VIRY.CZ

Dobrý den mám problém s internetovým prohlížečem google chrome vyskakování oken i přes zákaz půlky slov označené jako odkaz někam do neznáma zpomalený počítač výší výkon při "nicnedělání" , tak prosím o kontorolu logu. Pokud to nepomůže asi nezbyde než reinstalace což se mi opravdu moc nechce. LOG FRST :

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014
Ran by JelenJelcin (administrator) on JELENJELCIN-PC on 11-07-2014 23:13:04
Running from C:\Users\JelenJelcin\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(ASUSTeK COMPUTER INC.) C:\Windows\System32\ATKFUSService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\EasyVPN\crdphService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\COMODO\EasyVPN\Vpnservice.exe
(COMODO) C:\Program Files\COMODO\EasyVPN\crdphService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Program Files\ASUS\GamerOSD\ATKFastUserSwitching.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Winportal) C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-10.exe
() C:\Program Files (x86)\DivX\DivX Player\DivX Player.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Winportal) C:\Program Files (x86)\Shop_an_Upi_1.6\Shop_an_Upi_1.6-nova.exe
() C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-11.exe
(MachineGames) C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\JelenJelcin\Desktop\FRSTLauncher (3).exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotator.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6628968 2011-05-03] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [4081008 2012-03-07] (ESET)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ASUSGamerOSD] => C:\Program Files (x86)\ASUS\GamerOSD\GamerOSD.exe [380928 2009-07-30] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl11] => C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe [234792 2011-04-20] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NSU_agent] => C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [832272 2014-06-23] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Google Update] => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-29] (Google Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1754816 2014-05-29] (Valve Corporation)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] (DT Soft Ltd)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-17] ()
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Xfire] => C:\Program Files (x86)\Xfire2\Xfire.exe [4816224 2013-06-21] (Xfire Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [] => [X]
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Keyboard Inf.] => C:\Users\JelenJelcin\AppData\Roaming\WinRAR\msdn.exe [235908 2014-04-05] ()
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [uTorrent] => C:\Users\JelenJelcin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-03] (BitTorrent Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [EADM] => C:\Origin\Origin.exe [3598680 2014-05-29] (Electronic Arts)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {cc735066-e041-11e3-8d0b-8c89a5106c2e} - F:\SETUP.EXE
AppInit_DLLs-x32: => "" File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\JelenJelcin\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files\Xfire2\Xfire.exe (Xfire Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN11459&g ... 21-332&t=4
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF4452568CD62CC01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
BHO: Shop_an_Upi_1.6 - {11111111-1111-1111-1111-110411281122} - C:\Program Files (x86)\Shop_an_Upi_1.6\Shop_an_Upi_1.6-bho64.dll (Winportal)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Shop_an_Upi_1.6 - {11111111-1111-1111-1111-110411281122} - C:\Program Files (x86)\Shop_an_Upi_1.6\Shop_an_Upi_1.6-bho.dll (Winportal)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{7C4A7198-9776-4AD4-A3B8-6F7CB2C4045B}: [NameServer]10.11.0.251,10.11.1.101

FireFox:
========
FF ProfilePath: C:\Users\JelenJelcin\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default
FF SelectedSearchEngine: Seznam
FF Homepage: hxxp://seznam.cz
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: NitroPDF - C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\JelenJelcin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\JelenJelcin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\JelenJelcin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Shop_an_Upi_1.6 - C:\Users\JelenJelcin\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default\Extensions\a346f15b-f72e-4205-b29d-52ad46792214@bf4b3822-f1de-4b29-8f70-c0a27f6ca2b8.com [2014-07-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-06-06]

Chrome:
=======
CHR HomePage: hxxp://mysearch.avg.com/?cid={EE0489F0-4042-48C9-B7BA-45BDFB6539E7}&mid=da284dd5022643f9b78ccbe1e12a5651-3fc28f6d020ad6bb5380e058c8f5de7b60e0e7e7&lang=en&ds=xf011&pr=sa&d=2013-05-31 15:49:54&v=15.2.0.5&pid=safeguard&sg=3&sap=hp
CHR StartupUrls: "hxxp://seznam.cz/", "hxxp://www.facebook.com/", "hxxp://www.lolking.net/summoner/euw/21666612"
CHR Plugin: (Shockwave Flash) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U13) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Nitro PDF Plug-In) - C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( )
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
CHR Plugin: (Java Deployment Toolkit 7.0.130.20) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Battlefield Heroes) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh [2013-05-02]
CHR Extension: (Crash Bandicoot Online) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\copoaaffjmndhhefnhlaehnhjkdjaecm [2013-03-13]
CHR Extension: (Tower Bloxx) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdnlciikkmmfmgoclhopjlljemanghka [2013-03-13]
CHR Extension: (Ultimate Flash Sonic) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgmfbijldhdncjcipeocgkgbjhaecfp [2013-03-13]
CHR Extension: (Rozbít zeď) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\klhfgnobmdkblmbdahcnpajbjnfmknpn [2013-03-13]
CHR Extension: (Until AM Web App) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2013-03-13]
CHR Extension: (Pursued) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mglmffkipgdhdkolbbkofkfhappinpin [2013-05-19]
CHR Extension: (Peněženka Google) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR StartMenuInternet: Google Chrome - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ATKFUSService; C:\Windows\system32\ATKFUSService.exe [63488 2009-12-01] (ASUSTeK COMPUTER INC.) [File not signed]
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [406288 2014-06-23] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-06-23] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-06-23] (BlueStack Systems, Inc.)
R2 CrdphService; C:\Program Files\COMODO\EasyVPN\crdphService.exe [646904 2010-03-29] (COMODO)
R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [70952 2011-07-06] (CyberLink)
R2 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [312616 2011-07-06] (CyberLink)
R2 EasyVpnAdpt; C:\Program Files\COMODO\EasyVPN\Vpnservice.exe [37624 2010-03-29] ()
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [913144 2012-03-07] (ESET)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-03-18] (Macrovision Europe Ltd.) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-08] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-07-08] (globalUpdate) [File not signed]
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [341296 2011-06-21] (Nitro PDF Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2014-03-03] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [754584 2013-06-24] (Tunngle.net GmbH) [File not signed]

==================== Drivers (Whitelisted) ====================

R3 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [17792 2009-02-17] (ASUSTeK Computer Inc.)
R3 atkdisplf; C:\Windows\System32\drivers\ATKDispLowFilter.sys [39424 2009-02-17] (ASUSTeK Computer Inc.)
S3 ATP; C:\Windows\System32\DRIVERS\cmdatp.sys [20888 2010-03-29] (Comodo, Inc.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-06-23] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-27] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [209768 2012-03-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [148528 2012-03-14] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2012-03-14] (ESET)
S3 HP8107Fltr; C:\Windows\System32\DRIVERS\HP8107.sys [13824 2010-02-05] (Windows (R) Win 7 DDK provider)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [817912 2012-09-27] (Duplex Secure Ltd.)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
S3 XFDriver64; C:\Program Files\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-04-12] (CyberLink Corp.)
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-11 23:13 - 2014-07-11 23:14 - 00029125 _____ () C:\Users\JelenJelcin\Desktop\FRST.txt
2014-07-11 23:12 - 2014-07-11 23:13 - 00000000 ____D () C:\FRST
2014-07-11 23:11 - 2014-07-11 23:11 - 00112640 _____ (forum.viry.cz) C:\Users\JelenJelcin\Desktop\FRSTLauncher (3).exe
2014-07-11 23:09 - 2014-07-11 23:09 - 02084864 _____ (Farbar) C:\Users\JelenJelcin\Desktop\FRST64.exe
2014-07-11 17:32 - 2014-07-11 17:42 - 107558589 _____ () C:\Users\JelenJelcin\Desktop\liga garen.wmv
2014-07-11 17:28 - 2014-07-11 17:28 - 00087552 _____ () C:\Users\JelenJelcin\Desktop\lolasd.MSWMM
2014-07-11 17:28 - 2014-07-11 17:28 - 00087552 _____ () C:\Users\JelenJelcin\Desktop\lol.MSWMM
2014-07-10 12:08 - 2014-07-10 12:08 - 00000000 _____ () C:\Users\JelenJelcin\Desktop\notorjelen.txt
2014-07-09 17:01 - 2014-07-09 17:01 - 00002128 _____ () C:\Users\JelenJelcin\Desktop\Clash of Clans.lnk
2014-07-09 16:48 - 2014-07-09 16:59 - 367741476 _____ () C:\Users\JelenJelcin\Chuck.S02E13.HDTV.XviD.avi
2014-07-09 11:56 - 2014-07-09 11:56 - 11204096 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-08 14:07 - 2014-07-08 14:07 - 00001824 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-07-08 14:07 - 2014-07-08 14:07 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-07-08 14:06 - 2014-07-08 14:06 - 00004498 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5
2014-07-08 14:05 - 2014-07-11 23:05 - 00001484 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7.job
2014-07-08 14:05 - 2014-07-11 20:10 - 00000938 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-07-08 14:05 - 2014-07-11 20:06 - 00001468 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5.job
2014-07-08 14:05 - 2014-07-11 20:05 - 00002186 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4.job
2014-07-08 14:05 - 2014-07-11 20:05 - 00001552 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6.job
2014-07-08 14:05 - 2014-07-11 20:05 - 00001540 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1.job
2014-07-08 14:05 - 2014-07-11 20:05 - 00001362 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2.job
2014-07-08 14:05 - 2014-07-11 20:05 - 00001206 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10.job
2014-07-08 14:05 - 2014-07-11 14:10 - 00000934 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-07-08 14:05 - 2014-07-08 14:14 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-07-08 14:05 - 2014-07-08 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-07-08 14:05 - 2014-07-08 14:06 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-07-08 14:05 - 2014-07-08 14:06 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-08 14:05 - 2014-07-08 14:05 - 00005216 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4
2014-07-08 14:05 - 2014-07-08 14:05 - 00004582 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6
2014-07-08 14:05 - 2014-07-08 14:05 - 00004570 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1
2014-07-08 14:05 - 2014-07-08 14:05 - 00004512 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7
2014-07-08 14:05 - 2014-07-08 14:05 - 00004392 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2
2014-07-08 14:05 - 2014-07-08 14:05 - 00004236 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10
2014-07-08 14:05 - 2014-07-08 14:05 - 00003936 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-07-08 14:05 - 2014-07-08 14:05 - 00003682 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-07-08 14:04 - 2014-07-11 20:05 - 00000476 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11.job
2014-07-08 14:04 - 2014-07-08 14:06 - 00000000 ____D () C:\Program Files (x86)\Shop_an_Upi_1.6
2014-07-08 14:04 - 2014-07-08 14:05 - 00003526 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\globalUpdate
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Bluestacks
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-07-08 00:16 - 2014-07-08 00:35 - 336482312 _____ () C:\Users\JelenJelcin\Desktop\Chuck-II-(14)---Chuck-a-nejlepší-přítel.Chuck-S02E14---Chuck-a-nejlepsi-pritel.Lovok.DVB-T.x264.mp4
2014-07-07 23:20 - 2014-07-07 23:40 - 355440948 _____ () C:\Users\JelenJelcin\Desktop\Chuck.S02E12-CZ.avi
2014-07-07 00:14 - 2014-07-07 00:14 - 365860864 _____ () C:\Users\JelenJelcin\Chuck.S02E03.HDTV.XviD-LOL.avi
2014-07-07 00:13 - 2014-07-07 02:29 - 366624768 _____ () C:\Users\JelenJelcin\Chuck.S02E04.HDTV.XviD-LOL.avi
2014-07-07 00:12 - 2014-07-07 00:14 - 368791552 _____ () C:\Users\JelenJelcin\Chuck.S02E01.HDTV.XViD-HiQT.avi
2014-07-06 23:11 - 2014-07-06 23:17 - 367122432 ____R () C:\Users\JelenJelcin\Chuck.S01E01.PREAIR.DVDRip.XviD-CRX.avi
2014-07-06 16:05 - 2014-07-06 16:05 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-04 15:51 - 2014-07-04 15:52 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\New folder
2014-07-04 15:50 - 2014-07-04 15:51 - 00992401 _____ () C:\Users\JelenJelcin\Desktop\ElophantClient.zip
2014-07-03 21:17 - 2014-07-04 22:04 - 00000000 ____D () C:\Users\JelenJelcin\21 Jump Street (2012) [1080p]
2014-07-03 17:39 - 2014-07-03 17:46 - 205068502 ____R () C:\Users\JelenJelcin\Hannibal.S01E11.HDTV.x264-LOL.mp4
2014-07-03 17:38 - 2014-07-03 17:48 - 196606986 ____R () C:\Users\JelenJelcin\Hannibal.S01E10.HDTV.x264-LOL.mp4
2014-07-03 17:38 - 2014-07-03 17:45 - 181211197 ____R () C:\Users\JelenJelcin\Hannibal.S01E12.HDTV.x264-LOL.mp4
2014-07-03 17:37 - 2014-07-03 21:16 - 00000000 ____D () C:\Users\JelenJelcin\Hannibal S01E09 HDTV x264-LOL[ettv]
2014-07-01 16:43 - 2014-07-01 16:51 - 263030428 ____R () C:\Users\JelenJelcin\Hannibal.S01E06.HDTV.x264-2HD.mp4
2014-07-01 16:43 - 2014-07-01 16:51 - 232103011 ____R () C:\Users\JelenJelcin\Hannibal.S01E07.HDTV.x264-2HD.mp4
2014-07-01 16:43 - 2014-07-01 16:51 - 217456240 ____R () C:\Users\JelenJelcin\Hannibal.S01E08.HDTV.x264-2HD.mp4
2014-07-01 15:28 - 2014-07-01 15:33 - 271813043 ____R () C:\Users\JelenJelcin\Hannibal.S01E05.Coquilles.HDTV.x264-2HD.mp4
2014-07-01 15:27 - 2014-07-01 15:34 - 305418880 ____R () C:\Users\JelenJelcin\Hannibal.S01E04.Ceuf.WebRip.x264-ANON.mp4
2014-07-01 14:44 - 2014-07-01 14:51 - 252228024 ____R () C:\Users\JelenJelcin\Hannibal.S01E03.HDTV.x264-LOL.mp4
2014-07-01 14:18 - 2014-07-01 14:25 - 293412737 ____R () C:\Users\JelenJelcin\Hannibal.S01E02.HDTV.x264-LOL.mp4
2014-07-01 14:17 - 2014-07-01 14:24 - 286276844 ____R () C:\Users\JelenJelcin\Hannibal.S01E01.HDTV.x264-LOL.mp4
2014-06-30 22:48 - 2014-06-30 23:05 - 00000000 ____D () C:\Users\JelenJelcin\Ride Along (2014) [1080p]
2014-06-30 21:01 - 2014-07-02 20:08 - 00000000 ____D () C:\Users\JelenJelcin\Need For Speed 2014 720p HDTS x264 Pimp4003
2014-06-29 20:36 - 2014-06-29 20:36 - 00000081 _____ () C:\Users\JelenJelcin\Desktop\play.txt
2014-06-25 21:15 - 2014-06-25 21:16 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Rio 2 2014 HDTS x264 AC3-MiLLENiUM
2014-06-25 00:27 - 2014-06-25 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-06-25 00:19 - 2014-06-25 00:19 - 00001901 _____ () C:\Users\Public\Desktop\LOL Recorder.lnk
2014-06-24 19:27 - 2014-06-24 19:46 - 00000000 ____D () C:\Users\JelenJelcin\Songs
2014-06-17 16:39 - 2014-06-17 16:39 - 00000960 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfenstein The New Order.lnk
2014-06-17 16:39 - 2014-06-17 16:39 - 00000948 _____ () C:\Users\Public\Desktop\Wolfenstein The New Order.lnk
2014-06-17 16:06 - 2014-06-17 16:49 - 00000000 ____D () C:\Program Files (x86)\Wolfenstein The New Order
2014-06-16 22:24 - 2014-06-29 11:48 - 00000050 _____ () C:\Users\JelenJelcin\jagex_cl_oldschool_LIVE.dat
2014-06-16 22:23 - 2014-06-16 22:23 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Oracle
2014-06-16 22:23 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-06-16 22:22 - 2014-06-16 22:22 - 00005499 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-16 22:22 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-16 22:22 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-06-16 22:22 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

==================== One Month Modified Files and Folders =======

2014-07-11 23:14 - 2014-07-11 23:13 - 00029125 _____ () C:\Users\JelenJelcin\Desktop\FRST.txt
2014-07-11 23:13 - 2014-07-11 23:12 - 00000000 ____D () C:\FRST
2014-07-11 23:11 - 2014-07-11 23:11 - 00112640 _____ (forum.viry.cz) C:\Users\JelenJelcin\Desktop\FRSTLauncher (3).exe
2014-07-11 23:09 - 2014-07-11 23:09 - 02084864 _____ (Farbar) C:\Users\JelenJelcin\Desktop\FRST64.exe
2014-07-11 23:05 - 2014-07-08 14:05 - 00001484 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7.job
2014-07-11 22:56 - 2012-05-31 15:10 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-11 22:36 - 2011-09-29 21:14 - 00000986 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA.job
2014-07-11 22:23 - 2012-07-05 18:17 - 00000962 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-11 20:10 - 2014-07-08 14:05 - 00000938 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-07-11 20:06 - 2014-07-08 14:05 - 00001468 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5.job
2014-07-11 20:05 - 2014-07-08 14:05 - 00002186 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4.job
2014-07-11 20:05 - 2014-07-08 14:05 - 00001552 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6.job
2014-07-11 20:05 - 2014-07-08 14:05 - 00001540 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1.job
2014-07-11 20:05 - 2014-07-08 14:05 - 00001362 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2.job
2014-07-11 20:05 - 2014-07-08 14:05 - 00001206 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10.job
2014-07-11 20:05 - 2014-07-08 14:04 - 00000476 _____ () C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11.job
2014-07-11 19:39 - 2009-07-14 06:45 - 00022208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-11 19:39 - 2009-07-14 06:45 - 00022208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-11 19:35 - 2011-08-25 16:58 - 01112072 _____ () C:\Windows\WindowsUpdate.log
2014-07-11 17:52 - 2013-05-11 22:37 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Xfire Videa
2014-07-11 17:42 - 2014-07-11 17:32 - 107558589 _____ () C:\Users\JelenJelcin\Desktop\liga garen.wmv
2014-07-11 17:42 - 2012-03-25 13:45 - 04546048 ___SH () C:\Users\JelenJelcin\Desktop\Thumbs.db
2014-07-11 17:28 - 2014-07-11 17:28 - 00087552 _____ () C:\Users\JelenJelcin\Desktop\lolasd.MSWMM
2014-07-11 17:28 - 2014-07-11 17:28 - 00087552 _____ () C:\Users\JelenJelcin\Desktop\lol.MSWMM
2014-07-11 15:36 - 2011-09-29 21:14 - 00000934 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core.job
2014-07-11 14:10 - 2014-07-08 14:05 - 00000934 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-07-11 12:03 - 2011-09-04 21:03 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\PMB Files
2014-07-11 11:31 - 2013-12-14 13:21 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Battle.net
2014-07-11 11:30 - 2011-10-22 12:22 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\uTorrent
2014-07-11 10:01 - 2012-07-05 18:17 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-11 10:00 - 2013-03-18 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Pokki
2014-07-10 14:56 - 2013-12-14 13:23 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-07-10 14:56 - 2013-12-14 13:21 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-07-10 14:55 - 2011-12-13 12:40 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-07-10 12:08 - 2014-07-10 12:08 - 00000000 _____ () C:\Users\JelenJelcin\Desktop\notorjelen.txt
2014-07-09 17:01 - 2014-07-09 17:01 - 00002128 _____ () C:\Users\JelenJelcin\Desktop\Clash of Clans.lnk
2014-07-09 16:59 - 2014-07-09 16:48 - 367741476 _____ () C:\Users\JelenJelcin\Chuck.S02E13.HDTV.XviD.avi
2014-07-09 16:48 - 2011-08-25 03:15 - 00000000 ____D () C:\Users\JelenJelcin
2014-07-09 12:58 - 2012-09-27 15:38 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\DAEMON Tools Pro
2014-07-09 12:58 - 2012-07-10 17:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-09 12:58 - 2011-10-17 14:00 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\TS3Client
2014-07-09 11:58 - 2012-05-31 15:10 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 11:56 - 2014-07-09 11:56 - 11204096 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-09 11:56 - 2012-05-31 15:10 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 11:56 - 2011-08-25 17:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 14:15 - 2011-08-29 16:08 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Skype
2014-07-08 14:14 - 2014-07-08 14:05 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-07-08 14:14 - 2011-10-07 12:58 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\LogMeIn Hamachi
2014-07-08 14:07 - 2014-07-08 14:07 - 00001824 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-07-08 14:07 - 2014-07-08 14:07 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-07-08 14:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-08 14:06 - 2014-07-08 14:06 - 00004498 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5
2014-07-08 14:06 - 2014-07-08 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-07-08 14:06 - 2014-07-08 14:05 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-07-08 14:06 - 2014-07-08 14:05 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-08 14:06 - 2014-07-08 14:04 - 00000000 ____D () C:\Program Files (x86)\Shop_an_Upi_1.6
2014-07-08 14:05 - 2014-07-08 14:05 - 00005216 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4
2014-07-08 14:05 - 2014-07-08 14:05 - 00004582 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6
2014-07-08 14:05 - 2014-07-08 14:05 - 00004570 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1
2014-07-08 14:05 - 2014-07-08 14:05 - 00004512 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7
2014-07-08 14:05 - 2014-07-08 14:05 - 00004392 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2
2014-07-08 14:05 - 2014-07-08 14:05 - 00004236 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10
2014-07-08 14:05 - 2014-07-08 14:05 - 00003936 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-07-08 14:05 - 2014-07-08 14:05 - 00003682 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-07-08 14:05 - 2014-07-08 14:04 - 00003526 _____ () C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\globalUpdate
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Bluestacks
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-07-08 00:35 - 2014-07-08 00:16 - 336482312 _____ () C:\Users\JelenJelcin\Desktop\Chuck-II-(14)---Chuck-a-nejlepší-přítel.Chuck-S02E14---Chuck-a-nejlepsi-pritel.Lovok.DVB-T.x264.mp4
2014-07-07 23:40 - 2014-07-07 23:20 - 355440948 _____ () C:\Users\JelenJelcin\Desktop\Chuck.S02E12-CZ.avi
2014-07-07 02:29 - 2014-07-07 00:13 - 366624768 _____ () C:\Users\JelenJelcin\Chuck.S02E04.HDTV.XviD-LOL.avi
2014-07-07 02:29 - 2013-05-27 13:49 - 00461824 ___SH () C:\Users\JelenJelcin\Thumbs.db
2014-07-07 00:14 - 2014-07-07 00:14 - 365860864 _____ () C:\Users\JelenJelcin\Chuck.S02E03.HDTV.XviD-LOL.avi
2014-07-07 00:14 - 2014-07-07 00:12 - 368791552 _____ () C:\Users\JelenJelcin\Chuck.S02E01.HDTV.XViD-HiQT.avi
2014-07-06 23:21 - 2014-04-20 10:51 - 00000000 ____D () C:\Users\JelenJelcin\Subs
2014-07-06 23:17 - 2014-07-06 23:11 - 367122432 ____R () C:\Users\JelenJelcin\Chuck.S01E01.PREAIR.DVDRip.XviD-CRX.avi
2014-07-06 16:05 - 2014-07-06 16:05 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-06 16:04 - 2011-10-04 17:37 - 00000067 _____ () C:\Windows\system32\VpnService.log
2014-07-06 16:04 - 2011-08-25 03:51 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-06 16:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-04 22:04 - 2014-07-03 21:17 - 00000000 ____D () C:\Users\JelenJelcin\21 Jump Street (2012) [1080p]
2014-07-04 15:52 - 2014-07-04 15:51 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\New folder
2014-07-04 15:51 - 2014-07-04 15:50 - 00992401 _____ () C:\Users\JelenJelcin\Desktop\ElophantClient.zip
2014-07-03 21:16 - 2014-07-03 17:37 - 00000000 ____D () C:\Users\JelenJelcin\Hannibal S01E09 HDTV x264-LOL[ettv]
2014-07-03 17:48 - 2014-07-03 17:38 - 196606986 ____R () C:\Users\JelenJelcin\Hannibal.S01E10.HDTV.x264-LOL.mp4
2014-07-03 17:46 - 2014-07-03 17:39 - 205068502 ____R () C:\Users\JelenJelcin\Hannibal.S01E11.HDTV.x264-LOL.mp4
2014-07-03 17:45 - 2014-07-03 17:38 - 181211197 ____R () C:\Users\JelenJelcin\Hannibal.S01E12.HDTV.x264-LOL.mp4
2014-07-03 15:57 - 2013-06-16 23:25 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\skola
2014-07-02 20:08 - 2014-06-30 21:01 - 00000000 ____D () C:\Users\JelenJelcin\Need For Speed 2014 720p HDTS x264 Pimp4003
2014-07-01 16:51 - 2014-07-01 16:43 - 263030428 ____R () C:\Users\JelenJelcin\Hannibal.S01E06.HDTV.x264-2HD.mp4
2014-07-01 16:51 - 2014-07-01 16:43 - 232103011 ____R () C:\Users\JelenJelcin\Hannibal.S01E07.HDTV.x264-2HD.mp4
2014-07-01 16:51 - 2014-07-01 16:43 - 217456240 ____R () C:\Users\JelenJelcin\Hannibal.S01E08.HDTV.x264-2HD.mp4
2014-07-01 15:34 - 2014-07-01 15:27 - 305418880 ____R () C:\Users\JelenJelcin\Hannibal.S01E04.Ceuf.WebRip.x264-ANON.mp4
2014-07-01 15:33 - 2014-07-01 15:28 - 271813043 ____R () C:\Users\JelenJelcin\Hannibal.S01E05.Coquilles.HDTV.x264-2HD.mp4
2014-07-01 14:51 - 2014-07-01 14:44 - 252228024 ____R () C:\Users\JelenJelcin\Hannibal.S01E03.HDTV.x264-LOL.mp4
2014-07-01 14:25 - 2014-07-01 14:18 - 293412737 ____R () C:\Users\JelenJelcin\Hannibal.S01E02.HDTV.x264-LOL.mp4
2014-07-01 14:24 - 2014-07-01 14:17 - 286276844 ____R () C:\Users\JelenJelcin\Hannibal.S01E01.HDTV.x264-LOL.mp4
2014-06-30 23:05 - 2014-06-30 22:48 - 00000000 ____D () C:\Users\JelenJelcin\Ride Along (2014) [1080p]
2014-06-29 20:36 - 2014-06-29 20:36 - 00000081 _____ () C:\Users\JelenJelcin\Desktop\play.txt
2014-06-29 11:59 - 2013-08-14 15:05 - 00000024 _____ () C:\Users\JelenJelcin\random.dat
2014-06-29 11:53 - 2013-08-14 15:05 - 00000050 _____ () C:\Users\JelenJelcin\jagex_cl_runescape_LIVE.dat
2014-06-29 11:48 - 2014-06-16 22:24 - 00000050 _____ () C:\Users\JelenJelcin\jagex_cl_oldschool_LIVE.dat
2014-06-26 11:07 - 2011-09-01 00:06 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Hudba
2014-06-26 10:55 - 2011-10-03 22:27 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\obrázky
2014-06-25 21:16 - 2014-06-25 21:15 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Rio 2 2014 HDTS x264 AC3-MiLLENiUM
2014-06-25 16:18 - 2009-07-14 07:13 - 00784996 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-25 00:29 - 2011-12-21 00:34 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-06-25 00:29 - 2011-12-21 00:33 - 00000000 ____D () C:\ProgramData\DivX
2014-06-25 00:28 - 2014-06-25 00:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-06-25 00:28 - 2011-12-21 00:40 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\DivX
2014-06-25 00:28 - 2011-12-21 00:38 - 00000000 ____D () C:\Program Files\DivX
2014-06-25 00:19 - 2014-06-25 00:19 - 00001901 _____ () C:\Users\Public\Desktop\LOL Recorder.lnk
2014-06-25 00:19 - 2014-02-01 18:35 - 00000000 ____D () C:\Program Files (x86)\LOLReplay
2014-06-25 00:19 - 2012-07-31 16:44 - 00001913 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2014-06-24 19:46 - 2014-06-24 19:27 - 00000000 ____D () C:\Users\JelenJelcin\Songs
2014-06-24 15:45 - 2011-09-04 21:03 - 00000000 ____D () C:\ProgramData\PMB Files
2014-06-17 16:49 - 2014-06-17 16:06 - 00000000 ____D () C:\Program Files (x86)\Wolfenstein The New Order
2014-06-17 16:39 - 2014-06-17 16:39 - 00000960 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfenstein The New Order.lnk
2014-06-17 16:39 - 2014-06-17 16:39 - 00000948 _____ () C:\Users\Public\Desktop\Wolfenstein The New Order.lnk
2014-06-17 16:04 - 2014-04-06 14:55 - 00000000 ____D () C:\Program Files (x86)\Age of Wonders III
2014-06-17 15:31 - 2011-09-29 21:14 - 00003968 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA
2014-06-17 15:31 - 2011-09-29 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core
2014-06-16 22:24 - 2012-03-29 22:37 - 00000000 ____D () C:\Users\JelenJelcin\jagexcache
2014-06-16 22:23 - 2014-06-16 22:23 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Oracle
2014-06-16 22:23 - 2013-11-02 09:47 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-16 22:22 - 2014-06-16 22:22 - 00005499 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-16 22:22 - 2013-06-29 11:39 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-13 14:39 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-13 09:18 - 2012-07-05 18:17 - 00003958 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-13 09:18 - 2012-07-05 18:17 - 00003706 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-12 07:38 - 2014-04-02 13:44 - 00000000 ____D () C:\Users\JelenJelcin\Documents\FIFA 14

Files to move or delete:
====================
C:\Users\JelenJelcin\jagex_cl_oldschool_LIVE.dat
C:\Users\JelenJelcin\jagex_cl_runescape_LIVE.dat
C:\Users\JelenJelcin\random.dat


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1.job => C:\Program Files (x86)\Shop_an_Upi_1.6\Shop_an_Upi_1.6-codedownloader.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10.job => C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-10.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11.job => C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-11.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2.job => C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-2.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4.job => C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-4.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5.job => C:\Program Files (x86)\Shop_an_Upi_1.6\d8f74118-7758-4a73-8216-f3d5e66779f5-5.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6.job => C:\Program Files (x86)\Shop_an_Upi_1.6\Shop_an_Upi_1.6-novainstaller.exe
Task: C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7.job => C:\Program Files (x86)\Shop_an_Upi_1.6\Shop_an_Upi_1.6-nova.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core.job => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA.job => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET NOD32 Antivirus 5.2 (Enabled - Out of date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET NOD32 Antivirus 5.2 (Enabled - Out of date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\JelenJelcin\Desktop" je 71306 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

# AdwCleaner v3.215 - Report created 12/07/2014 at 11:45:25
# Updated 09/07/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : JelenJelcin - JELENJELCIN-PC
# Running from : C:\Users\JelenJelcin\Desktop\adwcleaner_3.215.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Users\JelenJelcin\AppData\Local\AVG SafeGuard toolbar
Folder Deleted : C:\Users\JelenJelcin\AppData\Local\globalUpdate
Folder Deleted : C:\Users\JelenJelcin\AppData\Local\OpenCandy
Folder Deleted : C:\Users\JelenJelcin\AppData\Local\Pokki
Folder Deleted : C:\Users\JelenJelcin\AppData\Roaming\AVG SafeGuard toolbar
Folder Deleted : C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki
Folder Deleted : C:\Users\JelenJelcin\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default\Extensions\a346f15b-f72e-4205-b29d-52ad46792214@bf4b3822-f1de-4b29-8f70-c0a27f6ca2b8.com
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage
File Deleted : C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage-journal
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-1
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-10
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-11
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-2
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-4
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-5
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-6
File Deleted : C:\Windows\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7.job
File Deleted : C:\Windows\System32\Tasks\d8f74118-7758-4a73-8216-f3d5e66779f5-7

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\*\shell\pokki
Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
Key Deleted : HKCU\Software\Classes\Folder\shell\pokki
Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
Key Deleted : HKCU\Software\Classes\pokki
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411281122}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411281122}
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SafetyNut
Key Deleted : HKLM\Software\Trymedia Systems
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Deleted : [x64] HKLM\SOFTWARE\installedbrowserextensions
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16450


-\\ Mozilla Firefox v

[ File : C:\Users\JelenJelcin\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default\prefs.js ]

Line Deleted : user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\");
Line Deleted : user_pref("extensions.asktb.abar-war-timeout", "4000");
Line Deleted : user_pref("extensions.asktb.cbid", "RY");
Line Deleted : user_pref("extensions.asktb.config-updated", true);
Line Deleted : user_pref("extensions.asktb.crumb", "2011.08.25+14.33.51-toolbar002iad-CZ-UHJhZ3VlLEN6ZWNoIFJlcHVibGlj");
Line Deleted : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}");
Line Deleted : user_pref("extensions.asktb.dtid", "YYYYYYYYCZ");
Line Deleted : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
Line Deleted : user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "EZXX0012");
Line Deleted : user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
Line Deleted : user_pref("extensions.asktb.fresh-install", false);
Line Deleted : user_pref("extensions.asktb.guid", "0d8aea73-ed6b-4263-9c94-6e0c5fd2b64e");
Line Deleted : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxps://websearch.ask.com\", [...]
Line Deleted : user_pref("extensions.asktb.if", "first");
Line Deleted : user_pref("extensions.asktb.l", "dis");
Line Deleted : user_pref("extensions.asktb.last-config-req", "1325520487114");
Line Deleted : user_pref("extensions.asktb.last-search-timestamp", "1315415799300");
Line Deleted : user_pref("extensions.asktb.last-v", "3.12.5.100006");
Line Deleted : user_pref("extensions.asktb.locale", "en_US");
Line Deleted : user_pref("extensions.asktb.location", "Prague,Czech Republic");
Line Deleted : user_pref("extensions.asktb.new-tab-enabled", true);
Line Deleted : user_pref("extensions.asktb.o", "15184");
Line Deleted : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Line Deleted : user_pref("extensions.asktb.qsrc", "2871");
Line Deleted : user_pref("extensions.asktb.r", "7");
Line Deleted : user_pref("extensions.asktb.sa", "NO");
Line Deleted : user_pref("extensions.asktb.search-history-queries", "gemoney");
Line Deleted : user_pref("extensions.asktb.search-suggestions-enabled", true);
Line Deleted : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
Line Deleted : user_pref("extensions.asktb.socialmini-first", true);
Line Deleted : user_pref("extensions.asktb.socialmini-interval", "1200000");
Line Deleted : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
Line Deleted : user_pref("extensions.asktb.socialmini-max-items", "30");
Line Deleted : user_pref("extensions.asktb.socialmini-native-on", true);
Line Deleted : user_pref("extensions.asktb.socialmini-speed", "5000");
Line Deleted : user_pref("extensions.asktb.socialmini-transition-first-open", false);
Line Deleted : user_pref("extensions.asktb.themeid", "");
Line Deleted : user_pref("extensions.asktb.to", "");
Line Deleted : user_pref("extensions.asktb.v", "3.12.5.100009");
Line Deleted : user_pref("extensions.asktb.version", "5.12.5.17640");
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Deleted : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

-\\ Google Chrome v

[ File : C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof

*************************

AdwCleaner[R0].txt - [13009 octets] - [12/07/2014 11:40:14]
AdwCleaner[S0].txt - [12697 octets] - [12/07/2014 11:45:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12758 octets] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by JelenJelcin on so 12.07.2014 at 11:30:04,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

Value Name Type Value Data
========================================================================================
Pokki REG_EXPAND_SZ C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0042822.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0042822.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0042822.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0042822.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110411281122}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422282222}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455285522}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466286622}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110411281122}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422282222}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455285522}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466286622}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0042822.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0042822.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0042822.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0042822.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455285522}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466286622}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455285522}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466286622}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411281122}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\pip"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\appid\{9b0cb95c-933a-4b8c-b6d4-edcd19a43874}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\typelib\{2996f0e7-292b-4cae-893f-47b8b1c05b56}"



~~~ Files

Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\JelenJelcin\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\JelenJelcin\AppData\Roaming\thinstall"
Successfully deleted: [Folder] "C:\Users\JelenJelcin\appdata\locallow\boost_interprocess"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 12.07.2014 at 11:36:05,43
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 12-July-2014
Tool run by JelenJelcin on ne 13.07.2014 at 3:11:46,15.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\JelenJelcin\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.7.2014 3:14:08 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\wrc@avast.com deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\JELENJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default\prefs.js:
user_pref("browser.startup.homepage", "http://seznam.cz");
user_pref("browser.search.selectedEngine", "Seznam");

Added to C:\Users\JELENJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\JELENJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default

user.js not found
---- Lines ask.com modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- Lines wrc@avast.com modified from prefs.js ----

user_pref("extensions.enabledAddons", "wrc@avast.com:7.0.1426,{972ce4c6-7e08-4474-a285-3208198ce6fd}:12.0");
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- FireFox user.js and prefs.js backups ----

prefs_13.07.2014_0321_.backup

==== Deleting Files \ Folders ======================

C:\found.000 deleted
C:\Users\JelenJelcin\AppData\Roaming\MPQEditor.ini deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\JelenJelcin\Searches deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Windows\wininit.ini deleted
C:\Windows\Syswow64\tmp9F21.tmp deleted
C:\Windows\Syswow64\tmp9F31.tmp deleted
C:\Windows\Syswow64\tmpBB7F.tmp deleted
C:\Windows\Syswow64\tmpBB80.tmp deleted
C:\Windows\Syswow64\tmpC94C.tmp deleted
C:\Windows\Syswow64\tmpC98B.tmp deleted
"C:\Windows\Installer\6ee7f43.msi" deleted
"C:\Windows\Installer\7f5386a.msi" deleted
"C:\Users\JelenJelcin\AppData\Local\LumaEmu" deleted

==== Firefox Extensions ======================

==== Firefox Plugins ======================


==== Chrome Look ======================

Battlefield Heroes - JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh
Until AM Web App - JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk
Pursued - JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mglmffkipgdhdkolbbkofkfhappinpin

==== Chrome Fix ======================

C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_toolbar.avg.com_0.localstorage-journal deleted successfully
C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mydeals.cz_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1A944EAD280A02E46949D586E0695995 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7130468A-F53F-4698-8C09-A339EA3B05E6} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DAE449A1-A082-4E20-9694-5D680E969559} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\A8640317F35F8964C8903A93AEB3506E deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\1A944EAD280A02E46949D586E0695995 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\JelenJelcin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

Dejte novy log z FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014
Ran by JelenJelcin (administrator) on JELENJELCIN-PC on 13-07-2014 11:22:04
Running from C:\Users\JelenJelcin\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(ASUSTeK COMPUTER INC.) C:\Windows\System32\ATKFUSService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\EasyVPN\crdphService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\COMODO\EasyVPN\Vpnservice.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(COMODO) C:\Program Files\COMODO\EasyVPN\crdphService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\ASUS\GamerOSD\ATKFastUserSwitching.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Electronic Arts) C:\Origin\Origin.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Electronic Arts) C:\Origin\OriginClientService.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6628968 2011-05-03] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [4081008 2012-03-07] (ESET)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ASUSGamerOSD] => C:\Program Files (x86)\ASUS\GamerOSD\GamerOSD.exe [380928 2009-07-30] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl11] => C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe [234792 2011-04-20] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NSU_agent] => C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [832272 2014-06-23] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Google Update] => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-29] (Google Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-12] (Valve Corporation)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] (DT Soft Ltd)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-17] ()
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Xfire] => C:\Program Files (x86)\Xfire2\Xfire.exe [4816224 2013-06-21] (Xfire Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [] => [X]
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Keyboard Inf.] => C:\Users\JelenJelcin\AppData\Roaming\WinRAR\msdn.exe [235908 2014-04-05] ()
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [uTorrent] => C:\Users\JelenJelcin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-03] (BitTorrent Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [EADM] => C:\Origin\Origin.exe [3595608 2014-07-13] (Electronic Arts)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {6431a5bf-08a7-11e2-8512-8c89a5106c2e} - E:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {cc735066-e041-11e3-8d0b-8c89a5106c2e} - F:\_AUTORUN\AUTORUN.EXE
AppInit_DLLs-x32: => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\JelenJelcin\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files\Xfire2\Xfire.exe (Xfire Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF4452568CD62CC01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{7C4A7198-9776-4AD4-A3B8-6F7CB2C4045B}: [NameServer]10.11.0.251,10.11.1.101

FireFox:
========
FF ProfilePath: C:\Users\JelenJelcin\AppData\Roaming\Mozilla\Firefox\Profiles\bworv3zg.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: NitroPDF - C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\JelenJelcin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\JelenJelcin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\JelenJelcin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-06-06]

Chrome:
=======
CHR StartupUrls: "hxxp://seznam.cz/", "hxxp://www.lolking.net/summoner/euw/21666612", "hxxp://www.facebook.com/"
CHR Extension: (Dokumenty Google) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-13]
CHR Extension: (Disk Google) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-13]
CHR Extension: (YouTube) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-13]
CHR Extension: (Vyhledávání Google) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-13]
CHR Extension: (Peněženka Google) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-13]
CHR StartMenuInternet: Google Chrome - C:\Users\JelenJelcin\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ATKFUSService; C:\Windows\system32\ATKFUSService.exe [63488 2009-12-01] (ASUSTeK COMPUTER INC.) [File not signed]
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [406288 2014-06-23] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-06-23] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-06-23] (BlueStack Systems, Inc.)
R2 CrdphService; C:\Program Files\COMODO\EasyVPN\crdphService.exe [646904 2010-03-29] (COMODO)
R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [70952 2011-07-06] (CyberLink)
R2 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [312616 2011-07-06] (CyberLink)
R2 EasyVpnAdpt; C:\Program Files\COMODO\EasyVPN\Vpnservice.exe [37624 2010-03-29] ()
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [913144 2012-03-07] (ESET)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-03-18] (Macrovision Europe Ltd.) [File not signed]
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [341296 2011-06-21] (Nitro PDF Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2014-03-03] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [754584 2013-06-24] (Tunngle.net GmbH) [File not signed]

==================== Drivers (Whitelisted) ====================

R3 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [17792 2009-02-17] (ASUSTeK Computer Inc.)
R3 atkdisplf; C:\Windows\System32\drivers\ATKDispLowFilter.sys [39424 2009-02-17] (ASUSTeK Computer Inc.)
S3 ATP; C:\Windows\System32\DRIVERS\cmdatp.sys [20888 2010-03-29] (Comodo, Inc.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-06-23] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-27] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [209768 2012-03-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [148528 2012-03-14] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2012-03-14] (ESET)
S3 HP8107Fltr; C:\Windows\System32\DRIVERS\HP8107.sys [13824 2010-02-05] (Windows (R) Win 7 DDK provider)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [817912 2012-09-27] (Duplex Secure Ltd.)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
S3 XFDriver64; C:\Program Files\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-04-12] (CyberLink Corp.)
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-13 11:21 - 2014-07-13 11:21 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\FRST-OlderVersion
2014-07-13 03:31 - 2014-07-13 03:31 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-07-13 03:23 - 2014-07-13 03:11 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-07-13 03:13 - 2014-07-13 03:26 - 00010345 _____ () C:\zoek-results.log
2014-07-13 03:11 - 2014-07-13 03:21 - 00000000 ____D () C:\zoek_backup
2014-07-13 03:02 - 2014-07-13 03:02 - 01285120 _____ () C:\Users\JelenJelcin\Desktop\zoek.exe
2014-07-13 00:37 - 2014-07-13 00:38 - 00622296 _____ () C:\Windows\Minidump\071314-23322-01.dmp
2014-07-13 00:37 - 2014-07-13 00:37 - 544063191 _____ () C:\Windows\MEMORY.DMP
2014-07-12 19:31 - 2010-03-04 17:24 - 19495216 _____ (Macrovision Corporation) C:\Users\JelenJelcin\Desktop\Assasins Creed II v1.01.exe
2014-07-12 19:29 - 2014-07-12 19:30 - 16007253 _____ () C:\Users\JelenJelcin\Desktop\Assassins-Creed-2-patch-1.01.rar
2014-07-12 18:41 - 2014-07-12 18:58 - 159839766 _____ () C:\Users\JelenJelcin\Desktop\Assassins-Creed-2---čeština.exe
2014-07-12 18:04 - 2014-07-12 18:04 - 00001201 _____ () C:\Users\JelenJelcin\Desktop\Uplay.lnk
2014-07-12 18:04 - 2014-07-12 18:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-07-12 18:03 - 2014-07-12 18:03 - 00001685 _____ () C:\Users\JelenJelcin\Desktop\Play Assassins Creed II.lnk
2014-07-12 16:01 - 2014-07-12 17:58 - 00000000 ____D () C:\Users\JelenJelcin\Assassin's Creed II PC full game updated v_1.01 ^^nosTEAM^^
2014-07-12 15:56 - 2014-07-12 15:56 - 00003056 _____ () C:\Windows\System32\Tasks\{4D587FD0-29C0-4380-BC11-5572F31EE86A}
2014-07-12 15:39 - 2014-07-12 18:39 - 1530905358 _____ () C:\Users\JelenJelcin\Desktop\Cimrman---Záskok.mp4
2014-07-12 15:36 - 2014-07-12 15:40 - 00000000 ____D () C:\Users\JelenJelcin\Heroes of Might and Magic IV
2014-07-12 11:49 - 2014-07-13 03:25 - 00001390 _____ () C:\Windows\PFRO.log
2014-07-12 11:49 - 2014-07-13 03:25 - 00000504 _____ () C:\Windows\setupact.log
2014-07-12 11:49 - 2014-07-12 11:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-12 11:40 - 2014-07-12 11:48 - 00000000 ____D () C:\AdwCleaner
2014-07-12 11:40 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-12 11:38 - 2014-07-12 11:39 - 01348263 _____ () C:\Users\JelenJelcin\Desktop\adwcleaner_3.215.exe
2014-07-12 11:36 - 2014-07-12 11:36 - 00008639 _____ () C:\Users\JelenJelcin\Desktop\JRT.txt
2014-07-12 11:29 - 2014-07-12 11:29 - 00000000 ____D () C:\Windows\ERUNT
2014-07-12 11:25 - 2014-07-12 11:26 - 01016261 _____ (Thisisu) C:\Users\JelenJelcin\Desktop\JRT.exe
2014-07-11 23:13 - 2014-07-13 11:22 - 00023382 _____ () C:\Users\JelenJelcin\Desktop\FRST.txt
2014-07-11 23:12 - 2014-07-13 11:22 - 00000000 ____D () C:\FRST
2014-07-11 23:09 - 2014-07-13 11:21 - 02086912 _____ (Farbar) C:\Users\JelenJelcin\Desktop\FRST64.exe
2014-07-11 17:32 - 2014-07-11 17:42 - 107558589 _____ () C:\Users\JelenJelcin\Desktop\liga garen.wmv
2014-07-10 12:08 - 2014-07-10 12:08 - 00000000 _____ () C:\Users\JelenJelcin\Desktop\notorjelen.txt
2014-07-09 17:01 - 2014-07-09 17:01 - 00002128 _____ () C:\Users\JelenJelcin\Desktop\Clash of Clans.lnk
2014-07-09 11:56 - 2014-07-09 11:56 - 11204096 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-08 14:07 - 2014-07-08 14:07 - 00001824 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-07-08 14:07 - 2014-07-08 14:07 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-07-08 14:05 - 2014-07-08 14:14 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-07-08 14:05 - 2014-07-08 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-07-08 14:05 - 2014-07-08 14:06 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-07-08 14:05 - 2014-07-08 14:06 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-08 14:04 - 2014-07-08 14:06 - 00000000 ____D () C:\Program Files (x86)\Shop_an_Upi_1.6
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Bluestacks
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-04 15:51 - 2014-07-04 15:52 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\New folder
2014-07-03 21:17 - 2014-07-04 22:04 - 00000000 ____D () C:\Users\JelenJelcin\21 Jump Street (2012) [1080p]
2014-07-03 17:39 - 2014-07-03 17:46 - 205068502 ____R () C:\Users\JelenJelcin\Hannibal.S01E11.HDTV.x264-LOL.mp4
2014-07-03 17:38 - 2014-07-03 17:48 - 196606986 ____R () C:\Users\JelenJelcin\Hannibal.S01E10.HDTV.x264-LOL.mp4
2014-07-03 17:38 - 2014-07-03 17:45 - 181211197 ____R () C:\Users\JelenJelcin\Hannibal.S01E12.HDTV.x264-LOL.mp4
2014-07-03 17:37 - 2014-07-03 21:16 - 00000000 ____D () C:\Users\JelenJelcin\Hannibal S01E09 HDTV x264-LOL[ettv]
2014-07-01 16:43 - 2014-07-01 16:51 - 263030428 ____R () C:\Users\JelenJelcin\Hannibal.S01E06.HDTV.x264-2HD.mp4
2014-07-01 16:43 - 2014-07-01 16:51 - 232103011 ____R () C:\Users\JelenJelcin\Hannibal.S01E07.HDTV.x264-2HD.mp4
2014-07-01 16:43 - 2014-07-01 16:51 - 217456240 ____R () C:\Users\JelenJelcin\Hannibal.S01E08.HDTV.x264-2HD.mp4
2014-07-01 15:28 - 2014-07-01 15:33 - 271813043 ____R () C:\Users\JelenJelcin\Hannibal.S01E05.Coquilles.HDTV.x264-2HD.mp4
2014-07-01 15:27 - 2014-07-01 15:34 - 305418880 ____R () C:\Users\JelenJelcin\Hannibal.S01E04.Ceuf.WebRip.x264-ANON.mp4
2014-07-01 14:44 - 2014-07-01 14:51 - 252228024 ____R () C:\Users\JelenJelcin\Hannibal.S01E03.HDTV.x264-LOL.mp4
2014-07-01 14:18 - 2014-07-01 14:25 - 293412737 ____R () C:\Users\JelenJelcin\Hannibal.S01E02.HDTV.x264-LOL.mp4
2014-07-01 14:17 - 2014-07-01 14:24 - 286276844 ____R () C:\Users\JelenJelcin\Hannibal.S01E01.HDTV.x264-LOL.mp4
2014-06-30 22:48 - 2014-06-30 23:05 - 00000000 ____D () C:\Users\JelenJelcin\Ride Along (2014) [1080p]
2014-06-30 21:01 - 2014-07-02 20:08 - 00000000 ____D () C:\Users\JelenJelcin\Need For Speed 2014 720p HDTS x264 Pimp4003
2014-06-29 20:36 - 2014-06-29 20:36 - 00000081 _____ () C:\Users\JelenJelcin\Desktop\play.txt
2014-06-25 21:15 - 2014-06-25 21:16 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Rio 2 2014 HDTS x264 AC3-MiLLENiUM
2014-06-25 00:27 - 2014-06-25 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-06-25 00:19 - 2014-06-25 00:19 - 00001901 _____ () C:\Users\Public\Desktop\LOL Recorder.lnk
2014-06-24 19:27 - 2014-06-24 19:46 - 00000000 ____D () C:\Users\JelenJelcin\Songs
2014-06-16 22:24 - 2014-06-29 11:48 - 00000050 _____ () C:\Users\JelenJelcin\jagex_cl_oldschool_LIVE.dat
2014-06-16 22:23 - 2014-06-16 22:23 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Oracle
2014-06-16 22:23 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-06-16 22:22 - 2014-06-16 22:22 - 00005499 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-16 22:22 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-16 22:22 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-06-16 22:22 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

==================== One Month Modified Files and Folders =======

2014-07-13 11:22 - 2014-07-11 23:13 - 00023382 _____ () C:\Users\JelenJelcin\Desktop\FRST.txt
2014-07-13 11:22 - 2014-07-11 23:12 - 00000000 ____D () C:\FRST
2014-07-13 11:21 - 2014-07-13 11:21 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\FRST-OlderVersion
2014-07-13 11:21 - 2014-07-11 23:09 - 02086912 _____ (Farbar) C:\Users\JelenJelcin\Desktop\FRST64.exe
2014-07-13 11:16 - 2011-09-29 21:14 - 00000986 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA.job
2014-07-13 11:15 - 2012-07-05 18:17 - 00000962 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-13 11:15 - 2012-07-05 18:17 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-13 11:15 - 2012-05-31 15:10 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-13 11:15 - 2011-08-25 16:58 - 01223585 _____ () C:\Windows\WindowsUpdate.log
2014-07-13 03:59 - 2011-10-22 12:22 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\uTorrent
2014-07-13 03:59 - 2011-10-07 12:58 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\LogMeIn Hamachi
2014-07-13 03:59 - 2011-08-29 16:08 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Skype
2014-07-13 03:58 - 2011-09-04 21:03 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\PMB Files
2014-07-13 03:36 - 2009-07-14 06:45 - 00022208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-13 03:36 - 2009-07-14 06:45 - 00022208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-13 03:31 - 2014-07-13 03:31 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-07-13 03:31 - 2014-05-29 09:48 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Origin
2014-07-13 03:31 - 2012-11-07 18:51 - 00000000 ____D () C:\ProgramData\Origin
2014-07-13 03:29 - 2014-05-29 09:47 - 00000000 ____D () C:\Origin
2014-07-13 03:27 - 2012-07-10 17:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-13 03:26 - 2014-07-13 03:13 - 00010345 _____ () C:\zoek-results.log
2014-07-13 03:25 - 2014-07-12 11:49 - 00001390 _____ () C:\Windows\PFRO.log
2014-07-13 03:25 - 2014-07-12 11:49 - 00000504 _____ () C:\Windows\setupact.log
2014-07-13 03:25 - 2011-10-04 17:37 - 00000067 _____ () C:\Windows\system32\VpnService.log
2014-07-13 03:25 - 2011-08-25 03:51 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-13 03:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-13 03:21 - 2014-07-13 03:11 - 00000000 ____D () C:\zoek_backup
2014-07-13 03:21 - 2011-08-25 03:15 - 00000000 ____D () C:\Users\JelenJelcin
2014-07-13 03:11 - 2014-07-13 03:23 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-07-13 03:02 - 2014-07-13 03:02 - 01285120 _____ () C:\Users\JelenJelcin\Desktop\zoek.exe
2014-07-13 00:38 - 2014-07-13 00:37 - 00622296 _____ () C:\Windows\Minidump\071314-23322-01.dmp
2014-07-13 00:37 - 2014-07-13 00:37 - 544063191 _____ () C:\Windows\MEMORY.DMP
2014-07-13 00:37 - 2012-06-12 15:28 - 00000000 ____D () C:\Windows\Minidump
2014-07-13 00:34 - 2013-12-14 13:21 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Battle.net
2014-07-13 00:26 - 2014-04-02 13:44 - 00000000 ____D () C:\Users\JelenJelcin\Documents\FIFA 14
2014-07-12 19:30 - 2014-07-12 19:29 - 16007253 _____ () C:\Users\JelenJelcin\Desktop\Assassins-Creed-2-patch-1.01.rar
2014-07-12 18:58 - 2014-07-12 18:41 - 159839766 _____ () C:\Users\JelenJelcin\Desktop\Assassins-Creed-2---čeština.exe
2014-07-12 18:41 - 2012-03-25 13:45 - 04550656 ___SH () C:\Users\JelenJelcin\Desktop\Thumbs.db
2014-07-12 18:39 - 2014-07-12 15:39 - 1530905358 _____ () C:\Users\JelenJelcin\Desktop\Cimrman---Záskok.mp4
2014-07-12 18:04 - 2014-07-12 18:04 - 00001201 _____ () C:\Users\JelenJelcin\Desktop\Uplay.lnk
2014-07-12 18:04 - 2014-07-12 18:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-07-12 18:04 - 2011-08-25 13:55 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-07-12 18:03 - 2014-07-12 18:03 - 00001685 _____ () C:\Users\JelenJelcin\Desktop\Play Assassins Creed II.lnk
2014-07-12 17:58 - 2014-07-12 16:01 - 00000000 ____D () C:\Users\JelenJelcin\Assassin's Creed II PC full game updated v_1.01 ^^nosTEAM^^
2014-07-12 17:58 - 2012-04-13 08:40 - 00000000 ____D () C:\Games
2014-07-12 17:57 - 2011-08-25 15:09 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Ubisoft Game Launcher
2014-07-12 15:56 - 2014-07-12 15:56 - 00003056 _____ () C:\Windows\System32\Tasks\{4D587FD0-29C0-4380-BC11-5572F31EE86A}
2014-07-12 15:50 - 2012-09-27 15:38 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\DAEMON Tools Pro
2014-07-12 15:40 - 2014-07-12 15:36 - 00000000 ____D () C:\Users\JelenJelcin\Heroes of Might and Magic IV
2014-07-12 15:36 - 2011-09-29 21:14 - 00000934 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core.job
2014-07-12 11:49 - 2014-07-12 11:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-12 11:48 - 2014-07-12 11:40 - 00000000 ____D () C:\AdwCleaner
2014-07-12 11:39 - 2014-07-12 11:38 - 01348263 _____ () C:\Users\JelenJelcin\Desktop\adwcleaner_3.215.exe
2014-07-12 11:36 - 2014-07-12 11:36 - 00008639 _____ () C:\Users\JelenJelcin\Desktop\JRT.txt
2014-07-12 11:29 - 2014-07-12 11:29 - 00000000 ____D () C:\Windows\ERUNT
2014-07-12 11:27 - 2011-10-03 22:27 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\obrázky
2014-07-12 11:27 - 2011-08-28 11:36 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Games
2014-07-12 11:26 - 2014-07-12 11:25 - 01016261 _____ (Thisisu) C:\Users\JelenJelcin\Desktop\JRT.exe
2014-07-11 17:52 - 2013-05-11 22:37 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Xfire Videa
2014-07-11 17:42 - 2014-07-11 17:32 - 107558589 _____ () C:\Users\JelenJelcin\Desktop\liga garen.wmv
2014-07-10 14:56 - 2013-12-14 13:23 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-07-10 14:56 - 2013-12-14 13:21 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-07-10 14:55 - 2011-12-13 12:40 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-07-10 12:08 - 2014-07-10 12:08 - 00000000 _____ () C:\Users\JelenJelcin\Desktop\notorjelen.txt
2014-07-09 17:01 - 2014-07-09 17:01 - 00002128 _____ () C:\Users\JelenJelcin\Desktop\Clash of Clans.lnk
2014-07-09 12:58 - 2011-10-17 14:00 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\TS3Client
2014-07-09 11:58 - 2012-05-31 15:10 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 11:56 - 2014-07-09 11:56 - 11204096 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-09 11:56 - 2012-05-31 15:10 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 11:56 - 2011-08-25 17:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 14:14 - 2014-07-08 14:05 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-07-08 14:07 - 2014-07-08 14:07 - 00001824 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-07-08 14:07 - 2014-07-08 14:07 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-07-08 14:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-08 14:06 - 2014-07-08 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-07-08 14:06 - 2014-07-08 14:05 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-07-08 14:06 - 2014-07-08 14:05 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-08 14:06 - 2014-07-08 14:04 - 00000000 ____D () C:\Program Files (x86)\Shop_an_Upi_1.6
2014-07-08 14:04 - 2014-07-08 14:04 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Local\Bluestacks
2014-07-07 02:29 - 2013-05-27 13:49 - 00461824 ___SH () C:\Users\JelenJelcin\Thumbs.db
2014-07-06 23:21 - 2014-04-20 10:51 - 00000000 ____D () C:\Users\JelenJelcin\Subs
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-06 16:05 - 2014-07-06 16:05 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-04 22:04 - 2014-07-03 21:17 - 00000000 ____D () C:\Users\JelenJelcin\21 Jump Street (2012) [1080p]
2014-07-04 15:52 - 2014-07-04 15:51 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\New folder
2014-07-03 21:16 - 2014-07-03 17:37 - 00000000 ____D () C:\Users\JelenJelcin\Hannibal S01E09 HDTV x264-LOL[ettv]
2014-07-03 17:48 - 2014-07-03 17:38 - 196606986 ____R () C:\Users\JelenJelcin\Hannibal.S01E10.HDTV.x264-LOL.mp4
2014-07-03 17:46 - 2014-07-03 17:39 - 205068502 ____R () C:\Users\JelenJelcin\Hannibal.S01E11.HDTV.x264-LOL.mp4
2014-07-03 17:45 - 2014-07-03 17:38 - 181211197 ____R () C:\Users\JelenJelcin\Hannibal.S01E12.HDTV.x264-LOL.mp4
2014-07-03 15:57 - 2013-06-16 23:25 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\skola
2014-07-02 20:08 - 2014-06-30 21:01 - 00000000 ____D () C:\Users\JelenJelcin\Need For Speed 2014 720p HDTS x264 Pimp4003
2014-07-01 16:51 - 2014-07-01 16:43 - 263030428 ____R () C:\Users\JelenJelcin\Hannibal.S01E06.HDTV.x264-2HD.mp4
2014-07-01 16:51 - 2014-07-01 16:43 - 232103011 ____R () C:\Users\JelenJelcin\Hannibal.S01E07.HDTV.x264-2HD.mp4
2014-07-01 16:51 - 2014-07-01 16:43 - 217456240 ____R () C:\Users\JelenJelcin\Hannibal.S01E08.HDTV.x264-2HD.mp4
2014-07-01 15:34 - 2014-07-01 15:27 - 305418880 ____R () C:\Users\JelenJelcin\Hannibal.S01E04.Ceuf.WebRip.x264-ANON.mp4
2014-07-01 15:33 - 2014-07-01 15:28 - 271813043 ____R () C:\Users\JelenJelcin\Hannibal.S01E05.Coquilles.HDTV.x264-2HD.mp4
2014-07-01 14:51 - 2014-07-01 14:44 - 252228024 ____R () C:\Users\JelenJelcin\Hannibal.S01E03.HDTV.x264-LOL.mp4
2014-07-01 14:25 - 2014-07-01 14:18 - 293412737 ____R () C:\Users\JelenJelcin\Hannibal.S01E02.HDTV.x264-LOL.mp4
2014-07-01 14:24 - 2014-07-01 14:17 - 286276844 ____R () C:\Users\JelenJelcin\Hannibal.S01E01.HDTV.x264-LOL.mp4
2014-06-30 23:05 - 2014-06-30 22:48 - 00000000 ____D () C:\Users\JelenJelcin\Ride Along (2014) [1080p]
2014-06-29 20:36 - 2014-06-29 20:36 - 00000081 _____ () C:\Users\JelenJelcin\Desktop\play.txt
2014-06-29 11:59 - 2013-08-14 15:05 - 00000024 _____ () C:\Users\JelenJelcin\random.dat
2014-06-29 11:53 - 2013-08-14 15:05 - 00000050 _____ () C:\Users\JelenJelcin\jagex_cl_runescape_LIVE.dat
2014-06-29 11:48 - 2014-06-16 22:24 - 00000050 _____ () C:\Users\JelenJelcin\jagex_cl_oldschool_LIVE.dat
2014-06-26 11:07 - 2011-09-01 00:06 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Hudba
2014-06-25 21:16 - 2014-06-25 21:15 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\Rio 2 2014 HDTS x264 AC3-MiLLENiUM
2014-06-25 16:18 - 2009-07-14 07:13 - 00784996 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-25 00:29 - 2011-12-21 00:34 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-06-25 00:29 - 2011-12-21 00:33 - 00000000 ____D () C:\ProgramData\DivX
2014-06-25 00:28 - 2014-06-25 00:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-06-25 00:28 - 2011-12-21 00:40 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\DivX
2014-06-25 00:28 - 2011-12-21 00:38 - 00000000 ____D () C:\Program Files\DivX
2014-06-25 00:19 - 2014-06-25 00:19 - 00001901 _____ () C:\Users\Public\Desktop\LOL Recorder.lnk
2014-06-25 00:19 - 2014-02-01 18:35 - 00000000 ____D () C:\Program Files (x86)\LOLReplay
2014-06-25 00:19 - 2012-07-31 16:44 - 00001913 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2014-06-24 19:46 - 2014-06-24 19:27 - 00000000 ____D () C:\Users\JelenJelcin\Songs
2014-06-24 15:45 - 2011-09-04 21:03 - 00000000 ____D () C:\ProgramData\PMB Files
2014-06-17 16:04 - 2014-04-06 14:55 - 00000000 ____D () C:\Program Files (x86)\Age of Wonders III
2014-06-17 15:31 - 2011-09-29 21:14 - 00003968 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA
2014-06-17 15:31 - 2011-09-29 21:14 - 00003572 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core
2014-06-16 22:24 - 2012-03-29 22:37 - 00000000 ____D () C:\Users\JelenJelcin\jagexcache
2014-06-16 22:23 - 2014-06-16 22:23 - 00000000 ____D () C:\Users\JelenJelcin\AppData\Roaming\Oracle
2014-06-16 22:23 - 2013-11-02 09:47 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-16 22:22 - 2014-06-16 22:22 - 00005499 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-16 22:22 - 2013-06-29 11:39 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-13 14:39 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-13 09:18 - 2012-07-05 18:17 - 00003958 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-13 09:18 - 2012-07-05 18:17 - 00003706 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

Files to move or delete:
====================
C:\Users\JelenJelcin\jagex_cl_oldschool_LIVE.dat
C:\Users\JelenJelcin\jagex_cl_runescape_LIVE.dat
C:\Users\JelenJelcin\random.dat


Some content of TEMP:
====================
C:\Users\JelenJelcin\AppData\Local\Temp\NOSEventMessages.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-29 19:19

==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [RemoteControl11] => C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe [234792 2011-04-20] (CyberLink Corp.)
  HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
  HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [NSU_agent] => C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] ()
  HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
  HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
  HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
  HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Google Update] => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-29] (Google Inc.)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-12] (Valve Corporation)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] (DT Soft Ltd)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-17] ()
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [AdobeBridge] => [X]
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Xfire] => C:\Program Files (x86)\Xfire2\Xfire.exe [4816224 2013-06-21] (Xfire Inc.)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [] => [X]
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Keyboard Inf.] => C:\Users\JelenJelcin\AppData\Roaming\WinRAR\msdn.exe [235908 2014-04-05] ()
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [uTorrent] => C:\Users\JelenJelcin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-03] (BitTorrent Inc.)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [EADM] => C:\Origin\Origin.exe [3595608 2014-07-13] (Electronic Arts)
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {6431a5bf-08a7-11e2-8512-8c89a5106c2e} - E:\_AUTORUN\AUTORUN.EXE
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {cc735066-e041-11e3-8d0b-8c89a5106c2e} - F:\_AUTORUN\AUTORUN.EXE
  AppInit_DLLs-x32:  => "" File Not Found
  
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF4452568CD62CC01
  StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
  SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
  SearchScopes: HKLM-x32 - DefaultScope value is missing.
  
  2014-07-13 11:21 - 2014-07-13 11:21 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\FRST-OlderVersion
  2014-07-13 03:23 - 2014-07-13 03:11 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-07-13 03:13 - 2014-07-13 03:26 - 00010345 _____ () C:\zoek-results.log
  2014-07-13 03:11 - 2014-07-13 03:21 - 00000000 ____D () C:\zoek_backup
  2014-07-13 03:02 - 2014-07-13 03:02 - 01285120 _____ () C:\Users\JelenJelcin\Desktop\zoek.exe
  2014-07-12 11:40 - 2014-07-12 11:48 - 00000000 ____D () C:\AdwCleaner
  2014-07-12 11:40 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
  2014-07-12 11:38 - 2014-07-12 11:39 - 01348263 _____ () C:\Users\JelenJelcin\Desktop\adwcleaner_3.215.exe
  2014-07-12 11:36 - 2014-07-12 11:36 - 00008639 _____ () C:\Users\JelenJelcin\Desktop\JRT.txt
  2014-07-12 11:29 - 2014-07-12 11:29 - 00000000 ____D () C:\Windows\ERUNT
  2014-07-12 11:25 - 2014-07-12 11:26 - 01016261 _____ (Thisisu) C:\Users\JelenJelcin\Desktop\JRT.exe
  2014-07-11 23:13 - 2014-07-13 11:22 - 00023382 _____ () C:\Users\JelenJelcin\Desktop\FRST.txt
  
  Task: {1138303C-9021-44DC-94C2-61333B29B693} - \d8f74118-7758-4a73-8216-f3d5e66779f5-5 No Task File <==== ATTENTION
  Task: {3C1B49E1-8A6D-40C7-9A08-278919D2CCA5} - \d8f74118-7758-4a73-8216-f3d5e66779f5-2 No Task File <==== ATTENTION
  Task: {5FA1AAD2-DA9E-46C4-94A1-45BF7BAC03EA} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
  Task: {605C3538-4BB0-4049-8C65-1B8336038DD8} - \d8f74118-7758-4a73-8216-f3d5e66779f5-11 No Task File <==== ATTENTION
  Task: {662A20D8-AFF8-4A60-BE30-6D6E72C547C3} - \d8f74118-7758-4a73-8216-f3d5e66779f5-7 No Task File <==== ATTENTION
  Task: {7D727378-FD86-4750-8E54-96B5E51902BF} - \d8f74118-7758-4a73-8216-f3d5e66779f5-10 No Task File <==== ATTENTION
  Task: {808DAC4C-8584-4AEE-8AE9-B2BE8525AECD} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
  Task: {866B5FC5-311C-4559-BD60-35217E9A97AF} - \d8f74118-7758-4a73-8216-f3d5e66779f5-4 No Task File <==== ATTENTION
  Task: {8846C094-B454-470D-A6F0-388F4692A026} - \d8f74118-7758-4a73-8216-f3d5e66779f5-1 No Task File <==== ATTENTION
  Task: {BAB5CC43-8D38-4DB2-B208-B61EA206529B} - \d8f74118-7758-4a73-8216-f3d5e66779f5-6 No Task File <==== ATTENTION
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core.job => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA.job => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe
  
  HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Classes\.exe:  =>  <===== ATTENTION!
  
  Hosts:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-07-2014
Ran by JelenJelcin at 2014-07-14 11:48:17 Run:1
Running from C:\Users\JelenJelcin\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl11] => C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe [234792 2011-04-20] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NSU_agent] => C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Google Update] => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-29] (Google Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-12] (Valve Corporation)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] (DT Soft Ltd)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-17] ()
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Xfire] => C:\Program Files (x86)\Xfire2\Xfire.exe [4816224 2013-06-21] (Xfire Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [] => [X]
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [Keyboard Inf.] => C:\Users\JelenJelcin\AppData\Roaming\WinRAR\msdn.exe [235908 2014-04-05] ()
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [uTorrent] => C:\Users\JelenJelcin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-03] (BitTorrent Inc.)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\Run: [EADM] => C:\Origin\Origin.exe [3595608 2014-07-13] (Electronic Arts)
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {6431a5bf-08a7-11e2-8512-8c89a5106c2e} - E:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\...\MountPoints2: {cc735066-e041-11e3-8d0b-8c89a5106c2e} - F:\_AUTORUN\AUTORUN.EXE
AppInit_DLLs-x32: => "" File Not Found

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF4452568CD62CC01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.

2014-07-13 11:21 - 2014-07-13 11:21 - 00000000 ____D () C:\Users\JelenJelcin\Desktop\FRST-OlderVersion
2014-07-13 03:23 - 2014-07-13 03:11 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-07-13 03:13 - 2014-07-13 03:26 - 00010345 _____ () C:\zoek-results.log
2014-07-13 03:11 - 2014-07-13 03:21 - 00000000 ____D () C:\zoek_backup
2014-07-13 03:02 - 2014-07-13 03:02 - 01285120 _____ () C:\Users\JelenJelcin\Desktop\zoek.exe
2014-07-12 11:40 - 2014-07-12 11:48 - 00000000 ____D () C:\AdwCleaner
2014-07-12 11:40 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-12 11:38 - 2014-07-12 11:39 - 01348263 _____ () C:\Users\JelenJelcin\Desktop\adwcleaner_3.215.exe
2014-07-12 11:36 - 2014-07-12 11:36 - 00008639 _____ () C:\Users\JelenJelcin\Desktop\JRT.txt
2014-07-12 11:29 - 2014-07-12 11:29 - 00000000 ____D () C:\Windows\ERUNT
2014-07-12 11:25 - 2014-07-12 11:26 - 01016261 _____ (Thisisu) C:\Users\JelenJelcin\Desktop\JRT.exe
2014-07-11 23:13 - 2014-07-13 11:22 - 00023382 _____ () C:\Users\JelenJelcin\Desktop\FRST.txt

Task: {1138303C-9021-44DC-94C2-61333B29B693} - \d8f74118-7758-4a73-8216-f3d5e66779f5-5 No Task File <==== ATTENTION
Task: {3C1B49E1-8A6D-40C7-9A08-278919D2CCA5} - \d8f74118-7758-4a73-8216-f3d5e66779f5-2 No Task File <==== ATTENTION
Task: {5FA1AAD2-DA9E-46C4-94A1-45BF7BAC03EA} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {605C3538-4BB0-4049-8C65-1B8336038DD8} - \d8f74118-7758-4a73-8216-f3d5e66779f5-11 No Task File <==== ATTENTION
Task: {662A20D8-AFF8-4A60-BE30-6D6E72C547C3} - \d8f74118-7758-4a73-8216-f3d5e66779f5-7 No Task File <==== ATTENTION
Task: {7D727378-FD86-4750-8E54-96B5E51902BF} - \d8f74118-7758-4a73-8216-f3d5e66779f5-10 No Task File <==== ATTENTION
Task: {808DAC4C-8584-4AEE-8AE9-B2BE8525AECD} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {866B5FC5-311C-4559-BD60-35217E9A97AF} - \d8f74118-7758-4a73-8216-f3d5e66779f5-4 No Task File <==== ATTENTION
Task: {8846C094-B454-470D-A6F0-388F4692A026} - \d8f74118-7758-4a73-8216-f3d5e66779f5-1 No Task File <==== ATTENTION
Task: {BAB5CC43-8D38-4DB2-B208-B61EA206529B} - \d8f74118-7758-4a73-8216-f3d5e66779f5-6 No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core.job => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA.job => C:\Users\JelenJelcin\AppData\Local\Google\Update\GoogleUpdate.exe

HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Classes\.exe: => <===== ATTENTION!

Hosts:
Reboot:
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl11 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NSU_agent => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DivXMediaServer => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Pro Agent => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Xfire => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\NokiaSuite.exe => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Keyboard Inf. => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent => value deleted successfully.
HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Microsoft\Windows\CurrentVersion\Run\\EADM => value deleted successfully.
'HKU\S-1-5-21-1133595316-384909057-1113598326-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6431a5bf-08a7-11e2-8512-8c89a5106c2e}' => Key deleted successfully.
'HKCR\CLSID\{6431a5bf-08a7-11e2-8512-8c89a5106c2e}'=> Key not found.
'HKU\S-1-5-21-1133595316-384909057-1113598326-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cc735066-e041-11e3-8d0b-8c89a5106c2e}' => Key deleted successfully.
'HKCR\CLSID\{cc735066-e041-11e3-8d0b-8c89a5106c2e}'=> Key not found.
"" => Value Data removed successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP => value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}' => Key deleted successfully.
'HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}'=> Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
C:\Users\JelenJelcin\Desktop\FRST-OlderVersion => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\JelenJelcin\Desktop\zoek.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\JelenJelcin\Desktop\adwcleaner_3.215.exe => Moved successfully.
C:\Users\JelenJelcin\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\JelenJelcin\Desktop\JRT.exe => Moved successfully.
C:\Users\JelenJelcin\Desktop\FRST.txt => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1138303C-9021-44DC-94C2-61333B29B693}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1138303C-9021-44DC-94C2-61333B29B693}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-5' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3C1B49E1-8A6D-40C7-9A08-278919D2CCA5}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C1B49E1-8A6D-40C7-9A08-278919D2CCA5}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-2' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5FA1AAD2-DA9E-46C4-94A1-45BF7BAC03EA}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5FA1AAD2-DA9E-46C4-94A1-45BF7BAC03EA}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{605C3538-4BB0-4049-8C65-1B8336038DD8}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{605C3538-4BB0-4049-8C65-1B8336038DD8}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-11' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{662A20D8-AFF8-4A60-BE30-6D6E72C547C3}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{662A20D8-AFF8-4A60-BE30-6D6E72C547C3}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-7' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7D727378-FD86-4750-8E54-96B5E51902BF}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D727378-FD86-4750-8E54-96B5E51902BF}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-10' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{808DAC4C-8584-4AEE-8AE9-B2BE8525AECD}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{808DAC4C-8584-4AEE-8AE9-B2BE8525AECD}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{866B5FC5-311C-4559-BD60-35217E9A97AF}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{866B5FC5-311C-4559-BD60-35217E9A97AF}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-4' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8846C094-B454-470D-A6F0-388F4692A026}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8846C094-B454-470D-A6F0-388F4692A026}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-1' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BAB5CC43-8D38-4DB2-B208-B61EA206529B}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BAB5CC43-8D38-4DB2-B208-B61EA206529B}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d8f74118-7758-4a73-8216-f3d5e66779f5-6' => Key deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1133595316-384909057-1113598326-1000UA.job => Moved successfully.
'HKU\S-1-5-21-1133595316-384909057-1113598326-1000\Software\Classes\.exe' => Key deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Nevim co to je ale ten OTC mi znicil operační systém proběhl sen scan restartoval se počítač a píše mi to že tam nemámm oeprační systém takže moc děkuju ale můžu přeinstalovat windowsy.....

OTC maze jen a pouze pouzite nastroje pri cisteni, do jinych casti systemu nesaha...

Zkuste jeste mackat F8 a zvolit Posledni znama funkcni konfigurace

Dostanu se jenom do Biosu nikam jinam mě to nepustí

Pak zkusit automatickou opravu z instal. media http://forum.viry.cz/viewtopic.php?f=46&t=106339