VIRY.CZ

Také se mi po instalaci na první pohled neškodného prográmku začalo objevovat množství reklam, které prakticky zabraňuje používání prohlížeče. Děkuji předem za pomoc!

Zde je log z FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Vit (administrator) on PRACOVNI on 06-09-2014 09:47:15
Running from C:\Users\Vit\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Code 42 Software, Inc.) C:\Program Files\CrashPlan\CrashPlanTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(Dropbox, Inc.) C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(CANON INC.) C:\Program Files (x86)\Canon\My Image Garden\cnmigmain.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6842000 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5757328 2012-10-19] (Dell Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-21] (Synaptics Incorporated)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285680 2013-03-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UD.exe [534664 2011-11-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [13693136 2014-04-29] (QNAP Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk
ShortcutTarget: CrashPlan Tray.lnk -> C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: QsyncEx_Icon1 -> {9EF65B94-EC0D-49F7-B46D-006B388EB03E} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon2 -> {6C472CFB-6B9B-4F7D-A3BF-9DF968D6C5C1} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon3 -> {DD344E99-05CF-47B7-8108-D7BD456B4314} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM - DefaultScope {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM-x32 - DefaultScope {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM-x32 - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKCU - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL =
BHO: HD+v2.1 -> {11111111-1111-1111-1111-110611281146} -> C:\Program Files (x86)\HD+v2.1\HD+v2.1-bho64.dll (HD+v2.1)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HD+v2.1 -> {11111111-1111-1111-1111-110611281146} -> C:\Program Files (x86)\HD+v2.1\HD+v2.1-bho.dll (HD+v2.1)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-01-23]

Chrome:
=======
CHR HomePage: Default ->
CHR DefaultSearchKeyword: Default -> BA33BF65373CDD3F7F493C56C7F13E0F2CC57EFAF8E014DB0B0DFE5D0848598D
CHR DefaultSearchURL: Default -> DB47068A646927AA12AE0DC02E58AF87345D85BFC514AD7744A55B1DC4305A22
CHR Profile: C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-01-03]
CHR Extension: (Dokumenty Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Disk Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (HD+v2.1) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol [2014-08-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2014-06-29]
CHR Extension: (Alarm Clock Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi [2014-01-03]
CHR Extension: (Calendar View for Astrid) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi [2014-01-03]
CHR Extension: (Peněženka Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5873840 2011-03-18] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2369720 2014-08-01] (Microsoft Corporation)
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe [243464 2013-09-23] (CyberLink)
R2 CrashPlanService; C:\Program Files\CrashPlan\CrashPlanService.exe [223232 2014-06-26] (Code 42 Software) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-03-08] ()
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-26] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-26] (globalUpdate) [File not signed]
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-20] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [506880 2013-05-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-26] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-10-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2014-04-04] (SoftThinks SAS)
R2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [3572240 2014-07-28] (Aztec Media Inc)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 akw8x64; C:\Windows\system32\DRIVERS\akw8x64.sys [3800272 2013-05-03] (Qualcomm Atheros, Inc.)
S1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [74096 2013-05-03] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 EMP_MIRRUD; C:\Windows\system32\DRIVERS\EMP_MirrUD.sys [5632 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\Windows\system32\drivers\EMP_UDAU.sys [23040 2011-11-17] (SEIKO EPSON CORPORATION)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [41872 2014-07-28] (Aztec Media Inc)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-29] (Intel Corporation)
R1 MpKslaaf69ae1; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E52B3AB9-DC6E-4269-B619-022149B4909B}\MpKslaaf69ae1.sys [45352 2014-09-06] (Microsoft Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-21] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28040 2012-12-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-21] (Synaptics Incorporated)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [71832 2012-07-14] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R1 {75e31400-eac4-49b7-986c-d198f0b97db7}Gw64; C:\Windows\System32\drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys [61128 2014-07-08] (StdLib)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-06 09:47 - 2014-09-06 09:47 - 00028155 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 09:46 - 2014-09-06 09:47 - 00000000 ____D () C:\FRST
2014-09-06 09:11 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:07 - 2014-09-06 09:08 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 09:06 - 2014-09-06 09:06 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-08-28 07:43 - 2014-08-23 02:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:34 - 2014-08-29 23:29 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-08-27 22:20 - 00000716 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-09-06 09:12 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:05 - 2014-08-27 12:21 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:23 - 2014-09-06 09:28 - 00003118 _____ () C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001980 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001498 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001412 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001328 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job
2014-08-26 15:23 - 2014-08-26 15:23 - 00006122 _____ () C:\WINDOWS\System32\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04
2014-08-26 15:23 - 2014-08-26 15:23 - 00004984 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4
2014-08-26 15:23 - 2014-08-26 15:23 - 00004502 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1
2014-08-26 15:23 - 2014-08-26 15:23 - 00004416 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5
2014-08-26 15:23 - 2014-08-26 15:23 - 00004332 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2
2014-08-26 15:22 - 2014-09-06 09:27 - 00001796 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job
2014-08-26 15:22 - 2014-09-06 09:27 - 00000928 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00003800 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00002430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00001838 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job
2014-08-26 15:22 - 2014-09-06 09:05 - 00000924 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-08-26 15:22 - 2014-08-26 15:23 - 00000000 ____D () C:\Program Files (x86)\HD+v2.1
2014-08-26 15:22 - 2014-08-26 15:22 - 00006804 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11
2014-08-26 15:22 - 2014-08-26 15:22 - 00005434 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3
2014-08-26 15:22 - 2014-08-26 15:22 - 00004842 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7
2014-08-26 15:22 - 2014-08-26 15:22 - 00004800 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6
2014-08-26 15:22 - 2014-08-26 15:22 - 00003900 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-26 15:22 - 2014-08-26 15:22 - 00003664 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Users\Vit\AppData\Local\globalUpdate
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-26 15:03 - 2014-08-26 15:04 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:36 - 2014-08-20 16:17 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-08-20 12:04 - 00000000 ____D () C:\AdwCleaner
2014-08-18 23:17 - 2014-07-08 18:42 - 00061128 _____ (StdLib) C:\WINDOWS\system32\Drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys
2014-08-18 22:14 - 2014-09-06 09:45 - 00000000 ____D () C:\ProgramData\smdmf
2014-08-18 22:14 - 2014-08-18 22:14 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-08-18 22:12 - 2014-08-26 15:05 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-18 21:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-08-18 21:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-08-18 21:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-08-18 21:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-08-18 21:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-08-18 21:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-08-18 21:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-08-18 21:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-08-18 21:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-08-18 21:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-08-18 21:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-08-18 21:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-08-18 21:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-08-18 21:39 - 2014-08-18 21:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:39 - 2014-08-18 21:41 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 10:23 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-13 10:23 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-13 10:23 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-13 10:23 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 10:23 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-13 10:23 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-13 10:23 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-13 10:23 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-13 10:20 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 10:20 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-13 10:20 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-13 10:20 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-13 10:20 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-13 10:20 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-13 10:19 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-13 10:19 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-08-13 10:19 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-08-13 10:19 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-08-13 10:19 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-13 10:19 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-08-13 10:19 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 10:19 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-13 10:19 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-13 10:19 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-08-13 10:19 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-13 10:19 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-13 10:19 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-08-13 10:19 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-08-13 10:19 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-08-13 10:19 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-13 10:19 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-08-13 10:19 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-13 10:19 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-13 10:19 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-08-13 10:19 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-13 10:19 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-13 10:19 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-13 10:19 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-13 10:19 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-08-13 10:19 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-08-13 10:19 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-13 10:19 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-13 10:18 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-13 10:18 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-13 10:18 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-13 10:18 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-13 10:18 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-13 10:18 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-13 10:18 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-13 10:18 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-13 10:18 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-13 10:18 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-13 10:18 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-13 10:18 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-13 10:18 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-13 10:18 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-08-13 10:18 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-08-13 10:18 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-08-13 10:18 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-13 10:18 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-08-13 10:18 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-13 10:18 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-13 10:18 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-13 10:18 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-13 10:18 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-08-13 10:18 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-08-13 10:18 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-08-13 10:18 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-13 10:18 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-13 10:18 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-08-13 10:17 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-08-13 10:17 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-06 09:47 - 2014-09-06 09:47 - 00028155 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 09:47 - 2014-09-06 09:46 - 00000000 ____D () C:\FRST
2014-09-06 09:45 - 2014-08-18 22:14 - 00000000 ____D () C:\ProgramData\smdmf
2014-09-06 09:43 - 2014-08-05 19:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-06 09:28 - 2014-08-26 15:23 - 00003118 _____ () C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job
2014-09-06 09:28 - 2013-12-22 10:52 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1708774153-823386485-165443587-1002
2014-09-06 09:27 - 2014-08-26 15:22 - 00001796 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job
2014-09-06 09:27 - 2014-08-26 15:22 - 00000928 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-06 09:27 - 2014-01-07 11:24 - 00004964 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for PRACOVNI-Vit pracovni
2014-09-06 09:23 - 2014-08-26 15:23 - 00001980 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001498 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001412 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001328 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job
2014-09-06 09:23 - 2014-02-05 15:56 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00003800 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00002430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00001838 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job
2014-09-06 09:20 - 2013-11-14 14:40 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-06 09:20 - 2013-11-14 14:24 - 00740962 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-06 09:20 - 2013-11-14 14:24 - 00152146 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-06 09:15 - 2014-01-03 12:45 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 09:13 - 2013-12-22 10:52 - 00000000 ____D () C:\ProgramData\softthinks
2014-09-06 09:13 - 2013-09-11 23:31 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-06 09:12 - 2014-08-27 12:32 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-09-06 09:10 - 2014-09-06 09:11 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:08 - 2014-09-06 09:07 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:08 - 2014-06-08 18:17 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Mozilla
2014-09-06 09:08 - 2014-01-03 12:45 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 09:07 - 2014-07-17 21:07 - 00000000 ___RD () C:\Users\Vit\Qsync
2014-09-06 09:06 - 2014-09-06 09:06 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 09:06 - 2014-07-04 09:33 - 00000000 ___RD () C:\Users\Vit\Disk Google
2014-09-06 09:06 - 2014-01-06 16:14 - 00000000 ___RD () C:\Users\Vit\Dropbox
2014-09-06 09:06 - 2014-01-06 16:11 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Dropbox
2014-09-06 09:06 - 2014-01-05 18:24 - 00000000 ___DO () C:\Users\Vit\SkyDrive
2014-09-06 09:06 - 2013-09-11 23:22 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-09-06 09:05 - 2014-08-26 15:22 - 00000924 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-06 09:05 - 2014-01-05 18:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-06 09:05 - 2014-01-03 12:45 - 00000960 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 09:05 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-06 09:05 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-06 09:03 - 2014-01-05 18:04 - 01818463 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-06 09:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-09-05 20:56 - 2013-12-23 03:59 - 00000000 ____D () C:\Users\Vit\Documents\Soubory aplikace Outlook
2014-09-05 20:45 - 2014-01-03 15:33 - 00000000 ____D () C:\Users\Vit\Documents\Přijato
2014-09-05 15:37 - 2014-02-05 15:56 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job
2014-09-05 15:20 - 2014-01-05 18:29 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B826F5AB-6BBF-4767-A8CC-BFD84080E3D3}
2014-09-05 13:30 - 2013-12-21 01:36 - 00000000 ____D () C:\Users\Vit\AppData\Local\Packages
2014-09-04 20:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-04 14:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-04 13:40 - 2014-01-20 11:13 - 00000000 ____D () C:\wdata
2014-09-04 09:00 - 2013-12-26 16:40 - 00000000 ____D () C:\Users\Vit\Documents\Osobni
2014-08-29 23:29 - 2014-08-27 22:34 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-29 15:22 - 2014-05-02 20:48 - 00000000 ____D () C:\The KMPlayer
2014-08-28 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\tracing
2014-08-28 10:54 - 2013-08-22 16:44 - 00381992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-28 07:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-28 02:05 - 2014-01-05 18:10 - 00000000 ____D () C:\Users\Vit
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-08-27 22:20 - 00000716 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:21 - 2014-08-27 12:05 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:23 - 2014-08-26 15:23 - 00006122 _____ () C:\WINDOWS\System32\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04
2014-08-26 15:23 - 2014-08-26 15:23 - 00004984 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4
2014-08-26 15:23 - 2014-08-26 15:23 - 00004502 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1
2014-08-26 15:23 - 2014-08-26 15:23 - 00004416 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5
2014-08-26 15:23 - 2014-08-26 15:23 - 00004332 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2
2014-08-26 15:23 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\HD+v2.1
2014-08-26 15:22 - 2014-08-26 15:22 - 00006804 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11
2014-08-26 15:22 - 2014-08-26 15:22 - 00005434 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3
2014-08-26 15:22 - 2014-08-26 15:22 - 00004842 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7
2014-08-26 15:22 - 2014-08-26 15:22 - 00004800 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6
2014-08-26 15:22 - 2014-08-26 15:22 - 00003900 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-26 15:22 - 2014-08-26 15:22 - 00003664 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Users\Vit\AppData\Local\globalUpdate
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-26 15:05 - 2014-08-18 22:12 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-26 15:05 - 2014-05-02 20:48 - 00000644 _____ () C:\Users\Vit\Desktop\KMPlayer.lnk
2014-08-26 15:04 - 2014-08-26 15:03 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-26 12:19 - 2013-12-22 12:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-25 14:23 - 2013-12-23 14:43 - 00000000 ____D () C:\Users\Vit\Documents\Projekty
2014-08-25 11:35 - 2014-07-09 17:10 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-25 11:35 - 2014-01-26 11:59 - 00000000 ____D () C:\WINDOWS\Minidump
2014-08-25 11:35 - 2014-01-05 18:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-25 11:35 - 2013-12-30 03:29 - 00000000 ____D () C:\Users\Vit\AppData\Local\CrashDumps
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-23 02:42 - 2014-08-28 07:43 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-20 16:17 - 2014-08-20 12:36 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 16:15 - 2013-08-22 15:25 - 00000194 _____ () C:\WINDOWS\win.ini
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:04 - 2014-08-20 12:01 - 00000000 ____D () C:\AdwCleaner
2014-08-19 15:46 - 2013-12-26 17:00 - 00000000 ____D () C:\Users\Vit\Documents\Granty
2014-08-18 22:14 - 2014-08-18 22:14 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2014-08-18 21:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:41 - 2014-08-18 21:39 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:39 - 2013-09-11 23:32 - 00000000 ____D () C:\Temp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-16 21:17 - 2014-07-04 09:12 - 00002060 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002058 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002048 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Notepad++
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-08-14 08:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 16:08 - 2014-01-06 16:14 - 00001065 _____ () C:\Users\Vit\Desktop\Dropbox.lnk
2014-08-13 16:08 - 2014-01-06 16:12 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-08-13 10:28 - 2013-12-22 10:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-13 10:25 - 2013-12-22 10:55 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-13 10:17 - 2014-06-12 08:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-13 10:17 - 2014-06-12 08:48 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-13 10:17 - 2014-04-18 22:53 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-13 10:17 - 2014-04-18 22:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-13 10:14 - 2014-04-17 08:51 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-08-13 10:13 - 2014-06-11 08:34 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
2014-08-11 10:51 - 2014-01-17 16:03 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-11 10:51 - 2014-01-17 16:03 - 00001108 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-07 18:30 - 2013-12-26 16:45 - 00000000 ____D () C:\Users\Vit\Documents\Duchovni
2014-08-07 04:12 - 2014-08-13 10:17 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

Some content of TEMP:
====================
C:\Users\Vit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp260ont.dll
C:\Users\Vit\AppData\Local\Temp\KMP_3.9.0.127.exe
C:\Users\Vit\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 09:28




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (OS) (Fixed) (Total:915.4 GB) (Free:616.21 GB) NTFS
Drive e: (IBM_PRELOAD) (Fixed) (Total:69.69 GB) (Free:0.77 GB) NTFS
Drive h: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS
Drive x: (PBR Image) (Fixed) (Total:14.63 GB) (Free:0.71 GB) NTFS
Drive y: () (Fixed) (Total:0.34 GB) (Free:0.04 GB) NTFS

Available physical RAM: 13304.93 MB
Total physical RAM: 16261.75 MB
Percentage of memory in use: 18%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 5FD83D15)
Disk: 1 (Size: 8 GB) (Disk ID: 284BFD8C)
Disk: 2 (Size: 74.5 GB) (Disk ID: CCCDCCCD)
Partition 1: (Active) - (Size=69.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=4.8 GB) - (Type=12)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job => C:\Program Files (x86)\HD+v2.1\HD+v2.1-codedownloader.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-11.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-2.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-3.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-5.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-5.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-6.exeĚ/JmpsI='HD+v2.1' /OqSkPg=62846 /QjYDI='001962' /pASHhU='0' /bkfGzhn='0' /luhuNz=3B4E16B379254556A85F4728E5FAC219IE /wonrdLPm=acbded0dfafafacedf3b59455ef16c30 /pXMCw=1_34_07_29 /qjMZtD=1.34.7.29 /UgOLjUjM=1409059360 /TbHysNwkL=http://stats.infostatsserv.com /dKAMiS=http://errors.infostatsserv.com /HbpoW=http://js.infostatsserv.com /fJDkTWl=ch /RAuobiai /UmOMcNxVS=HD+v2.1 /VJDxZ52ce2334-9a65-49a5-b18b-28dd02d4fdc0.dll /kHvhqJwDH41429d6d-9060-41b8-bd54-eec70a9b66d1.dll /ssFJUuHEJ57d05856-1a6c-44dc-9873-1df40136a5ad-64.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-7.exeá/xLWKjq /JmpsI='HD+v2.1' /OqSkPg=62846 /QjYDI='001962' /pASHhU='0' /bkfGzhn='0' /luhuNz=3B4E16B379254556A85F4728E5FAC219IE /wonrdLPm=acbded0dfafafacedf3b59455ef16c30 /pXMCw=1_34_07_29 /qjMZtD=1.34.7.29 /UgOLjUjM=1409059360 /TbHysNwkL=http://stats.infostatsserv.com /dKAMiS=http://errors.infostatsserv.com /HbpoW=http://js.infostatsserv.com /fJDkTWl=ch /RAuobiai /UmOMcNxVS=HD+v2.1 /VJDxZ52ce2334-9a65-49a5-b18b-28dd02d4fdc0.dll /kHvhqJwDH41429d6d-9060-41b8-bd54-eec70a9b66d1.dll /ssFJUuHEJ57d05856-1a6c-44dc-9873-1df40136a5ad-64.exe
Task: C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\Vit\SkyDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Vit\Desktop" je 159 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Výpis z JRT:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 8.1 x64
Ran by Vit on so 06. 09. 2014 at 15:14:00,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622282246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622282246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611281146}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Vit\AppData\Roaming\pdfforge"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 06. 09. 2014 at 15:15:32,75
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Výpis z AdwCleaner:
# AdwCleaner v3.309 - Report created 06/09/2014 at 15:20:04
# Updated 02/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Vit - PRACOVNI
# Running from : C:\Users\Vit\Desktop\adwcleaner_3.309.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A91196222
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : SmdmFService
Service Deleted : {75e31400-eac4-49b7-986c-d198f0b97db7}Gw64

***** [ Files / Folders ] *****

[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\Program Files (x86)\globalUpdate
[!] Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\HD+v2.1
Folder Deleted : C:\Users\Vit\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Vit\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\Extensions\jacobtodd@hotmail.com
File Deleted : C:\WINDOWS\System32\drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys
File Deleted : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage-journal
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-1
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-11
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-2
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-3
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-4
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-5
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-5_user
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-6
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-7
Task Deleted : 73d68c93-60af-473f-a4bb-67ac00825a04

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\AppDataLow\Software\HD+v2.1
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\HD+v2.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HD+v2.1
Key Deleted : [x64] HKLM\SOFTWARE\HD+v2.1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17239

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v32.0 (x86 cs)

[ File : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "default-search.net");
Line Deleted : user_pref("browser.search.order.1", "default-search.net");
Line Deleted : user_pref("browser.search.selectedEngine", "default-search.net");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.default-search.net?sid=476&aid=113& ... 43&src=hmp");
Line Deleted : user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22urls[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1484b1e029bd97927ed6383f25b6ab31");
Line Deleted : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=476&a ... &src=ds&p=");

-\\ Google Chrome v37.0.2062.103

[ File : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
Deleted [Extension] : pljcgbedjplidkdjahbaalanadmjfgop

*************************

AdwCleaner[R0].txt - [248 octets] - [20/08/2014 12:01:22]
AdwCleaner[R1].txt - [248 octets] - [20/08/2014 12:02:17]
AdwCleaner[R2].txt - [248 octets] - [20/08/2014 12:03:32]
AdwCleaner[R3].txt - [248 octets] - [20/08/2014 12:04:07]
AdwCleaner[R4].txt - [14343 octets] - [06/09/2014 15:17:51]
AdwCleaner[S0].txt - [13946 octets] - [06/09/2014 15:20:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14007 octets] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 05-September-2014
Tool run by Vit on so 06. 09. 2014 at 16:26:22,30.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Vit\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

6. 9. 2014 16:28:53 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611281146} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{25A3A431-30BB-47C8-AD6A-E1063801134F} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110611281146} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js:

Added to C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default

user.js not found
---- Lines jacobtodd removed from prefs.js ----
user_pref("extensions.ajacobtoddhotmailcom62846.62846.active", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.addressbar", "NA");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.addressbarenhanced", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.asyncdb.was_copied", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.asyncinternaldb.was_copied", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.backgroundver", 1);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.certdomaininstaller", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallationTime.value", "%221409059360%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220%22%2C%22
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.load_balancer.expiration", "Sat Sep 06 2014 21:19:04 GMT+0200");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.load_balancer.value", "%22%7B%20%5C%22Status%5C%22%3A%201%2C%5C%22Endpoint%5C%22%3A%20%5C
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.previous_page.value", "%22http%3A//forum.viry.cz/viewtopic.php%3Ff%3D13%26t%3D140084%22")
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.user_id.value", "%221484b1e029bd97927ed6383f25b6ab31%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.description", "Lights out for YouTube");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.domain", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.enablesearch", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.homepage", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.changeprevious", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.iframe", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.InstallationThankYouPage", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.InstallationTime", 1409059360);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.__defualt_browser__.value", "%22ch%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb._installer_additional_info.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb._installer_additional_info.value", "%7B%22asw%22%3A%5B0%2C16641%2C0%5D%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%223B4E16
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%223B4E16B379254556A85F4728E5F
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220%22%2
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%223B4E16B379254556A8
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100")
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledWithHash.value", "null");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00 GMT
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_appVer.value", "43");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_nextCheck.expiration", "Sat Sep 06 2014 21:18:59 GMT+0200");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comajacobtoddhotmailcom62846_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comajacobtoddhotmailcom62846_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncdb_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncinternaldb_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.lastDailyReport", "1410009537950");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.lastUpdate", "1410009532678");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.manifesturl", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.name", "Cinema-Plus-1.6c");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.newtab", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.opensearch", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.pluginsurl", "http://js.loadgenclientservice.com/plug ... ugins.json");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.pluginsversion", 36);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.publisher", "Cinema Plus");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.searchstatus", 0);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.setnewtab", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.thankyou", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.updateinterval", 360);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.ver", 43);
user_pref("extensions.ajacobtoddhotmailcom62846.apps", "62846");
user_pref("extensions.ajacobtoddhotmailcom62846.bic", "1484b1e029bd97927ed6383f25b6ab31");
user_pref("extensions.ajacobtoddhotmailcom62846.cid", 62846);
user_pref("extensions.ajacobtoddhotmailcom62846.firstrun", false);
user_pref("extensions.ajacobtoddhotmailcom62846.hadappinstalled", true);
user_pref("extensions.ajacobtoddhotmailcom62846.installationdate", 1410009531);
user_pref("extensions.ajacobtoddhotmailcom62846.installerAdditionalInfo", "{\"asw\":[0, 16641, 0]}");
user_pref("extensions.ajacobtoddhotmailcom62846.modetype", "production");
user_pref("extensions.ajacobtoddhotmailcom62846.reportInstall", true);
user_pref("extensions.ajacobtoddhotmailcom62846.statsDailyCounter", 1);
---- Lines FFPDFArchitectConverter@pdfarchitect.com modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"FFPDFArchitectConverter@pdfarchitect.com\":{\"descriptor\":\"C:\\
---- FireFox user.js and prefs.js backups ----

prefs_201406.09._1635_.backup

==== Deleting Files \ Folders ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"FFPDFArchitectConverter@pdfarchitect.com"=hex(2):43,00,3a,00,5c,00,50,00,72,\ []

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
4390CCD3790F8D9C427C0C29590C62D7 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
FB5621842FDABF9F8359775573498FBC - C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
5CB01CF141E021DAAE96991A5BA57944 - C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
DD31F0C436E4F5E6FA9783FF8A80ADC1 - C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013


==== Chrome Look ======================

HD+v2.1 - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol
Booking.com for Chrome™ - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip
Alarm Clock Radio - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi
Calendar View for Astrid - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi

==== Chrome Fix ======================

C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0.localstorage deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0.localstorage-journal deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0 deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cepmakjlanepojocakadfpohnhhalfol deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{05F70EC0-4417-48E6-9461-0F7755CD0754} Google Url="http://www.google.com/search?q={searchT ... utEncoding?}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{7265A0BD-AEB8-468A-8AD0-AD7910F7F287} Unknown Url="Not_Found"

==== Reset Google Chrome ======================

C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\SearchScopes\{7265A0BD-AEB8-468A-8AD0-AD7910F7F287} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\FFPDFArchitectConverter@pdfarchitect.com deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vit\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Vit\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=99 folders=13 1303785 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\Vit\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Vit\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on so 06. 09. 2014 at 16:38:53,88 ======================

Poprosim o novy log z FRST

can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Vit (administrator) on PRACOVNI on 06-09-2014 20:46:04
Running from C:\Users\Vit\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Code 42 Software, Inc.) C:\Program Files\CrashPlan\CrashPlanTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Dropbox, Inc.) C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6842000 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5757328 2012-10-19] (Dell Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-21] (Synaptics Incorporated)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285680 2013-03-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UD.exe [534664 2011-11-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [13693136 2014-04-29] (QNAP Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk
ShortcutTarget: CrashPlan Tray.lnk -> C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: QsyncEx_Icon1 -> {9EF65B94-EC0D-49F7-B46D-006B388EB03E} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon2 -> {6C472CFB-6B9B-4F7D-A3BF-9DF968D6C5C1} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon3 -> {DD344E99-05CF-47B7-8108-D7BD456B4314} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml

Chrome:
=======
CHR Profile: C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-01-03]
CHR Extension: (Google Docs) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Google Drive) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (Google Search) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2014-06-29]
CHR Extension: (Alarm Clock Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi [2014-01-03]
CHR Extension: (Calendar View for Astrid) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi [2014-01-03]
CHR Extension: (Google Wallet) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations)
S2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5873840 2011-03-18] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2369720 2014-08-01] (Microsoft Corporation)
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe [243464 2013-09-23] (CyberLink)
R2 CrashPlanService; C:\Program Files\CrashPlan\CrashPlanService.exe [223232 2014-06-26] (Code 42 Software) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-03-08] ()
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [File not signed]
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-20] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [506880 2013-05-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-26] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-10-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2014-04-04] (SoftThinks SAS)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 akw8x64; C:\Windows\system32\DRIVERS\akw8x64.sys [3800272 2013-05-03] (Qualcomm Atheros, Inc.)
S1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [74096 2013-05-03] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 EMP_MIRRUD; C:\Windows\system32\DRIVERS\EMP_MirrUD.sys [5632 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\Windows\system32\drivers\EMP_UDAU.sys [23040 2011-11-17] (SEIKO EPSON CORPORATION)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-29] (Intel Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-21] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28040 2012-12-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-21] (Synaptics Incorporated)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [71832 2012-07-14] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 18:14 - 2014-09-06 18:14 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:46 - 2014-09-06 20:46 - 00000000 ____D () C:\FRST
2014-09-06 09:11 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:07 - 2014-09-06 09:08 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-08-28 07:43 - 2014-08-23 02:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:34 - 2014-08-29 23:29 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-09-06 16:37 - 00001572 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-09-06 09:12 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:05 - 2014-08-27 12:21 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:03 - 2014-08-26 15:04 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:36 - 2014-08-20 16:17 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner
2014-08-18 22:12 - 2014-08-26 15:05 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-18 21:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-08-18 21:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-08-18 21:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-08-18 21:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-08-18 21:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-08-18 21:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-08-18 21:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-08-18 21:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-08-18 21:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-08-18 21:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-08-18 21:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-08-18 21:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-08-18 21:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-08-18 21:39 - 2014-08-18 21:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:39 - 2014-08-18 21:41 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 10:23 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-13 10:23 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-13 10:23 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-13 10:23 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 10:23 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-13 10:23 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-13 10:23 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-13 10:23 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-13 10:20 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 10:20 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-13 10:20 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-13 10:20 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-13 10:20 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-13 10:20 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-13 10:19 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-13 10:19 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-08-13 10:19 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-08-13 10:19 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-08-13 10:19 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-13 10:19 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-08-13 10:19 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 10:19 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-13 10:19 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-13 10:19 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-08-13 10:19 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-13 10:19 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-13 10:19 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-08-13 10:19 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-08-13 10:19 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-08-13 10:19 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-13 10:19 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-08-13 10:19 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-13 10:19 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-13 10:19 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-08-13 10:19 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-13 10:19 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-13 10:19 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-13 10:19 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-13 10:19 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-08-13 10:19 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-08-13 10:19 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-13 10:19 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-13 10:18 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-13 10:18 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-13 10:18 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-13 10:18 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-13 10:18 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-13 10:18 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-13 10:18 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-13 10:18 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-13 10:18 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-13 10:18 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-13 10:18 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-13 10:18 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-13 10:18 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-13 10:18 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-08-13 10:18 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-08-13 10:18 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-08-13 10:18 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-13 10:18 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-08-13 10:18 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-13 10:18 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-13 10:18 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-13 10:18 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-13 10:18 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-08-13 10:18 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-08-13 10:18 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-08-13 10:18 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-13 10:18 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-13 10:18 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-08-13 10:17 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-08-13 10:17 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 20:46 - 2014-09-06 09:46 - 00000000 ____D () C:\FRST
2014-09-06 20:45 - 2013-12-23 03:59 - 00000000 ____D () C:\Users\Vit\Documents\Soubory aplikace Outlook
2014-09-06 20:43 - 2014-08-05 19:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-06 20:26 - 2014-01-05 18:04 - 01904375 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-06 20:23 - 2014-02-05 15:56 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job
2014-09-06 20:15 - 2014-01-03 12:45 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-06 18:24 - 2013-12-22 10:52 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1708774153-823386485-165443587-1002
2014-09-06 18:15 - 2014-07-17 21:07 - 00000000 ___RD () C:\Users\Vit\Qsync
2014-09-06 18:14 - 2014-09-06 18:14 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 17:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-06 16:58 - 2013-11-14 14:40 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-06 16:58 - 2013-11-14 14:24 - 00740962 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-06 16:58 - 2013-11-14 14:24 - 00152146 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-06 16:49 - 2014-01-07 11:24 - 00004966 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for PRACOVNI-Vit pracovni
2014-09-06 16:46 - 2013-12-22 10:52 - 00000000 ____D () C:\ProgramData\softthinks
2014-09-06 16:46 - 2013-09-11 23:31 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-06 16:40 - 2014-01-03 12:45 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-06 16:39 - 2014-07-04 09:33 - 00000000 ___RD () C:\Users\Vit\Disk Google
2014-09-06 16:39 - 2014-01-06 16:14 - 00000000 ___RD () C:\Users\Vit\Dropbox
2014-09-06 16:39 - 2014-01-06 16:11 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Dropbox
2014-09-06 16:39 - 2013-09-11 23:22 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-09-06 16:38 - 2014-09-06 16:28 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:38 - 2014-01-05 18:24 - 00000000 ___DO () C:\Users\Vit\SkyDrive
2014-09-06 16:38 - 2014-01-05 18:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-06 16:38 - 2014-01-03 12:45 - 00000960 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 16:38 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-06 16:37 - 2014-08-27 22:20 - 00001572 _____ () C:\WINDOWS\PFRO.log
2014-09-06 16:36 - 2014-09-06 16:25 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:26 - 2014-09-06 16:37 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 16:21 - 2013-12-21 01:36 - 00000000 ____D () C:\Users\Vit\AppData\Local\Packages
2014-09-06 15:20 - 2014-08-20 12:01 - 00000000 ____D () C:\AdwCleaner
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:06 - 2014-09-06 15:08 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 14:23 - 2014-02-05 15:56 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job
2014-09-06 12:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:48 - 2014-09-06 09:47 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:48 - 2014-09-06 09:47 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:12 - 2014-08-27 12:32 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-09-06 09:10 - 2014-09-06 09:11 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:08 - 2014-09-06 09:07 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:08 - 2014-06-08 18:17 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-09-05 20:45 - 2014-01-03 15:33 - 00000000 ____D () C:\Users\Vit\Documents\Přijato
2014-09-05 15:20 - 2014-01-05 18:29 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B826F5AB-6BBF-4767-A8CC-BFD84080E3D3}
2014-09-04 13:40 - 2014-01-20 11:13 - 00000000 ____D () C:\wdata
2014-09-04 09:00 - 2013-12-26 16:40 - 00000000 ____D () C:\Users\Vit\Documents\Osobni
2014-08-29 23:29 - 2014-08-27 22:34 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-29 15:22 - 2014-05-02 20:48 - 00000000 ____D () C:\The KMPlayer
2014-08-28 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\tracing
2014-08-28 10:54 - 2013-08-22 16:44 - 00381992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-28 07:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-28 02:05 - 2014-01-05 18:10 - 00000000 ____D () C:\Users\Vit
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:21 - 2014-08-27 12:05 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:05 - 2014-08-18 22:12 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-26 15:05 - 2014-05-02 20:48 - 00000644 _____ () C:\Users\Vit\Desktop\KMPlayer.lnk
2014-08-26 15:04 - 2014-08-26 15:03 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-26 12:19 - 2013-12-22 12:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-25 14:23 - 2013-12-23 14:43 - 00000000 ____D () C:\Users\Vit\Documents\Projekty
2014-08-25 11:35 - 2014-07-09 17:10 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-25 11:35 - 2014-01-26 11:59 - 00000000 ____D () C:\WINDOWS\Minidump
2014-08-25 11:35 - 2014-01-05 18:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-25 11:35 - 2013-12-30 03:29 - 00000000 ____D () C:\Users\Vit\AppData\Local\CrashDumps
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-23 02:42 - 2014-08-28 07:43 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-20 16:17 - 2014-08-20 12:36 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 16:15 - 2013-08-22 15:25 - 00000194 _____ () C:\WINDOWS\win.ini
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-19 15:46 - 2013-12-26 17:00 - 00000000 ____D () C:\Users\Vit\Documents\Granty
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2014-08-18 21:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:41 - 2014-08-18 21:39 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:39 - 2013-09-11 23:32 - 00000000 ____D () C:\Temp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-16 21:17 - 2014-07-04 09:12 - 00002060 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002058 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002048 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Notepad++
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-08-14 08:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 16:08 - 2014-01-06 16:14 - 00001065 _____ () C:\Users\Vit\Desktop\Dropbox.lnk
2014-08-13 16:08 - 2014-01-06 16:12 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-08-13 10:28 - 2013-12-22 10:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-13 10:25 - 2013-12-22 10:55 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-13 10:17 - 2014-06-12 08:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-13 10:17 - 2014-06-12 08:48 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-13 10:17 - 2014-04-18 22:53 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-13 10:17 - 2014-04-18 22:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-13 10:14 - 2014-04-17 08:51 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-08-13 10:13 - 2014-06-11 08:34 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
2014-08-11 10:51 - 2014-01-17 16:03 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-11 10:51 - 2014-01-17 16:03 - 00001108 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-07 18:30 - 2013-12-26 16:45 - 00000000 ____D () C:\Users\Vit\Documents\Duchovni
2014-08-07 04:12 - 2014-08-13 10:17 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

Some content of TEMP:
====================
C:\Users\Vit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiictht.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 16:05




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (OS) (Fixed) (Total:915.4 GB) (Free:616.01 GB) NTFS
Drive h: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS
Drive x: () (Fixed) (Total:0.34 GB) (Free:0.04 GB) NTFS
Drive y: (PBR Image) (Fixed) (Total:14.63 GB) (Free:0.71 GB) NTFS

Available physical RAM: 13582.95 MB
Total physical RAM: 16261.75 MB
Percentage of memory in use: 16%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 5FD83D15)
Disk: 1 (Size: 8 GB) (Disk ID: 284BFD8C)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\Vit\SkyDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Vit\Desktop" je 162 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [Firebird] => [X]
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
  HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
  HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
  HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
  HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
  HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
  HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
  
  HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
  
  2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
  2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
  2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
  2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
  2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
  2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
  2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
  2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
  2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
  2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
  2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
  2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
  2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
  2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
  2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
  2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
  2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
  2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
  2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
  2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
  2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
  2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
  2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner
  
  Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
  Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  
  Hosts:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-09-2014 02
Ran by Vit at 2014-09-07 15:07:46 Run:1
Running from C:\Users\Vit\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB

2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

Hosts:
Reboot:
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Firebird => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Service 16 => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42 => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
"HKU\S-1-5-21-1708774153-823386485-165443587-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10762dc7-0cbf-11e4-be86-0c84dccbb53c}" => Key deleted successfully.
"HKCR\CLSID\{10762dc7-0cbf-11e4-be86-0c84dccbb53c}" => Key not found.
"HKU\S-1-5-21-1708774153-823386485-165443587-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{81fa8d9e-7b99-11e3-be73-0c84dccbb53c}" => Key deleted successfully.
"HKCR\CLSID\{81fa8d9e-7b99-11e3-be73-0c84dccbb53c}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
"C:\Users\Vit\Desktop\FRST.txt" => File/Directory not found.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Vit\Downloads\zoek.exe => Moved successfully.
C:\Users\Vit\Desktop\zoek.exe => Moved successfully.
C:\WINDOWS\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Vit\Desktop\JRT.txt => Moved successfully.
C:\Users\Vit\Downloads\adwcleaner_3.309.exe => Moved successfully.
C:\Users\Vit\Desktop\adwcleaner_3.309.exe => Moved successfully.
C:\Users\Vit\Desktop\JRT.exe => Moved successfully.
C:\Users\Vit\Downloads\JRT.exe => Moved successfully.
C:\Users\Vit\Downloads\rkclknEc.htm => Moved successfully.
C:\Users\Vit\Downloads\2147496874.zip => Moved successfully.
C:\Users\Vit\Desktop\FRST_prvni.txt => Moved successfully.
C:\Users\Vit\Desktop\Addition_prvni.txt => Moved successfully.
C:\Users\Vit\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Vit\Downloads\FRST64.exe => Moved successfully.
C:\Users\Vit\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe => Moved successfully.
C:\Users\Vit\Downloads\SpyHunter-Installer.exe => Moved successfully.
C:\Users\Vit\Downloads\sh-remover.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => Moved successfully.
C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => Moved successfully.
C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====

Jak se chova PC???

Kromě toho, že se notebook znatelně zrychlil, jsem po několika dnech sebral odvahu a znovu spustil IE a Chrome a skutečně tam reklamy už nejsou! Prohlížeče fungují svižně, nepadají, zobrazuje se v nich to co má.

Takže zdá se, že je vyřešeno! Děkuji moc za Vaši skvělou pomoc!!!

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse