19 - 2014-05-11 12:19 - 02066432 _____ (Farbar) C:\Users\Pepik\Desktop\FRST64.exe
2014-05-11 12:17 - 2014-05-11 12:17 - 00015327 _____ () C:\Users\Pepik\Desktop\LM.bat
2014-05-11 09:54 - 2013-07-27 09:49 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4270906320-3087370871-1829774614-1000Core.job
2014-05-11 09:25 - 2014-05-06 14:50 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-11 09:22 - 2013-07-26 16:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 17:45 - 2014-05-10 17:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX
2014-05-10 15:53 - 2014-05-10 15:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 09:11 - 2014-05-09 09:11 - 00000003 _____ () C:\Users\Pepik\stut
2014-05-09 09:11 - 2013-01-01 19:05 - 00000000 ____D () C:\Users\Pepik
2014-05-09 09:07 - 2014-05-09 09:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-08 17:27 - 2014-04-19 13:35 - 00000000 ____D () C:\Users\Pepik\Desktop\psp program
2014-05-08 12:17 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-08 12:15 - 2013-09-19 16:25 - 00000000 ____D () C:\HRY
2014-05-08 11:31 - 2013-07-14 20:22 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\update_tc
2014-05-08 11:01 - 2013-06-24 20:04 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\StarTrekPC
2014-05-08 11:01 - 2013-03-29 11:28 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Ashampoo
2014-05-08 10:25 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files\PCDApp
2014-05-08 10:18 - 2014-04-21 16:20 - 00000000 ____D () C:\Users\Pepik\Desktop\sw-the-force-unleashed-2-v1.0-trainer-plus5
2014-05-07 21:24 - 2013-01-06 23:26 - 00000000 ____D () C:\Users\Pepik\Documents\My Games
2014-05-06 19:38 - 2014-05-06 19:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 14:51 - 2014-05-06 14:51 - 00001824 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-05-06 14:51 - 2014-05-06 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-05-06 14:51 - 2013-01-17 14:29 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-05-06 14:50 - 2014-05-06 14:50 - 00001972 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\AVAST Software
2014-05-06 14:50 - 2014-05-06 14:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-05-06 14:49 - 2014-05-06 14:49 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-06 14:49 - 2014-05-06 14:49 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-06 14:49 - 2014-05-06 14:49 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-06 14:49 - 2014-05-06 14:49 - 00000000 ____D () C:\Program Files\AVAST Software
2014-05-06 14:48 - 2014-05-06 14:47 - 28876264 _____ (SUPERAntiSpyware) C:\Users\Pepik\Downloads\SUPERAntiSpyware.exe
2014-05-06 14:48 - 2013-01-01 21:10 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-06 14:45 - 2014-05-06 14:42 - 88882192 _____ (AVAST Software) C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe
2014-05-06 14:26 - 2014-05-06 14:26 - 00030126 _____ () C:\Users\Pepik\Documents\cc_20140506_142605.reg
2014-05-05 16:32 - 2014-03-03 22:56 - 00013100 _____ () C:\Users\Pepik\AppData\Local\MRDownloader.err
2014-05-05 07:55 - 2010-11-21 11:27 - 00677706 _____ () C:\Windows\system32\perfh005.dat
2014-05-05 07:55 - 2010-11-21 11:27 - 00146624 _____ () C:\Windows\system32\perfc005.dat
2014-05-05 07:55 - 2009-07-14 07:13 - 01612368 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-02 16:07 - 2014-05-02 16:07 - 00000000 ____D () C:\Users\Pepik\Documents\Activision
2014-05-02 16:07 - 2013-03-13 19:31 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Activision
2014-05-02 16:06 - 2014-05-02 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Amazing Spider-Man 2
2014-05-02 14:43 - 2014-05-02 14:43 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-05-02 14:37 - 2014-05-02 13:58 - 00000000 ____D () C:\Program Files (x86)\Batman Arkham Origins
2014-05-02 13:55 - 2013-01-01 19:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-30 18:43 - 2014-04-30 18:41 - 00000000 ____D () C:\Users\Pepik\Documents\Cubase Projects
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\VST3 Presets
2014-04-30 18:03 - 2014-04-30 18:03 - 00000000 ____D () C:\ProgramData\Steinberg
2014-04-30 18:03 - 2014-04-24 19:52 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Steinberg
2014-04-30 10:28 - 2014-04-24 13:45 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2014-04-30 10:25 - 2014-04-30 10:25 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Packages
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Guest
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\ASPNET
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-30 10:24 - 2014-04-30 10:24 - 00000000 ____D () C:\Users\Administrator
2014-04-30 10:24 - 2013-01-01 19:59 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Google
2014-04-30 08:24 - 2013-01-01 20:12 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-29 16:01 - 2014-05-03 22:48 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-03 22:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-03 22:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-03 22:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 14:02 - 2013-10-13 09:22 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 14:02 - 2013-01-01 19:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 14:02 - 2013-01-01 19:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-28 10:34 - 2014-03-26 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-26 22:00 - 2014-04-26 20:50 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlvtoConverter
2014-04-26 20:50 - 2014-04-26 20:50 - 00000000 ____D () C:\Users\Pepik\AppData\Local\FlvtoYoutubeDownloader
2014-04-26 20:48 - 2014-04-26 20:48 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader
2014-04-26 20:48 - 2014-04-26 20:45 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Flvto Youtube Downloader
2014-04-26 17:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-25 20:32 - 2014-04-25 20:32 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-25 20:32 - 2014-04-25 20:32 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2014-04-25 20:32 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics
2014-04-25 20:02 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\Documents\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\Image-Line
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Users\Pepik\AppData\Roaming\FlowStone
2014-04-24 13:43 - 2014-04-24 13:43 - 00000000 ____D () C:\Program Files\Image-Line
2014-04-24 13:43 - 2014-04-24 13:39 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieUserList
2014-04-24 11:33 - 2014-04-24 11:33 - 00000000 __SHD () C:\Users\Pepik\AppData\Local\EmieSiteList
2014-04-23 22:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-23 20:46 - 2013-02-25 18:33 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-04-23 20:35 - 2013-02-25 18:23 - 00282512 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-04-23 15:53 - 2013-09-10 15:54 - 00000000 ____D () C:\Users\Pepik\Documents\NHL09
2014-04-23 12:36 - 2013-01-01 19:05 - 00000000 ___RD () C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 12:35 - 2013-02-19 16:30 - 00001043 _____ () C:\Users\Pepik\Desktop\KMPlayer.lnk
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\Windows\SysWOW64\bitstreams
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sleeping dogs cz iso
2014-04-23 12:28 - 2014-04-23 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 3.5.9 CZ pln verze!!! - by kopiha
2014-04-23 11:33 - 2013-01-19 13:21 - 00944400 _____ () C:\Users\Pepik\AppData\Local\SRDownloader.err
2014-04-23 11:33 - 2013-01-03 16:24 - 00001128 _____ () C:\Users\Pepik\AppData\Local\SRDownloader.nast
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\Documents\LucasArts
2014-04-21 14:29 - 2014-04-21 14:29 - 00000000 ____D () C:\Users\Pepik\AppData\Local\LucasArts
2014-04-20 21:04 - 2013-05-13 12:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-19 15:50 - 2013-02-17 21:12 - 00000000 ____D () C:\Users\Pepik\Desktop\Nová složka
2014-04-17 14:30 - 2014-04-17 14:30 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Criterion Games
2014-04-17 14:28 - 2013-02-28 22:03 - 00002676 _____ () C:\Windows\SysWOW64\ealregsnapshot1.reg
2014-04-16 08:08 - 2013-01-01 19:39 - 00059136 _____ () C:\Users\Pepik\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-16 08:08 - 2009-07-14 06:45 - 04828736 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-15 11:46 - 2014-04-15 11:43 - 00000000 ____D () C:\Users\Pepik\AppData\Local\GameSpy
2014-04-15 11:42 - 2014-04-15 11:42 - 00000093 _____ () C:\Users\Pepik\AppData\Local\fusioncache.dat
2014-04-14 19:55 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-14 19:29 - 2013-03-10 13:20 - 01636282 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-14 19:29 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-14 19:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-14 19:25 - 2014-04-14 19:25 - 00669184 _____ () C:\Windows\SysWOW64\pbsvc.exe
2014-04-14 16:15 - 2014-04-14 16:15 - 00000000 ____D () C:\Users\Pepik\Documents\Thief
2014-04-14 08:37 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-14 08:36 - 2013-01-09 19:09 - 00000000 ____D () C:\Users\Pepik\AppData\Local\Adobe
2014-04-14 04:24 - 2014-05-06 14:21 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 14:21 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Users\Pepik\AppData\Roaming\CamLayout.ini
C:\Users\Pepik\AppData\Roaming\CamShapes.ini


