VIRY.CZ

Logfile of random's system information tool 1.08 (written by random/random)
Run by Bender at 2014-08-24 13:11:45
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 13 GB (26%) free of 50 GB
Total RAM: 4093 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:11:46, on 24.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SupTab\HpUI.exe
C:\Program Files (x86)\SupTab\Loader32.exe
C:\Program Files\trend micro\Bender.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... 4390143901
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... 4390143901
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... 4390143901
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... 4390143901
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - (no file)
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [Speccy] "D:\hlidac\Speccy64.exe" /totray
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-18\..\RunOnce: [AOD] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe AutoTune (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [AOD] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe AutoTune (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Roboscan Real-time Service (Roboscan_RTSrv) - Roboscan Inc - D:\Roboscan\RSRTSrv.rse
O23 - Service: Roboscan Update Service (Roboscan_UpdSrv) - Roboscan Inc - D:\Roboscan\RSUpdSrv.rse
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8243 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\ProgramData\IePluginServices\PluginService.exe -service
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE"
C:\Windows\SysWOW64\PnkBstrA.exe
"D:\Roboscan\RSRTSrv.rse"
"D:\Roboscan\RSUpdSrv.rse"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
taskeng.exe {271CF539-50E7-4735-9F41-E3FE27E6D3C9}
WLIDSvcM.exe 1892
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"D:\Roboscan\RSAgent.rse" /run
"C:\Program Files (x86)\SupTab\HpUI.exe" -run
"D:\hlidac\Speccy64.exe" /totray
"C:\Program Files (x86)\SupTab\Loader64.exe"
"C:\Program Files (x86)\SupTab\Loader32.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Sidebar\sidebar.exe" /showGadgets
"D:\Stazeno\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"D:\Stazeno\RSITx64.exe"
taskhost.exe $(Arg0)

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GlaryInitialize 5.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-07-02 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-11-14 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-11-14 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-08-09 12666984]
"Roboscan"=d:\roboscan\RSLaunch.exe [2013-11-19 257856]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Speccy"=D:\hlidac\Speccy64.exe [2014-04-11 6903064]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
c:\program files (x86)\common files\java\java update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Roboscan_UpdSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Roboscan_UpdSrv]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2014-08-24 13:09:40 ----D---- C:\rsit
2014-08-24 10:47:27 ----D---- C:\ProgramData\374311380
2014-08-24 10:46:02 ----D---- C:\ProgramData\IePluginServices
2014-08-24 10:45:54 ----D---- C:\Program Files (x86)\SupTab
2014-08-24 10:43:43 ----A---- C:\Windows\SYSWOW64\fmcodec.DLL
2014-08-15 08:40:46 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2014-08-15 08:40:46 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2014-08-15 08:40:46 ----A---- C:\Windows\system32\infocardapi.dll
2014-08-15 08:40:46 ----A---- C:\Windows\system32\icardagt.exe
2014-08-15 08:40:45 ----A---- C:\Windows\SYSWOW64\icardres.dll
2014-08-15 08:40:45 ----A---- C:\Windows\system32\icardres.dll
2014-08-15 08:40:36 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-08-15 08:40:35 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-15 08:39:02 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-15 08:39:02 ----A---- C:\Windows\system32\shell32.dll
2014-08-15 08:38:50 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\system32\KBDRU.DLL
2014-08-15 08:38:50 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-15 08:38:43 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-08-15 08:38:43 ----A---- C:\Windows\system32\tzres.dll
2014-08-15 08:38:23 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-15 08:38:23 ----A---- C:\Windows\system32\msi.dll
2014-08-15 08:38:22 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-15 08:38:22 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-15 08:38:22 ----A---- C:\Windows\system32\msihnd.dll
2014-08-15 08:38:22 ----A---- C:\Windows\system32\consent.exe
2014-08-15 08:38:22 ----A---- C:\Windows\system32\authui.dll
2014-08-15 08:38:06 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-15 08:38:03 ----A---- C:\Windows\system32\win32k.sys
2014-08-15 08:38:03 ----A---- C:\Windows\system32\gdi32.dll
2014-08-15 08:38:02 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-08-15 08:37:56 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-15 08:37:56 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-15 08:37:56 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-15 08:37:55 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-15 08:37:55 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-15 08:37:55 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-15 08:37:55 ----A---- C:\Windows\system32\urlmon.dll
2014-08-15 08:37:55 ----A---- C:\Windows\system32\iernonce.dll
2014-08-15 08:37:55 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-15 08:37:55 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-15 08:37:54 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-15 08:37:54 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-08-15 08:37:54 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-15 08:37:54 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-15 08:37:54 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-15 08:37:54 ----A---- C:\Windows\system32\iesetup.dll
2014-08-15 08:37:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-15 08:37:54 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-15 08:37:53 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-15 08:37:53 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-15 08:37:53 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-08-15 08:37:53 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-15 08:37:53 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-08-15 08:37:53 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-15 08:37:53 ----A---- C:\Windows\system32\iertutil.dll
2014-08-15 08:37:53 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-15 08:37:52 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-15 08:37:52 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-15 08:37:52 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-15 08:37:52 ----A---- C:\Windows\system32\ieui.dll
2014-08-15 08:37:52 ----A---- C:\Windows\system32\ieframe.dll
2014-08-15 08:37:52 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-15 08:37:51 ----A---- C:\Windows\system32\vbscript.dll
2014-08-15 08:37:51 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-08-15 08:37:51 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-15 08:37:51 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-15 08:37:51 ----A---- C:\Windows\system32\jscript9.dll
2014-08-15 08:37:51 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-15 08:37:50 ----A---- C:\Windows\system32\wininet.dll
2014-08-15 08:37:50 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-15 08:37:50 ----A---- C:\Windows\system32\msrating.dll
2014-08-15 08:37:50 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-15 08:37:50 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-15 08:37:49 ----A---- C:\Windows\system32\mshtml.dll
2014-08-15 08:37:08 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-15 08:37:07 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-15 08:36:47 ----A---- C:\Windows\system32\aepdu.dll
2014-08-15 08:36:47 ----A---- C:\Windows\system32\aeinv.dll
2014-08-10 08:41:23 ----D---- C:\Program Files (x86)\CCG Launcher
2014-08-05 12:59:09 ----D---- C:\Users\Bender\AppData\Roaming\EstSoft
2014-08-05 12:59:09 ----A---- C:\Windows\system32\ayboot.ini
2014-08-05 12:58:52 ----A---- C:\Windows\system32\bootroboscan.exe
2014-08-05 12:58:11 ----D---- C:\ProgramData\Roboscan
2014-08-05 12:49:45 ----SD---- C:\Windows\SYSWOW64\Microsoft
2014-08-04 19:07:29 ----D---- C:\Users\Bender\AppData\Roaming\.technic
2014-08-01 10:50:19 ----A---- C:\Windows\system32\wups2.dll
2014-08-01 10:50:19 ----A---- C:\Windows\system32\wuauclt.exe
2014-08-01 10:50:18 ----A---- C:\Windows\system32\wucltux.dll
2014-08-01 10:50:18 ----A---- C:\Windows\system32\wuaueng.dll
2014-08-01 10:50:13 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-08-01 10:50:13 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-08-01 10:50:13 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-08-01 10:50:13 ----A---- C:\Windows\system32\wups.dll
2014-08-01 10:50:13 ----A---- C:\Windows\system32\wudriver.dll
2014-08-01 10:50:13 ----A---- C:\Windows\system32\wuapi.dll
2014-08-01 10:50:04 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-08-01 10:50:04 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-08-01 10:50:04 ----A---- C:\Windows\system32\wuwebv.dll
2014-08-01 10:50:04 ----A---- C:\Windows\system32\wuapp.exe
2014-07-30 15:27:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-07-27 19:45:03 ----D---- C:\Users\Bender\AppData\Roaming\GlarySoft

======List of files/folders modified in the last 1 months======

2014-08-24 13:11:45 ----D---- C:\Windows\temp
2014-08-24 13:11:45 ----D---- C:\Program Files\trend micro
2014-08-24 13:11:35 ----D---- C:\Program Files (x86)\Steam2
2014-08-24 11:54:21 ----D---- C:\Windows\system32\config
2014-08-24 11:18:25 ----D---- C:\Users\Bender\AppData\Roaming\TS3Client
2014-08-24 11:17:43 ----D---- C:\Windows\inf
2014-08-24 11:17:38 ----D---- C:\Windows\Logs
2014-08-24 11:17:38 ----D---- C:\Windows
2014-08-24 11:07:53 ----RD---- C:\Program Files (x86)
2014-08-24 11:01:38 ----SHD---- C:\System Volume Information
2014-08-24 10:48:09 ----D---- C:\ProgramData
2014-08-24 10:46:58 ----A---- C:\Users\Bender\AppData\Roaming\regsvr32.exe_log.txt
2014-08-24 10:44:37 ----A---- C:\Users\Bender\AppData\Roaming\LiveSupport.exe_log.txt
2014-08-24 10:43:50 ----D---- C:\Windows\SysWOW64
2014-08-24 10:33:17 ----D---- C:\Windows\System32
2014-08-24 10:33:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-24 09:32:04 ----D---- C:\Windows\system32\catroot2
2014-08-23 20:15:03 ----D---- C:\ProgramData\ProductData
2014-08-22 18:33:31 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-08-18 15:57:16 ----RSD---- C:\Windows\assembly
2014-08-18 12:12:05 ----SHD---- C:\Windows\Installer
2014-08-17 15:10:49 ----D---- C:\Windows\debug
2014-08-15 20:54:13 ----D---- C:\Windows\rescache
2014-08-15 12:35:36 ----D---- C:\Windows\Microsoft.NET
2014-08-15 08:59:09 ----D---- C:\Windows\winsxs
2014-08-15 08:57:11 ----D---- C:\Windows\ehome
2014-08-15 08:57:10 ----RSD---- C:\Windows\Fonts
2014-08-15 08:57:09 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-15 08:57:09 ----D---- C:\Windows\system32\drivers
2014-08-15 08:57:09 ----D---- C:\Windows\system32\cs-CZ
2014-08-15 08:57:08 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-15 08:57:08 ----D---- C:\Windows\system32\en-US
2014-08-15 08:57:08 ----D---- C:\Windows\PolicyDefinitions
2014-08-15 08:57:08 ----D---- C:\Program Files\Internet Explorer
2014-08-15 08:57:08 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-15 08:54:13 ----D---- C:\Windows\system32\catroot
2014-08-15 08:49:28 ----D---- C:\Windows\system32\MRT
2014-08-15 08:46:44 ----A---- C:\Windows\system32\MRT.exe
2014-08-15 08:40:18 ----SD---- C:\Windows\system32\CompatTel
2014-08-14 16:09:45 ----D---- C:\ProgramData\Origin
2014-08-14 11:32:35 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2014-08-14 11:32:26 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-08-14 11:29:04 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2014-08-09 19:21:46 ----D---- C:\Users\Bender\AppData\Roaming\Might & Magic Heroes VI
2014-08-08 20:40:14 ----D---- C:\ProgramData\Package Cache
2014-08-06 10:37:00 ----D---- C:\Program Files (x86)\TeamSpeak 3 Client
2014-08-05 12:56:18 ----D---- C:\Program Files
2014-08-05 12:55:07 ----D---- C:\ProgramData\AVAST Software
2014-08-05 12:55:06 ----D---- C:\avast! sandbox
2014-08-05 12:50:05 ----D---- C:\Windows\system32\Tasks
2014-08-05 09:20:00 ----N---- C:\Windows\system32\MpSigStub.exe
2014-08-02 14:34:42 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-27 19:45:14 ----D---- C:\Windows\Tasks
2014-07-27 10:01:16 ----D---- C:\Windows\Minidump
2014-07-25 11:55:41 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-25 11:55:40 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 00:33:34 ----D---- C:\Users\Bender\AppData\Roaming\.minecraft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2006-06-14 14192]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [2007-01-12 106360]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 wStLib64;wStLib64; C:\Windows\system32\drivers\wStLib64.sys [2014-03-18 61112]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2010-01-14 32544]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 cpuz136;cpuz136; \??\C:\Users\Bender\AppData\Local\Temp\cpuz136\cpuz136_x64.sys []
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-03 283200]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-07-29 56960]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-07-29 79104]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-08-24 25640]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-12 3053160]
R3 RoboFww;RoboFww; \??\d:\roboscan\plugin\realtime\RoboFww.sys [2013-11-19 35616]
R3 RoboRtwIFDrv;RoboRtwIFDrv; \??\d:\roboscan\plugin\realtime\RoboRtw.sys [2013-11-19 97056]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2011-07-06 367976]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
S0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\Windows\System32\drivers\sfdrv01a.sys [2006-07-05 77688]
S0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\Windows\System32\drivers\sfsync02.sys [2006-07-10 22936]
S1 VirtDiskBus;3TB+ Unlock; C:\Windows\system32\DRIVERS\VirtDiskBus64.sys [2011-02-08 66160]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2012-07-02 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2012-07-08 30528]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtTeam60.sys [2010-01-14 48416]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan60.sys [2010-01-14 29472]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.2); C:\Windows\system32\DRIVERS\RtTeam60.sys [2010-01-14 48416]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 VASDeviceDrm;Virtual Audio Streaming with Drm (WDM); C:\Windows\system32\drivers\vasdDev.sys [2012-03-19 1454896]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
R2 IePluginServices;IePlugin Services; C:\ProgramData\IePluginServices\PluginService.exe [2014-08-24 715656]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-08-14 76152]
R2 Roboscan_RTSrv;Roboscan Real-time Service; D:\Roboscan\RSRTSrv.rse [2013-11-19 439104]
R2 Roboscan_UpdSrv;Roboscan Update Service; D:\Roboscan\RSUpdSrv.rse [2013-11-19 842048]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-07-02 2175264]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-22 262320]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2014-08-22 49152]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-07-25 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-30 119408]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-14 833728]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-07-03 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Bender on ne 24.08.2014 at 13:26:31,71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3311327032-918779867-2011593617-1000\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Successfully deleted: [File] C:\Users\Bender\AppData\Roaming\mozilla\firefox\profiles\ai1s9mir.default-1401633438175\user.js
Emptied folder: C:\Users\Bender\AppData\Roaming\mozilla\firefox\profiles\ai1s9mir.default-1401633438175\minidumps [52 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 24.08.2014 at 13:30:42,74
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.308 - Report created 24/08/2014 at 13:32:28
# Updated 20/08/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Bender - MASINAMANIFIKA
# Running from : D:\Stazeno\adwcleaner_3.308.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : IePluginServices
Service Deleted : wStLib64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\374311380
Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\Program Files (x86)\SupTab
File Deleted : C:\Windows\System32\drivers\wStLib64.sys
File Deleted : C:\Users\Bender\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\Bender\AppData\Roaming\regsvr32.exe_log.txt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml

***** [ Scheduled Tasks ] *****

Task Deleted : BrowserProtect
Task Deleted : YourFile DownloaderUpdate

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\Bender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Bender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Bender\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Bender\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\Bender\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17239

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175\prefs.js ]

Line Deleted : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
Line Deleted : user_pref("extensions.quick_start.enable_search1", false);
Line Deleted : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

*************************

AdwCleaner[R0].txt - [8330 octets] - [18/03/2014 21:57:17]
AdwCleaner[R1].txt - [6834 octets] - [24/08/2014 13:31:47]
AdwCleaner[S0].txt - [7789 octets] - [18/03/2014 21:57:57]
AdwCleaner[S1].txt - [4760 octets] - [24/08/2014 13:32:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4820 octets] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 24-08-2014
Tool run by Bender on ne 24.08.2014 at 17:52:02,78.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Bender\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

24.8.2014 17:53:27 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3311327032-918779867-2011593617-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BD94CBB3-2556-4bef-860F-68CB55F445A2} deleted successfully
HKEY_USERS\S-1-5-21-3311327032-918779867-2011593617-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48BF-AC2D-D17F00898D06} deleted successfully
HKEY_USERS\S-1-5-21-3311327032-918779867-2011593617-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48BF-AC2D-D17F00898D06} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");

Added to C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- FireFox user.js and prefs.js backups ----

prefs_24.08.2014_1759_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3} deleted
C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted
C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted
C:\Windows\syswow64\appdata deleted
C:\Users\Bender\AppData\LocalLow\{3FAC408D-7A32-EB18-1E2D-1FF02398661E} deleted
C:\Users\Bender\AppData\LocalLow\{AA9992B1-026A-FC29-8A9B-EED16FC6B7DD} deleted
C:\Users\Bender\AppData\LocalLow\{D8F883DD-8152-1B75-DAB6-CA7D0B37D151} deleted
C:\Users\Bender\AppData\Local\Packages\windows_ie_ac_001\AC\{3FAC408D-7A32-EB18-1E2D-1FF02398661E} deleted
C:\Users\Bender\AppData\Local\Packages\windows_ie_ac_001\AC\{AA9992B1-026A-FC29-8A9B-EED16FC6B7DD} deleted
C:\Users\Bender\AppData\Local\Packages\windows_ie_ac_001\AC\{D8F883DD-8152-1B75-DAB6-CA7D0B37D151} deleted
C:\PROGRA~2\surf And keEPP deleted
C:\PROGRA~2\SeearcH-NEwTeab deleted
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\autoconfig.js deleted
C:\Users\Bender\AppData\Roaming\temp.ini deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Bender\Searches deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted
"C:\PROGRA~3\fa45bc7aec1d5f8\{4820778D-AB0D-6D18-C316-52A6A0E1D507}" deleted
"C:\PROGRA~3\fa45bc7aec1d5f8\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}" deleted
"C:\PROGRA~3\fa45bc7aec1d5f8\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}.old" deleted
"C:\PROGRA~3\fa45bc7aec1d5f8\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}" deleted
"C:\PROGRA~3\fa45bc7aec1d5f8" deleted

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175
9EE20E6E2E3F94714D44F739B9A228F4 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll - Shockwave Flash
99F97C9FE748C37528C338A423577FCB - C:\Users\Bender\AppData\Roaming\Mozilla\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
kfejhbidgehdoaglokpfddkmiepmhcck - C:\Users\Bender\AppData\Local\Temp\Plu2392.tmp[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{018A74F7-A0F7-47c1-8A08-B9324337BD4B} Bing Url="http://www.bing.com/search?q={searchTer ... R1&pc=SPLH"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{8DF2D736-6F22-4666-BEC0-F5FD346EDA04} Google Url="http://www.google.com/cse?cx=partner-pu ... earchTerms}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\b4395bf5-a6ce-45c0-9e6a-add470caab04 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\kfejhbidgehdoaglokpfddkmiepmhcck deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IObitUninstall deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Bender\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Bender\AppData\Local\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=45 folders=39 16481591 bytes)

==== Empty Temp Folders ======================

C:\Users\Bender\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ne 24.08.2014 at 18:01:59,76 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-08-2014 03
Ran by Bender at 2014-08-24 19:50:13
Running from C:\Users\Bender\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Roboscan (Enabled - Up to date) {9D201895-DDC4-8A80-AD2D-06BCC9382E61}
AS: Roboscan (Enabled - Up to date) {2641F971-FBFE-850E-979D-3DCEB2BF64DC}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Roboscan (Enabled) {A51B99B0-97AB-8BD8-8672-AF8937EB691A}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.11 - GIGABYTE)
AC3Filter 2.5b (HKLM-x32\...\AC3Filter_is1) (Version: 2.5b - Alexander Vigovsky)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Aliens vs. Predator (HKLM-x32\...\Steam App 10680) (Version: - Rebellion)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2012.1219.1521.27485 - Název společnosti:) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.06.0000 - AMD) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.1219.1521.27485 - Název společnosti:) Hidden
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 443) (Version: - Ubisoft)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.5187 - DsNET Corp)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
AutoGreen B10.1021.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B10.1021.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Batman™: Arkham Origins (HKLM-x32\...\Steam App 209000) (Version: - WB Games Montreal)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCG Launcher version 0.6 (HKLM-x32\...\{28362054-F79B-4697-A246-3ECF730E7E9D}_is1) (Version: 0.6 - Custom Combat Gaming)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Cities XL Platinum (HKLM-x32\...\Steam App 231140) (Version: - Focus Home Interactive)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0315 - DT Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{0B74EC0B-2A85-4542-A167-3DE2132E7DAA}) (Version: 0.92.85 - Dotjosh Studios)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Easy Tune 6 B11.0427.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B11.0427.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
EasySaver B9.1214.1 (HKLM-x32\...\{07300F01-89CA-4CF8-92BD-2A605EB83C95}) (Version: 1.00.0000 - Gigabyte)
Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.2.5 - SCS Software)
Fable III (x32 Version: 1.0.0001.131 - Microsoft Game Studios) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
GOM Audio (HKLM-x32\...\GomAudio) (Version: 2.0.5.0138 - Gretech Corporation)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.57.5189 - Gretech Corporation)
Hřebčín (HKLM-x32\...\Hřebčín_is1) (Version: 1.0 - TopQer s.r.o.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Logitech Gaming Software (HKLM-x32\...\{648F9C94-EC44-487B-9DA4-44ED72A082CC}) (Version: 4.50 - )
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Czech Language Pack (HKLM-x32\...\{5E65E94D-69F2-4850-9E93-6459C53A0F50}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (CSY) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Might & Magic: Heroes VI (HKLM-x32\...\Steam App 48220) (Version: - Blackhole)
Mozilla Firefox 31.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 cs)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
Need for Speed™ SHIFT (HKLM-x32\...\{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}) (Version: 1.0.0.0 - Electronic Arts)
Nether (HKLM-x32\...\Steam App 247730) (Version: - Phosphor Games)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
ON_OFF Charge B11.0110.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6409 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6433 - Realtek Semiconductor Corp.)
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
Roboscan Internet Security (HKLM\...\Roboscan_is1) (Version: v2.5 - Roboscan Inc.)
Sacred 2 Gold (HKLM-x32\...\Steam App 225640) (Version: - Ascaron)
SDÍLEJ.CZ Manager (HKCU\...\69f070f18ade444c) (Version: 0.0.1.42 - SDÍLEJ.CZ)
Smart Defrag 2 (HKLM-x32\...\Smart Defrag 2_is1) (Version: 2.3 - IObit)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
StarnetPlayer - testovací verze (HKLM-x32\...\{46926195-CA82-4C38-8B8F-49FC664E165B}) (Version: 1.14.10.13 - Starnet s.r.o.)
State of Decay - Breakdown (HKLM-x32\...\State of Decay - Breakdown_is1) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stronghold Crusader Extreme HD (HKLM-x32\...\GOGPACKSTRONGHOLDCRUSADERHD_is1) (Version: 2.0.0.6 - GOG.com)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version: - Ubisoft Singapore)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Uplay (HKLM-x32\...\Uplay) (Version: 4.0 - Ubisoft)
VLC media player 0.9.9 (HKLM-x32\...\VLC media player) (Version: 0.9.9 - VideoLAN Team)
War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

24-08-2014 08:45:51 IObit Uninstaller restore point
24-08-2014 15:53:09 zoek.exe restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-08-24 17:53 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1DD2C3A1-4EF5-4107-BD28-EC5FD53C7240} - System32\Tasks\Program k provádění aktualizací online Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {32C9C92F-DF0B-47F9-9B16-8F27FD3BCCC2} - System32\Tasks\{56D9D828-FDFB-455C-8F07-549C1B1F9B08} => D:\Gamer\nfsc\NFSC.exe
Task: {396E3BDC-1FBE-48A3-8819-CEBC1B420FF2} - System32\Tasks\{0FD55EBB-1078-447E-9DB3-263D779208CB} => D:\Gamer\Dota2\SteamApps\common\Sacred 2 Gold\system\sacred2.exe [2014-07-03] (Ascaron Entertainment GmbH)
Task: {457BDB91-0033-4BDF-A5A9-B77F0DD1A43A} - System32\Tasks\WindowsCleanerAutoRun => C:\Program Files (x86)\Vtools\Windows Cleaner\WindowsCleaner.exe
Task: {5E54AE61-B5C2-45DB-A510-58561D4D1F5B} - System32\Tasks\GlaryInitialize 5 => F:\Glary Utilities_Portable\Portable\Initialize.exe
Task: {76333BDD-0C28-4599-B47D-B8B78168DA76} - System32\Tasks\WindowsCleanerLoginCheckUpdate => C:\Program Files (x86)\Vtools\Windows Cleaner\AutoUpdate.exe
Task: {80E41D28-E914-4D50-A989-39A06BDA6AC0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {86B124AD-F0ED-460D-873C-E88DE50F3519} - System32\Tasks\{FFC65B50-AAD2-4352-BBF8-9BA0D8CEF377} => D:\Gamer\nfsc\NFSC.exe
Task: {8833CD0F-A378-42B2-B76A-7E16618060B5} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-07-02] (IObit)
Task: {AB503E02-50D6-45FD-A4BC-D59BCC367EAC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {D3A96504-A8FE-4052-94FF-E76595AF8A2E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-22] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 5.job => F:\Glary Utilities_Portable\Portable\Initialize.exe

==================== Loaded Modules (whitelisted) =============

2012-07-03 20:14 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2012-12-19 16:32 - 2012-12-19 16:32 - 00210944 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-10-17 19:39 - 2012-10-17 19:39 - 00749056 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-10-17 19:39 - 2012-10-17 19:39 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2012-07-02 19:17 - 2009-08-24 14:38 - 00068136 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
2014-08-10 10:34 - 2014-04-11 12:37 - 00069632 ____N () D:\hlidac\lang\lang-1051.dll
2013-07-02 19:55 - 2014-08-14 11:32 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 18:44 - 2014-08-21 21:51 - 14350336 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\aces.exe
2012-07-02 19:17 - 2009-03-13 11:30 - 00109096 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\YCC.DLL
2014-07-30 15:27 - 2014-07-30 15:27 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-21 21:15 - 2014-08-04 21:15 - 01171456 _____ () C:\Program Files (x86)\Steam2\libavcodec-55.dll
2014-04-23 14:43 - 2014-08-04 21:15 - 00441856 _____ () C:\Program Files (x86)\Steam2\libavutil-53.dll
2014-01-10 12:07 - 2014-08-04 21:15 - 00332288 _____ () C:\Program Files (x86)\Steam2\libavresample-1.dll
2013-03-12 18:10 - 2014-08-04 21:15 - 00769024 _____ () C:\Program Files (x86)\Steam2\SDL2.dll
2014-05-21 21:15 - 2014-08-14 00:31 - 02144448 _____ () C:\Program Files (x86)\Steam2\video.dll
2014-05-21 21:15 - 2014-08-04 21:15 - 00403968 _____ () C:\Program Files (x86)\Steam2\libavformat-55.dll
2014-05-21 21:15 - 2014-07-31 05:47 - 00519168 _____ () C:\Program Files (x86)\Steam2\libswscale-2.dll
2013-02-15 14:08 - 2014-08-14 00:30 - 00677056 _____ () C:\Program Files (x86)\Steam2\bin\chromehtml.DLL
2013-01-22 05:22 - 2014-08-13 08:27 - 34587328 _____ () C:\Program Files (x86)\Steam2\bin\libcef.dll
2014-03-20 15:37 - 2014-03-20 15:37 - 00148480 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\quazip.dll
2014-03-20 15:37 - 2014-03-20 15:37 - 00864768 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\platforms\qwindows.dll
2014-03-20 15:37 - 2014-03-20 15:37 - 00677376 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2012-07-30 16:13 - 2014-08-06 10:37 - 00092104 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2012-07-30 16:13 - 2014-08-06 10:37 - 00105416 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-03-20 15:37 - 2014-03-20 15:37 - 00025600 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qgif.dll
2014-03-20 15:37 - 2014-03-20 15:37 - 00242688 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qjpeg.dll
2012-07-30 16:13 - 2014-08-06 10:37 - 00117704 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
2012-07-30 16:13 - 2014-08-06 10:37 - 00477128 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2012-07-30 16:13 - 2014-08-06 10:37 - 00206792 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\lua_plugin.dll
2013-10-04 22:53 - 2014-08-06 10:37 - 00484808 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-03-20 15:37 - 2014-03-20 15:37 - 00123904 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-08-15 09:02 - 2014-08-13 08:27 - 00837824 _____ () C:\Program Files (x86)\Steam2\bin\ffmpegsumo.dll
2013-12-12 21:31 - 2014-03-05 15:39 - 00776192 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\twitchsdk_32_release.dll
2013-12-12 21:31 - 2013-12-25 18:35 - 01179648 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\libcurl-ttv.dll
2013-12-12 21:31 - 2013-12-12 21:36 - 00394810 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\libmp3lame-ttv.dll
2013-12-12 21:39 - 2014-03-05 15:39 - 00113171 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\swresample-ttv-0.dll
2013-12-12 21:31 - 2014-03-26 18:34 - 00246332 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\avutil-ttv-51.dll
2013-12-12 21:31 - 2014-08-21 21:19 - 00323568 _____ () D:\Gamer\Dota2\steamapps\common\War Thunder\ortp.dll
2013-02-15 14:08 - 2014-08-14 00:30 - 00350912 _____ () C:\Program Files (x86)\Steam2\steam.dll
2014-08-22 18:33 - 2014-08-22 18:33 - 17048240 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Roboscan_UpdSrv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Roboscan_UpdSrv => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "c:\program files (x86)\common files\java\java update\jusched.exe"

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (08/24/2014 06:02:32 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
sfdrv01a
sfsync02
VirtDiskBus

Error: (08/24/2014 06:01:41 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: Načtení ovladače sfdrv01a.sys je blokováno.

Error: (08/24/2014 06:01:38 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: Načtení ovladače sfsync02.sys je blokováno.

Error: (08/24/2014 05:59:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/24/2014 05:59:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/24/2014 05:59:14 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/24/2014 05:59:14 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/24/2014 05:59:13 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/24/2014 01:33:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
sfdrv01a
sfsync02
VirtDiskBus

Error: (08/24/2014 01:33:17 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: Načtení ovladače sfdrv01a.sys je blokováno.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2014-08-24 19:49:49.387
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 18:01:53.476
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 13:33:30.115
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 13:31:56.965
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 11:35:41.252
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Roboscan\plugin\realtime\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 11:35:40.878
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Roboscan\plugin\realtime\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 11:35:40.526
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Roboscan\plugin\realtime\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 11:11:49.569
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-24 09:31:52.380
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.

Date: 2014-08-23 20:13:53.408
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\bootroboscan.exe because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: AMD Phenom(tm) II X4 965 Processor
Percentage of memory in use: 57%
Total physical RAM: 4093.24 MB
Available physical RAM: 1755.11 MB
Total Pagefile: 4291.42 MB
Available Pagefile: 816.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.83 GB) (Free:12.33 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:416.92 GB) (Free:147.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 350A3509)
Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=416.9 GB) - (Type=OF Extended)

==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-08-2014 03
Ran by Bender (administrator) on MASINAMANIFIKA on 24-08-2014 19:48:59
Running from C:\Users\Bender\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe
(Piriform Ltd) D:\hlidac\Speccy64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Roboscan Inc) D:\Roboscan\RSAgent.rse
() C:\Windows\SysWOW64\PnkBstrA.exe
(Roboscan Inc) D:\Roboscan\RSRTSrv.rse
(Roboscan Inc) D:\Roboscan\RSUpdSrv.rse
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Valve Corporation) C:\Program Files (x86)\Steam2\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam2\bin\steamwebhelper.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Valve Corporation) C:\Program Files (x86)\Steam2\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam2\bin\steamwebhelper.exe
() D:\Gamer\Dota2\SteamApps\common\War Thunder\aces.exe
(Valve Corporation) C:\Program Files (x86)\Steam2\GameOverlayUI.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor)
HKLM\...\Run: [Roboscan] => d:\roboscan\RSLaunch.exe [257856 2013-11-19] (Roboscan Inc)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKU\.DEFAULT\...\RunOnce: [AOD] => C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3311327032-918779867-2011593617-1000\...\Run: [Speccy] => D:\hlidac\Speccy64.exe [6903064 2014-04-11] (Piriform Ltd)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
BootExecute: autocheck autochk * bootroboscan.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {018A74F7-A0F7-47c1-8A08-B9324337BD4B} URL = http://www.bing.com/search?q={searchTer ... R1&pc=SPLH
SearchScopes: HKCU - {8DF2D736-6F22-4666-BEC0-F5FD346EDA04} URL = http://www.google.com/cse?cx=partner-pu ... earchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Bender\AppData\Roaming\Mozilla\Firefox\Profiles\ai1s9mir.default-1401633438175
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=0.9.9 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Bender\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-08-22] () [File not signed]
R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-07-02] (IObit)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-08-14] ()
R2 Roboscan_RTSrv; D:\Roboscan\RSRTSrv.rse [439104 2013-11-19] (Roboscan Inc)
R2 Roboscan_UpdSrv; D:\Roboscan\RSUpdSrv.rse [842048 2013-11-19] (Roboscan Inc)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-07-03] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-07-08] ()
R3 RoboFww; d:\roboscan\plugin\realtime\RoboFww.sys [35616 2013-11-19] (Roboscan Inc)
R3 RoboRtwIFDrv; d:\roboscan\plugin\realtime\RoboRtw.sys [97056 2013-11-19] (Roboscan Inc)
S0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77688 2006-07-05] (Protection Technology (StarForce))
S0 sfsync02; C:\Windows\System32\drivers\sfsync02.sys [22936 2006-07-10] (Protection Technology)
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [106360 2007-01-12] (Protection Technology (StarForce))
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2010-11-26] ()
S3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2012-03-19] (ShiningMorning Inc.)
R3 cpuz136; \??\C:\Users\Bender\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 19:48 - 2014-08-24 19:49 - 00011835 _____ () C:\Users\Bender\Desktop\FRST.txt
2014-08-24 19:48 - 2014-08-24 19:49 - 00000000 ____D () C:\FRST
2014-08-24 19:48 - 2014-08-24 19:48 - 00112640 _____ (forum.viry.cz) C:\Users\Bender\Desktop\FRSTLauncher.exe
2014-08-24 19:47 - 2014-08-24 19:47 - 02103296 _____ (Farbar) C:\Users\Bender\Desktop\FRST64.exe
2014-08-24 18:00 - 2014-08-24 17:51 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-24 17:53 - 2014-08-24 18:01 - 00010825 _____ () C:\zoek-results.log
2014-08-24 17:51 - 2014-08-24 17:59 - 00000000 ____D () C:\zoek_backup
2014-08-24 17:50 - 2014-08-24 17:50 - 01288704 _____ () C:\Users\Bender\Desktop\zoek.exe
2014-08-24 13:33 - 2014-08-24 18:01 - 00001386 _____ () C:\Windows\PFRO.log
2014-08-24 13:33 - 2014-08-24 18:01 - 00000168 _____ () C:\Windows\setupact.log
2014-08-24 13:33 - 2014-08-24 13:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-24 13:26 - 2014-08-24 13:26 - 00000000 ____D () C:\Windows\ERUNT
2014-08-24 13:25 - 2014-08-24 13:25 - 01364531 _____ () C:\Users\Bender\Desktop\adwcleaner_3.308.exe
2014-08-24 13:25 - 2014-08-24 13:25 - 01016261 _____ (Thisisu) C:\Users\Bender\Desktop\JRT.exe
2014-08-24 13:09 - 2014-08-24 13:09 - 00000000 ____D () C:\rsit
2014-08-24 10:43 - 2014-08-24 10:43 - 00000049 _____ () C:\Windows\SysWOW64\ScrRecX.log
2014-08-24 10:43 - 2008-08-18 19:18 - 00077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL
2014-08-15 08:40 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-15 08:40 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-15 08:40 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-15 08:40 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-15 08:40 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-15 08:40 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-15 08:40 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-15 08:40 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-15 08:39 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-15 08:39 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-15 08:38 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-15 08:38 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-15 08:38 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-15 08:38 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-15 08:38 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-15 08:38 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-15 08:38 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-15 08:38 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-15 08:38 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-15 08:38 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-15 08:38 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-15 08:38 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-15 08:38 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-15 08:38 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-15 08:38 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-15 08:38 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-15 08:38 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-15 08:38 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 08:38 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-15 08:38 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-15 08:38 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-15 08:38 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-15 08:38 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-15 08:38 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-15 08:38 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-15 08:37 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-15 08:37 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-15 08:37 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-15 08:37 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-15 08:37 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-15 08:37 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-15 08:37 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-15 08:37 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-15 08:37 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-15 08:37 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-15 08:37 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-15 08:37 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-15 08:37 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-15 08:37 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-15 08:37 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-15 08:37 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-15 08:37 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-15 08:37 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-15 08:37 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-15 08:37 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-15 08:37 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-15 08:37 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-15 08:37 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-15 08:37 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-15 08:37 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-15 08:37 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-15 08:37 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-15 08:37 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-15 08:37 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-15 08:37 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-15 08:37 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-15 08:37 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-15 08:37 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-15 08:37 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-15 08:37 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-15 08:37 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-15 08:37 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-15 08:37 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-15 08:37 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-15 08:37 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-15 08:37 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-15 08:37 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-15 08:37 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-15 08:37 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-15 08:37 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-15 08:37 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-15 08:37 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-15 08:37 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-15 08:37 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-15 08:37 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-15 08:37 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-15 08:37 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-15 08:37 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-15 08:37 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-15 08:37 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-15 08:37 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-15 08:37 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-15 08:37 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-15 08:36 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-15 08:36 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-10 08:41 - 2014-08-10 08:41 - 00001050 _____ () C:\Users\Public\Desktop\CCG Launcher.lnk
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\Users\Bender\Documents\CCGLauncher
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\Users\Bender\AppData\Local\CCGLauncher
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCG Launcher
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\Program Files (x86)\CCG Launcher
2014-08-05 13:12 - 2014-08-17 16:57 - 00002274 _____ () C:\Users\Bender\Documents\cc_20140805_131207.reg
2014-08-05 12:59 - 2014-08-24 18:02 - 00000318 _____ () C:\Windows\system32\ayboot.ini
2014-08-05 12:59 - 2014-08-05 12:59 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\EstSoft
2014-08-05 12:58 - 2014-08-05 12:58 - 00000000 ____D () C:\ProgramData\Roboscan
2014-08-05 12:58 - 2014-08-05 12:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roboscan
2014-08-05 12:58 - 2013-11-19 05:32 - 00021824 _____ () C:\Windows\system32\bootroboscan.exe
2014-08-04 19:07 - 2014-08-08 13:49 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\.technic
2014-08-01 10:50 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-01 10:50 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-01 10:50 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-01 10:50 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-01 10:50 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-01 10:50 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-01 10:50 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-01 10:50 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-01 10:50 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-01 10:50 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-01 10:50 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-01 10:50 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-01 10:50 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 10:50 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-07-30 15:27 - 2014-08-18 12:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 19:45 - 2014-08-06 06:23 - 00000322 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2014-07-27 19:45 - 2014-08-05 13:35 - 00002634 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2014-07-27 19:45 - 2014-07-27 19:45 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\GlarySoft
2014-07-27 10:00 - 2014-07-27 10:00 - 00287749 ____N () C:\Windows\Minidump\072714-13338-01.dmp
2014-07-26 00:17 - 2014-08-10 10:55 - 00003342 _____ () C:\Windows\System32\Tasks\{DC700A65-B6A1-40A9-87D9-EF83BF9B6703}
2014-07-25 16:34 - 2014-07-25 16:34 - 00001336 _____ () C:\Users\Public\Desktop\DayZ Commander.lnk
2014-07-25 16:34 - 2014-07-25 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 19:49 - 2014-08-24 19:48 - 00011835 _____ () C:\Users\Bender\Desktop\FRST.txt
2014-08-24 19:49 - 2014-08-24 19:48 - 00000000 ____D () C:\FRST
2014-08-24 19:48 - 2014-08-24 19:48 - 00112640 _____ (forum.viry.cz) C:\Users\Bender\Desktop\FRSTLauncher.exe
2014-08-24 19:47 - 2014-08-24 19:47 - 02103296 _____ (Farbar) C:\Users\Bender\Desktop\FRST64.exe
2014-08-24 19:41 - 2013-06-12 08:43 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-24 18:10 - 2009-07-14 06:45 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-24 18:10 - 2009-07-14 06:45 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-24 18:06 - 2013-02-20 00:50 - 00000000 ____D () C:\Program Files (x86)\Steam2
2014-08-24 18:05 - 2013-07-12 12:19 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\TS3Client
2014-08-24 18:02 - 2014-08-05 12:59 - 00000318 _____ () C:\Windows\system32\ayboot.ini
2014-08-24 18:02 - 2014-04-05 08:58 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-08-24 18:02 - 2012-07-02 17:44 - 00000144 _____ () C:\service.log
2014-08-24 18:02 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-24 18:01 - 2014-08-24 17:53 - 00010825 _____ () C:\zoek-results.log
2014-08-24 18:01 - 2014-08-24 13:33 - 00001386 _____ () C:\Windows\PFRO.log
2014-08-24 18:01 - 2014-08-24 13:33 - 00000168 _____ () C:\Windows\setupact.log
2014-08-24 18:01 - 2014-01-13 18:11 - 02076199 _____ () C:\Windows\WindowsUpdate.log
2014-08-24 17:59 - 2014-08-24 17:51 - 00000000 ____D () C:\zoek_backup
2014-08-24 17:59 - 2012-07-02 19:14 - 00000000 ____D () C:\Users\Bender
2014-08-24 17:51 - 2014-08-24 18:00 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-24 17:50 - 2014-08-24 17:50 - 01288704 _____ () C:\Users\Bender\Desktop\zoek.exe
2014-08-24 15:00 - 2012-07-02 23:59 - 00000000 ___RD () C:\Users\Bender\Desktop\Games
2014-08-24 13:33 - 2014-08-24 13:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-24 13:33 - 2009-07-14 06:45 - 00414552 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-24 13:32 - 2014-03-18 21:56 - 00000000 ____D () C:\AdwCleaner
2014-08-24 13:32 - 2012-07-02 19:43 - 00001061 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-24 13:32 - 2012-07-02 19:15 - 00000931 _____ () C:\Users\Bender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-24 13:26 - 2014-08-24 13:26 - 00000000 ____D () C:\Windows\ERUNT
2014-08-24 13:25 - 2014-08-24 13:25 - 01364531 _____ () C:\Users\Bender\Desktop\adwcleaner_3.308.exe
2014-08-24 13:25 - 2014-08-24 13:25 - 01016261 _____ (Thisisu) C:\Users\Bender\Desktop\JRT.exe
2014-08-24 13:11 - 2014-03-18 20:47 - 00000000 ____D () C:\Program Files\trend micro
2014-08-24 13:09 - 2014-08-24 13:09 - 00000000 ____D () C:\rsit
2014-08-24 11:44 - 2012-07-06 09:21 - 00000792 _____ () C:\Users\Bender\Documents\cc_20120706_092104.reg
2014-08-24 10:43 - 2014-08-24 10:43 - 00000049 _____ () C:\Windows\SysWOW64\ScrRecX.log
2014-08-24 10:43 - 2013-12-22 20:26 - 00001186 _____ () C:\Users\Public\Desktop\aTube Catcher.lnk
2014-08-24 10:43 - 2013-12-22 20:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2014-08-24 10:33 - 2009-07-14 17:18 - 00677560 _____ () C:\Windows\system32\perfh005.dat
2014-08-24 10:33 - 2009-07-14 17:18 - 00146478 _____ () C:\Windows\system32\perfc005.dat
2014-08-24 10:33 - 2009-07-14 07:13 - 01611840 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-23 20:18 - 2012-08-18 20:34 - 00003998 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B548DD86-A44D-42FB-8344-05413BCBB129}
2014-08-22 18:33 - 2012-07-02 21:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-22 18:33 - 2012-07-02 21:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-22 18:33 - 2012-07-02 21:35 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-22 13:39 - 2014-01-10 15:59 - 00000000 ____D () C:\Users\Bender\AppData\Local\DayZ
2014-08-19 09:58 - 2013-12-12 21:31 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-18 13:00 - 2014-04-22 21:50 - 00000000 ____D () C:\Users\Bender\AppData\Local\ArmA 2 OA
2014-08-18 12:11 - 2014-07-30 15:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-17 16:57 - 2014-08-05 13:12 - 00002274 _____ () C:\Users\Bender\Documents\cc_20140805_131207.reg
2014-08-15 20:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-15 08:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-15 08:49 - 2013-08-14 12:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-15 08:46 - 2012-07-05 20:45 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-15 08:40 - 2014-05-07 06:27 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 16:09 - 2014-06-19 20:55 - 00000000 ____D () C:\ProgramData\Origin
2014-08-14 11:32 - 2013-07-02 19:56 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-08-14 11:32 - 2013-07-02 19:55 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-08-14 11:32 - 2012-12-14 21:29 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-08-14 11:31 - 2012-07-03 11:38 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-08-14 11:29 - 2014-06-20 00:11 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-08-13 08:32 - 2014-07-17 10:18 - 00004642 _____ () C:\Users\Bender\Documents\TombRaider.log
2014-08-10 10:55 - 2014-07-26 00:17 - 00003342 _____ () C:\Windows\System32\Tasks\{DC700A65-B6A1-40A9-87D9-EF83BF9B6703}
2014-08-10 10:55 - 2014-07-03 19:00 - 00003010 _____ () C:\Windows\System32\Tasks\{0FD55EBB-1078-447E-9DB3-263D779208CB}
2014-08-10 10:55 - 2014-07-02 13:54 - 00002890 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-08-10 10:55 - 2013-09-30 10:47 - 00002926 _____ () C:\Windows\System32\Tasks\{FFC65B50-AAD2-4352-BBF8-9BA0D8CEF377}
2014-08-10 10:55 - 2013-09-30 10:47 - 00002926 _____ () C:\Windows\System32\Tasks\{56D9D828-FDFB-455C-8F07-549C1B1F9B08}
2014-08-10 10:55 - 2013-05-21 18:58 - 00003048 _____ () C:\Windows\System32\Tasks\{3F75ABD7-2829-42DF-9817-B84D08010D0E}
2014-08-10 10:55 - 2012-09-29 18:45 - 00003098 _____ () C:\Windows\System32\Tasks\{D1D4B484-02B8-460C-B25E-9A66926FA745}
2014-08-10 10:55 - 2012-07-07 10:30 - 00003052 _____ () C:\Windows\System32\Tasks\{64687109-C9B4-4A27-AD43-AD5069580614}
2014-08-10 08:41 - 2014-08-10 08:41 - 00001050 _____ () C:\Users\Public\Desktop\CCG Launcher.lnk
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\Users\Bender\Documents\CCGLauncher
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\Users\Bender\AppData\Local\CCGLauncher
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCG Launcher
2014-08-10 08:41 - 2014-08-10 08:41 - 00000000 ____D () C:\Program Files (x86)\CCG Launcher
2014-08-09 19:21 - 2014-07-07 17:45 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\Might & Magic Heroes VI
2014-08-08 20:43 - 2012-07-03 11:38 - 00000000 ____D () C:\Users\Bender\AppData\Local\PunkBuster
2014-08-08 13:49 - 2014-08-04 19:07 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\.technic
2014-08-07 04:06 - 2014-08-15 08:36 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-15 08:36 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-06 10:37 - 2013-07-12 12:19 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-08-06 06:23 - 2014-07-27 19:45 - 00000322 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2014-08-05 13:35 - 2014-07-27 19:45 - 00002634 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2014-08-05 13:35 - 2012-07-02 23:48 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-08-05 12:59 - 2014-08-05 12:59 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\EstSoft
2014-08-05 12:58 - 2014-08-05 12:58 - 00000000 ____D () C:\ProgramData\Roboscan
2014-08-05 12:58 - 2014-08-05 12:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roboscan
2014-08-05 12:55 - 2013-05-30 14:54 - 00000000 ____D () C:\avast! sandbox
2014-08-05 12:55 - 2012-07-02 23:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-05 09:20 - 2012-07-02 19:53 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 22:52 - 2013-05-27 06:51 - 00000000 ____D () C:\Users\Bender\AppData\Local\Deployment
2014-08-04 19:10 - 2013-11-15 20:36 - 02346942 _____ () C:\Users\Bender\Desktop\TechnicLauncher.exe
2014-08-02 14:34 - 2012-07-02 19:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-01 01:41 - 2014-08-15 08:37 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-15 08:37 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-27 19:45 - 2014-07-27 19:45 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\GlarySoft
2014-07-27 10:01 - 2012-07-18 17:32 - 00000000 ____D () C:\Windows\Minidump
2014-07-27 10:00 - 2014-07-27 10:00 - 00287749 ____N () C:\Windows\Minidump\072714-13338-01.dmp
2014-07-25 16:52 - 2014-08-15 08:37 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:34 - 2014-07-25 16:34 - 00001336 _____ () C:\Users\Public\Desktop\DayZ Commander.lnk
2014-07-25 16:34 - 2014-07-25 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios
2014-07-25 16:02 - 2014-08-15 08:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-15 08:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-15 08:37 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-15 08:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-15 08:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-15 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-15 08:37 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-15 08:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-15 08:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-15 08:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-15 08:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-15 08:37 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-15 08:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-15 08:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-15 08:37 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-15 08:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-15 08:37 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-15 08:37 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-15 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:33 - 2014-08-15 08:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-15 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-15 08:37 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-15 08:37 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-15 08:37 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-15 08:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-15 08:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-15 08:37 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-15 08:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-15 08:37 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-15 08:37 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-15 08:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-15 08:37 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-15 08:37 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-15 08:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-15 08:37 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-15 08:37 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-15 08:37 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-15 08:37 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-15 08:37 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-15 08:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-15 08:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-15 08:37 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-15 08:37 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-15 08:37 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-15 08:37 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-15 08:37 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-15 08:37 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-15 08:37 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-15 08:37 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-15 08:37 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-15 08:37 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-15 08:37 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-15 08:37 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-25 11:55 - 2013-02-07 17:38 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 11:55 - 2013-02-07 17:38 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 00:33 - 2012-11-10 12:22 - 00000000 ____D () C:\Users\Bender\AppData\Roaming\.minecraft

Some content of TEMP:
====================
C:\Users\Bender\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\Bender\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Bender\AppData\Local\Temp\PodoWebSetup.exe
C:\Users\Bender\AppData\Local\Temp\Quarantine.exe
C:\Users\Bender\AppData\Local\Temp\ShellHook.dll
C:\Users\Bender\AppData\Local\Temp\smt_istartsurf_180814.exe
C:\Users\Bender\AppData\Local\Temp\speccycpuid.dll
C:\Users\Bender\AppData\Local\Temp\UpdateCheckerSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-17 15:27

==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
  Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
  Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
  BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
  Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
  Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\GlaryInitialize 5.job => F:\Glary Utilities_Portable\Portable\Initialize.exe
  
  S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-07-02] (IObit)
  
  C:\Program Files (x86)\IObit
  2014-08-24 19:48 - 2014-08-24 19:49 - 00011835 _____ () C:\Users\Bender\Desktop\FRST.txt
  2014-08-24 19:48 - 2014-08-24 19:48 - 00112640 _____ (forum.viry.cz) C:\Users\Bender\Desktop\FRSTLauncher.exe
  2014-08-24 18:00 - 2014-08-24 17:51 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-08-24 17:53 - 2014-08-24 18:01 - 00010825 _____ () C:\zoek-results.log
  2014-08-24 17:51 - 2014-08-24 17:59 - 00000000 ____D () C:\zoek_backup
  2014-08-24 17:50 - 2014-08-24 17:50 - 01288704 _____ () C:\Users\Bender\Desktop\zoek.exe
  2014-08-24 13:33 - 2014-08-24 18:01 - 00001386 _____ () C:\Windows\PFRO.log
  2014-08-24 13:33 - 2014-08-24 18:01 - 00000168 _____ () C:\Windows\setupact.log
  2014-08-24 13:33 - 2014-08-24 13:33 - 00000000 _____ () C:\Windows\setuperr.log
  2014-08-24 13:26 - 2014-08-24 13:26 - 00000000 ____D () C:\Windows\ERUNT
  2014-08-24 13:25 - 2014-08-24 13:25 - 01364531 _____ () C:\Users\Bender\Desktop\adwcleaner_3.308.exe
  2014-08-24 13:25 - 2014-08-24 13:25 - 01016261 _____ (Thisisu) C:\Users\Bender\Desktop\JRT.exe
  2014-08-24 13:09 - 2014-08-24 13:09 - 00000000 ____D () C:\rsit
  C:\Users\Bender\AppData\Local\Temp\LiveSupport_setup.exe
  C:\Users\Bender\AppData\Local\Temp\OptimizerPro.exe
  C:\Users\Bender\AppData\Local\Temp\PodoWebSetup.exe
  C:\Users\Bender\AppData\Local\Temp\Quarantine.exe
  C:\Users\Bender\AppData\Local\Temp\ShellHook.dll
  C:\Users\Bender\AppData\Local\Temp\smt_istartsurf_180814.exe
  C:\Users\Bender\AppData\Local\Temp\speccycpuid.dll
  C:\Users\Bender\AppData\Local\Temp\UpdateCheckerSetup.exe
  
  Hosts:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-08-2014 03
Ran by Bender at 2014-08-25 00:18:05 Run:1
Running from C:\Users\Bender\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 5.job => F:\Glary Utilities_Portable\Portable\Initialize.exe

S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-07-02] (IObit)

C:\Program Files (x86)\IObit
2014-08-24 19:48 - 2014-08-24 19:49 - 00011835 _____ () C:\Users\Bender\Desktop\FRST.txt
2014-08-24 19:48 - 2014-08-24 19:48 - 00112640 _____ (forum.viry.cz) C:\Users\Bender\Desktop\FRSTLauncher.exe
2014-08-24 18:00 - 2014-08-24 17:51 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-24 17:53 - 2014-08-24 18:01 - 00010825 _____ () C:\zoek-results.log
2014-08-24 17:51 - 2014-08-24 17:59 - 00000000 ____D () C:\zoek_backup
2014-08-24 17:50 - 2014-08-24 17:50 - 01288704 _____ () C:\Users\Bender\Desktop\zoek.exe
2014-08-24 13:33 - 2014-08-24 18:01 - 00001386 _____ () C:\Windows\PFRO.log
2014-08-24 13:33 - 2014-08-24 18:01 - 00000168 _____ () C:\Windows\setupact.log
2014-08-24 13:33 - 2014-08-24 13:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-24 13:26 - 2014-08-24 13:26 - 00000000 ____D () C:\Windows\ERUNT
2014-08-24 13:25 - 2014-08-24 13:25 - 01364531 _____ () C:\Users\Bender\Desktop\adwcleaner_3.308.exe
2014-08-24 13:25 - 2014-08-24 13:25 - 01016261 _____ (Thisisu) C:\Users\Bender\Desktop\JRT.exe
2014-08-24 13:09 - 2014-08-24 13:09 - 00000000 ____D () C:\rsit
C:\Users\Bender\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\Bender\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Bender\AppData\Local\Temp\PodoWebSetup.exe
C:\Users\Bender\AppData\Local\Temp\Quarantine.exe
C:\Users\Bender\AppData\Local\Temp\ShellHook.dll
C:\Users\Bender\AppData\Local\Temp\smt_istartsurf_180814.exe
C:\Users\Bender\AppData\Local\Temp\speccycpuid.dll
C:\Users\Bender\AppData\Local\Temp\UpdateCheckerSetup.exe

Hosts:
Reboot:
End
*****************

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully.
"HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
"HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully.
"HKCR\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Value not found.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Value not found.
"HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => Key not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GlaryInitialize 5.job => Moved successfully.
LiveUpdateSvc => Service deleted successfully.
C:\Program Files (x86)\IObit => Moved successfully.
"C:\Users\Bender\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Bender\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Bender\Desktop\zoek.exe => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Bender\Desktop\adwcleaner_3.308.exe => Moved successfully.
C:\Users\Bender\Desktop\JRT.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\LiveSupport_setup.exe => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\OptimizerPro.exe => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\PodoWebSetup.exe => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\ShellHook.dll => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\smt_istartsurf_180814.exe => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\speccycpuid.dll => Moved successfully.
C:\Users\Bender\AppData\Local\Temp\UpdateCheckerSetup.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Diky moc za pomoc

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat