prosím o konrotlu logu

Zpráva

motyl2 · #1 Příspěvek od **motyl2** » 31 črc 2014 07:26

Dobrý den, prosím o kontrolu logu. Antivir odstranil nějaké viry, ale nejsem si jist jestli je vše ok. Díky

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 01
Ran by Michal (administrator) on PC-MICHAL on 31-07-2014 08:18:02
Running from C:\Users\Michal\Downloads
Platform: Windows 8 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ClientConnect Ltd.) C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2012-09-19] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-09-19] (IDT, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [SSDMonitor] => C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [77824 2013-12-02] (Apple Computer, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-16] (AVAST Software)
HKLM-x32\...\Run: [msgimnSrv] => C:\windows\SysWOW64\msgimn.vbe [649 2014-07-06] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-07-15] (LogMeIn Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: F - "F:\setup.exe"
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: G - "G:\autorun.exe"
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL™ 09.lnk
ShortcutTarget: Registrace NHL™ 09.lnk -> C:\Program Files (x86)\EA Sports\NHL 09\Support\EAregister.exe (No File)
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://trovi.com?SearchSource=10&CUI=UN ... =CT3329621
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://ru.redirect.wrapper.services.ala ... country=CZ
URLSearchHook: HKLM-x32 - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
URLSearchHook: HKLM-x32 - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
URLSearchHook: HKCU - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
URLSearchHook: HKCU - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
SearchScopes: HKLM - {142C8D65-2688-451F-831A-96BDA7563275} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {FEA7ADB6-A8B1-4D5C-B4AF-7FF63E163F50} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
SearchScopes: HKLM-x32 - {142C8D65-2688-451F-831A-96BDA7563275} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - DefaultScope {FEA7ADB6-A8B1-4D5C-B4AF-7FF63E163F50} URL = http://trovi.com/ResultsExt.aspx?q={sea ... 06921&UM=4
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
SearchScopes: HKCU - {142C8D65-2688-451F-831A-96BDA7563275} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - {FEA7ADB6-A8B1-4D5C-B4AF-7FF63E163F50} URL = http://trovi.com/ResultsExt.aspx?q={sea ... 06921&UM=4
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ()
BHO-x32: BS Player ControlBar B Toolbar -> {31264a33-a653-46c4-af49-1232c59a7da5} -> C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
Toolbar: HKCU - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll (ClientConnect Ltd.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @adobe.com/Acrobat,version=5.1 - C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Michal\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np32dsw.dll (Macromedia, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: SafePCRepair - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\89ffxtbr@SafePCRepair_89.com [2014-07-22]
FF Extension: Battlefield Heroes Updater - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\battlefieldheroespatcher@ea.com [2013-04-05]
FF Extension: Battlefield Play4Free - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\battlefieldplay4free@ea.com [2013-03-17]
FF Extension: Seznam lištička - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-07-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-13]

Chrome:
=======
CHR HomePage: hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 50-406&t=4
CHR StartupUrls: "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 50-406&t=4", "hxxp://www.google.com/"
CHR DefaultSearchProvider: Ask.com
CHR DefaultSearchURL: http://dts.search.ask.com/sr?src=crb&gc ... earchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll ()
CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\Michal\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Vyhledávání Google) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-28]
CHR Extension: (Peněženka Google) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Gmail) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-16] (AVAST Software)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
S3 ioloService; C:\Program Files (x86)\SafePCRepair\ioloToolService.exe [2625800 2013-11-22] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-14] (LogMeIn, Inc.)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools)
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-03-14] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-09-19] (IDT, Inc.) [File not signed]
R2 TBSrv; C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe [350528 2014-04-10] (ClientConnect Ltd.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-16] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-16] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-16] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-16] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-06-23] (LogMeIn Inc.)
R3 tilfilter; C:\Windows\System32\drivers\TIxHCIlfilter.sys [17528 2012-11-20] (Texas Instruments, Inc.)
R3 tiufilter; C:\Windows\System32\drivers\TIxHCIufilter.sys [23184 2012-11-20] (Texas Instruments, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-31 08:18 - 2014-07-31 08:18 - 00027104 _____ () C:\Users\Michal\Downloads\FRST.txt
2014-07-31 08:17 - 2014-07-31 08:18 - 00000000 ____D () C:\FRST
2014-07-31 08:16 - 2014-07-31 08:16 - 02094080 _____ (Farbar) C:\Users\Michal\Downloads\FRST64.exe
2014-07-30 20:25 - 2014-07-30 20:26 - 00000000 ____D () C:\Users\Michal\AppData\Local\{E4997EC3-AFB9-4C6E-B2B7-513203864995}
2014-07-30 11:43 - 2014-07-30 11:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 08:40 - 2014-07-27 08:40 - 00022883 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy 2013 - 2014.xlsx
2014-07-27 08:40 - 2014-07-27 08:40 - 00016722 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy celkem.xlsx
2014-07-25 21:38 - 2014-07-25 21:38 - 00002165 _____ () C:\windows\iis.log
2014-07-25 21:38 - 2014-07-25 21:38 - 00000712 _____ () C:\windows\DtcInstall.log
2014-07-25 21:36 - 2014-07-25 21:36 - 00001559 _____ () C:\windows\comsetup.log
2014-07-25 21:31 - 2014-07-25 21:39 - 00020958 _____ () C:\windows\diagwrn.xml
2014-07-25 21:31 - 2014-07-25 21:39 - 00020958 _____ () C:\windows\diagerr.xml
2014-07-23 17:58 - 2014-07-23 18:09 - 1045690368 ____R () C:\Users\Michal\Downloads\Šmoulové 2.avi
2014-07-22 20:23 - 2014-07-22 20:35 - 00000000 ____D () C:\Users\Michal\Documents\CSM
2014-07-22 20:23 - 2014-07-22 20:23 - 00001147 _____ () C:\Users\Public\Desktop\Czech Soccer Manager.lnk
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Czech Soccer Manager
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\Program Files (x86)\Czech Soccer Manager
2014-07-22 20:22 - 2014-07-24 03:27 - 00000000 ____D () C:\Program Files (x86)\SafePCRepair
2014-07-22 20:22 - 2014-07-22 20:23 - 36968553 _____ () C:\Users\Michal\Downloads\csm_setup.exe
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\Users\Michal\AppData\Local\iolo
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\ProgramData\iolo
2014-07-21 17:23 - 2014-07-21 18:11 - 00000000 ____D () C:\Users\Michal\Downloads\Kostka
2014-07-21 17:19 - 2014-07-21 17:19 - 00001134 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00001128 _____ () C:\Users\Public\Desktop\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00000009 _____ () C:\END
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\Users\Michal\AppData\Local\Tbccint
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\ProgramData\Tbccint
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\Program Files (x86)\Tbccint
2014-07-21 17:18 - 2014-07-21 17:21 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer Pro
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-07-21 17:07 - 2014-07-21 17:07 - 02278704 _____ (Ondrej Pokorny ) C:\Users\Michal\Downloads\kmedia-player-0-5.exe
2014-07-21 17:07 - 2014-07-21 17:07 - 00001036 _____ () C:\Users\Michal\Desktop\KMedia Player.lnk
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMedia Player
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\Program Files (x86)\KMedia Player
2014-07-21 06:17 - 2014-07-21 06:17 - 00000000 ____D () C:\Users\Michal\AppData\Local\{BB452717-4D9E-46B0-BB68-6F4F5E19358F}
2014-07-16 16:33 - 2014-07-16 16:33 - 00000000 ____D () C:\ProgramData\SafetyNut
2014-07-16 16:29 - 2014-07-16 16:29 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-07-16 16:29 - 2014-07-16 16:29 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-07-16 16:27 - 2014-07-16 16:27 - 00000000 ____D () C:\Users\Michal\048298C9A4D3490B9FF9AB023A9238F3.TMP
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\FirefoxToolbar
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-13 17:19 - 2014-07-13 17:19 - 00001854 _____ () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk
2014-07-13 08:52 - 2014-07-13 08:52 - 00002537 _____ () C:\Users\Michal\Desktop\The Sims 3 Deluxe Edition.lnk
2014-07-13 08:52 - 2014-07-13 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\Electronic Arts
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\_Userdok_orig
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Program Files (x86)\R.G. Catalyst
2014-07-12 21:38 - 2014-07-12 21:38 - 00000000 ____D () C:\Users\Michal\Downloads\The Sims 3 - Kompletní Edice (Březen 2013) - t2k9
2014-07-12 20:46 - 2014-07-12 20:46 - 00000000 ____D () C:\Program Files (x86)\Browser Tab Search by Ask
2014-07-12 19:19 - 2014-07-12 19:19 - 00003192 _____ () C:\windows\System32\Tasks\{95DA5C4D-C31D-4CDB-88A1-D334BBB0639C}
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:09 - 2014-07-12 19:09 - 00000000 ____D () C:\windows\SysWOW64\bitstreams
2014-07-12 19:09 - 2013-10-26 20:30 - 01704448 ____S (The OpenSSL Project, http://www.openssl.org/) C:\windows\SysWOW64\libeay32.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00538126 ____S () C:\windows\SysWOW64\libcurl-4.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00364544 ____S (The OpenSSL Project, http://www.openssl.org/) C:\windows\SysWOW64\ssleay32.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00192512 ____S () C:\windows\SysWOW64\libidn-11.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00171008 ____S (The libssh2 library, http://www.libssh2.org/) C:\windows\SysWOW64\libssh2.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00133632 ____S () C:\windows\SysWOW64\librtmp.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00044727 ____S () C:\windows\SysWOW64\diablo130302.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00043810 ____S () C:\windows\SysWOW64\poclbm130302.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00030802 ____S () C:\windows\SysWOW64\diakgcn121016.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00023825 ____S () C:\windows\SysWOW64\scrypt130511.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00013062 ____S () C:\windows\SysWOW64\phatk121016.cl
2014-07-12 19:09 - 2013-07-18 16:06 - 00187904 ____S () C:\windows\SysWOW64\lcpmncdidt.exe
2014-07-12 19:09 - 2013-06-12 15:15 - 00119888 ____S (Open Source Software community LGPL) C:\windows\SysWOW64\pthreadGC2.dll
2014-07-12 19:09 - 2013-06-12 15:15 - 00100864 ____S () C:\windows\SysWOW64\zlib1.dll
2014-07-12 19:09 - 2012-09-25 23:46 - 00472424 ____S (NVIDIA Corporation) C:\windows\SysWOW64\cudart32_50_35.dll
2014-07-12 19:09 - 2012-05-27 01:36 - 00055808 ____S (Open Source Software community LGPL) C:\windows\SysWOW64\pthreadVC2.dll
2014-07-12 19:08 - 2014-07-12 19:08 - 00009062 _____ () C:\Users\Michal\AppData\Roaming\msabvjwt.dat
2014-07-12 19:08 - 2014-07-12 19:08 - 00000028 _____ () C:\Users\Michal\AppData\Roaming\mshktd.dat
2014-07-12 19:07 - 2014-07-12 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-12 19:07 - 2014-07-06 14:02 - 00009201 ____S () C:\windows\SysWOW64\mshktd.vbe
2014-07-12 19:07 - 2014-07-06 14:02 - 00004332 ____S () C:\windows\SysWOW64\msabvjwt.vbe
2014-07-12 19:07 - 2014-07-06 14:00 - 00000649 ____S () C:\windows\SysWOW64\msgimn.vbe
2014-07-12 19:07 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\windows\SysWOW64\nircmdc.exe
2014-07-12 19:06 - 2014-07-16 17:56 - 00000000 ____D () C:\Program Files (x86)\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-12 14:41 - 2014-07-13 08:55 - 00438560 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-12 14:24 - 2014-07-12 14:25 - 00000000 ____D () C:\Users\Michal\Documents\GTA San Andreas User Files
2014-07-12 14:20 - 2014-07-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-07-12 12:53 - 2014-07-12 14:17 - 938855118 _____ () C:\Users\Michal\Desktop\GTA-San-Andreas.rar
2014-07-11 15:36 - 2014-06-26 22:53 - 00703968 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-11 15:36 - 2014-06-26 22:53 - 00105440 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-11 14:34 - 2014-07-11 14:34 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-10 09:45 - 2014-07-10 09:45 - 00411621 _____ () C:\Users\Michal\Desktop\photo.php
2014-07-10 07:16 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-10 07:16 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-10 07:16 - 2014-06-11 06:18 - 04038144 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-10 07:16 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2014-07-10 07:16 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-07-10 07:16 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-07-10 07:16 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-10 07:16 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-07-10 07:16 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-07-10 07:16 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-07-10 07:16 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-07-10 07:16 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-07-10 07:16 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2014-07-10 07:16 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2014-07-10 07:16 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-07-10 07:16 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 07:16 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-07-10 07:16 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 07:16 - 2014-02-08 06:34 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2014-07-10 07:15 - 2014-07-01 00:42 - 00702464 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-10 07:15 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2014-07-10 07:15 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2014-07-10 07:15 - 2014-06-28 05:35 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 02239488 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 01366528 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-10 07:15 - 2014-06-19 04:11 - 19277312 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-10 07:15 - 2014-06-19 04:11 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-10 07:15 - 2014-06-19 04:11 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 15369728 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 02650624 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-10 07:15 - 2014-06-19 04:09 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-10 07:15 - 2014-06-19 02:53 - 14368768 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 01766400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 01141760 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 13732352 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 02863616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 02051072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 01440768 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-10 07:15 - 2014-06-19 02:52 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-10 07:15 - 2014-06-19 02:33 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-10 07:15 - 2014-06-19 02:30 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-10 07:15 - 2014-06-19 00:05 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-07-10 07:15 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-10 07:15 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-10 07:15 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-08 21:16 - 2014-07-31 06:44 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn Hamachi
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-07-08 21:16 - 2013-06-27 10:59 - 00000000 ____D () C:\Users\Michal\Downloads\firefox
2014-07-08 21:15 - 2014-07-08 21:15 - 08478720 _____ () C:\Users\Michal\Downloads\hamachi.msi
2014-07-08 21:15 - 2014-07-08 21:15 - 00733312 _____ () C:\Users\Michal\Downloads\hamachi-lista-centrumcz.exe
2014-07-08 21:15 - 2014-07-08 21:15 - 00384529 _____ () C:\Users\Michal\Downloads\Lista_centrum.exe
2014-07-05 21:10 - 2014-07-05 21:19 - 155935565 _____ () C:\Users\Michal\Desktop\Minecraft-luncher.rar
2014-07-05 21:05 - 2014-07-05 21:06 - 01106756 _____ () C:\Users\Michal\Downloads\Minecraft-Warez-launcher-1.7.4.exe
2014-07-05 20:57 - 2014-07-05 20:58 - 01592398 _____ (TeamExtreme) C:\Users\Michal\Desktop\Minecraft-Launcher.exe
2014-07-05 12:47 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-07-05 12:47 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-07-05 12:47 - 2014-04-03 13:19 - 00328024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2014-07-05 12:47 - 2014-04-03 05:44 - 00619008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-07-05 12:47 - 2014-04-01 00:08 - 00387268 _____ () C:\windows\system32\ApnDatabase.xml
2014-07-05 12:47 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
2014-07-05 12:47 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
2014-07-05 12:46 - 2014-04-30 00:32 - 01301504 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-07-05 12:46 - 2014-04-30 00:22 - 01023488 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-07-05 12:46 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-07-05 12:46 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-07-05 12:46 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-07-05 12:46 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-07-05 12:45 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-07-05 12:45 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-07-05 12:45 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-07-05 12:45 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-05 12:45 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-05 12:45 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-05 12:45 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-05 12:45 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-05 12:45 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-05 12:45 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-05 12:45 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-07-05 12:45 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-07-05 12:45 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-07-05 12:45 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-07-05 12:45 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-07-05 12:45 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-05 12:45 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-07-05 12:45 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-07-05 12:45 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-07-05 12:45 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-07-05 12:45 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-05 12:45 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-07-05 12:45 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-07-05 12:45 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-07-05 12:45 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-07-05 12:45 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-07-05 12:45 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-07-05 12:45 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-07-05 12:45 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-07-05 12:45 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-07-05 12:45 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-07-05 12:45 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-07-05 12:23 - 2014-07-30 07:56 - 00003172 _____ () C:\windows\System32\Tasks\HPCeeScheduleForMichal
2014-07-05 12:23 - 2014-07-30 07:56 - 00000356 _____ () C:\windows\Tasks\HPCeeScheduleForMichal.job
2014-07-05 12:21 - 2014-05-20 04:33 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-07-05 12:21 - 2014-05-20 01:45 - 00629248 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-07-05 12:21 - 2014-05-20 01:45 - 00086528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 03286528 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 01623040 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00773632 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00253440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-07-05 12:21 - 2014-05-15 00:43 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-07-05 12:21 - 2014-05-15 00:43 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-07-05 12:21 - 2014-05-15 00:42 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-07-05 12:21 - 2014-05-15 00:42 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-31 08:18 - 2014-07-31 08:18 - 00027104 _____ () C:\Users\Michal\Downloads\FRST.txt
2014-07-31 08:18 - 2014-07-31 08:17 - 00000000 ____D () C:\FRST
2014-07-31 08:16 - 2014-07-31 08:16 - 02094080 _____ (Farbar) C:\Users\Michal\Downloads\FRST64.exe
2014-07-31 08:10 - 2013-12-07 14:48 - 01119064 _____ () C:\windows\WindowsUpdate.log
2014-07-31 07:45 - 2013-03-11 21:44 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-31 07:30 - 2013-04-28 11:58 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 07:00 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-07-31 06:44 - 2014-07-08 21:16 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn Hamachi
2014-07-31 06:43 - 2013-09-21 19:00 - 00000306 _____ () C:\windows\Tasks\RMAutoUpdate.job
2014-07-31 06:43 - 2013-09-21 14:14 - 00000000 ____D () C:\Program Files (x86)\PC Tools Registry Mechanic
2014-07-31 06:43 - 2013-04-28 11:58 - 00000968 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-30 20:26 - 2014-07-30 20:25 - 00000000 ____D () C:\Users\Michal\AppData\Local\{E4997EC3-AFB9-4C6E-B2B7-513203864995}
2014-07-30 20:26 - 2013-03-11 20:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-30 20:25 - 2014-03-23 11:51 - 00000000 ____D () C:\Users\Michal\AppData\Local\Windows Live
2014-07-30 11:43 - 2014-07-30 11:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-30 09:37 - 2013-03-13 20:26 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\.minecraft
2014-07-30 07:56 - 2014-07-05 12:23 - 00003172 _____ () C:\windows\System32\Tasks\HPCeeScheduleForMichal
2014-07-30 07:56 - 2014-07-05 12:23 - 00000356 _____ () C:\windows\Tasks\HPCeeScheduleForMichal.job
2014-07-30 07:56 - 2013-03-11 20:50 - 00000000 ____D () C:\Users\Michal
2014-07-30 07:52 - 2013-03-13 18:12 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-07-29 14:54 - 2012-11-21 09:09 - 00000000 ____D () C:\ProgramData\Temp
2014-07-29 08:01 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-07-28 19:27 - 2013-09-21 19:00 - 00000414 _____ () C:\windows\SysWOW64\AppLog.log
2014-07-28 19:27 - 2013-09-21 14:14 - 00000306 _____ () C:\windows\Tasks\RMSchedule.job
2014-07-27 13:18 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-27 10:57 - 2013-03-13 18:17 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\uTorrent
2014-07-27 10:04 - 2013-03-11 20:57 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2208449875-2120827913-2427339802-1001
2014-07-27 08:42 - 2013-03-11 20:50 - 00000000 ____D () C:\Users\Michal\AppData\Local\Packages
2014-07-27 08:40 - 2014-07-27 08:40 - 00022883 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy 2013 - 2014.xlsx
2014-07-27 08:40 - 2014-07-27 08:40 - 00016722 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy celkem.xlsx
2014-07-25 21:42 - 2014-03-18 19:21 - 00000000 ___HD () C:\$Windows.~BT
2014-07-25 21:39 - 2014-07-25 21:31 - 00020958 _____ () C:\windows\diagwrn.xml
2014-07-25 21:39 - 2014-07-25 21:31 - 00020958 _____ () C:\windows\diagerr.xml
2014-07-25 21:39 - 2014-01-12 17:38 - 00395065 _____ () C:\windows\setupact.log
2014-07-25 21:39 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-07-25 21:38 - 2014-07-25 21:38 - 00002165 _____ () C:\windows\iis.log
2014-07-25 21:38 - 2014-07-25 21:38 - 00000712 _____ () C:\windows\DtcInstall.log
2014-07-25 21:36 - 2014-07-25 21:36 - 00001559 _____ () C:\windows\comsetup.log
2014-07-25 21:36 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\Registration
2014-07-24 17:06 - 2013-03-14 13:08 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2014-07-24 17:06 - 2013-03-14 13:08 - 00000000 _____ () C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-07-24 03:27 - 2014-07-22 20:22 - 00000000 ____D () C:\Program Files (x86)\SafePCRepair
2014-07-23 19:14 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-07-23 19:13 - 2014-01-20 16:43 - 00036352 ___SH () C:\Users\Michal\Downloads\Thumbs.db
2014-07-23 18:09 - 2014-07-23 17:58 - 1045690368 ____R () C:\Users\Michal\Downloads\Šmoulové 2.avi
2014-07-22 20:35 - 2014-07-22 20:23 - 00000000 ____D () C:\Users\Michal\Documents\CSM
2014-07-22 20:23 - 2014-07-22 20:23 - 00001147 _____ () C:\Users\Public\Desktop\Czech Soccer Manager.lnk
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Czech Soccer Manager
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\Program Files (x86)\Czech Soccer Manager
2014-07-22 20:23 - 2014-07-22 20:22 - 36968553 _____ () C:\Users\Michal\Downloads\csm_setup.exe
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\Users\Michal\AppData\Local\iolo
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\ProgramData\iolo
2014-07-21 18:11 - 2014-07-21 17:23 - 00000000 ____D () C:\Users\Michal\Downloads\Kostka
2014-07-21 17:21 - 2014-07-21 17:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer
2014-07-21 17:21 - 2014-03-29 21:45 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\vlc
2014-07-21 17:19 - 2014-07-21 17:19 - 00001134 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00001128 _____ () C:\Users\Public\Desktop\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00000009 _____ () C:\END
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\Users\Michal\AppData\Local\Tbccint
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\ProgramData\Tbccint
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\Program Files (x86)\Tbccint
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer Pro
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-07-21 17:07 - 2014-07-21 17:07 - 02278704 _____ (Ondrej Pokorny ) C:\Users\Michal\Downloads\kmedia-player-0-5.exe
2014-07-21 17:07 - 2014-07-21 17:07 - 00001036 _____ () C:\Users\Michal\Desktop\KMedia Player.lnk
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMedia Player
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\Program Files (x86)\KMedia Player
2014-07-21 06:17 - 2014-07-21 06:17 - 00000000 ____D () C:\Users\Michal\AppData\Local\{BB452717-4D9E-46B0-BB68-6F4F5E19358F}
2014-07-18 08:05 - 2013-04-06 20:17 - 00453120 ___SH () C:\Users\Michal\Desktop\Thumbs.db
2014-07-18 07:32 - 2013-04-28 11:58 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-17 20:24 - 2012-11-21 17:52 - 00710754 _____ () C:\windows\system32\perfh005.dat
2014-07-17 20:24 - 2012-11-21 17:52 - 00162914 _____ () C:\windows\system32\perfc005.dat
2014-07-17 20:24 - 2012-07-26 09:28 - 01713818 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-16 19:39 - 2013-10-04 11:34 - 00000000 ____D () C:\Program Files (x86)\Disney Planes
2014-07-16 17:56 - 2014-07-12 19:06 - 00000000 ____D () C:\Program Files (x86)\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-16 16:33 - 2014-07-16 16:33 - 00000000 ____D () C:\ProgramData\SafetyNut
2014-07-16 16:31 - 2013-12-11 08:49 - 00093214 _____ () C:\windows\PFRO.log
2014-07-16 16:30 - 2013-03-11 21:43 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-16 16:29 - 2014-07-16 16:29 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-07-16 16:29 - 2014-07-16 16:29 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-07-16 16:29 - 2014-01-19 18:14 - 00092008 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 01041168 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00427360 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00307344 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-07-16 16:29 - 2013-03-13 18:12 - 00224896 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00079184 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-16 16:27 - 2014-07-16 16:27 - 00000000 ____D () C:\Users\Michal\048298C9A4D3490B9FF9AB023A9238F3.TMP
2014-07-16 16:25 - 2014-01-21 17:19 - 00000000 ____D () C:\Program Files (x86)\MASHED
2014-07-16 16:25 - 2013-09-29 18:54 - 00000000 ____D () C:\ProgramData\Origin
2014-07-16 16:25 - 2013-03-15 08:29 - 00000000 ____D () C:\Hry
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\FirefoxToolbar
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-13 17:19 - 2014-07-13 17:19 - 00001854 _____ () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk
2014-07-13 08:55 - 2014-07-12 14:41 - 00438560 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-13 08:52 - 2014-07-13 08:52 - 00002537 _____ () C:\Users\Michal\Desktop\The Sims 3 Deluxe Edition.lnk
2014-07-13 08:52 - 2014-07-13 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
2014-07-13 08:52 - 2013-12-22 10:22 - 00055859 _____ () C:\windows\DirectX.log
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\Electronic Arts
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\_Userdok_orig
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Program Files (x86)\R.G. Catalyst
2014-07-12 21:38 - 2014-07-12 21:38 - 00000000 ____D () C:\Users\Michal\Downloads\The Sims 3 - Kompletní Edice (Březen 2013) - t2k9
2014-07-12 20:46 - 2014-07-12 20:46 - 00000000 ____D () C:\Program Files (x86)\Browser Tab Search by Ask
2014-07-12 20:46 - 2014-02-12 20:22 - 00000837 _____ () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-07-12 20:46 - 2013-04-06 20:17 - 00000857 _____ () C:\Users\Michal\Desktop\µTorrent.lnk
2014-07-12 19:19 - 2014-07-12 19:19 - 00003192 _____ () C:\windows\System32\Tasks\{95DA5C4D-C31D-4CDB-88A1-D334BBB0639C}
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:09 - 2014-07-12 19:09 - 00000000 ____D () C:\windows\SysWOW64\bitstreams
2014-07-12 19:09 - 2014-07-12 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-12 19:08 - 2014-07-12 19:08 - 00009062 _____ () C:\Users\Michal\AppData\Roaming\msabvjwt.dat
2014-07-12 19:08 - 2014-07-12 19:08 - 00000028 _____ () C:\Users\Michal\AppData\Roaming\mshktd.dat
2014-07-12 14:25 - 2014-07-12 14:24 - 00000000 ____D () C:\Users\Michal\Documents\GTA San Andreas User Files
2014-07-12 14:20 - 2014-07-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-07-12 14:17 - 2014-07-12 12:53 - 938855118 _____ () C:\Users\Michal\Desktop\GTA-San-Andreas.rar
2014-07-12 10:02 - 2013-03-14 12:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-12 10:02 - 2013-03-14 12:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 17:36 - 2012-11-21 09:11 - 00000000 ____D () C:\ProgramData\CyberLink
2014-07-11 16:06 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-07-11 14:34 - 2014-07-11 14:34 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-11 14:34 - 2012-07-26 11:45 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:34 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 14:34 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 14:34 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-07-10 10:51 - 2013-07-14 09:41 - 00000000 ____D () C:\windows\system32\MRT
2014-07-10 10:51 - 2012-07-26 09:59 - 00000000 ____D () C:\windows\CbsTemp
2014-07-10 10:49 - 2013-03-13 18:37 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-10 09:45 - 2014-07-10 09:45 - 00411621 _____ () C:\Users\Michal\Desktop\photo.php
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-07-08 21:15 - 2014-07-08 21:15 - 08478720 _____ () C:\Users\Michal\Downloads\hamachi.msi
2014-07-08 21:15 - 2014-07-08 21:15 - 00733312 _____ () C:\Users\Michal\Downloads\hamachi-lista-centrumcz.exe
2014-07-08 21:15 - 2014-07-08 21:15 - 00384529 _____ () C:\Users\Michal\Downloads\Lista_centrum.exe
2014-07-08 19:45 - 2013-03-11 21:44 - 00003802 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 19:27 - 2013-06-23 10:46 - 00000000 ____D () C:\ProgramData\AlawarWrapper
2014-07-06 14:02 - 2014-07-12 19:07 - 00009201 ____S () C:\windows\SysWOW64\mshktd.vbe
2014-07-06 14:02 - 2014-07-12 19:07 - 00004332 ____S () C:\windows\SysWOW64\msabvjwt.vbe
2014-07-06 14:00 - 2014-07-12 19:07 - 00000649 ____S () C:\windows\SysWOW64\msgimn.vbe
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-07-05 21:19 - 2014-07-05 21:10 - 155935565 _____ () C:\Users\Michal\Desktop\Minecraft-luncher.rar
2014-07-05 21:06 - 2014-07-05 21:05 - 01106756 _____ () C:\Users\Michal\Downloads\Minecraft-Warez-launcher-1.7.4.exe
2014-07-05 20:59 - 2013-05-10 19:50 - 00000000 ___RD () C:\Users\Michal\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-07-05 20:58 - 2014-07-05 20:57 - 01592398 _____ (TeamExtreme) C:\Users\Michal\Desktop\Minecraft-Launcher.exe
2014-07-05 14:24 - 2012-07-26 07:26 - 00000167 _____ () C:\windows\win.ini
2014-07-05 12:25 - 2013-04-28 11:58 - 00003944 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-05 12:25 - 2013-04-28 11:58 - 00003708 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-01 00:42 - 2014-07-10 07:15 - 00702464 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-01 00:42 - 2014-07-10 07:15 - 00394240 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2014-07-01 00:42 - 2014-07-10 07:15 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll

Some content of TEMP:
====================
C:\Users\Michal\AppData\Local\Temp\AutoRun.exe
C:\Users\Michal\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Michal\AppData\Local\Temp\efynxli_.dll
C:\Users\Michal\AppData\Local\Temp\Extract.exe
C:\Users\Michal\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\Michal\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Michal\AppData\Local\Temp\lgvvawlv.dll
C:\Users\Michal\AppData\Local\Temp\Planes.exe
C:\Users\Michal\AppData\Local\Temp\SP63146.exe
C:\Users\Michal\AppData\Local\Temp\sp64126.exe
C:\Users\Michal\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Michal\AppData\Local\Temp\utt68F6.tmp.exe
C:\Users\Michal\AppData\Local\Temp\utt9470.tmp.exe
C:\Users\Michal\AppData\Local\Temp\~B3C7.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-07-29 08:18

==================== End Of Log ============================

#2 Příspěvek od **vyosek** » 31 črc 2014 07:33

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

motyl2 · #3 Příspěvek od **motyl2** » 31 črc 2014 07:55

Tak tady jsou ty logy
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 x64
Ran by Michal on źt 31. 07. 2014 at 8:38:29,80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3329621
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{142C8D65-2688-451F-831A-96BDA7563275}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{FEA7ADB6-A8B1-4D5C-B4AF-7FF63E163F50}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{142C8D65-2688-451F-831A-96BDA7563275}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31264a33-a653-46c4-af49-1232c59a7da5}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{31264a33-a653-46c4-af49-1232c59a7da5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}

~~~ Files

Successfully deleted: [File] C:\windows\Tasks\rmschedule.job
Successfully deleted: [File] "C:\end"

~~~ Folders

Successfully deleted: [Folder] "C:\Users\Michal\appdata\locallow\pricegong"
Successfully deleted: [Folder] "C:\Program Files (x86)\safepcrepair"
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{1301CAFC-B8E5-47A8-8CC4-8CEAC1226299}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{1DE78CDC-029D-4D5A-AA70-0D8DE434D77A}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{318DFF7B-55EA-487D-8ECE-2A24316F4CC8}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{4157A15A-8EEF-4807-9D4D-C20E0D222045}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{4464C90B-11E0-4ADC-BDD2-69FA104C34D1}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{4614C706-C4A1-47DC-98BC-1C64F3A060C9}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{4C815B61-359C-4AC5-A377-D909E4B16367}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{537ACD46-BF26-4605-8BAA-5B93C6EE5440}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{7DCD248C-5DFE-4B16-BF30-3AAC12C32AF1}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{7EEB3027-CD24-4DE4-8A9B-ECC56B5D8701}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{81427251-3462-437E-A3C9-23DFF34C7E83}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{924F5E90-DBC8-4A35-A877-591CB6C7864C}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{9F099D3F-2344-40F1-BC46-3C87FF9844F4}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{AE54BC98-C16B-4394-BF33-645952A53CEE}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{BB452717-4D9E-46B0-BB68-6F4F5E19358F}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{C10E8E4F-9B49-4CE8-BA09-7E42611D0C59}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{C327E77B-55C7-43B2-AB4C-0AE12CAB6099}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{C854C6B9-2FA4-4E8F-95C9-710D74CF9E3C}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{D1B9ADC1-16C8-447C-9633-24A17AB9746E}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{DC3714F7-09A0-4206-A17D-B07300AC012A}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{E4997EC3-AFB9-4C6E-B2B7-513203864995}
Successfully deleted: [Empty Folder] C:\Users\Michal\appdata\local\{EC284945-4E0B-43E7-B7B5-742CE1AB31E2}

~~~ FireFox

Successfully deleted: [File] C:\Users\Michal\AppData\Roaming\mozilla\firefox\profiles\iclahvuf.default\searchplugins\ask.xml
Successfully deleted the following from C:\Users\Michal\AppData\Roaming\mozilla\firefox\profiles\iclahvuf.default\prefs.js

user_pref("extensions.toolbar.mindspark._89Members_.BUTTON_STRUCTURE", "[{\"b\":221337215,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221337216,\"c\":\"mindspark.enterse
user_pref("extensions.toolbar.mindspark._89Members_.firstKnownVersion", "6.58.4.18197");
user_pref("extensions.toolbar.mindspark._89Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=729D37A8-331C-4E5E-868A-B84696179AA2&n=780c4d90&p2=^AW7^xdm055^YYA^cz&si
user_pref("extensions.toolbar.mindspark._89Members_.initialized", true);
user_pref("extensions.toolbar.mindspark._89Members_.installKeysSource", "LocalStorage");
user_pref("extensions.toolbar.mindspark._89Members_.installType", "XPI");
user_pref("extensions.toolbar.mindspark._89Members_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._89Members_.installation.installDate", "2014072208");
user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerId", "^AW7^xdm055^YYA^cz");
user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerSubId", "YO_SAF_INTL_CZE_35");
user_pref("extensions.toolbar.mindspark._89Members_.installation.pixelUrl", "hxxp://safepcrepair.dl.tb.ask.com/install_pixels.jhtml?partner=^AW7^xdm055^YYA^cz&coId=e5e8876462f
user_pref("extensions.toolbar.mindspark._89Members_.installation.success", true);
user_pref("extensions.toolbar.mindspark._89Members_.installation.toolbarId", "729D37A8-331C-4E5E-868A-B84696179AA2");
user_pref("extensions.toolbar.mindspark._89Members_.isCompliantUninstallImplementation", true);
user_pref("extensions.toolbar.mindspark._89Members_.lastActivePing", "1406781862714");
user_pref("extensions.toolbar.mindspark._89Members_.lastKnownVersion", "6.58.4.18197");
user_pref("extensions.toolbar.mindspark._89Members_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.partnerPixelFired", true);
user_pref("extensions.toolbar.mindspark._89Members_.successUrl", "hxxp://download.safepcrepair.com/installComplete.jhtml");
user_pref("extensions.toolbar.mindspark._89Members_.toolbarCollapsed", false);
user_pref("extensions.toolbar.mindspark._89Members_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.lastInstalled", "safepcrepair@mindspark.com");
Emptied folder: C:\Users\Michal\AppData\Roaming\mozilla\firefox\profiles\iclahvuf.default\minidumps [14 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 31. 07. 2014 at 8:44:02,35
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

a

# AdwCleaner v3.302 - Report created 31/07/2014 at 08:50:09
# Updated 30/07/2014 by Xplode
# Operating System : Windows 8 (64 bits)
# Username : Michal - PC-MICHAL
# Running from : C:\Users\Michal\Desktop\adwcleaner_3.302.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : TBSrv

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\SafetyNut
Folder Deleted : C:\ProgramData\Tbccint
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\Browser Tab Search by Ask
Folder Deleted : C:\Program Files (x86)\Tbccint
Folder Deleted : C:\Users\Michal\AppData\Local\Tbccint
Folder Deleted : C:\Users\Michal\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Michal\AppData\LocalLow\Tbccint
Folder Deleted : C:\Users\Public\Documents\AlawarWrapper
Folder Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\SafePCRepair_89
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3329621
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKCU\Software\SafetyNut
Key Deleted : HKCU\Software\Tbccint
Key Deleted : HKCU\Software\Tbccint_HKLM
Key Deleted : HKCU\Software\AppDataLow\Software\Tbccint
Key Deleted : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
Key Deleted : HKLM\Software\SafetyNut
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17028

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\prefs.js ]

Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.BUTTON_STRUCTURE", "[{\"b\":221337215,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221337216,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.firstKnownVersion", "6.58.4.18197");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?n=780c5114&p2=^AW7^xpi000^YYA^");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.installDate", "2014073108");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerId", "^AW7^xpi000^YYA^");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerSubId", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.success", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.isCompliantUninstallImplementation", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.lastKnownVersion", "6.58.4.18197");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.defaultSearch", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.homePageEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.keywordEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.tabEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.partnerPixelFired", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.successUrl", "hxxp://safepcrepair.dl.tb.ask.com/installComplete.jhtml");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.toolbarCollapsed", false);
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "safepcrepair@mindspark.com");

-\\ Google Chrome v36.0.1985.125

[ File : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Startup_urls] : hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 50-406&t=4
Deleted [Homepage] : hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 50-406&t=4

*************************

AdwCleaner[R0].txt - [8322 octets] - [31/07/2014 08:49:31]
AdwCleaner[S0].txt - [7645 octets] - [31/07/2014 08:50:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7705 octets] ##########

#4 Příspěvek od **vyosek** » 31 črc 2014 08:05

Co ten druhy PC, uz vime jak je na tom s legalitou systemu??

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

motyl2 · #5 Příspěvek od **motyl2** » 31 črc 2014 08:27

Druhý PC už nemám, ale legální asi nebyl, tento PC je koupen v obchodě, tak doufám legální systém je.

Tady je ten log

Zoek.exe v5.0.0.0 Updated 31-07-2014
Tool run by Michal on źt 31. 07. 2014 at 9:10:24,71.
Microsoft Windows 8 6.2.9200 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Michal\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

31. 7. 2014 9:12:15 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2208449875-2120827913-2427339802-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz/");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");

Added to C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default

user.js not found
---- Lines mindspark removed from prefs.js ----
user_pref("extensions.toolbar.mindspark._89Members_.BUTTON_STRUCTURE", "[{\"b\":221337215,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221337216,
user_pref("extensions.toolbar.mindspark._89Members_.firstKnownVersion", "6.58.4.18197");
user_pref("extensions.toolbar.mindspark._89Members_.homepage", "http://home.tb.ask.com/index.jhtml?n=78 ... xpi000^YYA^");
user_pref("extensions.toolbar.mindspark._89Members_.initialized", true);
user_pref("extensions.toolbar.mindspark._89Members_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._89Members_.installation.installDate", "2014073108");
user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerId", "^AW7^xpi000^YYA^");
user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerSubId", "");
user_pref("extensions.toolbar.mindspark._89Members_.installation.success", false);
user_pref("extensions.toolbar.mindspark._89Members_.isCompliantUninstallImplementation", true);
user_pref("extensions.toolbar.mindspark._89Members_.lastKnownVersion", "6.58.4.18197");
user_pref("extensions.toolbar.mindspark._89Members_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.partnerPixelFired", false);
user_pref("extensions.toolbar.mindspark._89Members_.successUrl", "http://safepcrepair.dl.tb.ask.com/installComplete.jhtml");
user_pref("extensions.toolbar.mindspark._89Members_.toolbarCollapsed", false);
user_pref("extensions.toolbar.mindspark.lastInstalled", "safepcrepair@mindspark.com");
---- Lines ffxtbr modified from prefs.js ----

user_pref("extensions.enabledAddons", "battlefieldheroespatcher%40ea.com:5.0.203.0,battlefieldplay4free%40ea.com:1.0.80.2,%7Bea614400-e918-4741-9a97-7
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- FireFox user.js and prefs.js backups ----

prefs_201431.07._0918_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Alawar deleted
C:\PROGRA~2\Connected Music powered by Universal Music Group deleted
C:\Users\Michal\048298C9A4D3490B9FF9AB023A9238F3.TMP deleted
C:\PROGRA~3\SoundResearch deleted
C:\Users\Michal\Searches deleted
C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B deleted
C:\windows\WININIT.INI deleted
C:\windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\extensions\89ffxtbr@SafePCRepair_89.com deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [16. 07. 2014 16:29]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default
- Battlefield Heroes Updater - %ProfilePath%\extensions\battlefieldheroespatcher@ea.com
- Battlefield Play4Free - %ProfilePath%\extensions\battlefieldplay4free@ea.com
- Seznam litika - %ProfilePath%\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default
4390CCD3790F8D9C427C0C29590C62D7 - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
F6D12679B9112358AC705A1308156F59 - C:\Users\Michal\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
0C0C5C207121C7A78414A8250E8E099A - C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll - Shockwave for Director / Shockwave for Director
AA2B0803778428522D1CF29EF5AC2DDB - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\extensions\battlefieldheroespatcher@ea.com\plugins\npBFHUpdater.dll - EA Battlefield Heroes Updater
53F61B66DF9CD57458873E6872B0DC63 - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\extensions\battlefieldplay4free@ea.com\plugins\npBP4FUpdater.dll - Battlefield Play4Free Updater

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[16. 07. 2014 16:28]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.bing.com?pc=HPDTDFJS"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.bing.com?pc=HPDTDFJS"
"Start Page"="http://ru.redirect.wrapper.services.ala ... country=CZ"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.bing.com?pc=HPDTDFJS"
"Start Page"="http://ru.redirect.wrapper.services.ala ... country=CZ"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... c=HPDTDFJS"

==== Reset Google Chrome ======================

C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Michal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Michal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=192 folders=82 111268198 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Michal\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Michal\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 31. 07. 2014 at 9:24:01,26 ======================

#6 Příspěvek od **vyosek** » 31 črc 2014 08:32

Poprosim o novy log z FRST

motyl2 · #7 Příspěvek od **motyl2** » 31 črc 2014 08:37

tady je
can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 01
Ran by Michal (administrator) on PC-MICHAL on 31-07-2014 09:35:55
Running from C:\Users\Michal\Downloads
Platform: Windows 8 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2012-09-19] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-09-19] (IDT, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [SSDMonitor] => C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [77824 2013-12-02] (Apple Computer, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-16] (AVAST Software)
HKLM-x32\...\Run: [msgimnSrv] => C:\windows\SysWOW64\msgimn.vbe [649 2014-07-06] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: F - "F:\setup.exe"
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: G - "G:\autorun.exe"
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL™ 09.lnk
ShortcutTarget: Registrace NHL™ 09.lnk -> C:\Program Files (x86)\EA Sports\NHL 09\Support\EAregister.exe (No File)
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDFJS
URLSearchHook: HKLM-x32 - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
URLSearchHook: HKCU - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
SearchScopes: HKLM - {142C8D65-2688-451F-831A-96BDA7563275} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ()
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {31264a33-a653-46c4-af49-1232c59a7da5} - No File
Toolbar: HKCU - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @adobe.com/Acrobat,version=5.1 - C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Michal\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np32dsw.dll (Macromedia, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\battlefieldheroespatcher@ea.com [2013-04-05]
FF Extension: Battlefield Play4Free - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\battlefieldplay4free@ea.com [2013-03-17]
FF Extension: Seznam lištička - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-07-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-13]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Search) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-28]
CHR Extension: (Google Wallet) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Gmail) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-16] (AVAST Software)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools)
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-03-14] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-09-19] (IDT, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
S3 ioloService; C:\Program Files (x86)\SafePCRepair\ioloToolService.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-16] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-16] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-16] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-16] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-06-23] (LogMeIn Inc.)
R3 tilfilter; C:\Windows\System32\drivers\TIxHCIlfilter.sys [17528 2012-11-20] (Texas Instruments, Inc.)
R3 tiufilter; C:\Windows\System32\drivers\TIxHCIufilter.sys [23184 2012-11-20] (Texas Instruments, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-31 09:21 - 2014-07-31 09:09 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-07-31 09:11 - 2014-07-31 09:24 - 00011778 _____ () C:\zoek-results.log
2014-07-31 09:09 - 2014-07-31 09:18 - 00000000 ____D () C:\zoek_backup
2014-07-31 09:08 - 2014-07-31 09:08 - 01287168 _____ () C:\Users\Michal\Desktop\zoek.exe
2014-07-31 08:52 - 2014-07-31 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-31 08:52 - 2014-07-31 08:52 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-31 08:49 - 2014-07-31 08:50 - 00000000 ____D () C:\AdwCleaner
2014-07-31 08:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-07-31 08:48 - 2014-07-31 08:49 - 01361309 _____ () C:\Users\Michal\Desktop\adwcleaner_3.302.exe
2014-07-31 08:38 - 2014-07-31 08:38 - 00000000 ____D () C:\windows\ERUNT
2014-07-31 08:36 - 2014-07-31 08:36 - 01016261 _____ (Thisisu) C:\Users\Michal\Downloads\JRT.exe
2014-07-31 08:18 - 2014-07-31 09:35 - 00020425 _____ () C:\Users\Michal\Downloads\FRST.txt
2014-07-31 08:18 - 2014-07-31 08:19 - 00044872 _____ () C:\Users\Michal\Downloads\Addition.txt
2014-07-31 08:17 - 2014-07-31 09:35 - 00000000 ____D () C:\FRST
2014-07-31 08:16 - 2014-07-31 08:16 - 02094080 _____ (Farbar) C:\Users\Michal\Downloads\FRST64.exe
2014-07-30 11:43 - 2014-07-30 11:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 08:40 - 2014-07-27 08:40 - 00022883 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy 2013 - 2014.xlsx
2014-07-27 08:40 - 2014-07-27 08:40 - 00016722 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy celkem.xlsx
2014-07-25 21:38 - 2014-07-25 21:38 - 00002165 _____ () C:\windows\iis.log
2014-07-25 21:38 - 2014-07-25 21:38 - 00000712 _____ () C:\windows\DtcInstall.log
2014-07-25 21:36 - 2014-07-25 21:36 - 00001559 _____ () C:\windows\comsetup.log
2014-07-25 21:31 - 2014-07-25 21:39 - 00020958 _____ () C:\windows\diagwrn.xml
2014-07-25 21:31 - 2014-07-25 21:39 - 00020958 _____ () C:\windows\diagerr.xml
2014-07-23 17:58 - 2014-07-23 18:09 - 1045690368 ____R () C:\Users\Michal\Downloads\Šmoulové 2.avi
2014-07-22 20:23 - 2014-07-22 20:35 - 00000000 ____D () C:\Users\Michal\Documents\CSM
2014-07-22 20:23 - 2014-07-22 20:23 - 00001147 _____ () C:\Users\Public\Desktop\Czech Soccer Manager.lnk
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Czech Soccer Manager
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\Program Files (x86)\Czech Soccer Manager
2014-07-22 20:22 - 2014-07-22 20:23 - 36968553 _____ () C:\Users\Michal\Downloads\csm_setup.exe
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\Users\Michal\AppData\Local\iolo
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\ProgramData\iolo
2014-07-21 17:23 - 2014-07-21 18:11 - 00000000 ____D () C:\Users\Michal\Downloads\Kostka
2014-07-21 17:19 - 2014-07-21 17:19 - 00001134 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00001128 _____ () C:\Users\Public\Desktop\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2014-07-21 17:18 - 2014-07-21 17:21 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer Pro
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-07-21 17:07 - 2014-07-21 17:07 - 02278704 _____ (Ondrej Pokorny ) C:\Users\Michal\Downloads\kmedia-player-0-5.exe
2014-07-21 17:07 - 2014-07-21 17:07 - 00001036 _____ () C:\Users\Michal\Desktop\KMedia Player.lnk
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMedia Player
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\Program Files (x86)\KMedia Player
2014-07-16 16:29 - 2014-07-16 16:29 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-07-16 16:29 - 2014-07-16 16:29 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\FirefoxToolbar
2014-07-13 17:19 - 2014-07-13 17:19 - 00001854 _____ () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk
2014-07-13 08:52 - 2014-07-13 08:52 - 00002537 _____ () C:\Users\Michal\Desktop\The Sims 3 Deluxe Edition.lnk
2014-07-13 08:52 - 2014-07-13 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\Electronic Arts
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\_Userdok_orig
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Program Files (x86)\R.G. Catalyst
2014-07-12 21:38 - 2014-07-12 21:38 - 00000000 ____D () C:\Users\Michal\Downloads\The Sims 3 - Kompletní Edice (Březen 2013) - t2k9
2014-07-12 19:19 - 2014-07-12 19:19 - 00003192 _____ () C:\windows\System32\Tasks\{95DA5C4D-C31D-4CDB-88A1-D334BBB0639C}
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:09 - 2014-07-12 19:09 - 00000000 ____D () C:\windows\SysWOW64\bitstreams
2014-07-12 19:09 - 2013-10-26 20:30 - 01704448 ____S (The OpenSSL Project, http://www.openssl.org/) C:\windows\SysWOW64\libeay32.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00538126 ____S () C:\windows\SysWOW64\libcurl-4.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00364544 ____S (The OpenSSL Project, http://www.openssl.org/) C:\windows\SysWOW64\ssleay32.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00192512 ____S () C:\windows\SysWOW64\libidn-11.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00171008 ____S (The libssh2 library, http://www.libssh2.org/) C:\windows\SysWOW64\libssh2.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00133632 ____S () C:\windows\SysWOW64\librtmp.dll
2014-07-12 19:09 - 2013-10-26 20:30 - 00044727 ____S () C:\windows\SysWOW64\diablo130302.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00043810 ____S () C:\windows\SysWOW64\poclbm130302.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00030802 ____S () C:\windows\SysWOW64\diakgcn121016.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00023825 ____S () C:\windows\SysWOW64\scrypt130511.cl
2014-07-12 19:09 - 2013-10-26 20:30 - 00013062 ____S () C:\windows\SysWOW64\phatk121016.cl
2014-07-12 19:09 - 2013-07-18 16:06 - 00187904 ____S () C:\windows\SysWOW64\lcpmncdidt.exe
2014-07-12 19:09 - 2013-06-12 15:15 - 00119888 ____S (Open Source Software community LGPL) C:\windows\SysWOW64\pthreadGC2.dll
2014-07-12 19:09 - 2013-06-12 15:15 - 00100864 ____S () C:\windows\SysWOW64\zlib1.dll
2014-07-12 19:09 - 2012-09-25 23:46 - 00472424 ____S (NVIDIA Corporation) C:\windows\SysWOW64\cudart32_50_35.dll
2014-07-12 19:09 - 2012-05-27 01:36 - 00055808 ____S (Open Source Software community LGPL) C:\windows\SysWOW64\pthreadVC2.dll
2014-07-12 19:08 - 2014-07-12 19:08 - 00009062 _____ () C:\Users\Michal\AppData\Roaming\msabvjwt.dat
2014-07-12 19:08 - 2014-07-12 19:08 - 00000028 _____ () C:\Users\Michal\AppData\Roaming\mshktd.dat
2014-07-12 19:07 - 2014-07-12 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-12 19:07 - 2014-07-06 14:02 - 00009201 ____S () C:\windows\SysWOW64\mshktd.vbe
2014-07-12 19:07 - 2014-07-06 14:02 - 00004332 ____S () C:\windows\SysWOW64\msabvjwt.vbe
2014-07-12 19:07 - 2014-07-06 14:00 - 00000649 ____S () C:\windows\SysWOW64\msgimn.vbe
2014-07-12 19:07 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\windows\SysWOW64\nircmdc.exe
2014-07-12 19:06 - 2014-07-16 17:56 - 00000000 ____D () C:\Program Files (x86)\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-12 14:41 - 2014-07-13 08:55 - 00438560 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-12 14:24 - 2014-07-12 14:25 - 00000000 ____D () C:\Users\Michal\Documents\GTA San Andreas User Files
2014-07-12 14:20 - 2014-07-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-07-12 12:53 - 2014-07-12 14:17 - 938855118 _____ () C:\Users\Michal\Desktop\GTA-San-Andreas.rar
2014-07-11 15:36 - 2014-06-26 22:53 - 00703968 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-11 15:36 - 2014-06-26 22:53 - 00105440 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-11 14:34 - 2014-07-11 14:34 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-10 09:45 - 2014-07-10 09:45 - 00411621 _____ () C:\Users\Michal\Desktop\photo.php
2014-07-10 07:16 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-10 07:16 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-10 07:16 - 2014-06-11 06:18 - 04038144 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-10 07:16 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2014-07-10 07:16 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-07-10 07:16 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-07-10 07:16 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-10 07:16 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-07-10 07:16 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-07-10 07:16 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-07-10 07:16 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-07-10 07:16 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-07-10 07:16 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2014-07-10 07:16 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2014-07-10 07:16 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-07-10 07:16 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 07:16 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-07-10 07:16 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 07:16 - 2014-02-08 06:34 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2014-07-10 07:15 - 2014-07-01 00:42 - 00702464 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-10 07:15 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2014-07-10 07:15 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2014-07-10 07:15 - 2014-06-28 05:35 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 02239488 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 01366528 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-07-10 07:15 - 2014-06-19 04:12 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-10 07:15 - 2014-06-19 04:11 - 19277312 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-10 07:15 - 2014-06-19 04:11 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-10 07:15 - 2014-06-19 04:11 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 15369728 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 02650624 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-10 07:15 - 2014-06-19 04:10 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-10 07:15 - 2014-06-19 04:09 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-10 07:15 - 2014-06-19 02:53 - 14368768 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 01766400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 01141760 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-10 07:15 - 2014-06-19 02:53 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 13732352 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 02863616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 02051072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 01440768 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-10 07:15 - 2014-06-19 02:52 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-10 07:15 - 2014-06-19 02:52 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-10 07:15 - 2014-06-19 02:33 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-10 07:15 - 2014-06-19 02:30 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-10 07:15 - 2014-06-19 00:05 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-07-10 07:15 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-10 07:15 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-10 07:15 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-08 21:16 - 2014-07-31 09:24 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn Hamachi
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-07-08 21:16 - 2013-06-27 10:59 - 00000000 ____D () C:\Users\Michal\Downloads\firefox
2014-07-08 21:15 - 2014-07-08 21:15 - 08478720 _____ () C:\Users\Michal\Downloads\hamachi.msi
2014-07-08 21:15 - 2014-07-08 21:15 - 00733312 _____ () C:\Users\Michal\Downloads\hamachi-lista-centrumcz.exe
2014-07-08 21:15 - 2014-07-08 21:15 - 00384529 _____ () C:\Users\Michal\Downloads\Lista_centrum.exe
2014-07-05 21:10 - 2014-07-05 21:19 - 155935565 _____ () C:\Users\Michal\Desktop\Minecraft-luncher.rar
2014-07-05 21:05 - 2014-07-05 21:06 - 01106756 _____ () C:\Users\Michal\Downloads\Minecraft-Warez-launcher-1.7.4.exe
2014-07-05 20:57 - 2014-07-05 20:58 - 01592398 _____ (TeamExtreme) C:\Users\Michal\Desktop\Minecraft-Launcher.exe
2014-07-05 12:47 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-07-05 12:47 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-07-05 12:47 - 2014-04-03 13:19 - 00328024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2014-07-05 12:47 - 2014-04-03 05:44 - 00619008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-07-05 12:47 - 2014-04-01 00:08 - 00387268 _____ () C:\windows\system32\ApnDatabase.xml
2014-07-05 12:47 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
2014-07-05 12:47 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
2014-07-05 12:46 - 2014-04-30 00:32 - 01301504 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-07-05 12:46 - 2014-04-30 00:22 - 01023488 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-07-05 12:46 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-07-05 12:46 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-07-05 12:46 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-07-05 12:46 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-07-05 12:45 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-07-05 12:45 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-07-05 12:45 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-07-05 12:45 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-05 12:45 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-05 12:45 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-05 12:45 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-05 12:45 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-05 12:45 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-05 12:45 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-05 12:45 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-05 12:45 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-07-05 12:45 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-07-05 12:45 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-07-05 12:45 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-07-05 12:45 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-07-05 12:45 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-05 12:45 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-07-05 12:45 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-07-05 12:45 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-07-05 12:45 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-07-05 12:45 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-07-05 12:45 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-05 12:45 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-07-05 12:45 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-07-05 12:45 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-07-05 12:45 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-07-05 12:45 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-07-05 12:45 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-07-05 12:45 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-07-05 12:45 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-07-05 12:45 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-07-05 12:45 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-07-05 12:45 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-07-05 12:23 - 2014-07-31 08:51 - 00000356 _____ () C:\windows\Tasks\HPCeeScheduleForMichal.job
2014-07-05 12:23 - 2014-07-30 07:56 - 00003172 _____ () C:\windows\System32\Tasks\HPCeeScheduleForMichal
2014-07-05 12:21 - 2014-05-20 04:33 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-07-05 12:21 - 2014-05-20 01:45 - 00629248 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-07-05 12:21 - 2014-05-20 01:45 - 00086528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 03286528 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 01623040 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00773632 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00253440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2014-07-05 12:21 - 2014-05-20 01:24 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-07-05 12:21 - 2014-05-15 00:43 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-07-05 12:21 - 2014-05-15 00:43 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-07-05 12:21 - 2014-05-15 00:42 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-07-05 12:21 - 2014-05-15 00:42 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-31 09:36 - 2014-07-31 08:18 - 00020425 _____ () C:\Users\Michal\Downloads\FRST.txt
2014-07-31 09:35 - 2014-07-31 08:17 - 00000000 ____D () C:\FRST
2014-07-31 09:30 - 2013-04-28 11:58 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 09:24 - 2014-07-31 09:11 - 00011778 _____ () C:\zoek-results.log
2014-07-31 09:24 - 2014-07-08 21:16 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn Hamachi
2014-07-31 09:23 - 2013-09-21 19:00 - 00000306 _____ () C:\windows\Tasks\RMAutoUpdate.job
2014-07-31 09:23 - 2013-09-21 14:14 - 00000000 ____D () C:\Program Files (x86)\PC Tools Registry Mechanic
2014-07-31 09:23 - 2013-04-28 11:58 - 00000968 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 09:22 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-31 09:21 - 2013-12-11 08:49 - 00093854 _____ () C:\windows\PFRO.log
2014-07-31 09:21 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-07-31 09:18 - 2014-07-31 09:09 - 00000000 ____D () C:\zoek_backup
2014-07-31 09:18 - 2013-03-11 20:50 - 00000000 ____D () C:\Users\Michal
2014-07-31 09:09 - 2014-07-31 09:21 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-07-31 09:08 - 2014-07-31 09:08 - 01287168 _____ () C:\Users\Michal\Desktop\zoek.exe
2014-07-31 09:02 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-07-31 08:52 - 2014-07-31 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-31 08:52 - 2014-07-31 08:52 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-31 08:51 - 2014-07-05 12:23 - 00000356 _____ () C:\windows\Tasks\HPCeeScheduleForMichal.job
2014-07-31 08:51 - 2012-11-21 09:09 - 00000000 ____D () C:\ProgramData\Temp
2014-07-31 08:50 - 2014-07-31 08:49 - 00000000 ____D () C:\AdwCleaner
2014-07-31 08:50 - 2013-03-11 20:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-31 08:49 - 2014-07-31 08:48 - 01361309 _____ () C:\Users\Michal\Desktop\adwcleaner_3.302.exe
2014-07-31 08:45 - 2013-03-11 21:44 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-31 08:38 - 2014-07-31 08:38 - 00000000 ____D () C:\windows\ERUNT
2014-07-31 08:36 - 2014-07-31 08:36 - 01016261 _____ (Thisisu) C:\Users\Michal\Downloads\JRT.exe
2014-07-31 08:19 - 2014-07-31 08:18 - 00044872 _____ () C:\Users\Michal\Downloads\Addition.txt
2014-07-31 08:16 - 2014-07-31 08:16 - 02094080 _____ (Farbar) C:\Users\Michal\Downloads\FRST64.exe
2014-07-31 08:10 - 2013-12-07 14:48 - 01119064 _____ () C:\windows\WindowsUpdate.log
2014-07-30 20:25 - 2014-03-23 11:51 - 00000000 ____D () C:\Users\Michal\AppData\Local\Windows Live
2014-07-30 11:43 - 2014-07-30 11:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-30 09:37 - 2013-03-13 20:26 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\.minecraft
2014-07-30 07:56 - 2014-07-05 12:23 - 00003172 _____ () C:\windows\System32\Tasks\HPCeeScheduleForMichal
2014-07-30 07:52 - 2013-03-13 18:12 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-07-29 08:01 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-07-28 19:27 - 2013-09-21 19:00 - 00000414 _____ () C:\windows\SysWOW64\AppLog.log
2014-07-27 10:57 - 2013-03-13 18:17 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\uTorrent
2014-07-27 10:04 - 2013-03-11 20:57 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2208449875-2120827913-2427339802-1001
2014-07-27 08:42 - 2013-03-11 20:50 - 00000000 ____D () C:\Users\Michal\AppData\Local\Packages
2014-07-27 08:40 - 2014-07-27 08:40 - 00022883 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy 2013 - 2014.xlsx
2014-07-27 08:40 - 2014-07-27 08:40 - 00016722 _____ () C:\Users\Michal\Downloads\1.FCV - vzáj. zápasy celkem.xlsx
2014-07-25 21:42 - 2014-03-18 19:21 - 00000000 ___HD () C:\$Windows.~BT
2014-07-25 21:39 - 2014-07-25 21:31 - 00020958 _____ () C:\windows\diagwrn.xml
2014-07-25 21:39 - 2014-07-25 21:31 - 00020958 _____ () C:\windows\diagerr.xml
2014-07-25 21:39 - 2014-01-12 17:38 - 00395065 _____ () C:\windows\setupact.log
2014-07-25 21:39 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-07-25 21:38 - 2014-07-25 21:38 - 00002165 _____ () C:\windows\iis.log
2014-07-25 21:38 - 2014-07-25 21:38 - 00000712 _____ () C:\windows\DtcInstall.log
2014-07-25 21:36 - 2014-07-25 21:36 - 00001559 _____ () C:\windows\comsetup.log
2014-07-25 21:36 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\Registration
2014-07-24 17:06 - 2013-03-14 13:08 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2014-07-24 17:06 - 2013-03-14 13:08 - 00000000 _____ () C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-07-23 19:13 - 2014-01-20 16:43 - 00036352 ___SH () C:\Users\Michal\Downloads\Thumbs.db
2014-07-23 18:09 - 2014-07-23 17:58 - 1045690368 ____R () C:\Users\Michal\Downloads\Šmoulové 2.avi
2014-07-22 20:35 - 2014-07-22 20:23 - 00000000 ____D () C:\Users\Michal\Documents\CSM
2014-07-22 20:23 - 2014-07-22 20:23 - 00001147 _____ () C:\Users\Public\Desktop\Czech Soccer Manager.lnk
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Czech Soccer Manager
2014-07-22 20:23 - 2014-07-22 20:23 - 00000000 ____D () C:\Program Files (x86)\Czech Soccer Manager
2014-07-22 20:23 - 2014-07-22 20:22 - 36968553 _____ () C:\Users\Michal\Downloads\csm_setup.exe
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\Users\Michal\AppData\Local\iolo
2014-07-22 20:22 - 2014-07-22 20:22 - 00000000 ____D () C:\ProgramData\iolo
2014-07-21 18:11 - 2014-07-21 17:23 - 00000000 ____D () C:\Users\Michal\Downloads\Kostka
2014-07-21 17:21 - 2014-07-21 17:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer
2014-07-21 17:21 - 2014-03-29 21:45 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\vlc
2014-07-21 17:19 - 2014-07-21 17:19 - 00001134 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00001128 _____ () C:\Users\Public\Desktop\BS.Player FREE.lnk
2014-07-21 17:19 - 2014-07-21 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\BSplayer Pro
2014-07-21 17:18 - 2014-07-21 17:18 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-07-21 17:07 - 2014-07-21 17:07 - 02278704 _____ (Ondrej Pokorny ) C:\Users\Michal\Downloads\kmedia-player-0-5.exe
2014-07-21 17:07 - 2014-07-21 17:07 - 00001036 _____ () C:\Users\Michal\Desktop\KMedia Player.lnk
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMedia Player
2014-07-21 17:07 - 2014-07-21 17:07 - 00000000 ____D () C:\Program Files (x86)\KMedia Player
2014-07-18 08:05 - 2013-04-06 20:17 - 00453120 ___SH () C:\Users\Michal\Desktop\Thumbs.db
2014-07-18 07:32 - 2013-04-28 11:58 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-17 20:24 - 2012-11-21 17:52 - 00710754 _____ () C:\windows\system32\perfh005.dat
2014-07-17 20:24 - 2012-11-21 17:52 - 00162914 _____ () C:\windows\system32\perfc005.dat
2014-07-17 20:24 - 2012-07-26 09:28 - 01713818 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-16 19:39 - 2013-10-04 11:34 - 00000000 ____D () C:\Program Files (x86)\Disney Planes
2014-07-16 17:56 - 2014-07-12 19:06 - 00000000 ____D () C:\Program Files (x86)\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-16 16:30 - 2013-03-11 21:43 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-16 16:29 - 2014-07-16 16:29 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-07-16 16:29 - 2014-07-16 16:29 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-07-16 16:29 - 2014-01-19 18:14 - 00092008 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 01041168 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00427360 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00307344 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-07-16 16:29 - 2013-03-13 18:12 - 00224896 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00079184 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-07-16 16:29 - 2013-03-13 18:12 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-16 16:25 - 2014-01-21 17:19 - 00000000 ____D () C:\Program Files (x86)\MASHED
2014-07-16 16:25 - 2013-09-29 18:54 - 00000000 ____D () C:\ProgramData\Origin
2014-07-16 16:25 - 2013-03-15 08:29 - 00000000 ____D () C:\Hry
2014-07-16 16:22 - 2014-07-16 16:22 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\FirefoxToolbar
2014-07-13 17:19 - 2014-07-13 17:19 - 00001854 _____ () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk
2014-07-13 08:55 - 2014-07-12 14:41 - 00438560 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-13 08:52 - 2014-07-13 08:52 - 00002537 _____ () C:\Users\Michal\Desktop\The Sims 3 Deluxe Edition.lnk
2014-07-13 08:52 - 2014-07-13 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
2014-07-13 08:52 - 2013-12-22 10:22 - 00055859 _____ () C:\windows\DirectX.log
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\Electronic Arts
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Users\Michal\Documents\_Userdok_orig
2014-07-13 08:13 - 2014-07-13 08:13 - 00000000 ____D () C:\Program Files (x86)\R.G. Catalyst
2014-07-12 21:38 - 2014-07-12 21:38 - 00000000 ____D () C:\Users\Michal\Downloads\The Sims 3 - Kompletní Edice (Březen 2013) - t2k9
2014-07-12 20:46 - 2014-02-12 20:22 - 00000837 _____ () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-07-12 20:46 - 2013-04-06 20:17 - 00000857 _____ () C:\Users\Michal\Desktop\µTorrent.lnk
2014-07-12 19:19 - 2014-07-12 19:19 - 00003192 _____ () C:\windows\System32\Tasks\{95DA5C4D-C31D-4CDB-88A1-D334BBB0639C}
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:18 - 2014-07-12 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-12 19:09 - 2014-07-12 19:09 - 00000000 ____D () C:\windows\SysWOW64\bitstreams
2014-07-12 19:09 - 2014-07-12 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTA San Andreas Multiplayer 0.3c by Koopricek
2014-07-12 19:08 - 2014-07-12 19:08 - 00009062 _____ () C:\Users\Michal\AppData\Roaming\msabvjwt.dat
2014-07-12 19:08 - 2014-07-12 19:08 - 00000028 _____ () C:\Users\Michal\AppData\Roaming\mshktd.dat
2014-07-12 14:25 - 2014-07-12 14:24 - 00000000 ____D () C:\Users\Michal\Documents\GTA San Andreas User Files
2014-07-12 14:20 - 2014-07-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-07-12 14:17 - 2014-07-12 12:53 - 938855118 _____ () C:\Users\Michal\Desktop\GTA-San-Andreas.rar
2014-07-12 10:02 - 2013-03-14 12:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-12 10:02 - 2013-03-14 12:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 17:36 - 2012-11-21 09:11 - 00000000 ____D () C:\ProgramData\CyberLink
2014-07-11 16:06 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-07-11 14:34 - 2014-07-11 14:34 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-11 14:34 - 2012-07-26 11:45 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:34 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 14:34 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 14:34 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-07-10 10:51 - 2013-07-14 09:41 - 00000000 ____D () C:\windows\system32\MRT
2014-07-10 10:51 - 2012-07-26 09:59 - 00000000 ____D () C:\windows\CbsTemp
2014-07-10 10:49 - 2013-03-13 18:37 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-10 09:45 - 2014-07-10 09:45 - 00411621 _____ () C:\Users\Michal\Desktop\photo.php
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\Users\Michal\AppData\Local\LogMeIn
2014-07-08 21:16 - 2014-07-08 21:16 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-07-08 21:15 - 2014-07-08 21:15 - 08478720 _____ () C:\Users\Michal\Downloads\hamachi.msi
2014-07-08 21:15 - 2014-07-08 21:15 - 00733312 _____ () C:\Users\Michal\Downloads\hamachi-lista-centrumcz.exe
2014-07-08 21:15 - 2014-07-08 21:15 - 00384529 _____ () C:\Users\Michal\Downloads\Lista_centrum.exe
2014-07-08 19:45 - 2013-03-11 21:44 - 00003802 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-06 14:02 - 2014-07-12 19:07 - 00009201 ____S () C:\windows\SysWOW64\mshktd.vbe
2014-07-06 14:02 - 2014-07-12 19:07 - 00004332 ____S () C:\windows\SysWOW64\msabvjwt.vbe
2014-07-06 14:00 - 2014-07-12 19:07 - 00000649 ____S () C:\windows\SysWOW64\msgimn.vbe
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-06 09:10 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-07-05 21:19 - 2014-07-05 21:10 - 155935565 _____ () C:\Users\Michal\Desktop\Minecraft-luncher.rar
2014-07-05 21:06 - 2014-07-05 21:05 - 01106756 _____ () C:\Users\Michal\Downloads\Minecraft-Warez-launcher-1.7.4.exe
2014-07-05 20:59 - 2013-05-10 19:50 - 00000000 ___RD () C:\Users\Michal\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-07-05 20:58 - 2014-07-05 20:57 - 01592398 _____ (TeamExtreme) C:\Users\Michal\Desktop\Minecraft-Launcher.exe
2014-07-05 14:24 - 2012-07-26 07:26 - 00000167 _____ () C:\windows\win.ini
2014-07-05 12:25 - 2013-04-28 11:58 - 00003944 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-05 12:25 - 2013-04-28 11:58 - 00003708 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-01 00:42 - 2014-07-10 07:15 - 00702464 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-01 00:42 - 2014-07-10 07:15 - 00394240 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2014-07-01 00:42 - 2014-07-10 07:15 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-07-29 08:18

==================== End Of Log ============================

#8 Příspěvek od **vyosek** » 31 črc 2014 08:43

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [77824 2013-12-02] (Apple Computer, Inc.)
HKLM-x32\...\Run: [msgimnSrv] => C:\windows\SysWOW64\msgimn.vbe [649 2014-07-06] ()
C:\windows\SysWOW64\msgimn.vbe
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: F - "F:\setup.exe" 
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: G - "G:\autorun.exe" 
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL™ 09.lnk

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDFJS
URLSearchHook: HKLM-x32 - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
URLSearchHook: HKCU - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
SearchScopes: HKLM - {142C8D65-2688-451F-831A-96BDA7563275} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... -keywords={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
Toolbar: HKLM - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
Toolbar: HKLM-x32 - No Name - {31264a33-a653-46c4-af49-1232c59a7da5} - No File
Toolbar: HKCU - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File

FF Extension: Seznam lištička - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-07-05]

S3 ioloService; C:\Program Files (x86)\SafePCRepair\ioloToolService.exe [X]
C:\Program Files (x86)\SafePCRepair

2014-07-31 09:21 - 2014-07-31 09:09 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-07-31 09:11 - 2014-07-31 09:24 - 00011778 _____ () C:\zoek-results.log
2014-07-31 09:09 - 2014-07-31 09:18 - 00000000 ____D () C:\zoek_backup
2014-07-31 09:08 - 2014-07-31 09:08 - 01287168 _____ () C:\Users\Michal\Desktop\zoek.exe
2014-07-31 08:49 - 2014-07-31 08:50 - 00000000 ____D () C:\AdwCleaner
2014-07-31 08:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-07-31 08:48 - 2014-07-31 08:49 - 01361309 _____ () C:\Users\Michal\Desktop\adwcleaner_3.302.exe
2014-07-31 08:38 - 2014-07-31 08:38 - 00000000 ____D () C:\windows\ERUNT
2014-07-31 08:36 - 2014-07-31 08:36 - 01016261 _____ (Thisisu) C:\Users\Michal\Downloads\JRT.exe
2014-07-31 08:18 - 2014-07-31 09:35 - 00020425 _____ () C:\Users\Michal\Downloads\FRST.txt
2014-07-31 08:18 - 2014-07-31 08:19 - 00044872 _____ () C:\Users\Michal\Downloads\Addition.txt
2014-07-12 19:07 - 2014-07-06 14:02 - 00009201 ____S () C:\windows\SysWOW64\mshktd.vbe
2014-07-12 19:07 - 2014-07-06 14:02 - 00004332 ____S () C:\windows\SysWOW64\msabvjwt.vbe
2014-07-12 19:07 - 2014-07-06 14:00 - 00000649 ____S () C:\windows\SysWOW64\msgimn.vbe

Hosts:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

motyl2 · #9 Příspěvek od **motyl2** » 31 črc 2014 08:50

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-07-2014 01
Ran by Michal at 2014-07-31 09:47:04 Run:1
Running from C:\Users\Michal\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [77824 2013-12-02] (Apple Computer, Inc.)
HKLM-x32\...\Run: [msgimnSrv] => C:\windows\SysWOW64\msgimn.vbe [649 2014-07-06] ()
C:\windows\SysWOW64\msgimn.vbe
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: F - "F:\setup.exe"
HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\...\MountPoints2: G - "G:\autorun.exe"
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL™ 09.lnk

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDFJS
URLSearchHook: HKLM-x32 - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
URLSearchHook: HKCU - BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
SearchScopes: HKLM - {142C8D65-2688-451F-831A-96BDA7563275} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... -keywords={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... c=HPDTDFJS
Toolbar: HKLM - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
Toolbar: HKLM-x32 - No Name - {31264a33-a653-46c4-af49-1232c59a7da5} - No File
Toolbar: HKCU - BS Player ControlBar B Toolbar - {31264A33-A653-46C4-AF49-1232C59A7DA5} - C:\Users\Michal\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File

FF Extension: Seznam lištička - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-07-05]

S3 ioloService; C:\Program Files (x86)\SafePCRepair\ioloToolService.exe [X]
C:\Program Files (x86)\SafePCRepair

2014-07-31 09:21 - 2014-07-31 09:09 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-07-31 09:11 - 2014-07-31 09:24 - 00011778 _____ () C:\zoek-results.log
2014-07-31 09:09 - 2014-07-31 09:18 - 00000000 ____D () C:\zoek_backup
2014-07-31 09:08 - 2014-07-31 09:08 - 01287168 _____ () C:\Users\Michal\Desktop\zoek.exe
2014-07-31 08:49 - 2014-07-31 08:50 - 00000000 ____D () C:\AdwCleaner
2014-07-31 08:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-07-31 08:48 - 2014-07-31 08:49 - 01361309 _____ () C:\Users\Michal\Desktop\adwcleaner_3.302.exe
2014-07-31 08:38 - 2014-07-31 08:38 - 00000000 ____D () C:\windows\ERUNT
2014-07-31 08:36 - 2014-07-31 08:36 - 01016261 _____ (Thisisu) C:\Users\Michal\Downloads\JRT.exe
2014-07-31 08:18 - 2014-07-31 09:35 - 00020425 _____ () C:\Users\Michal\Downloads\FRST.txt
2014-07-31 08:18 - 2014-07-31 08:19 - 00044872 _____ () C:\Users\Michal\Downloads\Addition.txt
2014-07-12 19:07 - 2014-07-06 14:02 - 00009201 ____S () C:\windows\SysWOW64\mshktd.vbe
2014-07-12 19:07 - 2014-07-06 14:02 - 00004332 ____S () C:\windows\SysWOW64\msabvjwt.vbe
2014-07-12 19:07 - 2014-07-06 14:00 - 00000649 ____S () C:\windows\SysWOW64\msgimn.vbe

Hosts:
Reboot:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\CLVirtualDrive => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PWRISOVM.EXE => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\msgimnSrv => value deleted successfully.
C:\windows\SysWOW64\msgimn.vbe => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard) => Value not found.
"HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-2208449875-2120827913-2427339802-1001" => Key not found.
"HKU\S-1-5-21-2208449875-2120827913-2427339802-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-2208449875-2120827913-2427339802-1001" => Key not found.
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL™ 09.lnk => Moved successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{31264a33-a653-46c4-af49-1232c59a7da5} => value deleted successfully.
"HKCR\CLSID\{31264a33-a653-46c4-af49-1232c59a7da5}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{31264a33-a653-46c4-af49-1232c59a7da5} => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{142C8D65-2688-451F-831A-96BDA7563275}" => Key deleted successfully.
"HKCR\CLSID\{142C8D65-2688-451F-831A-96BDA7563275}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}" => Key deleted successfully.
"HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}" => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => Key deleted successfully.
"HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{31264A33-A653-46C4-AF49-1232C59A7DA5} => value deleted successfully.
"HKCR\CLSID\{31264A33-A653-46C4-AF49-1232C59A7DA5}" => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{31264a33-a653-46c4-af49-1232c59a7da5} => value deleted successfully.
"HKCR\Wow6432Node\CLSID\{31264a33-a653-46c4-af49-1232c59a7da5}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{31264A33-A653-46C4-AF49-1232C59A7DA5} => value deleted successfully.
"HKCR\CLSID\{31264A33-A653-46C4-AF49-1232C59A7DA5}" => Key not found.
C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\iclahvuf.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} => Moved successfully.
ioloService => Service deleted successfully.
"C:\Program Files (x86)\SafePCRepair" => File/Directory not found.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Michal\Desktop\zoek.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Michal\Desktop\adwcleaner_3.302.exe => Moved successfully.
C:\windows\ERUNT => Moved successfully.
C:\Users\Michal\Downloads\JRT.exe => Moved successfully.
"C:\Users\Michal\Downloads\FRST.txt" => File/Directory not found.
C:\Users\Michal\Downloads\Addition.txt => Moved successfully.
C:\windows\SysWOW64\mshktd.vbe => Moved successfully.
C:\windows\SysWOW64\msabvjwt.vbe => Moved successfully.
"C:\windows\SysWOW64\msgimn.vbe" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

The system needed a reboot.

==== End of Fixlog ====

#10 Příspěvek od **vyosek** » 31 črc 2014 08:52

Jak se chova PC??

motyl2 · #11 Příspěvek od **motyl2** » 31 črc 2014 08:57

Vypadá to že všechno funguje a antivir už taky nic nehlásí, díky

#12 Příspěvek od **vyosek** » 31 črc 2014 08:59

A pokud nejsou problemy ci dotazy, je to z me strany vse :|Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

motyl2 · #13 Příspěvek od **motyl2** » 31 črc 2014 09:16

hotovo díky

#14 Příspěvek od **vyosek** » 01 srp 2014 21:36

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

prosím o konrotlu logu

prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu

Re: prosím o konrotlu logu