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-06 16:54

==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
  HKLM-x32\...\Run: [mncgkdxSrv] => C:\Windows\SysWOW64\mncgkdx.vbe [7670 2014-03-05] ()
  HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
  HKLM-x32\...\Run: [DApp] => C:\Program Files\PCDApp\start.vbs [178 2014-04-10] ()
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-10] ()
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-05-02] (Google Inc.)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Facebook Update] => C:\Users\Pepik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-27] (Facebook Inc.)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-27] (Electronic Arts)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1825984 2014-04-24] (Valve Corporation)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6503704 2013-12-05] (SUPERAntiSpyware)
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\CurrentVersion\Windows: [Load] C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe <===== ATTENTION
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Policies\Explorer: [NoThumbnailCache] 1
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {833ec002-a04a-11e2-8da3-c86000792557} - E:\setup.exe
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {b50e24b1-9e94-11e2-8d1d-c86000792557} - E:\autorun.exe
  HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {ffb7cf52-5439-11e2-ba2b-c86000792557} - E:\autorun.exe
  AppInit_DLLs: c:\windows\system32\guard64.dll => c:\windows\system32\guard64.dll File Not Found
  
  BHO: CostMin - {7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} - C:\Program Files (x86)\CostMin\BV.x64.dll No File
  
  FF Extension: Seznam lištička - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-05-02]
  
  CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
  CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  
  R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
  
  DisableService: c2cautoupdatesvc
  DisableService: c2cpnrsvc
  
  C:\Program Files (x86)\PANDORA.TV
  C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe 
  C:\Windows\SysWOW64\mncgkdx.vbe
  C:\Program Files\PCDApp\start.vbs
  C:\Windows\inf\msstp.vbe
  2014-05-11 14:54 - 2014-05-11 14:33 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-05-11 14:34 - 2014-05-11 14:57 - 00033206 _____ () C:\zoek-results.log
  2014-05-11 14:33 - 2014-05-11 14:56 - 00000000 ____D () C:\zoek_backup
  2014-05-11 14:32 - 2014-05-11 14:32 - 01285120 _____ () C:\Users\Pepik\Desktop\zoek.exe
  2014-05-11 13:40 - 2014-05-11 13:40 - 00009074 _____ () C:\Users\Pepik\Desktop\JRT.txt
  2014-05-11 13:28 - 2014-05-11 13:28 - 01316991 _____ () C:\Users\Pepik\Desktop\adwcleaner.exe
  2014-05-11 13:28 - 2014-05-11 13:28 - 01016261 _____ (Thisisu) C:\Users\Pepik\Desktop\JRT.exe
  2014-05-11 12:22 - 2014-05-11 12:22 - 00037686 _____ () C:\Users\Pepik\Desktop\Addition.txt
  2014-05-11 12:21 - 2014-05-11 15:12 - 00020314 _____ () C:\Users\Pepik\Desktop\FRST.txt
  2014-05-11 12:20 - 2014-05-11 12:20 - 00112640 _____ (forum.viry.cz) C:\Users\Pepik\Desktop\FRSTLauncher.exe
  2014-05-11 12:17 - 2014-05-11 12:17 - 00015327 _____ () C:\Users\Pepik\Desktop\LM.bat
  2014-05-06 14:42 - 2014-05-06 14:45 - 88882192 _____ (AVAST Software) C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe
  2014-04-23 12:28 - 2014-03-05 22:19 - 00007670 ____S () C:\Windows\SysWOW64\mncgkdx.vbe
  2014-04-23 12:28 - 2013-12-10 00:30 - 10236928 ____S () C:\Windows\SysWOW64\acumncgkdx.exe
  2014-04-23 12:28 - 2013-10-26 20:30 - 00972814 ____S () C:\Windows\SysWOW64\dcgmncgkdx.exe
  2014-04-23 12:28 - 2013-07-18 16:06 - 00187904 ____S () C:\Windows\SysWOW64\lcpmncgkdx.exe
  
  Hosts:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014
Ran by Pepik at 2014-05-11 17:08:04 Run:1
Running from C:\Users\Pepik\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
HKLM-x32\...\Run: [mncgkdxSrv] => C:\Windows\SysWOW64\mncgkdx.vbe [7670 2014-03-05] ()
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [DApp] => C:\Program Files\PCDApp\start.vbs [178 2014-04-10] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-10] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-03-09] (AMD)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Pepik\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-05-02] (Google Inc.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Facebook Update] => C:\Users\Pepik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-27] (Facebook Inc.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-27] (Electronic Arts)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1825984 2014-04-24] (Valve Corporation)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6503704 2013-12-05] (SUPERAntiSpyware)
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\CurrentVersion\Windows: [Load] C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe <===== ATTENTION
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {833ec002-a04a-11e2-8da3-c86000792557} - E:\setup.exe
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {b50e24b1-9e94-11e2-8d1d-c86000792557} - E:\autorun.exe
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\...\MountPoints2: {ffb7cf52-5439-11e2-ba2b-c86000792557} - E:\autorun.exe
AppInit_DLLs: c:\windows\system32\guard64.dll => c:\windows\system32\guard64.dll File Not Found

BHO: CostMin - {7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} - C:\Program Files (x86)\CostMin\BV.x64.dll No File

FF Extension: Seznam lištička - C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-05-02]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)

DisableService: c2cautoupdatesvc
DisableService: c2cpnrsvc

C:\Program Files (x86)\PANDORA.TV
C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe
C:\Windows\SysWOW64\mncgkdx.vbe
C:\Program Files\PCDApp\start.vbs
C:\Windows\inf\msstp.vbe
2014-05-11 14:54 - 2014-05-11 14:33 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-11 14:34 - 2014-05-11 14:57 - 00033206 _____ () C:\zoek-results.log
2014-05-11 14:33 - 2014-05-11 14:56 - 00000000 ____D () C:\zoek_backup
2014-05-11 14:32 - 2014-05-11 14:32 - 01285120 _____ () C:\Users\Pepik\Desktop\zoek.exe
2014-05-11 13:40 - 2014-05-11 13:40 - 00009074 _____ () C:\Users\Pepik\Desktop\JRT.txt
2014-05-11 13:28 - 2014-05-11 13:28 - 01316991 _____ () C:\Users\Pepik\Desktop\adwcleaner.exe
2014-05-11 13:28 - 2014-05-11 13:28 - 01016261 _____ (Thisisu) C:\Users\Pepik\Desktop\JRT.exe
2014-05-11 12:22 - 2014-05-11 12:22 - 00037686 _____ () C:\Users\Pepik\Desktop\Addition.txt
2014-05-11 12:21 - 2014-05-11 15:12 - 00020314 _____ () C:\Users\Pepik\Desktop\FRST.txt
2014-05-11 12:20 - 2014-05-11 12:20 - 00112640 _____ (forum.viry.cz) C:\Users\Pepik\Desktop\FRSTLauncher.exe
2014-05-11 12:17 - 2014-05-11 12:17 - 00015327 _____ () C:\Users\Pepik\Desktop\LM.bat
2014-05-06 14:42 - 2014-05-06 14:45 - 88882192 _____ (AVAST Software) C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe
2014-04-23 12:28 - 2014-03-05 22:19 - 00007670 ____S () C:\Windows\SysWOW64\mncgkdx.vbe
2014-04-23 12:28 - 2013-12-10 00:30 - 10236928 ____S () C:\Windows\SysWOW64\acumncgkdx.exe
2014-04-23 12:28 - 2013-10-26 20:30 - 00972814 ____S () C:\Windows\SysWOW64\dcgmncgkdx.exe
2014-04-23 12:28 - 2013-07-18 16:06 - 00187904 ____S () C:\Windows\SysWOW64\lcpmncgkdx.exe

Hosts:
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\MSStp => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mncgkdxSrv => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DApp => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\HydraVisionDesktopManager => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\EADM => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoThumbnailCache => Value deleted successfully.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{833ec002-a04a-11e2-8da3-c86000792557} => Key deleted successfully.
HKCR\CLSID\{833ec002-a04a-11e2-8da3-c86000792557} => Key not found.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b50e24b1-9e94-11e2-8d1d-c86000792557} => Key deleted successfully.
HKCR\CLSID\{b50e24b1-9e94-11e2-8d1d-c86000792557} => Key not found.
HKU\S-1-5-21-4270906320-3087370871-1829774614-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ffb7cf52-5439-11e2-ba2b-c86000792557} => Key deleted successfully.
HKCR\CLSID\{ffb7cf52-5439-11e2-ba2b-c86000792557} => Key not found.
"c:\windows\system32\guard64.dll" => Value Data removed successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} => Key deleted successfully.
HKCR\CLSID\{7E38D82D-F11B-1EF8-7FD2-1BFB48E830F6} => Key deleted successfully.
C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\64vte39p.default-1379707421202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl => Key deleted successfully.
C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => Moved successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
PanService => Service stopped successfully.
PanService => Service deleted successfully.
c2cautoupdatesvc service was disabled
c2cpnrsvc service was disabled
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
"C:\Users\Pepik\LOCALS~1\Temp\msfwfovag.exe" => File/Directory not found.
C:\Windows\SysWOW64\mncgkdx.vbe => Moved successfully.
C:\Program Files\PCDApp\start.vbs => Moved successfully.
C:\Windows\inf\msstp.vbe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Pepik\Desktop\zoek.exe => Moved successfully.
C:\Users\Pepik\Desktop\JRT.txt => Moved successfully.
C:\Users\Pepik\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Pepik\Desktop\JRT.exe => Moved successfully.
C:\Users\Pepik\Desktop\Addition.txt => Moved successfully.
C:\Users\Pepik\Desktop\FRST.txt => Moved successfully.
C:\Users\Pepik\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Pepik\Desktop\LM.bat => Moved successfully.
C:\Users\Pepik\Downloads\avast_free_antivirus_setup.exe => Moved successfully.
"C:\Windows\SysWOW64\mncgkdx.vbe" => File/Directory not found.
C:\Windows\SysWOW64\acumncgkdx.exe => Moved successfully.
C:\Windows\SysWOW64\dcgmncgkdx.exe => Moved successfully.
C:\Windows\SysWOW64\lcpmncgkdx.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====

Jak se chova PC??

ted to vypadá, že je to v pořádku

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Vypadá to, že vše je v pořádku. Děkuji za ochotu, za pomoc s počítačem. Mějte se hezky

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat