Prosím o preventivní kontrolu
Napsal: 02 črc 2014 05:24
Dobrý den,
prosím o preventivní kontrolu, víc uživatelů a navíc zřejmě syn něco stáhl (samozřejmě popírá)
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by Home_PC (administrator) on GAME-PC on 02-07-2014 06:20:32
Running from C:\Users\Home_PC\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe
(Intel Corporation) C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Users\Home_PC\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Home_PC\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
() C:\Users\All\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\All\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-10-22] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-10-22] (Crawler.com)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ipTray.exe] => C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe [1632456 2011-11-10] (Intel(R) Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1061960 2013-03-21] ()
HKLM-x32\...\Run: [4StoryPrePatch] => D:\__save league of legends\4Story_CZ\PrePatch.exe [327680 2013-02-19] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-15] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Home_PC\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Home_PC\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [Facebook Update] => "C:\Users\All\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [GarenaPlus] => "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [cz.seznam.software.szndesktop] => C:\Users\All\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [cz.seznam.software.autoupdate] => C:\Users\All\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [Clownfish] => [X]
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\MountPoints2: J - J:\Setup.exe
Startup: C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: http=http://127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0B76631B-65DE-4001-8522-FD0BFD98CEB6} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTe ... 3&tsp=5251
SearchScopes: HKCU - {245388E3-CBA9-42EF-8189-C4EAC4A8E535} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {4D76A73F-6822-43D9-B461-A10E3BF8587B} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKCU - {57311830-C3D9-4AC7-931A-3AAB685B4874} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKCU - {7D7B63EA-BCE9-4931-A81C-812117D69BE4} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {863F9688-4707-4F28-8F4F-A4AA12BF8EB5} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKCU - {88249AB9-9129-4AD5-93AC-7F8B889E2B9F} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {C777CC1F-C2AE-4987-99B9-F11A30F764DA} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
SearchScopes: HKCU - {D161C07C-0991-4F4E-BD98-E749442BBF1E} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
SearchScopes: HKCU - {E3C9BE4C-D394-4BC1-910C-92580DB819D1} URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF user.js: detected! => C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppluginrichmediaplayer.dll ()
FF SearchPlugin: C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Adblock Plus - C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF Extension: BitAccelerator - C:\Program Files (x86)\Mozilla Firefox\extensions\{5ddeb737-082c-48fb-8c06-aa4b38d61e5f} [2014-06-11]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-11]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YoutubeAdblocker) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eokbdddiieiefmodhninbnkilbeeacaj [2014-03-29]
CHR Extension: (SNT) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gglbfdpdbkaapilmhggbajdfipdokfbm [2014-03-29]
CHR Extension: (Enhancements for Gmail) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn [2014-03-26]
CHR Extension: (SNT) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\negaakjdoglkcnajdjdbhbdjafmfhgfh [2014-03-26]
CHR Extension: (YoutubeAdblocker) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngfdkijcifejgoebdonbkilhfkggflih [2014-03-26]
CHR HKLM-x32\...\Chrome\Extension: [naipdapbimiiikbbgjcpbgmfhnlbagpj] - C:\Users\Home_PC\AppData\Local\Temp\naipdapbimiiikbbgjcpbgmfhnlbagpj.crx [2014-03-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [484592 2013-09-27] (BitRaider, LLC)
R2 HiPatchService; d:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IduService; C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe [124616 2011-11-10] (Intel(R) Corporation)
R2 Intel(R) Desktop Boards FSC Application Service; C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe [61440 2011-11-10] (Intel Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-17] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-10-22] (Crawler.com)
==================== Drivers (Whitelisted) ====================
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2013-09-27] (BitRaider)
R3 cpuio; C:\Windows\SysWOW64\Drivers\cpuiox64.sys [15384 2012-02-29] (Intel Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-13] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)
R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [867064 2012-11-14] (Duplex Secure Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-03-22] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\Documents\The Movies
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\AppData\Roaming\Lionhead Studios
2014-07-01 10:39 - 2014-07-01 10:39 - 00000000 __SHD () C:\Windows\ftpcache
2014-07-01 10:31 - 2014-07-01 10:31 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-07-01 10:30 - 2014-07-01 10:30 - 00000341 _____ () C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Goodgame Empire.lnk
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\149b46d4a102c0304583931ceaa3f0bf19785ee3
2014-07-01 10:29 - 2014-07-01 10:30 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Pokki
2014-07-01 10:29 - 2014-07-01 10:29 - 00000000 ____D () C:\Users\All\AppData\Roaming\PowerISO
2014-07-01 10:28 - 2014-07-01 10:28 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\OpenCandy
2014-07-01 10:27 - 2014-07-01 10:27 - 06139136 _____ (Power Software Ltd) C:\Users\All\Downloads\PowerISO5.exe
2014-07-01 07:26 - 2014-07-01 10:13 - 2947751995 _____ () C:\Users\All\Downloads\The-Movies-(PC).rar
2014-06-30 13:01 - 2014-06-30 13:56 - 00000000 ____D () C:\Users\Home_PC\Documents\Agot
2014-06-30 13:01 - 2014-06-30 13:01 - 00000038 _____ () C:\Windows\AviSplitter.INI
2014-06-29 13:30 - 2014-06-29 13:30 - 00000000 ____D () C:\Users\All\AppData\Local\Game Dev Tycoon - Steam
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{F216BCA2-B789-4FAA-AACA-D86803803093}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{32AA287E-D7A9-4412-86B9-F4AD102EDBD0}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{233A2164-5832-424A-9E99-8B5E4DC7AA04}
2014-06-28 19:30 - 2014-06-28 19:32 - 44090153 _____ () C:\Users\All\Downloads\Democracy-3.rar
2014-06-28 18:08 - 2014-06-28 18:08 - 00000222 _____ () C:\Users\Home_PC\Desktop\Space Engineers.url
2014-06-28 15:25 - 2014-06-28 15:25 - 00000222 _____ () C:\Users\Home_PC\Desktop\Game Dev Tycoon.url
2014-06-28 15:25 - 2014-06-28 15:25 - 00000221 _____ () C:\Users\Home_PC\Desktop\Far Cry.url
2014-06-28 08:13 - 2014-06-28 08:13 - 00364256 _____ () C:\Users\Home_PC\Downloads\crl.rar
2014-06-26 20:59 - 2014-06-26 21:00 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\SpaceEngineers
2014-06-26 10:52 - 2014-06-26 10:52 - 05560451 _____ () C:\Users\All\Downloads\cz_bfme2.zip
2014-06-25 10:48 - 2014-06-25 11:15 - 00000000 ____D () C:\Program Files (x86)\WB Games
2014-06-24 22:01 - 2014-06-24 22:01 - 07315456 _____ () C:\Users\All\Downloads\WAPatch.exe
2014-06-24 21:57 - 2014-06-24 22:04 - 00000000 ____D () C:\Program Files (x86)\Worms Armageddon - New Edition
2014-06-24 21:46 - 2014-06-24 21:46 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\V-Games
2014-06-24 21:45 - 2014-06-24 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alenka 2 - Kouzelná země
2014-06-24 17:50 - 2014-06-24 17:50 - 00001505 _____ () C:\Users\All\Desktop\firefox – zástupce.lnk
2014-06-23 20:44 - 2014-06-23 20:44 - 00086339 _____ () C:\Users\All\Downloads\American-McGee's-Alice-cestina---score-242.rar
2014-06-23 20:33 - 2014-06-23 20:33 - 00001739 _____ () C:\Users\Public\Desktop\American McGee's Alice(tm).lnk
2014-06-23 20:30 - 2014-06-23 20:30 - 01024628 _____ () C:\Users\All\Downloads\americanmcgeesalicecz.exe
2014-06-23 12:32 - 2014-06-23 14:00 - 1556761380 _____ () C:\Users\All\Downloads\STEAM_CZ_L.A.-Noire-complet.rar
2014-06-19 15:01 - 2014-06-19 15:01 - 00000000 ____D () C:\Users\All\Documents\East India Company
2014-06-18 16:02 - 2014-06-18 16:02 - 00000000 ____D () C:\Program Files (x86)\Team17
2014-06-17 07:30 - 2014-06-17 07:30 - 00000000 ____D () C:\Users\All\Documents\Amnesia
2014-06-16 14:10 - 2014-06-16 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears of War
2014-06-16 14:07 - 2014-06-16 14:07 - 00000000 ____D () C:\Users\All\AppData\Roaming\Microsoft Games
2014-06-16 07:09 - 2014-06-16 07:09 - 00000000 ____D () C:\Score
2014-06-14 14:27 - 2014-06-14 14:27 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master(1).zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master.zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00348133 _____ () C:\Users\All\Downloads\Camelot_Latest.zip
2014-06-14 14:03 - 2014-06-14 14:03 - 00009790 _____ () C:\Users\All\Downloads\CheatMod.zip
2014-06-14 10:57 - 2014-06-14 11:00 - 00000000 ____D () C:\Users\Home_PC\Desktop\Bazény Urbánek
2014-06-14 10:52 - 2014-06-14 10:52 - 00087467 _____ () C:\Users\All\Downloads\Client Mod-8-0-5-1.zip
2014-06-14 10:40 - 2014-06-28 15:23 - 00000000 ____D () C:\Program Files (x86)\Game Dev Tycoon
2014-06-13 14:32 - 2014-06-15 08:39 - 00000000 ____D () C:\Users\All\AppData\Roaming\Tropico3
2014-06-11 14:50 - 2014-06-11 14:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 22:59 - 2014-06-08 22:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Hardcoded Software
2014-06-08 22:42 - 2014-06-08 22:42 - 00001147 _____ () C:\Users\Public\Desktop\dupeGuru.lnk
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Hardcoded Software
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Program Files (x86)\Hardcoded Software
2014-06-08 22:41 - 2014-06-08 22:41 - 12296192 _____ () C:\Users\Home_PC\Downloads\dupeguru_win_3.8.0.msi
2014-06-03 08:53 - 2014-06-08 22:52 - 00000000 ____D () C:\Users\Home_PC\Desktop\flash
==================== One Month Modified Files and Folders =======
2014-07-02 06:20 - 2014-04-16 18:49 - 00019347 _____ () C:\Users\Home_PC\Desktop\FRST.txt
2014-07-02 06:20 - 2014-03-20 20:43 - 00000000 ____D () C:\FRST
2014-07-02 06:19 - 2014-04-16 18:49 - 00000000 ____D () C:\Users\Home_PC\Desktop\FRST-OlderVersion
2014-07-02 06:19 - 2014-03-20 20:41 - 02083840 _____ (Farbar) C:\Users\Home_PC\Desktop\FRST64.exe
2014-07-02 06:19 - 2013-05-04 15:12 - 00000000 ____D () C:\Users\All\AppData\Roaming\Seznam.cz
2014-07-02 06:19 - 2012-02-29 00:08 - 01725676 _____ () C:\Windows\WindowsUpdate.log
2014-07-02 06:18 - 2013-05-27 06:59 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-02 06:18 - 2012-02-28 23:26 - 00001274 _____ () C:\Users\Public\Desktop\Zoner Photo Studio 13 x64.lnk
2014-07-02 06:14 - 2014-03-26 23:36 - 00000448 ____H () C:\Windows\Tasks\SW.Booster-S-1935984173.job
2014-07-02 05:57 - 2011-04-12 10:34 - 00689920 _____ () C:\Windows\system32\perfh005.dat
2014-07-02 05:57 - 2011-04-12 10:34 - 00150656 _____ () C:\Windows\system32\perfc005.dat
2014-07-02 05:57 - 2009-07-14 07:13 - 01637298 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-02 05:11 - 2012-02-28 23:17 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{688A73AE-B742-4599-AB00-4D8F743FCC7C}
2014-07-02 05:11 - 2009-07-14 06:45 - 00024720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-02 05:11 - 2009-07-14 06:45 - 00024720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-02 05:10 - 2013-05-04 14:12 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Seznam.cz
2014-07-02 05:04 - 2013-08-22 04:57 - 00269396 _____ () C:\Windows\PFRO.log
2014-07-02 05:04 - 2013-07-27 06:57 - 00053454 _____ () C:\Windows\setupact.log
2014-07-02 05:04 - 2012-02-29 01:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-02 05:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 17:12 - 2014-03-22 23:05 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-07-01 16:36 - 2012-03-16 20:00 - 00000000 ____D () C:\Users\All\Desktop\Štěpán
2014-07-01 16:34 - 2013-10-21 16:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\Documents\The Movies
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\AppData\Roaming\Lionhead Studios
2014-07-01 10:40 - 2013-05-08 18:48 - 00000000 ____D () C:\Users\All\AppData\Roaming\.minecraft
2014-07-01 10:39 - 2014-07-01 10:39 - 00000000 __SHD () C:\Windows\ftpcache
2014-07-01 10:39 - 2013-08-15 08:22 - 00197054 _____ () C:\Windows\DirectX.log
2014-07-01 10:39 - 2012-03-12 08:13 - 00000000 ____D () C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-07-01 10:31 - 2014-07-01 10:31 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-07-01 10:31 - 2012-02-28 23:57 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-07-01 10:30 - 2014-07-01 10:30 - 00000341 _____ () C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Goodgame Empire.lnk
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\149b46d4a102c0304583931ceaa3f0bf19785ee3
2014-07-01 10:30 - 2014-07-01 10:29 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Pokki
2014-07-01 10:29 - 2014-07-01 10:29 - 00000000 ____D () C:\Users\All\AppData\Roaming\PowerISO
2014-07-01 10:28 - 2014-07-01 10:28 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\OpenCandy
2014-07-01 10:27 - 2014-07-01 10:27 - 06139136 _____ (Power Software Ltd) C:\Users\All\Downloads\PowerISO5.exe
2014-07-01 10:23 - 2012-04-20 17:03 - 00000000 ____D () C:\Users\All\AppData\Roaming\DAEMON Tools Lite
2014-07-01 10:13 - 2014-07-01 07:26 - 2947751995 _____ () C:\Users\All\Downloads\The-Movies-(PC).rar
2014-06-30 18:30 - 2012-06-30 18:56 - 00000000 ____D () C:\Users\All\AppData\Roaming\Skype
2014-06-30 13:56 - 2014-06-30 13:01 - 00000000 ____D () C:\Users\Home_PC\Documents\Agot
2014-06-30 13:01 - 2014-06-30 13:01 - 00000038 _____ () C:\Windows\AviSplitter.INI
2014-06-29 20:55 - 2013-08-15 08:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Awesomium
2014-06-29 17:51 - 2012-09-22 07:03 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\uTorrent
2014-06-29 13:30 - 2014-06-29 13:30 - 00000000 ____D () C:\Users\All\AppData\Local\Game Dev Tycoon - Steam
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{F216BCA2-B789-4FAA-AACA-D86803803093}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{32AA287E-D7A9-4412-86B9-F4AD102EDBD0}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{233A2164-5832-424A-9E99-8B5E4DC7AA04}
2014-06-29 13:27 - 2014-05-27 08:10 - 00000000 ____D () C:\Users\All\AppData\Roaming\SpaceEngineers
2014-06-29 09:18 - 2012-06-30 18:24 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Skype
2014-06-28 19:33 - 2012-03-11 11:10 - 00000000 ____D () C:\Users\All\Documents\My Games
2014-06-28 19:32 - 2014-06-28 19:30 - 44090153 _____ () C:\Users\All\Downloads\Democracy-3.rar
2014-06-28 18:10 - 2012-03-10 23:04 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-06-28 18:08 - 2014-06-28 18:08 - 00000222 _____ () C:\Users\Home_PC\Desktop\Space Engineers.url
2014-06-28 18:08 - 2012-08-05 09:37 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-28 15:25 - 2014-06-28 15:25 - 00000222 _____ () C:\Users\Home_PC\Desktop\Game Dev Tycoon.url
2014-06-28 15:25 - 2014-06-28 15:25 - 00000221 _____ () C:\Users\Home_PC\Desktop\Far Cry.url
2014-06-28 15:23 - 2014-06-14 10:40 - 00000000 ____D () C:\Program Files (x86)\Game Dev Tycoon
2014-06-28 08:13 - 2014-06-28 08:13 - 00364256 _____ () C:\Users\Home_PC\Downloads\crl.rar
2014-06-26 21:00 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\SpaceEngineers
2014-06-26 10:52 - 2014-06-26 10:52 - 05560451 _____ () C:\Users\All\Downloads\cz_bfme2.zip
2014-06-25 19:57 - 2014-05-08 20:00 - 00000000 ____D () C:\Users\Home_PC\Desktop\JDownloader
2014-06-25 18:09 - 2014-05-23 20:44 - 00001119 _____ () C:\Users\Public\Desktop\Trials Fusion.lnk
2014-06-25 18:05 - 2014-03-22 23:05 - 00001171 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-06-25 18:05 - 2012-02-29 00:08 - 00000000 ____D () C:\Users\Home_PC
2014-06-25 11:15 - 2014-06-25 10:48 - 00000000 ____D () C:\Program Files (x86)\WB Games
2014-06-24 22:04 - 2014-06-24 21:57 - 00000000 ____D () C:\Program Files (x86)\Worms Armageddon - New Edition
2014-06-24 22:01 - 2014-06-24 22:01 - 07315456 _____ () C:\Users\All\Downloads\WAPatch.exe
2014-06-24 21:46 - 2014-06-24 21:46 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\V-Games
2014-06-24 21:45 - 2014-06-24 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alenka 2 - Kouzelná země
2014-06-24 17:50 - 2014-06-24 17:50 - 00001505 _____ () C:\Users\All\Desktop\firefox – zástupce.lnk
2014-06-23 20:44 - 2014-06-23 20:44 - 00086339 _____ () C:\Users\All\Downloads\American-McGee's-Alice-cestina---score-242.rar
2014-06-23 20:33 - 2014-06-23 20:33 - 00001739 _____ () C:\Users\Public\Desktop\American McGee's Alice(tm).lnk
2014-06-23 20:30 - 2014-06-23 20:30 - 01024628 _____ () C:\Users\All\Downloads\americanmcgeesalicecz.exe
2014-06-23 14:00 - 2014-06-23 12:32 - 1556761380 _____ () C:\Users\All\Downloads\STEAM_CZ_L.A.-Noire-complet.rar
2014-06-19 15:16 - 2014-05-02 07:04 - 00000000 ____D () C:\Program Files (x86)\TopCD
2014-06-19 15:01 - 2014-06-19 15:01 - 00000000 ____D () C:\Users\All\Documents\East India Company
2014-06-18 18:03 - 2012-03-12 07:47 - 00000000 ____D () C:\ProgramData\Origin
2014-06-18 16:34 - 2013-01-15 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team17
2014-06-18 16:02 - 2014-06-18 16:02 - 00000000 ____D () C:\Program Files (x86)\Team17
2014-06-18 16:02 - 2013-06-13 13:55 - 00047104 _____ () C:\Windows\SysWOW64\KMVIDC32.DLL
2014-06-18 07:29 - 2013-07-04 06:58 - 00000000 ____D () C:\Users\All\AppData\Local\Game Dev Tycoon
2014-06-18 07:24 - 2014-05-23 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-06-18 07:24 - 2012-12-23 15:19 - 00000000 ____D () C:\ProgramData\Ubisoft
2014-06-17 10:12 - 2013-08-29 11:43 - 00000000 ____D () C:\Users\All\Documents\Electronic Arts
2014-06-17 09:22 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-17 09:21 - 2013-03-25 08:11 - 00000000 ____D () C:\Users\All\AppData\Roaming\Tropico 3
2014-06-17 07:30 - 2014-06-17 07:30 - 00000000 ____D () C:\Users\All\Documents\Amnesia
2014-06-16 14:14 - 2014-06-16 14:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears of War
2014-06-16 14:07 - 2014-06-16 14:07 - 00000000 ____D () C:\Users\All\AppData\Roaming\Microsoft Games
2014-06-16 07:09 - 2014-06-16 07:09 - 00000000 ____D () C:\Score
2014-06-15 08:39 - 2014-06-13 14:32 - 00000000 ____D () C:\Users\All\AppData\Roaming\Tropico3
2014-06-14 14:27 - 2014-06-14 14:27 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master(1).zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master.zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00348133 _____ () C:\Users\All\Downloads\Camelot_Latest.zip
2014-06-14 14:03 - 2014-06-14 14:03 - 00009790 _____ () C:\Users\All\Downloads\CheatMod.zip
2014-06-14 11:00 - 2014-06-14 10:57 - 00000000 ____D () C:\Users\Home_PC\Desktop\Bazény Urbánek
2014-06-14 10:52 - 2014-06-14 10:52 - 00087467 _____ () C:\Users\All\Downloads\Client Mod-8-0-5-1.zip
2014-06-13 19:09 - 2013-08-15 09:04 - 00000000 ____D () C:\Users\All\AppData\Roaming\Awesomium
2014-06-12 06:15 - 2014-03-20 06:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 15:36 - 2014-05-10 14:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-06-11 14:51 - 2014-06-11 14:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 22:59 - 2014-06-08 22:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Hardcoded Software
2014-06-08 22:52 - 2014-06-03 08:53 - 00000000 ____D () C:\Users\Home_PC\Desktop\flash
2014-06-08 22:42 - 2014-06-08 22:42 - 00001147 _____ () C:\Users\Public\Desktop\dupeGuru.lnk
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Hardcoded Software
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Program Files (x86)\Hardcoded Software
2014-06-08 22:42 - 2012-03-10 23:04 - 00000000 ____D () C:\Users\Home_PC\Documents\gothic3
2014-06-08 22:41 - 2014-06-08 22:41 - 12296192 _____ () C:\Users\Home_PC\Downloads\dupeguru_win_3.8.0.msi
2014-06-02 12:41 - 2013-01-30 18:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-02 12:41 - 2012-06-30 18:24 - 00000000 ____D () C:\ProgramData\Skype
Some content of TEMP:
====================
C:\Users\All\AppData\Local\Temp\icqsetup.exe
C:\Users\Home_PC\AppData\Local\Temp\AutoRun.exe
C:\Users\Home_PC\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Home_PC\AppData\Local\Temp\EAInstall.dll
C:\Users\Home_PC\AppData\Local\Temp\eauninstall.exe
C:\Users\Home_PC\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\Home_PC\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\Home_PC\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\Home_PC\AppData\Local\Temp\nssEED6.tmp.exe
C:\Users\Home_PC\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Home_PC\AppData\Local\Temp\nvStInst.exe
C:\Users\Home_PC\AppData\Local\Temp\safeguard.exe
C:\Users\Home_PC\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe
C:\Users\Home_PC\AppData\Local\Temp\ubi2147.tmp.exe
C:\Users\Home_PC\AppData\Local\Temp\_is2040.exe
C:\Users\Home_PC\AppData\Local\Temp\_is3738.exe
C:\Users\Home_PC\AppData\Local\Temp\_is518B.exe
C:\Users\Home_PC\AppData\Local\Temp\_is5AED.exe
C:\Users\Home_PC\AppData\Local\Temp\_is5C9A.exe
C:\Users\Home_PC\AppData\Local\Temp\_is7DF.exe
C:\Users\Home_PC\AppData\Local\Temp\_is7FCC.exe
C:\Users\Home_PC\AppData\Local\Temp\_is952F.exe
C:\Users\Home_PC\AppData\Local\Temp\_is9575.exe
C:\Users\Home_PC\AppData\Local\Temp\_isA08.exe
C:\Users\Home_PC\AppData\Local\Temp\_isB5.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-28 07:52
==================== End Of Log ============================
prosím o preventivní kontrolu, víc uživatelů a navíc zřejmě syn něco stáhl (samozřejmě popírá)
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by Home_PC (administrator) on GAME-PC on 02-07-2014 06:20:32
Running from C:\Users\Home_PC\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe
(Intel Corporation) C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Users\Home_PC\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Home_PC\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
() C:\Users\All\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\All\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-10-22] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-10-22] (Crawler.com)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ipTray.exe] => C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe [1632456 2011-11-10] (Intel(R) Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1061960 2013-03-21] ()
HKLM-x32\...\Run: [4StoryPrePatch] => D:\__save league of legends\4Story_CZ\PrePatch.exe [327680 2013-02-19] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-15] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Home_PC\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Home_PC\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [Facebook Update] => "C:\Users\All\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [GarenaPlus] => "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [cz.seznam.software.szndesktop] => C:\Users\All\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [cz.seznam.software.autoupdate] => C:\Users\All\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [Clownfish] => [X]
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\MountPoints2: J - J:\Setup.exe
Startup: C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: http=http://127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0B76631B-65DE-4001-8522-FD0BFD98CEB6} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTe ... 3&tsp=5251
SearchScopes: HKCU - {245388E3-CBA9-42EF-8189-C4EAC4A8E535} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {4D76A73F-6822-43D9-B461-A10E3BF8587B} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKCU - {57311830-C3D9-4AC7-931A-3AAB685B4874} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKCU - {7D7B63EA-BCE9-4931-A81C-812117D69BE4} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {863F9688-4707-4F28-8F4F-A4AA12BF8EB5} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKCU - {88249AB9-9129-4AD5-93AC-7F8B889E2B9F} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {C777CC1F-C2AE-4987-99B9-F11A30F764DA} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
SearchScopes: HKCU - {D161C07C-0991-4F4E-BD98-E749442BBF1E} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
SearchScopes: HKCU - {E3C9BE4C-D394-4BC1-910C-92580DB819D1} URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF user.js: detected! => C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppluginrichmediaplayer.dll ()
FF SearchPlugin: C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Adblock Plus - C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF Extension: BitAccelerator - C:\Program Files (x86)\Mozilla Firefox\extensions\{5ddeb737-082c-48fb-8c06-aa4b38d61e5f} [2014-06-11]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-11]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YoutubeAdblocker) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eokbdddiieiefmodhninbnkilbeeacaj [2014-03-29]
CHR Extension: (SNT) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gglbfdpdbkaapilmhggbajdfipdokfbm [2014-03-29]
CHR Extension: (Enhancements for Gmail) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn [2014-03-26]
CHR Extension: (SNT) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\negaakjdoglkcnajdjdbhbdjafmfhgfh [2014-03-26]
CHR Extension: (YoutubeAdblocker) - C:\Users\Home_PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngfdkijcifejgoebdonbkilhfkggflih [2014-03-26]
CHR HKLM-x32\...\Chrome\Extension: [naipdapbimiiikbbgjcpbgmfhnlbagpj] - C:\Users\Home_PC\AppData\Local\Temp\naipdapbimiiikbbgjcpbgmfhnlbagpj.crx [2014-03-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [484592 2013-09-27] (BitRaider, LLC)
R2 HiPatchService; d:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IduService; C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe [124616 2011-11-10] (Intel(R) Corporation)
R2 Intel(R) Desktop Boards FSC Application Service; C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe [61440 2011-11-10] (Intel Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-17] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-10-22] (Crawler.com)
==================== Drivers (Whitelisted) ====================
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2013-09-27] (BitRaider)
R3 cpuio; C:\Windows\SysWOW64\Drivers\cpuiox64.sys [15384 2012-02-29] (Intel Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-13] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)
R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [867064 2012-11-14] (Duplex Secure Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-03-22] (Windows (R) Win 7 DDK provider)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\Documents\The Movies
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\AppData\Roaming\Lionhead Studios
2014-07-01 10:39 - 2014-07-01 10:39 - 00000000 __SHD () C:\Windows\ftpcache
2014-07-01 10:31 - 2014-07-01 10:31 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-07-01 10:30 - 2014-07-01 10:30 - 00000341 _____ () C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Goodgame Empire.lnk
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\149b46d4a102c0304583931ceaa3f0bf19785ee3
2014-07-01 10:29 - 2014-07-01 10:30 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Pokki
2014-07-01 10:29 - 2014-07-01 10:29 - 00000000 ____D () C:\Users\All\AppData\Roaming\PowerISO
2014-07-01 10:28 - 2014-07-01 10:28 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\OpenCandy
2014-07-01 10:27 - 2014-07-01 10:27 - 06139136 _____ (Power Software Ltd) C:\Users\All\Downloads\PowerISO5.exe
2014-07-01 07:26 - 2014-07-01 10:13 - 2947751995 _____ () C:\Users\All\Downloads\The-Movies-(PC).rar
2014-06-30 13:01 - 2014-06-30 13:56 - 00000000 ____D () C:\Users\Home_PC\Documents\Agot
2014-06-30 13:01 - 2014-06-30 13:01 - 00000038 _____ () C:\Windows\AviSplitter.INI
2014-06-29 13:30 - 2014-06-29 13:30 - 00000000 ____D () C:\Users\All\AppData\Local\Game Dev Tycoon - Steam
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{F216BCA2-B789-4FAA-AACA-D86803803093}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{32AA287E-D7A9-4412-86B9-F4AD102EDBD0}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{233A2164-5832-424A-9E99-8B5E4DC7AA04}
2014-06-28 19:30 - 2014-06-28 19:32 - 44090153 _____ () C:\Users\All\Downloads\Democracy-3.rar
2014-06-28 18:08 - 2014-06-28 18:08 - 00000222 _____ () C:\Users\Home_PC\Desktop\Space Engineers.url
2014-06-28 15:25 - 2014-06-28 15:25 - 00000222 _____ () C:\Users\Home_PC\Desktop\Game Dev Tycoon.url
2014-06-28 15:25 - 2014-06-28 15:25 - 00000221 _____ () C:\Users\Home_PC\Desktop\Far Cry.url
2014-06-28 08:13 - 2014-06-28 08:13 - 00364256 _____ () C:\Users\Home_PC\Downloads\crl.rar
2014-06-26 20:59 - 2014-06-26 21:00 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\SpaceEngineers
2014-06-26 10:52 - 2014-06-26 10:52 - 05560451 _____ () C:\Users\All\Downloads\cz_bfme2.zip
2014-06-25 10:48 - 2014-06-25 11:15 - 00000000 ____D () C:\Program Files (x86)\WB Games
2014-06-24 22:01 - 2014-06-24 22:01 - 07315456 _____ () C:\Users\All\Downloads\WAPatch.exe
2014-06-24 21:57 - 2014-06-24 22:04 - 00000000 ____D () C:\Program Files (x86)\Worms Armageddon - New Edition
2014-06-24 21:46 - 2014-06-24 21:46 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\V-Games
2014-06-24 21:45 - 2014-06-24 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alenka 2 - Kouzelná země
2014-06-24 17:50 - 2014-06-24 17:50 - 00001505 _____ () C:\Users\All\Desktop\firefox – zástupce.lnk
2014-06-23 20:44 - 2014-06-23 20:44 - 00086339 _____ () C:\Users\All\Downloads\American-McGee's-Alice-cestina---score-242.rar
2014-06-23 20:33 - 2014-06-23 20:33 - 00001739 _____ () C:\Users\Public\Desktop\American McGee's Alice(tm).lnk
2014-06-23 20:30 - 2014-06-23 20:30 - 01024628 _____ () C:\Users\All\Downloads\americanmcgeesalicecz.exe
2014-06-23 12:32 - 2014-06-23 14:00 - 1556761380 _____ () C:\Users\All\Downloads\STEAM_CZ_L.A.-Noire-complet.rar
2014-06-19 15:01 - 2014-06-19 15:01 - 00000000 ____D () C:\Users\All\Documents\East India Company
2014-06-18 16:02 - 2014-06-18 16:02 - 00000000 ____D () C:\Program Files (x86)\Team17
2014-06-17 07:30 - 2014-06-17 07:30 - 00000000 ____D () C:\Users\All\Documents\Amnesia
2014-06-16 14:10 - 2014-06-16 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears of War
2014-06-16 14:07 - 2014-06-16 14:07 - 00000000 ____D () C:\Users\All\AppData\Roaming\Microsoft Games
2014-06-16 07:09 - 2014-06-16 07:09 - 00000000 ____D () C:\Score
2014-06-14 14:27 - 2014-06-14 14:27 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master(1).zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master.zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00348133 _____ () C:\Users\All\Downloads\Camelot_Latest.zip
2014-06-14 14:03 - 2014-06-14 14:03 - 00009790 _____ () C:\Users\All\Downloads\CheatMod.zip
2014-06-14 10:57 - 2014-06-14 11:00 - 00000000 ____D () C:\Users\Home_PC\Desktop\Bazény Urbánek
2014-06-14 10:52 - 2014-06-14 10:52 - 00087467 _____ () C:\Users\All\Downloads\Client Mod-8-0-5-1.zip
2014-06-14 10:40 - 2014-06-28 15:23 - 00000000 ____D () C:\Program Files (x86)\Game Dev Tycoon
2014-06-13 14:32 - 2014-06-15 08:39 - 00000000 ____D () C:\Users\All\AppData\Roaming\Tropico3
2014-06-11 14:50 - 2014-06-11 14:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 22:59 - 2014-06-08 22:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Hardcoded Software
2014-06-08 22:42 - 2014-06-08 22:42 - 00001147 _____ () C:\Users\Public\Desktop\dupeGuru.lnk
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Hardcoded Software
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Program Files (x86)\Hardcoded Software
2014-06-08 22:41 - 2014-06-08 22:41 - 12296192 _____ () C:\Users\Home_PC\Downloads\dupeguru_win_3.8.0.msi
2014-06-03 08:53 - 2014-06-08 22:52 - 00000000 ____D () C:\Users\Home_PC\Desktop\flash
==================== One Month Modified Files and Folders =======
2014-07-02 06:20 - 2014-04-16 18:49 - 00019347 _____ () C:\Users\Home_PC\Desktop\FRST.txt
2014-07-02 06:20 - 2014-03-20 20:43 - 00000000 ____D () C:\FRST
2014-07-02 06:19 - 2014-04-16 18:49 - 00000000 ____D () C:\Users\Home_PC\Desktop\FRST-OlderVersion
2014-07-02 06:19 - 2014-03-20 20:41 - 02083840 _____ (Farbar) C:\Users\Home_PC\Desktop\FRST64.exe
2014-07-02 06:19 - 2013-05-04 15:12 - 00000000 ____D () C:\Users\All\AppData\Roaming\Seznam.cz
2014-07-02 06:19 - 2012-02-29 00:08 - 01725676 _____ () C:\Windows\WindowsUpdate.log
2014-07-02 06:18 - 2013-05-27 06:59 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-02 06:18 - 2012-02-28 23:26 - 00001274 _____ () C:\Users\Public\Desktop\Zoner Photo Studio 13 x64.lnk
2014-07-02 06:14 - 2014-03-26 23:36 - 00000448 ____H () C:\Windows\Tasks\SW.Booster-S-1935984173.job
2014-07-02 05:57 - 2011-04-12 10:34 - 00689920 _____ () C:\Windows\system32\perfh005.dat
2014-07-02 05:57 - 2011-04-12 10:34 - 00150656 _____ () C:\Windows\system32\perfc005.dat
2014-07-02 05:57 - 2009-07-14 07:13 - 01637298 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-02 05:11 - 2012-02-28 23:17 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{688A73AE-B742-4599-AB00-4D8F743FCC7C}
2014-07-02 05:11 - 2009-07-14 06:45 - 00024720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-02 05:11 - 2009-07-14 06:45 - 00024720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-02 05:10 - 2013-05-04 14:12 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Seznam.cz
2014-07-02 05:04 - 2013-08-22 04:57 - 00269396 _____ () C:\Windows\PFRO.log
2014-07-02 05:04 - 2013-07-27 06:57 - 00053454 _____ () C:\Windows\setupact.log
2014-07-02 05:04 - 2012-02-29 01:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-02 05:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 17:12 - 2014-03-22 23:05 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-07-01 16:36 - 2012-03-16 20:00 - 00000000 ____D () C:\Users\All\Desktop\Štěpán
2014-07-01 16:34 - 2013-10-21 16:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\Documents\The Movies
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\All\AppData\Roaming\Lionhead Studios
2014-07-01 10:40 - 2013-05-08 18:48 - 00000000 ____D () C:\Users\All\AppData\Roaming\.minecraft
2014-07-01 10:39 - 2014-07-01 10:39 - 00000000 __SHD () C:\Windows\ftpcache
2014-07-01 10:39 - 2013-08-15 08:22 - 00197054 _____ () C:\Windows\DirectX.log
2014-07-01 10:39 - 2012-03-12 08:13 - 00000000 ____D () C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-07-01 10:31 - 2014-07-01 10:31 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-07-01 10:31 - 2012-02-28 23:57 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-07-01 10:30 - 2014-07-01 10:30 - 00000341 _____ () C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Goodgame Empire.lnk
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki
2014-07-01 10:30 - 2014-07-01 10:30 - 00000000 ____D () C:\149b46d4a102c0304583931ceaa3f0bf19785ee3
2014-07-01 10:30 - 2014-07-01 10:29 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Pokki
2014-07-01 10:29 - 2014-07-01 10:29 - 00000000 ____D () C:\Users\All\AppData\Roaming\PowerISO
2014-07-01 10:28 - 2014-07-01 10:28 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\OpenCandy
2014-07-01 10:27 - 2014-07-01 10:27 - 06139136 _____ (Power Software Ltd) C:\Users\All\Downloads\PowerISO5.exe
2014-07-01 10:23 - 2012-04-20 17:03 - 00000000 ____D () C:\Users\All\AppData\Roaming\DAEMON Tools Lite
2014-07-01 10:13 - 2014-07-01 07:26 - 2947751995 _____ () C:\Users\All\Downloads\The-Movies-(PC).rar
2014-06-30 18:30 - 2012-06-30 18:56 - 00000000 ____D () C:\Users\All\AppData\Roaming\Skype
2014-06-30 13:56 - 2014-06-30 13:01 - 00000000 ____D () C:\Users\Home_PC\Documents\Agot
2014-06-30 13:01 - 2014-06-30 13:01 - 00000038 _____ () C:\Windows\AviSplitter.INI
2014-06-29 20:55 - 2013-08-15 08:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Awesomium
2014-06-29 17:51 - 2012-09-22 07:03 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\uTorrent
2014-06-29 13:30 - 2014-06-29 13:30 - 00000000 ____D () C:\Users\All\AppData\Local\Game Dev Tycoon - Steam
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{F216BCA2-B789-4FAA-AACA-D86803803093}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{32AA287E-D7A9-4412-86B9-F4AD102EDBD0}
2014-06-29 13:29 - 2014-06-29 13:29 - 00002936 _____ () C:\Windows\System32\Tasks\{233A2164-5832-424A-9E99-8B5E4DC7AA04}
2014-06-29 13:27 - 2014-05-27 08:10 - 00000000 ____D () C:\Users\All\AppData\Roaming\SpaceEngineers
2014-06-29 09:18 - 2012-06-30 18:24 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Skype
2014-06-28 19:33 - 2012-03-11 11:10 - 00000000 ____D () C:\Users\All\Documents\My Games
2014-06-28 19:32 - 2014-06-28 19:30 - 44090153 _____ () C:\Users\All\Downloads\Democracy-3.rar
2014-06-28 18:10 - 2012-03-10 23:04 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-06-28 18:08 - 2014-06-28 18:08 - 00000222 _____ () C:\Users\Home_PC\Desktop\Space Engineers.url
2014-06-28 18:08 - 2012-08-05 09:37 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-28 15:25 - 2014-06-28 15:25 - 00000222 _____ () C:\Users\Home_PC\Desktop\Game Dev Tycoon.url
2014-06-28 15:25 - 2014-06-28 15:25 - 00000221 _____ () C:\Users\Home_PC\Desktop\Far Cry.url
2014-06-28 15:23 - 2014-06-14 10:40 - 00000000 ____D () C:\Program Files (x86)\Game Dev Tycoon
2014-06-28 08:13 - 2014-06-28 08:13 - 00364256 _____ () C:\Users\Home_PC\Downloads\crl.rar
2014-06-26 21:00 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\SpaceEngineers
2014-06-26 10:52 - 2014-06-26 10:52 - 05560451 _____ () C:\Users\All\Downloads\cz_bfme2.zip
2014-06-25 19:57 - 2014-05-08 20:00 - 00000000 ____D () C:\Users\Home_PC\Desktop\JDownloader
2014-06-25 18:09 - 2014-05-23 20:44 - 00001119 _____ () C:\Users\Public\Desktop\Trials Fusion.lnk
2014-06-25 18:05 - 2014-03-22 23:05 - 00001171 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-06-25 18:05 - 2012-02-29 00:08 - 00000000 ____D () C:\Users\Home_PC
2014-06-25 11:15 - 2014-06-25 10:48 - 00000000 ____D () C:\Program Files (x86)\WB Games
2014-06-24 22:04 - 2014-06-24 21:57 - 00000000 ____D () C:\Program Files (x86)\Worms Armageddon - New Edition
2014-06-24 22:01 - 2014-06-24 22:01 - 07315456 _____ () C:\Users\All\Downloads\WAPatch.exe
2014-06-24 21:46 - 2014-06-24 21:46 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\V-Games
2014-06-24 21:45 - 2014-06-24 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alenka 2 - Kouzelná země
2014-06-24 17:50 - 2014-06-24 17:50 - 00001505 _____ () C:\Users\All\Desktop\firefox – zástupce.lnk
2014-06-23 20:44 - 2014-06-23 20:44 - 00086339 _____ () C:\Users\All\Downloads\American-McGee's-Alice-cestina---score-242.rar
2014-06-23 20:33 - 2014-06-23 20:33 - 00001739 _____ () C:\Users\Public\Desktop\American McGee's Alice(tm).lnk
2014-06-23 20:30 - 2014-06-23 20:30 - 01024628 _____ () C:\Users\All\Downloads\americanmcgeesalicecz.exe
2014-06-23 14:00 - 2014-06-23 12:32 - 1556761380 _____ () C:\Users\All\Downloads\STEAM_CZ_L.A.-Noire-complet.rar
2014-06-19 15:16 - 2014-05-02 07:04 - 00000000 ____D () C:\Program Files (x86)\TopCD
2014-06-19 15:01 - 2014-06-19 15:01 - 00000000 ____D () C:\Users\All\Documents\East India Company
2014-06-18 18:03 - 2012-03-12 07:47 - 00000000 ____D () C:\ProgramData\Origin
2014-06-18 16:34 - 2013-01-15 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team17
2014-06-18 16:02 - 2014-06-18 16:02 - 00000000 ____D () C:\Program Files (x86)\Team17
2014-06-18 16:02 - 2013-06-13 13:55 - 00047104 _____ () C:\Windows\SysWOW64\KMVIDC32.DLL
2014-06-18 07:29 - 2013-07-04 06:58 - 00000000 ____D () C:\Users\All\AppData\Local\Game Dev Tycoon
2014-06-18 07:24 - 2014-05-23 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-06-18 07:24 - 2012-12-23 15:19 - 00000000 ____D () C:\ProgramData\Ubisoft
2014-06-17 10:12 - 2013-08-29 11:43 - 00000000 ____D () C:\Users\All\Documents\Electronic Arts
2014-06-17 09:22 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-17 09:21 - 2013-03-25 08:11 - 00000000 ____D () C:\Users\All\AppData\Roaming\Tropico 3
2014-06-17 07:30 - 2014-06-17 07:30 - 00000000 ____D () C:\Users\All\Documents\Amnesia
2014-06-16 14:14 - 2014-06-16 14:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears of War
2014-06-16 14:07 - 2014-06-16 14:07 - 00000000 ____D () C:\Users\All\AppData\Roaming\Microsoft Games
2014-06-16 07:09 - 2014-06-16 07:09 - 00000000 ____D () C:\Score
2014-06-15 08:39 - 2014-06-13 14:32 - 00000000 ____D () C:\Users\All\AppData\Roaming\Tropico3
2014-06-14 14:27 - 2014-06-14 14:27 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master(1).zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00915638 _____ () C:\Users\All\Downloads\CompetitorMod-master.zip
2014-06-14 14:04 - 2014-06-14 14:04 - 00348133 _____ () C:\Users\All\Downloads\Camelot_Latest.zip
2014-06-14 14:03 - 2014-06-14 14:03 - 00009790 _____ () C:\Users\All\Downloads\CheatMod.zip
2014-06-14 11:00 - 2014-06-14 10:57 - 00000000 ____D () C:\Users\Home_PC\Desktop\Bazény Urbánek
2014-06-14 10:52 - 2014-06-14 10:52 - 00087467 _____ () C:\Users\All\Downloads\Client Mod-8-0-5-1.zip
2014-06-13 19:09 - 2013-08-15 09:04 - 00000000 ____D () C:\Users\All\AppData\Roaming\Awesomium
2014-06-12 06:15 - 2014-03-20 06:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 15:36 - 2014-05-10 14:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-06-11 14:51 - 2014-06-11 14:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 22:59 - 2014-06-08 22:59 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Hardcoded Software
2014-06-08 22:52 - 2014-06-03 08:53 - 00000000 ____D () C:\Users\Home_PC\Desktop\flash
2014-06-08 22:42 - 2014-06-08 22:42 - 00001147 _____ () C:\Users\Public\Desktop\dupeGuru.lnk
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Hardcoded Software
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2014-06-08 22:42 - 2014-06-08 22:42 - 00000000 ____D () C:\Program Files (x86)\Hardcoded Software
2014-06-08 22:42 - 2012-03-10 23:04 - 00000000 ____D () C:\Users\Home_PC\Documents\gothic3
2014-06-08 22:41 - 2014-06-08 22:41 - 12296192 _____ () C:\Users\Home_PC\Downloads\dupeguru_win_3.8.0.msi
2014-06-02 12:41 - 2013-01-30 18:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-02 12:41 - 2012-06-30 18:24 - 00000000 ____D () C:\ProgramData\Skype
Some content of TEMP:
====================
C:\Users\All\AppData\Local\Temp\icqsetup.exe
C:\Users\Home_PC\AppData\Local\Temp\AutoRun.exe
C:\Users\Home_PC\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Home_PC\AppData\Local\Temp\EAInstall.dll
C:\Users\Home_PC\AppData\Local\Temp\eauninstall.exe
C:\Users\Home_PC\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\Home_PC\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\Home_PC\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\Home_PC\AppData\Local\Temp\nssEED6.tmp.exe
C:\Users\Home_PC\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Home_PC\AppData\Local\Temp\nvStInst.exe
C:\Users\Home_PC\AppData\Local\Temp\safeguard.exe
C:\Users\Home_PC\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe
C:\Users\Home_PC\AppData\Local\Temp\ubi2147.tmp.exe
C:\Users\Home_PC\AppData\Local\Temp\_is2040.exe
C:\Users\Home_PC\AppData\Local\Temp\_is3738.exe
C:\Users\Home_PC\AppData\Local\Temp\_is518B.exe
C:\Users\Home_PC\AppData\Local\Temp\_is5AED.exe
C:\Users\Home_PC\AppData\Local\Temp\_is5C9A.exe
C:\Users\Home_PC\AppData\Local\Temp\_is7DF.exe
C:\Users\Home_PC\AppData\Local\Temp\_is7FCC.exe
C:\Users\Home_PC\AppData\Local\Temp\_is952F.exe
C:\Users\Home_PC\AppData\Local\Temp\_is9575.exe
C:\Users\Home_PC\AppData\Local\Temp\_isA08.exe
C:\Users\Home_PC\AppData\Local\Temp\_isB5.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-28 07:52
==================== End Of Log ============================
