VIRY.CZ

Zdravím,
Chci požádat o kontrolu logu, nevím... mám jen takový pocit.
Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by miriam at 2014-08-17 12:13:43
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 29 GB (41%) free of 71 GB
Total RAM: 2038 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:14:47, on 17.8.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19553)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Users\miriam\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Users\miriam\Desktop\RSIT.exe
C:\Program Files\trend micro\miriam.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files\Free Download Manager\dlall.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 7673 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default

prefs.js - "browser.startup.homepage" - "http://atlas.centrum.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw_1206147.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-15 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-18 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14 4531320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
Free Download Manager - C:\Program Files\Free Download Manager\iefdm2.dll [2014-04-29 365056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-15 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-05-29 4472832]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-23 815104]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-07-12 178712]
"eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-04-25 457216]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-06-15 850704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-31 4085896]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager]
C:\Program Files\Free Download Manager\fdm.exe [2014-05-09 6983168]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun-"=0
"NoDriveTypeAutoRun-"=0
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDriveAutoRun-"=0
"NoDriveTypeAutoRun-"=0
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe"="C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Acer\Empowering Technology\eDataSecurity\encryption.exe"="C:\Acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption"
"C:\Acer\Empowering Technology\eDataSecurity\decryption.exe"="C:\Acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.vorbis"=vorbis.acm
"vidc.XVID"=xvidvfw.dll
"msacm.divxa32"=msaud32_divx.acm
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-08-17 12:13:44 ----D---- C:\Program Files\trend micro
2014-08-17 12:13:43 ----D---- C:\rsit
2014-08-15 18:19:29 ----D---- C:\Program Files\Common Files\Java
2014-08-15 18:19:10 ----A---- C:\Windows\system32\javaws.exe
2014-08-15 18:18:45 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-08-15 18:18:45 ----A---- C:\Windows\system32\javaw.exe
2014-08-15 18:18:45 ----A---- C:\Windows\system32\java.exe
2014-08-15 18:18:21 ----D---- C:\Program Files\Java
2014-08-13 22:59:58 ----A---- C:\Windows\system32\infocardapi.dll
2014-08-13 22:59:58 ----A---- C:\Windows\system32\icardres.dll
2014-08-13 22:59:58 ----A---- C:\Windows\system32\icardagt.exe
2014-08-13 22:59:47 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-13 21:30:46 ----A---- C:\Windows\system32\msi.dll
2014-08-13 21:30:44 ----A---- C:\Windows\system32\authui.dll
2014-08-13 21:30:43 ----A---- C:\Windows\system32\consent.exe
2014-08-13 21:30:41 ----A---- C:\Windows\system32\msihnd.dll
2014-08-13 21:30:41 ----A---- C:\Windows\system32\appinfo.dll
2014-08-13 21:30:31 ----A---- C:\Windows\system32\mshtml.dll
2014-08-13 21:30:30 ----A---- C:\Windows\system32\mstime.dll
2014-08-13 21:30:28 ----A---- C:\Windows\system32\ieframe.dll
2014-08-13 21:30:25 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-13 21:30:24 ----A---- C:\Windows\system32\urlmon.dll
2014-08-13 21:30:24 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-13 21:30:23 ----A---- C:\Windows\system32\wininet.dll
2014-08-13 21:30:22 ----A---- C:\Windows\system32\iertutil.dll
2014-08-13 21:30:20 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-13 21:30:19 ----A---- C:\Windows\system32\occache.dll
2014-08-13 21:30:19 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-13 21:30:19 ----A---- C:\Windows\system32\ieui.dll
2014-08-13 21:30:18 ----A---- C:\Windows\system32\url.dll
2014-08-13 21:30:18 ----A---- C:\Windows\system32\iesysprep.dll
2014-08-13 21:30:18 ----A---- C:\Windows\system32\iepeers.dll
2014-08-13 21:30:17 ----A---- C:\Windows\system32\iesetup.dll
2014-08-13 21:30:17 ----A---- C:\Windows\system32\iernonce.dll
2014-08-13 21:30:16 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-08-13 21:30:16 ----A---- C:\Windows\system32\licmgr10.dll
2014-08-13 21:30:16 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-13 21:30:16 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-13 21:30:16 ----A---- C:\Windows\system32\corpol.dll
2014-08-13 21:30:15 ----A---- C:\Windows\system32\msfeedssync.exe
2014-08-13 21:30:09 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-13 21:30:07 ----A---- C:\Windows\system32\cdd.dll
2014-08-13 21:29:56 ----A---- C:\Windows\system32\tzres.dll
2014-08-13 21:29:38 ----A---- C:\Windows\system32\win32k.sys
2014-08-13 21:29:37 ----A---- C:\Windows\system32\gdi32.dll
2014-07-25 16:50:45 ----D---- C:\Users\miriam\AppData\Roaming\ImTOO
2014-07-25 16:50:24 ----A---- C:\Windows\system32\wrap_oal.dll
2014-07-25 16:50:24 ----A---- C:\Windows\system32\OpenAL32.dll
2014-07-24 15:36:57 ----D---- C:\Users\miriam\AppData\Roaming\MAGIX
2014-07-23 22:28:22 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-18 13:05:29 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-07-18 13:05:20 ----A---- C:\Windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2014-08-17 12:13:59 ----D---- C:\Windows\Prefetch
2014-08-17 12:13:44 ----D---- C:\Program Files
2014-08-17 12:13:38 ----D---- C:\Windows\temp
2014-08-17 12:01:03 ----D---- C:\Users\miriam\AppData\Roaming\Skype
2014-08-17 10:55:21 ----SHD---- C:\System Volume Information
2014-08-17 09:35:54 ----D---- C:\Windows\tracing
2014-08-17 09:32:02 ----D---- C:\Windows\inf
2014-08-17 09:32:02 ----AD---- C:\Windows\System32
2014-08-17 09:32:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-15 21:09:18 ----D---- C:\Users\miriam\AppData\Roaming\Free Download Manager
2014-08-15 18:19:31 ----SHD---- C:\Windows\Installer
2014-08-15 18:19:29 ----D---- C:\Program Files\Common Files
2014-08-15 12:03:00 ----D---- C:\Windows\Debug
2014-08-15 12:03:00 ----D---- C:\Windows
2014-08-14 20:54:16 ----D---- C:\Windows\Microsoft.NET
2014-08-14 20:53:00 ----RSD---- C:\Windows\assembly
2014-08-14 20:48:09 ----D---- C:\Windows\rescache
2014-08-14 20:11:06 ----D---- C:\Windows\system32\cs-CZ
2014-08-14 20:11:02 ----D---- C:\Windows\system32\migration
2014-08-14 20:11:02 ----D---- C:\Program Files\Internet Explorer
2014-08-14 20:10:50 ----AD---- C:\Windows\system32\drivers
2014-08-13 23:05:49 ----D---- C:\ProgramData\Microsoft Help
2014-08-13 23:05:16 ----D---- C:\Windows\system32\MRT
2014-08-13 23:02:18 ----A---- C:\Windows\system32\mrt.exe
2014-08-13 23:01:48 ----D---- C:\Windows\winsxs
2014-08-13 23:01:06 ----D---- C:\Windows\system32\catroot
2014-08-13 23:01:03 ----D---- C:\Windows\system32\catroot2
2014-08-08 09:03:40 ----D---- C:\Users\miriam\AppData\Roaming\Vso
2014-08-08 09:03:40 ----D---- C:\Users\miriam\AppData\Roaming\CopyToDvd
2014-08-05 09:20:02 ----N---- C:\Windows\system32\MpSigStub.exe
2014-08-01 07:20:58 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-07-31 17:55:58 ----D---- C:\Program Files\Mozilla Firefox
2014-07-28 11:06:40 ----D---- C:\ProgramData
2014-07-25 21:04:57 ----D---- C:\Users\miriam\AppData\Roaming\MediaMonkey
2014-07-24 20:04:42 ----D---- C:\Program Files\Common Files\microsoft shared
2014-07-24 15:35:50 ----A---- C:\Windows\system32\DLLDEV32i.dll
2014-07-24 15:34:11 ----RSD---- C:\Windows\Fonts
2014-07-24 15:32:11 ----D---- C:\Windows\Help
2014-07-24 15:32:00 ----D---- C:\Program Files\MSXML 4.0
2014-07-18 13:05:30 ----D---- C:\Windows\system32\Tasks
2014-07-18 13:05:20 ----A---- C:\Windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-18 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-18 192352]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-07-12 305176]
R0 PSDFilter;PSDFilter; C:\Windows\system32\DRIVERS\psdfilter.sys [2007-04-25 20776]
R0 PSDNServ;PSDNSERVER; C:\Windows\system32\drivers\PSDNServ.sys [2007-04-25 16680]
R0 psdvdisk;psdvdisk; C:\Windows\system32\drivers\psdvdisk.sys [2007-04-25 60712]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-08-21 18544]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2014-07-18 55112]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-07-18 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-18 414520]
R1 aswTdi;aswTdi; C:\Windows\system32\drivers\aswTdi.sys [2014-07-18 57800]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-18 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-18 67824]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2007-03-02 76584]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-01-19 95744]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-20 12672]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-29 8192]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-02-09 179712]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-12-19 534016]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2007-06-15 21264]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-22 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-22 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-05-31 1780576]
R3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-19 30720]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-07-17 6144]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2006-10-23 179896]
R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2007-05-02 290816]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-12 134272]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-22 659968]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2008-01-19 45696]
S3 andnetadb;ADB Interface DriverNet; C:\Windows\System32\Drivers\lgandnetadb.sys [2013-04-18 25856]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag.sys [2013-04-18 23168]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem.sys [2013-06-28 27776]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2006-11-02 467456]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2008-01-19 40448]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-12-19 534016]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2007-01-09 78128]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-01-09 80688]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-01-09 16560]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys []
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
S3 IpwP;IPWireless 3G Network Adapter; C:\Windows\system32\DRIVERS\ipw3gnet.sys [2007-06-12 51040]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2008-01-19 52608]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-04-20 47360]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\Windows\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 s125bus;Sony Ericsson Device 125 driver (WDM); C:\Windows\system32\DRIVERS\s125bus.sys [2007-04-24 83336]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s125mdfl.sys [2007-04-24 15112]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s125mdm.sys [2007-04-24 108680]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s125mgmt.sys [2007-04-24 100488]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s125obex.sys [2007-04-24 98696]
S3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys []
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328]
S3 WisINT15;WisINT15; \??\C:\Elements\1stboot\WisINT15.SYS []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-18 50344]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-04-23 24576]
R2 eNet Service;eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [2007-06-13 135168]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-07-03 53248]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-07-12 354840]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 107008]
R2 WMIService;ePower Service; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2007-06-13 167936]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-29 386560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-20 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-20 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-31 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2006-04-14 87840]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravím, smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !

Snad je to ono:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 18.8.2014
Scan Time: 12:26:56
Logfile: log.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.08.18.03
Rootkit Database: v2014.08.16.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: miriam

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 281867
Time Elapsed: 15 min, 52 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 5
PUP.Optional.Conduit.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\ejpbbhjlbipncjklfjjaedaieimbmdda, , [34d777512d4e05317186eafbe31ffc04],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\IB Updater, , [85869b2d4b300f2771b702fa6c96d828],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [8a815b6dc5b65dd9042358a4eb17926e],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2765796123-3300716945-2196117661-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [c14a596fbcbfc1757499d05620e4f20e],
PUP.Optional.Conduit.A, HKU\S-1-5-21-2765796123-3300716945-2196117661-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\ejpbbhjlbipncjklfjjaedaieimbmdda, , [2dde83458cef59ddcf29e9fcaf53e020],

Registry Values: 3
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [2ae19c2c4f2cbd7985416cff55ada65a],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, , [2ae19c2c4f2cbd7985416cff55ada65a]
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, , [a5667c4c69126cca70c1959b56ae4bb5]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 4
PUP.Optional.SweetIM, C:\Windows\Installer\e8c91e.msi, , [c447feca2556bd79b7c85b9e679dbe42],
PUP.Optional.PCPerformer, C:\Windows\System32\Tasks\PC Performer, , [8b801dab512a58de128c647ea95954ac],
PUP.Optional.Conduit.A, C:\Users\miriam\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx, , [9a71d2f686f5d066e016c71e45bdc63a],
PUP.Optional.CrossRider.A, C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "142b36196dfe971cb480217a344b9765");), ,[9e6dad1be8933402fbc80cf9c144f808]

Physical Sectors: 0
(No malicious items detected)


(end)

To co Mbam našel nech smazat a pak mi sem dej zase log a písni jaký je stav PC.

Zdravím,
NTB je jenom malinko svižnejší(náběh na prohlížeč a najetí na jinou stránku), ale když je v klidu a nemám zapnutej prohlížeč, tak, mini-apk CPU(kterou mám na ploše) líta jak splašená, předtím běhala ručička v rozmezí 0 až 15-20% v klidu bez toho že bych šáhnul na klávesnicu. Dále, nevím jesti je to důležité ale, mám naistalovaný program nebo je to aplikace AdBlockPlus na eliminaci(blokování) reklam v prohlížeči. Kdysy jel skvěle ale ..., v poslední době jak spustím FireFox tak to trvá díl než kdysy dááávno a pustí jednu reklamu, pak znovu pracuje kurzor(domovská stránka zůstává)a reklama zmizí. Nevím co bych dál ještě popsal. Tady je ten druhý log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 20.8.2014
Scan Time: 9:40:23
Logfile: log2.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.08.20.02
Rootkit Database: v2014.08.16.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: miriam

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 282904
Time Elapsed: 12 min, 1 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 5
PUP.Optional.Conduit.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\ejpbbhjlbipncjklfjjaedaieimbmdda, Quarantined, [c40ed3f59cdf2a0cfbcc04e4936f8080],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\IB Updater, Quarantined, [775b15b3f98260d6ba3d1de1aa58bc44],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, Quarantined, [448e12b689f26ec806f0946a34ce29d7],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2765796123-3300716945-2196117661-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, Quarantined, [b22087414f2c48eea23ecf59e51f4eb2],
PUP.Optional.Conduit.A, HKU\S-1-5-21-2765796123-3300716945-2196117661-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\ejpbbhjlbipncjklfjjaedaieimbmdda, Quarantined, [587a47817506f83ed7f1d90fc63cae52],

Registry Values: 3
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, Quarantined, [91415771fb808da983cf98d51be728d8],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, Quarantined, [91415771fb808da983cf98d51be728d8]
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, Quarantined, [666cb4141665b3833ac52c0612f2e61a]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 4
PUP.Optional.SweetIM, C:\Windows\Installer\e8c91e.msi, Quarantined, [27ab2d9bbcbfd462d5d08973e91bac54],
PUP.Optional.PCPerformer, C:\Windows\System32\Tasks\PC Performer, Quarantined, [2da57850f9821f17b6bbf7ee80826d93],
PUP.Optional.Conduit.A, C:\Users\miriam\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx, Quarantined, [2aa887414239290df8cea64235cd956b],
PUP.Optional.CrossRider.A, C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "142b36196dfe971cb480217a344b9765");), Replaced,[e8ea8444f289ad89bb52d9308382946c]

Physical Sectors: 0
(No malicious items detected)


(end)

Adblock již nepoužívám, ale máš pravdu že si na něj poslední dobou jeho uživatelé stěžují.

Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po té proběhne sken a po jeho skončení klikni na Report a to co na Tebe vypadne mi sem zkopíruj.

# AdwCleaner v3.308 - Report created 24/08/2014 at 19:06:06
# Updated 20/08/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : miriam - MIRIAM-PC
# Running from : C:\Users\miriam\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\47nlubep.default\user.js
File Found : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default\user.js
Folder Found : C:\Users\miriam\AppData\Local\cool_mirage
Folder Found : C:\Users\miriam\AppData\Local\Mobogenie
Folder Found : C:\Users\miriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com

***** [ Scheduled Tasks ] *****

Task Found : BrowserProtect
Task Found : PC Performer

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Found : HKCU\Software\wscontb
Key Found : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Found : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.19553


-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\47nlubep.default\prefs.js ]


[ File : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2151 octets] - [24/08/2014 19:06:06]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2211 octets] ##########

Znovu spusť AdwCleaner ale tentokrát klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zase zkopíruj Report.


Pak zas písni jaký je stav PC.

Zdravím,
NTB je mnohem, mnohem svižnejší, docela bych řek, že je to hodně dobrý, naběh stránek, vyhledávaní a pod.. Akorát přítelkyně používa facebook a říka, že se skoro nic nezměnilo. Údajně, že ji to seká videa. Facebook mě nezajímá, ale všimnul jsem si, že když někdo dá video na facebook tak se začne automaticky sám přehrávat, je to normál? Mimo to mi vyskakuje aktualizace Adobe playera, zatím jsem ho neaktualizoval. Může to mít na to vliv? Jó, jěstě jsem postřehnul, že když nabýha plocha po zapnutí a přihlášení, tak to trvá celkem dost oproti tomu na co jsem byl zvyklej(zástupci jednotlivých programů a aplikací najedou hned, ale postraní panel z mini-apk a ikonky na pravé straně hl. panelu nabýhaj dlouho), můze to být, že by se hádali antivir z MBAM, protože když jsem instaloval MBAM, tak dle jeho pokynů jsem musel vypnout antivir a firewall(pak jsem je zase spátky zapnul). A poslední vec od mé přítalkyně, taky hodně používa SKYPE a udajně nefungoval moc dobře, vypadával, nemohla se z nikým spojit, ale naoplátku když ji někdo volal, tak no probléma. Mám ho přeinstalovat?
A ... to bude asi všechno , co mě napadlo.
Tady log:
# AdwCleaner v3.308 - Report created 25/08/2014 at 18:37:06
# Updated 20/08/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : miriam - MIRIAM-PC
# Running from : C:\Users\miriam\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\miriam\AppData\Local\cool_mirage
Folder Deleted : C:\Users\miriam\AppData\Local\Mobogenie
Folder Deleted : C:\Users\miriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
File Deleted : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\47nlubep.default\user.js
File Deleted : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default\user.js

***** [ Scheduled Tasks ] *****

Task Deleted : BrowserProtect

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Deleted : HKCU\Software\wscontb
Key Deleted : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.19553


-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\47nlubep.default\prefs.js ]


[ File : C:\Users\miriam\AppData\Roaming\Mozilla\Firefox\Profiles\asiu1bj6.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2291 octets] - [24/08/2014 19:06:06]
AdwCleaner[R1].txt - [2351 octets] - [25/08/2014 18:24:37]
AdwCleaner[S0].txt - [2279 octets] - [25/08/2014 18:37:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2339 octets] ##########

Záskok za kolegu
Jak to teď vypadá s počítačem?

Omlouvám se za zpoždění (nějaké zdravotní problémy)

To že se spouští video samo by se dít nemělo.
Adobe flash player určitě aktualituj bez něho totiž na webu nelze něco zobrazovat.
To že najíždí Plocha pomalu by mohlo být "stářím" Visty nebo máš na ploše velké soubory - uklidit do dokumentů a nebo ?.
Co se týče Skype - přeinstalovat.


Jinak dále, nechce se mi na Vistu pouštět ten největší kalibr na sken a čištění, proto začnem polehoučku.

Spusť skener Cure It podle TOHOTO návodu

po skončení skenu chci sem výsledky.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)


Ještě se zeptám, ovladače grafiky máš aktuální ?

zdravím,
omlouvam se motji, že jsem nereagoval, moc práce v práci.
Nerad to přiznávam, ale nevím si rady. Sprava po Cure It je obrovská a ja nevím jak ji rozdelit abych se v tom pak nestratil.

duky74 píše:Nerad to přiznávam, ale nevím si rady. Sprava po Cure It je obrovská a ja nevím jak ji rozdelit abych se v tom pak nestratil.

Stačí mi ten konec s výsledky.

O.K. aspon kousek od konce

>C:\Users\miriam\Documents\radio Laguna\radio v Lagune.pdf is PDF container
C:\Users\miriam\Documents\radio Laguna\radio v Lagune.pdf - container
>C:\Users\miriam\Documents\sekačka GARDENA\dodaci list-sekačka-gardena.pdf is PDF container
C:\Users\miriam\Documents\sekačka GARDENA\dodaci list-sekačka-gardena.pdf - container
>C:\Users\miriam\Documents\sekačka GARDENA\faktura-gardena.PDF is PDF container
C:\Users\miriam\Documents\sekačka GARDENA\faktura-gardena.PDF - container
C:\Users\miriam\Documents\sekačka GARDENA\faktura-gardena.PDF:Zone.Identifier - Ok
>C:\Users\miriam\Documents\servis na kolo\cyklocomputer CZ.pdf is PDF container
C:\Users\miriam\Documents\servis na kolo\cyklocomputer CZ.pdf - container
>C:\Users\miriam\Documents\servis na kolo\přední přehazovačka.docx is ZIP archive
C:\Users\miriam\Documents\servis na kolo\přední přehazovačka.docx - Ok
C:\Users\miriam\Documents\servis na kolo\přední přehazovačka.docx - archive
>C:\Users\miriam\Documents\servis na kolo\Seřízení přehazovačky 2.docx is ZIP archive
C:\Users\miriam\Documents\servis na kolo\Seřízení přehazovačky 2.docx - Ok
C:\Users\miriam\Documents\servis na kolo\Seřízení přehazovačky 2.docx - archive
>C:\Users\miriam\Documents\servis na kolo\Výměna brzdových špalků.docx is ZIP archive
C:\Users\miriam\Documents\servis na kolo\Výměna brzdových špalků.docx - Ok
C:\Users\miriam\Documents\servis na kolo\Výměna brzdových špalků.docx - archive
>C:\Users\miriam\Documents\servis na kolo\zadní přehazovačka.docx is ZIP archive
C:\Users\miriam\Documents\servis na kolo\zadní přehazovačka.docx - Ok
C:\Users\miriam\Documents\servis na kolo\zadní přehazovačka.docx - archive
>C:\Users\miriam\Documents\ÚČTY\Vypisy půjčka 20.000\2-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Vypisy půjčka 20.000\2-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\3-2014\Souhrn 3-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\3-2014\Souhrn 3-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\3-2014\Vyuctovani 3-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\3-2014\Vyuctovani 3-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\4-2014\Souhrn 4-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\4-2014\Souhrn 4-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\4-2014\Souhrn 4-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\4-2014\Vyuctovani 4-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\4-2014\Vyuctovani 4-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\4-2014\Vyuctovani 4-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\5-2014\Souhn.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\5-2014\Souhn.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\5-2014\Souhn.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\5-2014\Vyuctovani.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\5-2014\Vyuctovani.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\5-2014\Vyuctovani.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\6-2014\Souhrn.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\6-2014\Souhrn.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\6-2014\Vyuctování.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\6-2014\Vyuctování.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\7-2014\Souhrn.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\7-2014\Souhrn.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\7-2014\Vyuctovani.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Dušan\7-2014\Vyuctovani.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\3-2014\Souhrn 3-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\3-2014\Souhrn 3-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\3-2014\Vyuctovani 3-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\3-2014\Vyuctovani 3-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\4-2014\Souhrn 4-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\4-2014\Souhrn 4-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\4-2014\Souhrn 4-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\4-2014\Vyuctovani 4-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\4-2014\Vyuctovani 4-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\4-2014\Vyuctovani 4-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\5-2014\Souhrn.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\5-2014\Souhrn.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\5-2014\Souhrn.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\5-2014\Vyuctovani.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\5-2014\Vyuctovani.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\5-2014\Vyuctovani.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\6-2014\Souhrn.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\6-2014\Souhrn.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\6-2014\Vyuctovani.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\6-2014\Vyuctovani.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\7-2014\Souhrn.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\7-2014\Souhrn.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\7-2014\Vyuctovani.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpis mobil Mirka\7-2014\Vyuctovani.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis4-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis4-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis5-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis5-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis5-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis6-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis6-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis7-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis7-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 1-2013\vypis 1-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 1-2013\vypis 1-2013.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 1-2013\vypis1-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 1-2013\vypis1-2013.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 1-2014\vypis1.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 1-2014\vypis1.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 10-2012\vypis 10-2012.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 10-2012\vypis 10-2012.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 10-2012\vypis10-2012.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 10-2012\vypis10-2012.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 10-2013\vypis10.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 10-2013\vypis10.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2012\vypis 11-2012.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2012\vypis 11-2012.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2012\vypis11-2012.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2012\vypis11-2012.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2013\vypis11.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2013\vypis11.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 11-2013\vypis11.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 12-2013\vypis12.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 12-2013\vypis12.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 2-2013\vypis 2-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 2-2013\vypis 2-2013.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 2-2013\vypis2-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 2-2013\vypis2-2013.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 2-2014\vypis2.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 2-2014\vypis2.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 3-2013\vypis3-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 3-2013\vypis3-2013.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 3-2014\vypis3.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 3-2014\vypis3.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 4-2013\vypis4.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 4-2013\vypis4.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 5-2013\vypis5.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 5-2013\vypis5.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 6-2013\vypis6.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 6-2013\vypis6.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 7-2013\vypis7.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 7-2013\vypis7.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 7-2013\vypis7.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 8-2013\vypis8.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 8-2013\vypis8.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 8-2013\vypis8.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2012\vypis 9-2012.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2012\vypis 9-2012.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2012\výpis 9-2012.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2012\výpis 9-2012.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2013\vypis9.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2013\vypis9.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z hypotéky od 9-2012\vypis 9-2013\vypis9.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\1-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\1-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\10-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\10-2013.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\10-2013.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\11-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\11-2013.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\11-2013.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\2-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\2-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\3-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\3-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\4-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\4-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\4-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\5-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\5-2014.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\5-2014.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\6-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\6-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\7-2014.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\7-2014.pdf - container
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\8-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\8-2013.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\8-2013.pdf:Zone.Identifier - Ok
>C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\9-2013.pdf is PDF container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\9-2013.pdf - container
C:\Users\miriam\Documents\ÚČTY\Výpisy z účtu\9-2013.pdf:Zone.Identifier - Ok
C:\Users\miriam\Documents\životopisy\Profesní životopis.doc - Ok
>C:\Users\miriam\Documents\životopisy\PROFESNÝ ŽIVOTOPIS Palo.docx is ZIP archive
C:\Users\miriam\Documents\životopisy\PROFESNÝ ŽIVOTOPIS Palo.docx - Ok
C:\Users\miriam\Documents\životopisy\PROFESNÝ ŽIVOTOPIS Palo.docx - archive
C:\Users\miriam\Documents\životopisy\Průvodní dopis-Dušan Farbák.doc - Ok
C:\Users\miriam\Documents\životopisy\strukturovany-zivotopis-vzor.doc - Ok
C:\Users\miriam\Documents\životopisy\Strukturovaný životopis-Farbak Dusan.doc - Ok
C:\Users\miriam\Documents\životopisy\Strukturovaný životopis.doc - Ok
C:\Users\miriam\Documents\životopisy\vzor_zivotopisu.doc - Ok
C:\Users\miriam\Documents\životopisy\vzor_zivotopisu.doc:Zone.Identifier - Ok
C:\Users\miriam\Documents\návody\navod SONY fotak.pdf - container
C:\Windows\TEMP\coinlog.log - Ok
C:\Windows\TEMP\MpSigStub.log - Ok
C:\Windows\TEMP\SKY3035.tmp - Ok
C:\Windows\TEMP\TMP00000018DFAC570F78077664 - Ok
C:\Windows\TEMP\TMP0000003B4B4AE8076B1AE063 - Ok
C:\Windows\TEMP\Cookies\index.dat - Ok
C:\Windows\TEMP\History\History.IE5\desktop.ini - Ok
C:\Windows\TEMP\History\History.IE5\index.dat - Ok
C:\Windows\TEMP\Temporary Internet Files\Content.IE5\desktop.ini - Ok
C:\Windows\TEMP\Temporary Internet Files\Content.IE5\index.dat - Ok
C:\Windows\TEMP\Temporary Internet Files\Content.IE5\AKB7PV6E\desktop.ini - Ok
C:\Windows\TEMP\Temporary Internet Files\Content.IE5\KYI9SNS4\desktop.ini - Ok
C:\Windows\TEMP\Temporary Internet Files\Content.IE5\VXGDH4E3\desktop.ini - Ok
C:\Windows\TEMP\Temporary Internet Files\Content.IE5\WMTSNSEU\desktop.ini - Ok
C:\Windows\TEMP\_avast_\AvastLock.txt - Ok
C:\Windows\TEMP\_avast_\Webshlock.txt - Ok
C:\Windows\TEMP\avast_ash\Mozilla Firefox\update.xml - Ok
>C:\Users\miriam\AppData\Local\Temp\5YNH5uVH.pdf.part is PDF container
C:\Users\miriam\AppData\Local\Temp\5YNH5uVH.pdf.part - container
C:\Users\miriam\AppData\Local\Temp\7287664.od - Ok
C:\Users\miriam\AppData\Local\Temp\AdobeARM.log - Ok
C:\Users\miriam\AppData\Local\Temp\AdwCleaner.jpg - Ok
C:\Users\miriam\AppData\Local\Temp\Cleaning.ico - Ok
C:\Users\miriam\AppData\Local\Temp\CVR3370.tmp.cvr - Ok
C:\Users\miriam\AppData\Local\Temp\Donate.ico - Ok
C:\Users\miriam\AppData\Local\Temp\etilqs_aVd1siyGXQ9ANZF - Ok
C:\Users\miriam\AppData\Local\Temp\etilqs_Zj2g1IzJlUPV9RI - Ok
C:\Users\miriam\AppData\Local\Temp\EULA.txt - Ok
>C:\Users\miriam\AppData\Local\Temp\f6_v9buz.exe.part - packed by MPRESS
>>C:\Users\miriam\AppData\Local\Temp\f6_v9buz.exe.part is ZIP archive
C:\Users\miriam\AppData\Local\Temp\f6_v9buz.exe.part - Ok
C:\Users\miriam\AppData\Local\Temp\f6_v9buz.exe.part - archive
C:\Users\miriam\AppData\Local\Temp\JavaDeployReg.log - Ok
C:\Users\miriam\AppData\Local\Temp\jusched.log - Ok
C:\Users\miriam\AppData\Local\Temp\miriam.bmp - Ok
>C:\Users\miriam\AppData\Local\Temp\oMTYgkVV.pdf.part is PDF container
C:\Users\miriam\AppData\Local\Temp\oMTYgkVV.pdf.part - container
C:\Users\miriam\AppData\Local\Temp\PDApp.log - Ok
>C:\Users\miriam\AppData\Local\Temp\Quarantine.exe - packed by UPX
>>C:\Users\miriam\AppData\Local\Temp\Quarantine.exe is AUTOIT container
>>>C:\Users\miriam\AppData\Local\Temp\Quarantine.exe\Users\Matthieu\AppData\Local\Temp\autE4C8.tmp - packed by ASCRIPT
C:\Users\miriam\AppData\Local\Temp\Quarantine.exe - container
C:\Users\miriam\AppData\Local\Temp\Report.ico - Ok
C:\Users\miriam\AppData\Local\Temp\RtkBtMnt.exe - Ok
C:\Users\miriam\AppData\Local\Temp\Scan.ico - Ok
C:\Users\miriam\AppData\Local\Temp\Uninstall.ico - Ok
C:\Users\miriam\AppData\Local\Temp\wmplog00.sqm - Ok
C:\Users\miriam\AppData\Local\Temp\wmplog01.sqm - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\0buYewv3FCGhkLX - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\0ep9grT2.exe - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\0R1UTtIJIXr880 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\0uIwjIoud5KFaTx - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\0wHH7xWry5n6 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\13d8IvniSw9nEu - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\1bJSGHwE2 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\1IuMIYVC - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\1JR2dT8p - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\21SGi3a9MOgd3FB - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\22nXZvO7uUxrd83 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\2kLPVQSseEN2NBD - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\2nL1iPmy - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\4FIa5BrvKN9ayI.exe - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\4q9hnLF8POObs - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\5QnIWMkqTPtt7kk - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\5VTiBlWYidgbZ - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\6fgCub4WdT1lEii - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\6hIhy2jKlwy - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\6oF2AYaEbQ93ya8 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\6tEx479EYYwUX2 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\6TIOHps6pet7vj - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\7KepvDYWT0h6oa - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\7lWgJAc9q - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\7xE1pYQNIIPF7Cm - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\7Y0sUctsOC1 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\8b6iFm6FmlgD - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\8m11VW0jcVY - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\8qFuz6jYRO1LiGb - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\9bFBEbAD84asF - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\9ENGMDchVp - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\9qFxAturS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\a1ThHbGX3j3lUVh - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\A6rCzc7jZFqBaU - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\aicjUog0DzM5 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\AOUgjv1GAWRm1Q - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\AU1atq6S - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\aVRarhGk - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\AYptjaHhSy - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\B0RONRobOQ - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\b0TYieQRPx - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\b2r8JWlv16IY - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\B77TgM3X6jHUf6U - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\bFN8mfROO - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\bO3KM4P77KsF - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\BqlPSYbU - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\BsxF0A4rsYmb - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\BUlcUoxozboM - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\c31usQNN - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\C7ymsIfiT - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\C83BbRLr - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\C8ETuqjCNRvR - Ok
>C:\Windows\TEMP\BIT3219.tmp - packed by UPX
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\CAVbtHtXDQNJ1R4 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\cCMZWcjpsSihV - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\CL4yJftd5NDBt - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Cl9Z3n7c - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\cLKBrZTNyQNo - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\CM3yb9X6g57c - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\coQSwgnUZZ0D - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\cSDGG0IO6rtPTn - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\dAknrsF0xTJleDO - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\dJ3TBuzK6K9GJuJ - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\dpNZJvbQfVd - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\E5okBLR6l - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\EApGpkogY1P - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\EeO8uqlLb7YoP4O - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\eeUOmaCyD0tk - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Eg9vxkEPmjdP2ur - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Eiesmgj7M8x - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ElYUjH3RCLpiS - Ok
>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm is CHM container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\cureit70_en_popup_html.js is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_additionaloptions.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_cli_parameters.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_cli_switches.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_customscan.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_detectionmethods.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_intro.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_legal.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_quarantine.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_quickscan.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_quickstart.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_scan_set_1.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_scan_set_2.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_scan_set_3.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_scan_set_4.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_scan_settings.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_setneutrules.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_snip_scan_1.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_statistics.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_sysreq.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_techsupport.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_testing.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\dw_update.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\helpman_topicinit.js is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm\jquery.js is JS-HTML container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\en.chm - container
>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\eN954137UrrxW.dll is BINARYRES container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\eN954137UrrxW.dll - container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\eP948YekxHPG8 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ExkG2Is8Kk - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\F7tqRSlp1wN - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\F9uD2R5a - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\fCJC2ua2GQENNBS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ferWbnVIOhPUuL - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Ff3VEZpN - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\flaWeg90Yu0 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\FLCjhFTq - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\FRq1tLKjsn4ajas - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\fTqkWZLo - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ftyjOFeYxKHTfGs - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Fvsv3nLCTV9hO - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Gc8WHWZT21ZF - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Ggd4vRIX - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\giFhvicba0 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\GJHOPWr4TfjFK - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\GL8UaPnpc - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\gviKGO7k - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\gxFLgUnsmcoSTFw - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\GYMgGfBXBXzg8d - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\H3Or1rA5A3lm1ZH - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\h45GpNXlM9PA - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\haLxcEpY6D.dll - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\hirrxOFeidK9sIC - Ok
>>C:\Windows\TEMP\BIT3219.tmp - packed by BINARYRES
>>>C:\Windows\TEMP\BIT3219.tmp - packed by BINARYRES
C:\Windows\TEMP\BIT3219.tmp - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\HZk2Uohz9N - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\i8z1uNy0Q - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\hWTepKiAg.exe - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\iGxJoIiFXffegH3 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\IMWHy5TJmOD2H - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\IxZG4SDiP - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\j42siHHx3U - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\J4vLPYoAY20j - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\j7qATUxnh - Ok
>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm is CHM container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\cureit70_ja_popup_html.js is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_additionaloptions.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_cli_parameters.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_cli_switches.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_customscan.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_detectionmethods.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_intro.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_legal.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_quarantine.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_quickscan.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_quickstart.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_scan_set_1.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_scan_set_2.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_scan_set_3.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_scan_set_4.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_scan_settings.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_setneutrules.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_snip_scan_1.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_statistics.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_sysreq.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_techsupport.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_testing.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\dw_update.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\helpman_topicinit.js is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm\jquery.js is JS-HTML container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ja.chm - container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\K09U3ZfqqC - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\K2fvjQBQDUgrQ - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\K3PDJ8pesBVN - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\kMP2y6PWFDRH - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\KQZmjoHxmeUoVh - Ok
>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\KrfsRWIQvKx.dll is BINARYRES container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\KrfsRWIQvKx.dll\data003 - packed by BINARYRES
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\KrfsRWIQvKx.dll - container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\kRz7uS5NzMlraKp - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\l4Q6jRL0n - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\l8kxFbUZbejS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\lEoq30RE - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\lF9FktTKWdhF8 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\LiNxIB7J60X4 - Ok
>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\IKrZT6URoOtFQVB.exe is BINARYRES container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\LKG8tDpL0pHTk - Ok
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\IKrZT6URoOtFQVB.exe\data002 is ZLIB container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\lLxnO9w8Yj - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\LVpHtw2fAr9p - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\LzQfvqRh7tLSc - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\IKrZT6URoOtFQVB.exe - container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\M8hHMeprjpyt - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\m6RJDDZWwZabS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\MpYOD5ljlA2 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\MsRP7AQJ6 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\N3yL9H8fiFvbESa - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\n57RbTU4eFd - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\NkwHC8RSI5dc6fi - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\nJvhlXZq - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\NUR49olIxj3 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\O78ZFoZZV0W6 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Ofp18MiP - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Oi0MeskUovvU - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\OGFEquvo - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ORA8A6DV1ReJ - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\oRNXINM0Xh966rV - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\OWePwbRz - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\pBvbeB0CgTVCH - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\P1bWQtCpiLDjzlC - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\PI4yl1PGa1 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\pd2isoezfB - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\PMKrXfYEDhmkX - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Pu0ZJIiFyv - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\PUAQz6kWYp - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\pvSa1vZvnVe - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\r1UD9qmnRVqMIGo - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\qEi6v4blUViKIc - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\R3RIkEHMx - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\R3ZmGfprmqA4nh4 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\R6NmJGsggz - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\rCzc3ElBKkHUV7 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\rMROiEXW4 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\RLSpTv2Fy - Ok
>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm is CHM container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\rvcMgXQAtr6 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\RxBu7J41IPAvLM - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\RxP2ttSH1mj - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Rz3TtfNK - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\S4PrbfP02iOeeu7 - Ok
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\cureit70_popup_html.js is JS-HTML container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\SeZid7vVk3qoyGN - Ok
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\dw_cli_switches.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\dw_quickstart.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\dw_scan_set_2.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\dw_scan_set_3.htm is JS-HTML container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\sGSMoWGg27S - Ok
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\dw_testing.htm is JS-HTML container
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\helpman_topicinit.js is JS-HTML container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\shdMndDKeSwU4 - Ok
>>C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm\jquery.js is JS-HTML container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\sK7cQhuNx5w - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ru.chm - container
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\sqpuDQiYmiAGD - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\T3ux7MFvE - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\TCgfoTknTE9q - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\teTl14hlrDK - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\tfmp8e7OXmV - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\tHbCLTVP - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\TUH8KrH34lqq0e - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\tw2fz7KsDf4 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\TxwUHSKBaSqcW - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\U1P6aKW1nqhu1 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\U9Hawy7sA - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\UBWkU7mPjMQY - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\UgSzeyTo23UdBcR - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Ug2LOlqIizdKai - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\UJWTOILCEnFdys - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\UmwPXf63Ep1WEu - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Up34Nr36JS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\v4t8QHvM - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Vajk16gd - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\VB00a7AF4I - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\vFBoeJJMZkkp - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\vmvJcnqlpdNr0 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Vg8LE42Z - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Vz0X3CRcUtn9B - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\VRiMRTuDKwQe - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\W3s6CQ5dTyr9w2Z - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\WjZu2mGyVlUI6 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\wT27bd8ivEv - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\WK2O9TrqstWwPKa - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Wtwx8PPg32 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\X1IoJKGP - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\wX9MPKMXVkIL - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\X6xOizhrUmD2j9B - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\xHnlzYoTk9BPr - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\XIV6G1OTi09bTAS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\XmBqtAt3TflH8Wv - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\XtVwD1BPzOCy6 - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\yiWICmym26V2yg - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\XymfpNci2efaGS - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Z44wLGlDSA - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\zDmmqWG2EH - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\zeRZpAAl33zT - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\Zi2n66cPbP - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ZS2wueM0FMBl - Ok
C:\Users\miriam\AppData\Local\Temp\Cookies\index.dat - Ok
C:\Users\miriam\AppData\Local\Temp\History\History.IE5\desktop.ini - Ok
C:\Users\miriam\AppData\Local\Temp\History\History.IE5\index.dat - Ok
C:\Users\miriam\AppData\Local\Temp\4D3FC3C0-D202DC64-727CD1D8-F0DE391C\ZQ0gxF6U6k8KJSN - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\01-Alphaville - lassie co-C2I1MP4129C1BRTUACZZ1NY6J - Q584A7CPNQ63DM4AM7KJ9QNFB-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\01-Daft Punk - the grid-S2BHI71MBFFAN92XYG325KXG4 - PHXHFCVK272NF26Q1JI5WUY41 - -1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\01-Linkin Park - waiting -KSB82ZBAFXD3JT5JBEIMXRA2H - XU5UDI968J9HHNNPJX7KSHFRM-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\01-Liz Mcclarnon - woman -C2I1MP4129C1BRTU1BJGCR89V - Q584A7CPNQ63DM4AM7KJ9QNFB-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\01-Robbie Williams - let -E86P24NY5NQUHVMRF73REHBC3 - XU5UDI968J9HHNNPJX7KSHFRM-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\01-Stereophonics - have a-3Z71FXQXZF86YRDIBQ6E8G51K - Q584A7CPNQ63DM4AM7KJ9QNFB-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\06-Megan McCauley - wonde-V8G418X2M5WSBBGV9RQBSYNP3 - XU5UDI968J9HHNNPJX7KSHFRM-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\04-Rain-AI6I9BQUYF2YG3D84ZB57XFEW - ESZ1ZF242PEBQY3RESZ1ZF242 - -1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\07-Lush - i have the moon-V8G418X2M5WSBBGV2GMJH4VZA - Q584A7CPNQ63DM4AM7KJ9QNFB-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\08-Coldplay - atlas-Z51MHBEWHDDAMRCWWE2GWT1TB - 9RNGZ6DK6WGA5BSD815MFDQTR73.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\08-Doedel Up-AI6I9BQUYF2YG3D84ZB57XFEW - CJMMQZRIRBE4H1HN2ZVWB447X - -1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\12-Nine inch nails - ever-9HS5142ZEJMH391FTGN3IMSYP - 9RNGZ6DK6WGA5BSDD67KCJ5XA83.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\13 - Would-9FGKX2TG2FIYY7H114PXUWWVP - 1PI8C9D1KYEDPX591PI8C9D1K85.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\13-Filter - you walk away-V8G418X2M5WSBBGVY52A5NWJ9 - 9RNGZ6DK6WGA5BSDD67KCJ5XA83.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\13-M83 & Susanne Sundfør -S2BHI71MBFFAN92XYG325KXG4 - 5KAUJF6SCWGE96K8UKTQFHCIZ - -1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\14-Cypress Hill - superst-S6FSB7JN1RUH6TJATQ1SPYH4S - 9RNGZ6DK6WGA5BSDD67KCJ5XA83.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\Tove-Lo---Habits-B96MY8W9ZM8E13SD41YW9Z9ZT - 8F1XZRN1JUZ2JJTHZDHP8RGZD-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache2020214192_1\15-A Perfect Circle - jud-9K2XY4M9Z9W2XE38TWRGBUE42 - XU5UDI968J9HHNNPJX7KSHFRM-1.bmp - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache_icons\http---www.cduniverse.com-favicon.ico - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache_icons\http---www.amazon.com-favicon.ico - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache_icons\http---www.google.com-favicon.ico - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache_icons\http---www.hdtracks.com-favicon.ico - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache_icons\http---www.wikipedia.org-favicon.ico - Ok
C:\Users\miriam\AppData\Local\Temp\MMCache_icons\http---www.youtube.com-favicon.ico - Ok
C:\Users\miriam\AppData\Local\Temp\Skype\DbTemp\temp-g8BNIjBcyrLiFAXyWyR5VYqM - Ok
C:\Users\miriam\AppData\Local\Temp\Temporary Internet Files\Content.IE5\desktop.ini - Ok
C:\Users\miriam\AppData\Local\Temp\Skype\DbTemp\temp-WzYujHy7XhQVFsETnErpiUfG - Ok
C:\Users\miriam\AppData\Local\Temp\Temporary Internet Files\Content.IE5\29EGIJBJ\desktop.ini - Ok
C:\Users\miriam\AppData\Local\Temp\Temporary Internet Files\Content.IE5\66Z8MSEV\desktop.ini - Ok
C:\Users\miriam\AppData\Local\Temp\Temporary Internet Files\Content.IE5\S59U2ENW\desktop.ini - Ok
C:\Users\miriam\AppData\Local\Temp\Temporary Internet Files\Content.IE5\YIMLTWDX\desktop.ini - Ok
C:\Users\miriam\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat - Ok
C:\Users\miriam\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml - Ok
C:\Users\miriam\AppData\Local\Temp\avastBCLTMP\firefox\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\icon.png - Ok
>C:\Users\miriam\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx is ZIP archive
C:\Users\miriam\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx - Ok
C:\Users\miriam\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx - archive

Total 4994507837 bytes in 24935 files scanned (33433 objects)
Total 24901 files (33395 objects) are clean
There are no infected objects detected
Total 38 files are raised error condition
Scan time is 01:16:33.451

Bezva je to čisté, a co ty ovladače grafiky jsou aktuální ?