Problemy s Yahoo

[Daniil]

Dobry den!
Poradte mi prosim, co s tim. Chci se podivat na nejaky predmet meho zajmu, napisu jeho, stisknu, on se objevy a vzapeti ho sezere Yahoo! Muzu se vratit zpatky kolik chci, vzdy to sezere Yahoo! Jsem z toho uz zbesili.
Velmi dekuji za odpoved.
S uctou, Daniil.

[vyosek]

Zdravim

V Brne je mlha a tak vestecka koule nic nevidi

Dejte tedy radeji log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

[Daniil]

Zdravim

V Brne je mlha a tak vestecka koule nic nevidi

Dejte tedy radeji log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Tak jsem poslal FRST. Doufam, ze jsem to poslal. Neda se to nejak zkontrolovat?

[vyosek]

Neposlal, log sem dejte jako normalni text prispevku

[Daniil]

Neposlal, log sem dejte jako normalni text prispevku

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-10-2014 01
Ran by user (administrator) on JAROSLAV on 04-10-2014 22:05:28
Running from C:\Users\user\Desktop
Loaded Profile: user (Available profiles: user)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Русский (Россия)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(S p i g o t, I n c.) C:\Users\user\AppData\Roaming\Search Protection\SearchProtection.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
() C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe
() C:\ProgramData\USB-modem Beeline\Huawei\OnlineUpdate\ouc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(Repkasoft) C:\Program Files (x86)\YoWindow\yowindow.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(ООО ДубльГИС) C:\Program Files (x86)\2gis\3.0\2GISTrayNotifier.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
() C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe
() C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Users\user\AppData\Roaming\Yandex\YandexDisk\wow64\YandexDiskStarter.exe
() C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDiskStarter.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\cmmon32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM\...\Run: [PAC207_Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM-x32\...\Run: [2Gis Update Notifier] => C:\Program Files (x86)\2gis\3.0\2GISTrayNotifier.exe [4650520 2014-05-28] (ООО ДубльГИС)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Tilt] => C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe [724992 2009-06-26] ()
HKLM-x32\...\Run: [AlterGeoUpdater] => C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\html5locsvc.exe [29256 2012-06-06] (AlterGeo)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe [356128 2013-11-12] (Kaspersky Lab ZAO)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Facebook Update] => C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-04-19] (AMD)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Logitech Vid] => C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [SearchProtection] => C:\Users\user\AppData\Roaming\Search Protection\SearchProtection.EXE [1109352 2014-08-22] (S p i g o t, I n c.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Browser Extensions] => C:\Users\user\AppData\Roaming\Browser Extensions\CouponsHelper.exe [966504 2014-08-26] (S p i g o t, I n c .)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-12-12] (Google Inc.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [AlterGeoUpdater] => C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\html5locsvc.exe [29904 2014-08-01] (AlterGeo)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [SyncManPath] => C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe [23293216 2014-08-28] ()
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {4188ec2f-7af4-11e3-b153-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {4188ec3e-7af4-11e3-b153-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {605cd8ea-7968-11e3-ac39-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {605cd903-7968-11e3-ac39-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {6ed26daa-7b82-11e3-93ae-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {ef1a7905-7237-11e3-b823-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {ef1a7917-7237-11e3-b823-50e549394b75} - H:\AutoRun.exe
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk
ShortcutTarget: YoWindow.lnk -> C:\Program Files (x86)\YoWindow\yowindow.exe (Repkasoft)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Вырезка экрана и программа запуска для OneNote 2010.lnk
ShortcutTarget: Вырезка экрана и программа запуска для OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [0YndCase0Sync] -> {63D48440-63AB-44D0-B323-4731DFCDE9E9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [0YndCase1Modified] -> {7E7DC279-E6BE-4D57-9DEC-14FA0339DBC0} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [0YndCase2Error] -> {FB2FE984-05F5-4512-9D9B-69D3DE61F6D9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [0YndCase3Shared] -> {AF8D197E-7022-4c3d-BD88-68AD35C9C169} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\shellex.dll (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\shellex.dll (Kaspersky Lab ZAO)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:54351;https=127.0.0.1:54351
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ru.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x95233489EEB8CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ru
SearchScopes: HKCU - DefaultScope {657D88FB-2062-49A4-AEA7-7A36CC250064} URL = http://yandex.ru/yandsearch?clid=178289 ... earchTerms}
SearchScopes: HKCU - {657D88FB-2062-49A4-AEA7-7A36CC250064} URL = http://yandex.ru/yandsearch?clid=178289 ... earchTerms}
SearchScopes: HKCU - {77712A7F-38D3-4348-85A4-647F8EF62E7E} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {E2AF54E8-15FA-4D9C-B3FD-1D771D038F09} URL = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Browser Extensions -> {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} -> C:\Users\user\AppData\Roaming\Browser Extensions\Coupons64.dll (S p i g o t, I n c .)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Browser Extensions -> {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} -> C:\Users\user\AppData\Roaming\Browser Extensions\Coupons.dll (S p i g o t, I n c .)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Помощник по входу с учетной записью Майкрософт -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AlterGeoBHO Class -> {9BFBA68E-E21B-458E-AE12-FE85E903D2C0} -> C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\npHtml5loc.dll (Altergeo)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {093500E9-F79F-4C52-A9B5-D8C7E4B3023E} file:///C:/Users/user/AppData/Local/Temp/o3d51CE.tmp.cab
DPF: HKLM-x32 {810B649C-CEAE-4AC9-BF26-81341B49E913} file:///C:/Users/user/AppData/Local/Temp/o3d432C.tmp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 195.239.225.93 195.239.225.94
Tcpip\..\Interfaces\{981F06F8-91E7-4460-9421-2C45EE4101B9}: [NameServer] 195.239.151.147 195.239.151.148

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default
FF NewTab: yafd:tabs
FF DefaultSearchEngine: Яндекс
FF SelectedSearchEngine: Яндекс
FF Homepage: https://www.google.cz/
FF Keyword.URL: hxxp://yandex.ru/yandsearch?clid=1782899&text=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @parallelgraphics.com/Cortona -> C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @altergeo.ru/Html5loc -> C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\npHtml5loc.dll (Altergeo)
FF Plugin HKCU: @Google.com/GoogleEarthPlugin -> C:\Users\user\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\user\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npCortona.dll (ParallelGraphics)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npOutline3dWrapper.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\mailru---.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\mailru.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\online-tv.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\personas-for-firefox.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\tuvaro.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\yandex.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\yqs-barff-yandex.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Freecorder - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\addon@freecorder.com [2013-11-13]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\ascsurfingprotection@iobit.com [2014-07-24]
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\cs@dictionaries.addons.mozilla.org [2013-01-13]
FF Extension: Візуальныя закладкі - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\vb@yandex.ru [2014-09-09]
FF Extension: Кампанент "Элементы Яндекса" - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\yasearch@yandex.ru [2014-09-09]
FF Extension: Start Page - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{32da2f20-827d-40aa-a3b4-2fc4a294352e} [2014-09-03]
FF Extension: Slick Savings - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{46eddf51-a4f6-4476-8d6c-31c5187b2a2f} [2014-09-03]
FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{84a93d51-b7a9-431e-8ff8-d60e5d7f5df1} [2014-09-03]
FF Extension: HTML5 location provider - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{B100D0FF-0001-8CE4-2790-AACE49B8AE35} [2014-04-17]
FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{f894a29a-f065-40c3-bb19-da6057778493} [2014-09-03]
FF Extension: uToolbar - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\toolbar@unet.com.xpi [2013-11-16]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-09-29]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\url_advisor@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\virtual_keyboard@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\content_blocker@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\anti_banner@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\online_banking@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\urladvisor.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\online_banking_chrome.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\content_blocker_chrome.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\virtkbd.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/deta ... icnklhfplh [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [nhgcieglcpdegkhamigiokdphfhhnlhh] - C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\altergeo.crx [2012-06-06]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\ab.crx [2013-11-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 2GISUpdateService; C:\Program Files (x86)\2gis\3.0\2GISUpdateService.exe [3821080 2014-05-28] (ООО ДубльГИС)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe [356128 2013-11-12] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)
S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Корпорация Майкрософт)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S2 USB-modem Beeline. RunOuc; C:\Program Files (x86)\USB-модем Билайн\Huawei\UpdateDog\ouc.exe [657504 2014-01-10] ()
S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Корпорация Майкрософт)
S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Корпорация Майкрософт)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [244736 2014-01-10] (Huawei Technologies Co., Ltd.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-10-02] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-10-02] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628288 2014-10-02] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-10-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-12] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-11-12] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-11-12] (Kaspersky Lab ZAO)
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94592 2010-11-21] (Корпорация Майкрософт)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [684544 2007-10-25] (PixArt Imaging Inc.)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S3 STIrUsb; C:\Windows\System32\DRIVERS\irstusb.sys [33792 2008-01-19] (SigmaTel, Inc.)
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-21] (Корпорация Майкрософт)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-04 22:05 - 2014-10-04 22:05 - 00030338 _____ () C:\Users\user\Desktop\FRST.txt
2014-10-04 22:05 - 2014-10-04 22:05 - 00000000 ____D () C:\FRST
2014-10-04 22:00 - 2014-10-04 22:01 - 02109440 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2014-10-02 22:55 - 2014-10-02 22:55 - 00002207 _____ () C:\Users\user\Desktop\Безопасные платежи.lnk
2014-10-02 22:54 - 2014-10-02 22:54 - 00001053 _____ () C:\Users\Public\Desktop\Kaspersky CRYSTAL.lnk
2014-10-02 22:54 - 2014-10-02 22:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky CRYSTAL
2014-10-02 22:54 - 2013-11-12 02:03 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2014-10-02 22:53 - 2014-10-02 22:53 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-10-02 22:53 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2014-10-02 22:53 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2014-10-02 22:52 - 2014-10-04 21:42 - 00000000 ____D () C:\Users\Все пользователи\Kaspersky Lab
2014-10-02 22:52 - 2014-10-04 21:42 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-10-02 22:52 - 2014-10-02 23:06 - 00628288 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-10-02 22:52 - 2014-10-02 23:06 - 00092768 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-10-02 22:52 - 2014-10-02 22:52 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-10-02 22:42 - 2014-10-02 22:42 - 195363976 _____ (Лаборатория Касперского) C:\Users\user\Desktop\pure13.0.2.558abcdRU_5695.exe
2014-10-02 22:11 - 2014-10-02 22:11 - 00171344 _____ (Kaspersky Lab) C:\Users\user\Desktop\kidokiller.exe
2014-10-02 21:56 - 2014-10-02 21:56 - 00000000 ____D () C:\Users\Все пользователи\Kaspersky Lab Setup Files
2014-10-02 21:56 - 2014-10-02 21:56 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\Users\Все пользователи\Apple Computer
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-10-01 02:33 - 2014-09-25 06:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 02:33 - 2014-09-25 05:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-30 07:28 - 2014-09-30 07:28 - 00002050 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-09-30 00:27 - 2014-09-30 00:27 - 00000000 ____D () C:\Users\user\Desktop\Tyrkey
2014-09-29 21:17 - 2014-09-29 21:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-29 00:13 - 2014-10-02 22:51 - 00849982 _____ () C:\Windows\PFRO.log
2014-09-29 00:07 - 2014-09-10 02:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-29 00:07 - 2014-09-10 01:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-13 01:12 - 2014-09-14 22:15 - 00000000 ____D () C:\Users\user\Desktop\Music HTC super
2014-09-12 22:12 - 2014-10-04 16:51 - 00001120 _____ () C:\Windows\setupact.log
2014-09-12 22:12 - 2014-09-12 22:15 - 04967768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-12 22:12 - 2014-09-12 22:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-12 09:32 - 2014-09-12 09:32 - 00257199 _____ () C:\Users\user\Desktop\video.php
2014-09-12 08:16 - 2014-09-12 08:16 - 00088016 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-11 21:50 - 2014-09-14 21:19 - 00000000 ____D () C:\Users\user\Desktop\Music HTC-tak
2014-09-11 06:59 - 2014-09-11 06:59 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-11 06:58 - 2014-09-11 06:58 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-11 06:58 - 2014-09-11 06:58 - 00000000 ____D () C:\Users\user\AppData\Local\Apple
2014-09-11 06:57 - 2014-09-11 06:57 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-11 06:57 - 2014-09-11 06:57 - 00000000 ____D () C:\Users\Все пользователи\Apple
2014-09-11 06:57 - 2014-09-11 06:57 - 00000000 ____D () C:\ProgramData\Apple
2014-09-11 06:57 - 2014-09-11 06:57 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-09-11 05:09 - 2014-10-04 16:51 - 00000000 ____D () C:\Users\user\AppData\Local\HTC MediaHub
2014-09-11 05:09 - 2014-09-11 05:09 - 00001991 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-09-11 05:09 - 2014-09-11 05:09 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-09-11 05:06 - 2014-09-11 05:06 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-09-10 19:58 - 2014-09-10 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
2014-09-10 03:06 - 2014-08-19 22:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 03:06 - 2014-08-19 21:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-10 03:06 - 2014-08-19 03:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 03:06 - 2014-08-19 02:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 03:06 - 2014-08-19 02:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-10 03:06 - 2014-08-19 02:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-10 03:06 - 2014-08-19 02:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 03:06 - 2014-08-19 02:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 03:06 - 2014-08-19 02:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 03:06 - 2014-08-19 02:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 03:06 - 2014-08-19 02:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-10 03:06 - 2014-08-19 02:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-10 03:06 - 2014-08-19 02:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-10 03:06 - 2014-08-19 02:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 03:06 - 2014-08-19 02:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 03:06 - 2014-08-19 02:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 03:06 - 2014-08-19 02:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-10 03:06 - 2014-08-19 02:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 03:06 - 2014-08-19 02:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-10 03:06 - 2014-08-19 01:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-10 03:06 - 2014-08-19 01:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 03:06 - 2014-08-19 01:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 03:06 - 2014-08-19 01:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-10 03:06 - 2014-08-19 01:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 03:06 - 2014-08-19 01:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-10 03:06 - 2014-08-19 01:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-10 03:06 - 2014-08-19 01:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-10 03:06 - 2014-08-19 01:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-10 03:06 - 2014-08-19 01:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 03:06 - 2014-08-19 01:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 03:06 - 2014-08-19 01:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-10 03:06 - 2014-08-19 01:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-10 03:06 - 2014-08-19 01:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 03:06 - 2014-08-19 01:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-10 03:06 - 2014-08-19 01:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-10 03:06 - 2014-08-19 01:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-10 03:06 - 2014-08-19 01:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-10 03:06 - 2014-08-19 01:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 03:06 - 2014-08-19 01:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 03:06 - 2014-08-19 01:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 03:06 - 2014-08-19 01:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-10 03:06 - 2014-08-19 01:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-10 03:06 - 2014-08-19 01:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-10 03:06 - 2014-08-19 01:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-10 03:06 - 2014-08-19 01:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-10 03:06 - 2014-08-19 01:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 03:06 - 2014-08-19 01:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-10 03:06 - 2014-08-19 01:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 03:06 - 2014-08-19 01:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-10 03:06 - 2014-08-19 01:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-10 03:06 - 2014-08-19 01:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-10 03:06 - 2014-08-19 00:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 03:06 - 2014-08-19 00:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-10 03:06 - 2014-08-19 00:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-10 03:06 - 2014-08-19 00:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-10 03:06 - 2014-08-19 00:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-10 03:01 - 2014-06-27 06:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 03:01 - 2014-06-27 05:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 01:54 - 2014-08-01 15:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 01:54 - 2014-08-01 15:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 01:53 - 2014-09-05 06:10 - 00578048 _____ (Корпорация Майкрософт (Microsoft Corp.)) C:\Windows\system32\aepdu.dll
2014-09-10 01:53 - 2014-09-05 06:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-10 01:53 - 2014-07-07 06:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 01:53 - 2014-07-07 06:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 01:53 - 2014-07-07 05:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 01:53 - 2014-07-07 05:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 01:53 - 2014-07-07 05:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-10 01:53 - 2014-06-24 07:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 01:53 - 2014-06-24 06:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-09 21:47 - 2014-09-28 23:56 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2014-09-09 21:46 - 2014-09-09 21:46 - 00001030 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-09-09 21:46 - 2014-09-09 21:46 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-09 21:39 - 2014-09-09 21:39 - 24743106 _____ () C:\Users\user\vlc-2.1.5-win32.exe
2014-09-09 20:51 - 2014-09-09 20:51 - 00000000 ____D () C:\Users\user\Desktop\100GOPRO
2014-09-09 06:33 - 2014-09-09 06:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс.Диск

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-04 21:41 - 2011-12-12 20:58 - 00000964 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-04 21:24 - 2012-10-11 10:38 - 00000896 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-04 20:36 - 2011-12-12 20:58 - 00000960 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-04 19:51 - 2012-01-20 11:22 - 00000970 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3689566885-1784086441-1960346923-1000UA.job
2014-10-04 19:23 - 2011-12-12 20:46 - 01504066 _____ () C:\Windows\WindowsUpdate.log
2014-10-04 16:58 - 2009-07-14 08:45 - 00032096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-04 16:58 - 2009-07-14 08:45 - 00032096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-04 16:51 - 2014-06-26 22:14 - 00000000 ___RD () C:\Users\user\YandexDisk
2014-10-04 16:51 - 2009-07-14 09:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-04 02:26 - 2014-01-17 02:19 - 01114112 ___SH () C:\Users\user\Desktop\Thumbs.db
2014-10-04 01:48 - 2012-01-20 11:22 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3689566885-1784086441-1960346923-1000Core.job
2014-10-02 23:06 - 2013-11-12 02:03 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-10-02 23:06 - 2012-08-02 15:09 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys
2014-10-02 22:42 - 2012-10-13 06:27 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2014-10-02 22:37 - 2013-11-03 04:20 - 00000000 ____D () C:\Users\Все пользователи\AVAST Software
2014-10-02 22:37 - 2013-11-03 04:20 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-02 21:58 - 2014-06-12 00:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-10-01 07:51 - 2012-04-06 12:18 - 00000000 ____D () C:\Users\user\Desktop\Работа
2014-10-01 05:54 - 2014-02-28 20:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-01 05:54 - 2014-02-28 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-01 05:54 - 2014-02-28 20:37 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-30 23:32 - 2012-04-25 14:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ____D () C:\Users\Все пользователи\Skype
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ____D () C:\ProgramData\Skype
2014-09-30 07:28 - 2011-12-12 21:44 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-09-30 07:28 - 2011-12-12 21:44 - 00000000 ____D () C:\Users\user\AppData\Local\Thunderbird
2014-09-30 00:55 - 2010-11-21 16:28 - 00724680 _____ () C:\Windows\system32\perfh019.dat
2014-09-30 00:55 - 2010-11-21 16:28 - 00150996 _____ () C:\Windows\system32\perfc019.dat
2014-09-30 00:55 - 2009-07-14 09:13 - 01649802 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-29 22:27 - 2014-08-16 00:31 - 00000000 ____D () C:\Users\user\AppData\Roaming\AIMP3
2014-09-29 09:00 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\rescache
2014-09-29 00:24 - 2012-10-11 10:38 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-29 00:24 - 2012-10-11 10:38 - 00003834 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-29 00:24 - 2011-12-12 20:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-29 00:07 - 2013-01-27 10:56 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-28 23:56 - 2014-07-24 22:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\ProductData
2014-09-28 23:56 - 2011-12-12 20:59 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-09-28 23:56 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-28 23:56 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\servicing
2014-09-28 23:56 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\registration
2014-09-28 21:13 - 2012-01-22 19:31 - 00000000 ____D () C:\Users\user\AppData\Roaming\Media Player Classic
2014-09-28 09:06 - 2014-08-23 22:21 - 00000000 ____D () C:\Users\user\AppData\Local\Apple Computer
2014-09-15 09:06 - 2010-11-21 07:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-12 07:25 - 2014-04-28 11:03 - 00000000 ____D () C:\Users\user\Desktop\Hudba pro mobil
2014-09-12 07:18 - 2014-07-26 09:46 - 00000000 ____D () C:\Users\Все пользователи\Yandex
2014-09-12 07:18 - 2014-07-26 09:46 - 00000000 ____D () C:\Users\user\AppData\Local\Yandex
2014-09-12 07:18 - 2014-07-26 09:46 - 00000000 ____D () C:\ProgramData\Yandex
2014-09-12 07:18 - 2014-06-27 09:45 - 00000000 ____D () C:\Users\user\AppData\Roaming\Yandex
2014-09-11 21:51 - 2014-08-17 00:19 - 00000000 ____D () C:\Users\user\Desktop\Music - mobil
2014-09-11 21:51 - 2014-06-11 08:34 - 00000000 ____D () C:\Users\Все пользователи\YTD Video Downloader
2014-09-11 21:51 - 2014-06-11 08:34 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2014-09-11 20:00 - 2014-07-24 22:20 - 00000000 ____D () C:\Users\user\AppData\Roaming\Apple Computer
2014-09-11 20:00 - 2009-07-14 09:08 - 00032500 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-11 05:10 - 2014-08-23 22:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\HTC
2014-09-11 05:09 - 2014-08-23 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-09-11 05:09 - 2014-08-23 22:16 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-09-11 05:07 - 2014-08-23 22:15 - 00000000 ____D () C:\Users\Все пользователи\HTC
2014-09-11 05:07 - 2014-08-23 22:15 - 00000000 ____D () C:\ProgramData\HTC
2014-09-11 05:07 - 2012-04-18 16:31 - 00000000 ____D () C:\Temp
2014-09-11 04:11 - 2012-01-22 02:04 - 00000000 ____D () C:\Users\user\Desktop\Hesla
2014-09-11 01:55 - 2013-09-26 06:32 - 00158720 ___SH () C:\Users\user\Thumbs.db
2014-09-10 03:06 - 2011-12-13 02:27 - 00000000 ____D () C:\Users\Все пользователи\Microsoft Help
2014-09-10 03:06 - 2011-12-13 02:27 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-10 03:05 - 2013-11-10 01:18 - 01623852 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-10 03:04 - 2013-07-21 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 03:01 - 2014-05-10 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-10 03:01 - 2011-12-16 03:30 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-09 21:28 - 2012-01-26 14:26 - 00000000 ____D () C:\Users\user\Desktop\Video
2014-09-09 06:33 - 2014-07-26 09:46 - 00002021 _____ () C:\Users\user\Desktop\Скриншоты в Яндекс.Диске.lnk
2014-09-09 06:33 - 2014-07-26 09:46 - 00001962 _____ () C:\Users\user\Desktop\Яндекс.Диск.lnk

Files to move or delete:
====================
C:\Users\user\12-10_vista_win7_win8_64_dd_ccc_whql_net4.exe
C:\Users\user\13-1_vista_win7_win8_64_dd_ccc_whql.exe
C:\Users\user\20070813082717640_Samsung_USB_Driver_Installer.exe
C:\Users\user\abbyy_finereader_10_he.exe
C:\Users\user\AdwCleaner.exe
C:\Users\user\aimp_3.55.1355.exe
C:\Users\user\amddriverdownloader.exe
C:\Users\user\AMD_Catalyst_12.11_CAP2.exe
C:\Users\user\callisto5_cz_free.exe
C:\Users\user\CCP2.exe
C:\Users\user\crystal13.0.2.558ru-ru.exe
C:\Users\user\CrystalDiskInfo6_1_13-en.exe
C:\Users\user\Defraggler 2.12.628.exe
C:\Users\user\du823.exe
C:\Users\user\Firefox Setup 20.0.1.exe
C:\Users\user\FirefoxSetup.exe
C:\Users\user\GoogleEarthPluginSetup.exe
C:\Users\user\GoogleEarthSetup.exe
C:\Users\user\googleearthwin-peruser.exe
C:\Users\user\install_virtualdj_home_v7.0.5.exe
C:\Users\user\jxpiinstall.exe
C:\Users\user\kavremover.exe
C:\Users\user\lang_CS.exe
C:\Users\user\Mail.Ru_Cloud.exe
C:\Users\user\msert.exe
C:\Users\user\S-CCPRO_-280WU-___EN-32BIT_.exe
C:\Users\user\skychart-3.8-2450-windows.exe
C:\Users\user\stellarium-0.12.4-win64.exe
C:\Users\user\video_easy_se_int.exe
C:\Users\user\virtualmoon-6.0-windows.exe
C:\Users\user\virtualmoon_update-6.1-576-windows.exe
C:\Users\user\vlc-2.1.5-win32.exe
C:\Users\user\WinDjView-2.0.2-Setup.exe
C:\Users\user\wlsetup-web.exe
C:\Users\user\YandexDiskSetupRu.exe
C:\Users\user\yosetup.exe
C:\Users\user\YTDSetup.exe
C:\Users\user\zd3.exe
C:\Users\user\zps15_cz 2.exe
C:\Users\user\zps15_cz.exe


Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\sender.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-27 21:50

==================== End Of Log ============================

[vyosek]

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

[Daniil]

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.0 (10.05.2014:1)
OS: Windows 7 Professional x64
Ran by user on 06.10.2014 at 4:35:10,47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\searchprotection



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\search protection"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\zona"
Successfully deleted: [Folder] "C:\Program Files (x86)\zona"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driver genius"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"



~~~ FireFox

Successfully deleted: [Folder] C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\4jx1p5se.default\extensions\addon@freecorder.com
Successfully deleted the following from C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\4jx1p5se.default\prefs.js

user_pref("browser.search.useDBForOrder", false);
Emptied folder: C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\4jx1p5se.default\minidumps [963 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.10.2014 at 4:42:26,30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Daniil]

# AdwCleaner v3.311 - Отчёт создан 06/10/2014 at 04:50:25
# Обновлено 30/09/2014 by Xplode
# Операционная система : Windows 7 Professional Service Pack 1 (64 bits)
# Имя пользователя : user - JAROSLAV
# Запущено из : C:\Users\user\Desktop\adwcleaner_3.311.exe
# Настройки : Очистить

***** [ Службы ] *****


***** [ Файлы / Папки ] *****

Папка Удалён : C:\ProgramData\AlterGeo
Папка Удалён : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mail.Ru
Папка Удалён : C:\Program Files (x86)\AlterGeo
Папка Удалён : C:\Program Files (x86)\GreenTree Applications
Папка Удалён : C:\users\user\AppData\Local\Mail.Ru
Папка Удалён : C:\users\user\AppData\Local\MailRu
Папка Удалён : C:\users\user\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Папка Удалён : C:\users\user\AppData\Roaming\Browser Extensions
Папка Удалён : C:\users\user\AppData\Roaming\Mra
Папка Удалён : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{32da2f20-827d-40aa-a3b4-2fc4a294352e}
Папка Удалён : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{84a93d51-b7a9-431e-8ff8-d60e5d7f5df1}
Папка Удалён : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{f894a29a-f065-40c3-bb19-da6057778493}
Папка Удалён : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{46eddf51-a4f6-4476-8d6c-31c5187b2a2f}

***** [ задачи ] *****

задачa Удалёнa : Dealply
задачa Удалёнa : Digital Sites
задачa Удалёнa : DSite

***** [ Ярлыки ] *****


***** [ Реестр ] *****

Ключ Удалёнa : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Ключ Удалёнa : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Ключ Удалёнa : [x64] HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Ключ Удалёнa : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Ключ Удалёнa : HKCU\Software\AppDataLow\Software\Search Protection
Ключ Удалёнa : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection

***** [ Браузеры ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0.3 (x86 cs)

[ Файл : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\prefs.js ]

Удалена строка : user_pref("extensions.vb@yandex.ru.description", "Keep all your favorite sites in one place with Visual Bookmarks. Simply click on the one of the mini webpages to visit a site. You can customize the n[...]
Удалена строка : user_pref("startpage.ntsearch_url", "hxxps://ru.search.yahoo.com/search?fr=spigot-nt-ff&ei=utf-8&ilc=12&type=937811&p={searchTerms}");

[ Файл : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mData\prefs.js ]


-\\ Google Chrome v

[ Файл : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5832 octets] - [27/06/2014 09:19:28]
AdwCleaner[R1].txt - [3328 octets] - [06/10/2014 04:49:10]
AdwCleaner[S0].txt - [5646 octets] - [27/06/2014 09:22:18]
AdwCleaner[S1].txt - [3218 octets] - [06/10/2014 04:50:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3278 octets] ##########

[vyosek]

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[Daniil]

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 07-October-2014
Tool run by user on 09.10.2014 at 4:55:58,93.
Microsoft Windows 7 Профессиональная 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\user\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

09.10.2014 4:56:37 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3689566885-1784086441-1960346923-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E2AF54E8-15FA-4D9C-B3FD-1D771D038F09} deleted successfully
HKEY_USERS\S-1-5-21-3689566885-1784086441-1960346923-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9BFBA68E-E21B-458E-AE12-FE85E903D2C0} deleted successfully
HKEY_USERS\S-1-5-21-3689566885-1784086441-1960346923-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9BFBA68E-E21B-458E-AE12-FE85E903D2C0} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{9BFBA68E-E21B-458E-AE12-FE85E903D2C0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9BFBA68E-E21B-458E-AE12-FE85E903D2C0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9BFBA68E-E21B-458E-AE12-FE85E903D2C0} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\prefs.js:
user_pref("browser.startup.homepage", "https://www.google.cz/");
user_pref("browser.newtab.url", "yafd:tabs");
user_pref("browser.search.defaultenginename", "Яндекс");
user_pref("browser.search.selectedEngine", "Яндекс");
user_pref("keyword.URL", "http://yandex.ru/yandsearch?clid=1782899&text=");

Added to C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mData\prefs.js:
user_pref("browser.startup.homepage", "http://www.yandex.ru/?clid=1782898");
user_pref("browser.search.defaultenginename", "Яндекс");
user_pref("browser.search.selectedEngine", "Яндекс");
user_pref("keyword.URL", "http://yandex.ru/yandsearch?clid=1782899&text=");

Added to C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mData\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\user\AppData\Roaming\Thunderbird\Profiles\b6k8ll2a.default\prefs.js:

Added to C:\Users\user\AppData\Roaming\Thunderbird\Profiles\b6k8ll2a.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default

user.js not found
---- Lines Search removed from prefs.js ----
user_pref("extensions.vb@yandex.ru.description", "Keep all your favorite sites in one place with Visual Bookmarks. Simply click on the one of the mini
---- FireFox user.js and prefs.js backups ----

prefs__0512_.backup

ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mData

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__0512_.backup

ProfilePath: C:\Users\user\AppData\Roaming\Thunderbird\Profiles\b6k8ll2a.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__0512_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Users\user\.android deleted
C:\winrar-x64-510.exe deleted
C:\PROGRA~3\ICQ deleted
C:\PROGRA~3\ProductData deleted
C:\Users\user\AppData\Local\cache deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\Syswow64\lMMLDeleteUserData42107612FX.tmp deleted
C:\Users\user\12-10_vista_win7_win8_64_dd_ccc_whql_net4.exe deleted
C:\Users\user\13-1_vista_win7_win8_64_dd_ccc_whql.exe deleted
C:\Users\user\20070813082717640_Samsung_USB_Driver_Installer.exe deleted
C:\Users\user\abbyy_finereader_10_he.exe deleted
C:\Users\user\AdwCleaner.exe deleted
C:\Users\user\aimp_3.55.1355.exe deleted
C:\Users\user\amddriverdownloader.exe deleted
C:\Users\user\AMD_Catalyst_12.11_CAP2.exe deleted
C:\Users\user\callisto5_cz_free.exe deleted
C:\Users\user\CCP2.exe deleted
C:\Users\user\crystal13.0.2.558ru-ru.exe deleted
C:\Users\user\CrystalDiskInfo6_1_13-en.exe deleted
C:\Users\user\Defraggler 2.12.628.exe deleted
C:\Users\user\du823.exe deleted
C:\Users\user\Firefox Setup 20.0.1.exe deleted
C:\Users\user\FirefoxSetup.exe deleted
C:\Users\user\GoogleEarthPluginSetup.exe deleted
C:\Users\user\GoogleEarthSetup.exe deleted
C:\Users\user\googleearthwin-peruser.exe deleted
C:\Users\user\install_virtualdj_home_v7.0.5.exe deleted
C:\Users\user\iTunes64Setup.exe deleted
C:\Users\user\jxpiinstall.exe deleted
C:\Users\user\kavremover.exe deleted
C:\Users\user\lang_CS.exe deleted
C:\Users\user\Mail.Ru_Cloud.exe deleted
C:\Users\user\msert.exe deleted
C:\Users\user\S-CCPRO_-280WU-___EN-32BIT_.exe deleted
C:\Users\user\skychart-3.8-2450-windows.exe deleted
C:\Users\user\stellarium-0.12.4-win64.exe deleted
C:\Users\user\video_easy_se_int.exe deleted
C:\Users\user\virtualmoon-6.0-windows.exe deleted
C:\Users\user\virtualmoon_update-6.1-576-windows.exe deleted
C:\Users\user\vlc-2.1.5-win32.exe deleted
C:\Users\user\WinDjView-2.0.2-Setup.exe deleted
C:\Users\user\wlsetup-web.exe deleted
C:\Users\user\YandexDiskSetupRu.exe deleted
C:\Users\user\yosetup.exe deleted
C:\Users\user\YTDSetup.exe deleted
C:\Users\user\zd3.exe deleted
C:\Users\user\zps15_cz 2.exe deleted
C:\Users\user\zps15_cz.exe deleted
"C:\Users\user\AppData\Local\{F7397933-A77E-43C2-9A62-F66FAAFD188D}" deleted
"C:\Users\user\AppData\Local\{FDA4EA8D-AF65-4322-91E9-957CE44C69C6}" deleted
"C:\ProgramData\Screen Saver" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\tuvaro.xml" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"online_banking@kaspersky.com"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\online_banking@kaspersky.com" [02.10.2014 23:06]

==== Firefox Extensions ======================

ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com
- esk slovnk pro kontrolu pravopisu - %ProfilePath%\extensions\cs@dictionaries.addons.mozilla.org
- ђҐ¦Ё¬ ўлў®¤  Є®¬ ­¤ ­  нЄа ­ (ECHO) ®вЄ«о祭. - %ProfilePath%\extensions\vb@yandex.ru
- Yandex Elements - %ProfilePath%\extensions\yasearch@yandex.ru
- HTML5 location provider - %ProfilePath%\extensions\{B100D0FF-0001-8CE4-2790-AACE49B8AE35}
- uToolbar - %ProfilePath%\extensions\toolbar@unet.com.xpi

ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mData
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com

ProfilePath: C:\Users\user\AppData\Roaming\Thunderbird\Profiles\b6k8ll2a.default
- esk slovnk pro kontrolu pravopisu - %ProfilePath%\extensions\cs@dictionaries.addons.mozilla.org

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default
DFC9460CC37E5C414DC4680B10C19E7A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll - Shockwave Flash
3CD19649B2C3023D65E67C056457A2BC - C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
65C1D9F74004E775F9A8598476ABE5EE - C:\Users\user\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
B78F4C2C592C87DF54E8E0C6AAEF3874 - C:\Users\user\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
dchlnpcodkpfdpacogkljefecpegganj - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\urladvisor.crx[12.11.2013 02:07]
hakdifolhalapjijoafobooafbilfakh - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\online_banking_chrome.crx[12.11.2013 02:07]
hghkgaeecgjhjkannahfamoehjmkjail - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\content_blocker_chrome.crx[12.11.2013 02:03]
jagncdcchgajhfhijbbhecadmaiegcmh - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\virtkbd.crx[12.11.2013 02:03]
lpoimibckejjdjcfbdnajaicnklhfplh - https://chrome.google.com/webstore/deta ... icnklhfplh[]
nhgcieglcpdegkhamigiokdphfhhnlhh - C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\altergeo.crx[]
pjldcfjmnllhmgjclecdnfampinooman - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\ab.crx[12.11.2013 02:07]

==== Chromium Startpages ======================

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.yandex.ru/?clid=1782898",


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{657D88FB-2062-49A4-AEA7-7A36CC250064}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{657D88FB-2062-49A4-AEA7-7A36CC250064} џ­¤ҐЄб Url="http://yandex.ru/yandsearch?clid=178289 ... earchTerms}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... FA_ruRU462"
{77712A7F-38D3-4348-85A4-647F8EF62E7E} (www.google.com) Google Url="https://www.google.com/search?q={searchTerms}"

==== Reset Google Chrome ======================

C:\Users\user\AppData\Local\Chromium\User Data\Default\Preferences was reset successfully
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\user\AppData\Local\Nichrome\User Data\Default\Preferences was reset successfully
C:\Users\user\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyServer"="http=127.0.0.1:54351;https=127.0.0.1:54351"
"ProxyOverride"="<-loopback>"
"ProxyEnable"=dword:00000001

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nhgcieglcpdegkhamigiokdphfhhnlhh deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=85 folders=10 1654315475 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\user\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Reset Hosts File ======================

Hosts File Reset Successfully

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\user\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 09.10.2014 at 7:41:48,89 ======================

[vyosek]

Dejte novy log z FRST

[Daniil]

Dejte novy log z FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-10-2014 01
Ran by user (administrator) on JAROSLAV on 09-10-2014 22:43:25
Running from C:\Users\user\Desktop
Loaded Profile: user (Available profiles: user)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Русский (Россия)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
() C:\ProgramData\USB-modem Beeline\Huawei\OnlineUpdate\ouc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(Repkasoft) C:\Program Files (x86)\YoWindow\yowindow.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
() C:\Users\user\AppData\Roaming\Yandex\YandexDisk\wow64\YandexDiskStarter.exe
() C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDiskStarter.exe
(ООО ДубльГИС) C:\Program Files (x86)\2gis\3.0\2GISTrayNotifier.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
() C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\cmmon32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM\...\Run: [PAC207_Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM-x32\...\Run: [2Gis Update Notifier] => C:\Program Files (x86)\2gis\3.0\2GISTrayNotifier.exe [4650520 2014-05-28] (ООО ДубльГИС)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Tilt] => C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe [724992 2009-06-26] ()
HKLM-x32\...\Run: [AlterGeoUpdater] => C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\html5locsvc.exe
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe [356128 2013-11-12] (Kaspersky Lab ZAO)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Facebook Update] => C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-04-19] (AMD)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Logitech Vid] => C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Browser Extensions] => "C:\Users\user\AppData\Roaming\Browser Extensions\CouponsHelper.exe"
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-12-12] (Google Inc.)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [AlterGeoUpdater] => C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\html5locsvc.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [SyncManPath] => C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe [23293216 2014-08-28] ()
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {4188ec2f-7af4-11e3-b153-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {4188ec3e-7af4-11e3-b153-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {605cd8ea-7968-11e3-ac39-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {605cd903-7968-11e3-ac39-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {6ed26daa-7b82-11e3-93ae-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {ef1a7905-7237-11e3-b823-50e549394b75} - H:\AutoRun.exe
HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {ef1a7917-7237-11e3-b823-50e549394b75} - H:\AutoRun.exe
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk
ShortcutTarget: YoWindow.lnk -> C:\Program Files (x86)\YoWindow\yowindow.exe (Repkasoft)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Вырезка экрана и программа запуска для OneNote 2010.lnk
ShortcutTarget: Вырезка экрана и программа запуска для OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [0YndCase0Sync] -> {63D48440-63AB-44D0-B323-4731DFCDE9E9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [0YndCase1Modified] -> {7E7DC279-E6BE-4D57-9DEC-14FA0339DBC0} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [0YndCase2Error] -> {FB2FE984-05F5-4512-9D9B-69D3DE61F6D9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [0YndCase3Shared] -> {AF8D197E-7022-4c3d-BD88-68AD35C9C169} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\shellex.dll (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\shellex.dll (Kaspersky Lab ZAO)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:54351;https=127.0.0.1:54351
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ru.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x95233489EEB8CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ru
SearchScopes: HKCU - DefaultScope {657D88FB-2062-49A4-AEA7-7A36CC250064} URL = http://yandex.ru/yandsearch?clid=178289 ... earchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {657D88FB-2062-49A4-AEA7-7A36CC250064} URL = http://yandex.ru/yandsearch?clid=178289 ... earchTerms}
SearchScopes: HKCU - {77712A7F-38D3-4348-85A4-647F8EF62E7E} URL = https://www.google.com/search?q={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Помощник по входу с учетной записью Майкрософт -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {093500E9-F79F-4C52-A9B5-D8C7E4B3023E} file:///C:/Users/user/AppData/Local/Temp/o3d51CE.tmp.cab
DPF: HKLM-x32 {810B649C-CEAE-4AC9-BF26-81341B49E913} file:///C:/Users/user/AppData/Local/Temp/o3d432C.tmp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Hosts: Hosts file not detected in the default directory
Tcpip\..\Interfaces\{981F06F8-91E7-4460-9421-2C45EE4101B9}: [NameServer] 195.239.151.147 195.239.151.148

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @parallelgraphics.com/Cortona -> C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @altergeo.ru/Html5loc -> C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\npHtml5loc.dll No File
FF Plugin HKCU: @Google.com/GoogleEarthPlugin -> C:\Users\user\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\user\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npCortona.dll (ParallelGraphics)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npOutline3dWrapper.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\mailru---.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\mailru.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\online-tv.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\personas-for-firefox.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\yandex.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\yqs-barff-yandex.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\ascsurfingprotection@iobit.com [2014-07-24]
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\cs@dictionaries.addons.mozilla.org [2013-01-13]
FF Extension: Візуальныя закладкі - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\vb@yandex.ru [2014-09-09]
FF Extension: Кампанент "Элементы Яндекса" - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\yasearch@yandex.ru [2014-09-09]
FF Extension: HTML5 location provider - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\{B100D0FF-0001-8CE4-2790-AACE49B8AE35} [2014-04-17]
FF Extension: uToolbar - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\toolbar@unet.com.xpi [2013-11-16]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-09-29]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\url_advisor@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\virtual_keyboard@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\content_blocker@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\anti_banner@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\FFExt\online_banking@kaspersky.com [2014-10-02]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\urladvisor.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\online_banking_chrome.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\content_blocker_chrome.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\virtkbd.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\ChromeExt\ab.crx [2013-11-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 2GISUpdateService; C:\Program Files (x86)\2gis\3.0\2GISUpdateService.exe [3821080 2014-05-28] (ООО ДубльГИС)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky CRYSTAL 3.0\avp.exe [356128 2013-11-12] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)
S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Корпорация Майкрософт)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S2 USB-modem Beeline. RunOuc; C:\Program Files (x86)\USB-модем Билайн\Huawei\UpdateDog\ouc.exe [657504 2014-01-10] ()
S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Корпорация Майкрософт)
S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Корпорация Майкрософт)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [244736 2014-01-10] (Huawei Technologies Co., Ltd.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-10-02] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-10-02] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628288 2014-10-02] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-10-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-12] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-11-12] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-11-12] (Kaspersky Lab ZAO)
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94592 2010-11-21] (Корпорация Майкрософт)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [684544 2007-10-25] (PixArt Imaging Inc.)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S3 STIrUsb; C:\Windows\System32\DRIVERS\irstusb.sys [33792 2008-01-19] (SigmaTel, Inc.)
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-21] (Корпорация Майкрософт)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-09 07:41 - 2014-10-09 07:41 - 00000000 ____D () C:\Users\user\.android
2014-10-09 05:27 - 2014-10-09 04:55 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-10-09 04:56 - 2014-10-09 07:41 - 00015971 _____ () C:\zoek-results.log
2014-10-09 04:54 - 2014-10-09 05:13 - 00000000 ____D () C:\zoek_backup
2014-10-09 04:53 - 2014-10-09 04:53 - 01290752 _____ () C:\Users\user\Desktop\zoek.exe
2014-10-08 23:43 - 2014-10-09 03:09 - 00000000 ____D () C:\Users\user\Desktop\Arash
2014-10-06 04:53 - 2014-10-06 04:53 - 00003366 _____ () C:\Users\user\Desktop\AdwCleaner[S1].txt
2014-10-06 04:48 - 2014-10-06 04:48 - 01375089 _____ () C:\Users\user\Desktop\adwcleaner_3.311.exe
2014-10-06 04:42 - 2014-10-06 04:42 - 00003274 _____ () C:\Users\user\Desktop\JRT.txt
2014-10-06 04:35 - 2014-10-06 04:35 - 00000000 ____D () C:\Windows\ERUNT
2014-10-06 04:34 - 2014-10-06 04:34 - 01704938 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2014-10-04 22:05 - 2014-10-09 22:43 - 00028185 _____ () C:\Users\user\Desktop\FRST.txt
2014-10-04 22:05 - 2014-10-09 22:43 - 00000000 ____D () C:\FRST
2014-10-04 22:05 - 2014-10-04 22:06 - 00060946 _____ () C:\Users\user\Desktop\Addition.txt
2014-10-04 22:00 - 2014-10-04 22:01 - 02109440 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2014-10-02 22:55 - 2014-10-02 22:55 - 00002207 _____ () C:\Users\user\Desktop\Безопасные платежи.lnk
2014-10-02 22:54 - 2014-10-02 22:54 - 00001053 _____ () C:\Users\Public\Desktop\Kaspersky CRYSTAL.lnk
2014-10-02 22:54 - 2014-10-02 22:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky CRYSTAL
2014-10-02 22:54 - 2013-11-12 02:03 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2014-10-02 22:53 - 2014-10-02 22:53 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-10-02 22:53 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2014-10-02 22:53 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2014-10-02 22:52 - 2014-10-09 21:18 - 00000000 ____D () C:\Users\Все пользователи\Kaspersky Lab
2014-10-02 22:52 - 2014-10-09 21:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-10-02 22:52 - 2014-10-02 23:06 - 00628288 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-10-02 22:52 - 2014-10-02 23:06 - 00092768 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-10-02 22:52 - 2014-10-02 22:52 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-10-02 22:42 - 2014-10-02 22:42 - 195363976 _____ (Лаборатория Касперского) C:\Users\user\Desktop\pure13.0.2.558abcdRU_5695.exe
2014-10-02 22:11 - 2014-10-02 22:11 - 00171344 _____ (Kaspersky Lab) C:\Users\user\Desktop\kidokiller.exe
2014-10-02 21:56 - 2014-10-02 21:56 - 00000000 ____D () C:\Users\Все пользователи\Kaspersky Lab Setup Files
2014-10-02 21:56 - 2014-10-02 21:56 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\Users\Все пользователи\Apple Computer
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-10-01 22:45 - 2014-10-01 22:45 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-10-01 02:33 - 2014-09-25 06:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 02:33 - 2014-09-25 05:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-30 07:28 - 2014-09-30 07:28 - 00002050 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-09-30 00:27 - 2014-09-30 00:27 - 00000000 ____D () C:\Users\user\Desktop\Tyrkey
2014-09-29 21:17 - 2014-09-29 21:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-29 00:13 - 2014-10-06 04:52 - 00850288 _____ () C:\Windows\PFRO.log
2014-09-29 00:07 - 2014-09-10 02:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-29 00:07 - 2014-09-10 01:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-13 01:12 - 2014-09-14 22:15 - 00000000 ____D () C:\Users\user\Desktop\Music HTC super
2014-09-12 22:12 - 2014-10-09 17:49 - 00002572 _____ () C:\Windows\setupact.log
2014-09-12 22:12 - 2014-09-12 22:15 - 04967768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-12 22:12 - 2014-09-12 22:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-12 09:32 - 2014-09-12 09:32 - 00257199 _____ () C:\Users\user\Desktop\video.php
2014-09-12 08:16 - 2014-09-12 08:16 - 00088016 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-11 21:50 - 2014-09-14 21:19 - 00000000 ____D () C:\Users\user\Desktop\Music HTC-tak
2014-09-11 06:59 - 2014-09-11 06:59 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-11 06:58 - 2014-09-11 06:58 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-11 06:58 - 2014-09-11 06:58 - 00000000 ____D () C:\Users\user\AppData\Local\Apple
2014-09-11 06:57 - 2014-09-11 06:57 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-11 06:57 - 2014-09-11 06:57 - 00000000 ____D () C:\Users\Все пользователи\Apple
2014-09-11 06:57 - 2014-09-11 06:57 - 00000000 ____D () C:\ProgramData\Apple
2014-09-11 06:57 - 2014-09-11 06:57 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-09-11 05:09 - 2014-10-09 17:50 - 00000000 ____D () C:\Users\user\AppData\Local\HTC MediaHub
2014-09-11 05:09 - 2014-09-11 05:09 - 00001991 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-09-11 05:09 - 2014-09-11 05:09 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-09-10 03:06 - 2014-08-19 22:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 03:06 - 2014-08-19 21:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-10 03:06 - 2014-08-19 03:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 03:06 - 2014-08-19 02:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 03:06 - 2014-08-19 02:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-10 03:06 - 2014-08-19 02:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-10 03:06 - 2014-08-19 02:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 03:06 - 2014-08-19 02:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 03:06 - 2014-08-19 02:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 03:06 - 2014-08-19 02:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 03:06 - 2014-08-19 02:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-10 03:06 - 2014-08-19 02:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-10 03:06 - 2014-08-19 02:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-10 03:06 - 2014-08-19 02:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 03:06 - 2014-08-19 02:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 03:06 - 2014-08-19 02:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 03:06 - 2014-08-19 02:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-10 03:06 - 2014-08-19 02:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 03:06 - 2014-08-19 02:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-10 03:06 - 2014-08-19 01:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-10 03:06 - 2014-08-19 01:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 03:06 - 2014-08-19 01:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 03:06 - 2014-08-19 01:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-10 03:06 - 2014-08-19 01:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 03:06 - 2014-08-19 01:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-10 03:06 - 2014-08-19 01:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-10 03:06 - 2014-08-19 01:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-10 03:06 - 2014-08-19 01:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-10 03:06 - 2014-08-19 01:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 03:06 - 2014-08-19 01:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 03:06 - 2014-08-19 01:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-10 03:06 - 2014-08-19 01:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-10 03:06 - 2014-08-19 01:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 03:06 - 2014-08-19 01:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-10 03:06 - 2014-08-19 01:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-10 03:06 - 2014-08-19 01:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-10 03:06 - 2014-08-19 01:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-10 03:06 - 2014-08-19 01:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 03:06 - 2014-08-19 01:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 03:06 - 2014-08-19 01:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 03:06 - 2014-08-19 01:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-10 03:06 - 2014-08-19 01:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-10 03:06 - 2014-08-19 01:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-10 03:06 - 2014-08-19 01:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-10 03:06 - 2014-08-19 01:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-10 03:06 - 2014-08-19 01:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 03:06 - 2014-08-19 01:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-10 03:06 - 2014-08-19 01:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 03:06 - 2014-08-19 01:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-10 03:06 - 2014-08-19 01:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-10 03:06 - 2014-08-19 01:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-10 03:06 - 2014-08-19 00:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 03:06 - 2014-08-19 00:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-10 03:06 - 2014-08-19 00:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-10 03:06 - 2014-08-19 00:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-10 03:06 - 2014-08-19 00:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-10 03:01 - 2014-06-27 06:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 03:01 - 2014-06-27 05:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 01:54 - 2014-08-01 15:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 01:54 - 2014-08-01 15:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 01:53 - 2014-09-05 06:10 - 00578048 _____ (Корпорация Майкрософт (Microsoft Corp.)) C:\Windows\system32\aepdu.dll
2014-09-10 01:53 - 2014-09-05 06:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-10 01:53 - 2014-07-07 06:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 01:53 - 2014-07-07 06:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 01:53 - 2014-07-07 05:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 01:53 - 2014-07-07 05:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 01:53 - 2014-07-07 05:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-10 01:53 - 2014-06-24 07:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 01:53 - 2014-06-24 06:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-09 21:47 - 2014-10-09 01:40 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2014-09-09 21:46 - 2014-09-09 21:46 - 00001030 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-09-09 21:46 - 2014-09-09 21:46 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-09 20:51 - 2014-09-09 20:51 - 00000000 ____D () C:\Users\user\Desktop\100GOPRO
2014-09-09 06:33 - 2014-09-09 06:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс.Диск

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-09 22:36 - 2011-12-12 20:58 - 00000964 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-09 22:24 - 2012-10-11 10:38 - 00000896 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-09 20:36 - 2011-12-12 20:58 - 00000960 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-09 19:51 - 2012-01-20 11:22 - 00000970 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3689566885-1784086441-1960346923-1000UA.job
2014-10-09 17:56 - 2009-07-14 08:45 - 00032096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-09 17:56 - 2009-07-14 08:45 - 00032096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-09 17:52 - 2011-12-12 20:46 - 01714021 _____ () C:\Windows\WindowsUpdate.log
2014-10-09 17:49 - 2014-06-26 22:14 - 00000000 ___RD () C:\Users\user\YandexDisk
2014-10-09 17:49 - 2009-07-14 09:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-09 04:56 - 2012-10-13 06:27 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2014-10-09 02:04 - 2013-09-26 06:32 - 00158720 ___SH () C:\Users\user\Thumbs.db
2014-10-09 01:48 - 2012-01-20 11:22 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3689566885-1784086441-1960346923-1000Core.job
2014-10-09 00:28 - 2014-08-23 21:59 - 00000000 ____D () C:\Users\user\Desktop\Turecko
2014-10-08 10:06 - 2014-06-17 00:12 - 00000000 ____D () C:\Users\user\Desktop\Posledni vyber
2014-10-07 06:58 - 2010-11-21 16:28 - 00724680 _____ () C:\Windows\system32\perfh019.dat
2014-10-07 06:58 - 2010-11-21 16:28 - 00150996 _____ () C:\Windows\system32\perfc019.dat
2014-10-07 06:58 - 2009-07-14 09:13 - 01649802 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-06 04:50 - 2014-06-27 09:19 - 00000000 ____D () C:\AdwCleaner
2014-10-04 22:11 - 2014-02-28 20:37 - 00000000 ____D () C:\Program Files\WinRAR
2014-10-04 02:26 - 2014-01-17 02:19 - 01114112 ___SH () C:\Users\user\Desktop\Thumbs.db
2014-10-02 23:06 - 2013-11-12 02:03 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-10-02 23:06 - 2012-08-02 15:09 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys
2014-10-02 22:37 - 2013-11-03 04:20 - 00000000 ____D () C:\Users\Все пользователи\AVAST Software
2014-10-02 22:37 - 2013-11-03 04:20 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-02 21:58 - 2014-06-12 00:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-10-01 07:51 - 2012-04-06 12:18 - 00000000 ____D () C:\Users\user\Desktop\Работа
2014-10-01 05:54 - 2014-02-28 20:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-01 05:54 - 2014-02-28 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-30 23:32 - 2012-04-25 14:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ____D () C:\Users\Все пользователи\Skype
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-09-30 09:34 - 2012-01-15 00:05 - 00000000 ____D () C:\ProgramData\Skype
2014-09-30 07:28 - 2011-12-12 21:44 - 00002062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-09-30 07:28 - 2011-12-12 21:44 - 00000000 ____D () C:\Users\user\AppData\Local\Thunderbird
2014-09-29 22:27 - 2014-08-16 00:31 - 00000000 ____D () C:\Users\user\AppData\Roaming\AIMP3
2014-09-29 09:00 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\rescache
2014-09-29 00:24 - 2012-10-11 10:38 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-29 00:24 - 2012-10-11 10:38 - 00003834 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-29 00:24 - 2011-12-12 20:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-29 00:07 - 2013-01-27 10:56 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-28 23:56 - 2014-07-24 22:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\ProductData
2014-09-28 23:56 - 2011-12-12 20:59 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-09-28 23:56 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-28 23:56 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\servicing
2014-09-28 23:56 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\registration
2014-09-28 21:13 - 2012-01-22 19:31 - 00000000 ____D () C:\Users\user\AppData\Roaming\Media Player Classic
2014-09-28 09:06 - 2014-08-23 22:21 - 00000000 ____D () C:\Users\user\AppData\Local\Apple Computer
2014-09-15 09:06 - 2010-11-21 07:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-12 07:25 - 2014-04-28 11:03 - 00000000 ____D () C:\Users\user\Desktop\Hudba pro mobil
2014-09-12 07:18 - 2014-07-26 09:46 - 00000000 ____D () C:\Users\Все пользователи\Yandex
2014-09-12 07:18 - 2014-07-26 09:46 - 00000000 ____D () C:\Users\user\AppData\Local\Yandex
2014-09-12 07:18 - 2014-07-26 09:46 - 00000000 ____D () C:\ProgramData\Yandex
2014-09-12 07:18 - 2014-06-27 09:45 - 00000000 ____D () C:\Users\user\AppData\Roaming\Yandex
2014-09-11 21:51 - 2014-08-17 00:19 - 00000000 ____D () C:\Users\user\Desktop\Music - mobil
2014-09-11 20:00 - 2014-07-24 22:20 - 00000000 ____D () C:\Users\user\AppData\Roaming\Apple Computer
2014-09-11 20:00 - 2009-07-14 09:08 - 00032500 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-11 05:10 - 2014-08-23 22:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\HTC
2014-09-11 05:09 - 2014-08-23 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-09-11 05:09 - 2014-08-23 22:16 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-09-11 05:07 - 2014-08-23 22:15 - 00000000 ____D () C:\Users\Все пользователи\HTC
2014-09-11 05:07 - 2014-08-23 22:15 - 00000000 ____D () C:\ProgramData\HTC
2014-09-11 05:07 - 2012-04-18 16:31 - 00000000 ____D () C:\Temp
2014-09-11 04:11 - 2012-01-22 02:04 - 00000000 ____D () C:\Users\user\Desktop\Hesla
2014-09-10 03:06 - 2011-12-13 02:27 - 00000000 ____D () C:\Users\Все пользователи\Microsoft Help
2014-09-10 03:06 - 2011-12-13 02:27 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-10 03:05 - 2013-11-10 01:18 - 01623852 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-10 03:04 - 2013-07-21 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 03:01 - 2014-05-10 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-10 03:01 - 2011-12-16 03:30 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-09 21:28 - 2012-01-26 14:26 - 00000000 ____D () C:\Users\user\Desktop\Video
2014-09-09 06:33 - 2014-07-26 09:46 - 00002021 _____ () C:\Users\user\Desktop\Скриншоты в Яндекс.Диске.lnk
2014-09-09 06:33 - 2014-07-26 09:46 - 00001962 _____ () C:\Users\user\Desktop\Яндекс.Диск.lnk

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-06 01:05

==================== End Of Log ============================

[vyosek]

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  
  HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
  HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
  HKLM-x32\...\Run: [] => [X]
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Facebook Update] => C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [AdobeBridge] => [X]
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Browser Extensions] => "C:\Users\user\AppData\Roaming\Browser Extensions\CouponsHelper.exe"
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-12-12] (Google Inc.)
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [AlterGeoUpdater] => C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\html5locsvc.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [SyncManPath] => C:\Users\user\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe [23293216 2014-08-28] ()
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {4188ec2f-7af4-11e3-b153-50e549394b75} - H:\AutoRun.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {4188ec3e-7af4-11e3-b153-50e549394b75} - H:\AutoRun.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {605cd8ea-7968-11e3-ac39-50e549394b75} - H:\AutoRun.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {605cd903-7968-11e3-ac39-50e549394b75} - H:\AutoRun.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {6ed26daa-7b82-11e3-93ae-50e549394b75} - H:\AutoRun.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {ef1a7905-7237-11e3-b823-50e549394b75} - H:\AutoRun.exe
  HKU\S-1-5-21-3689566885-1784086441-1960346923-1000\...\MountPoints2: {ef1a7917-7237-11e3-b823-50e549394b75} - H:\AutoRun.exe
  ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
  ShellIconOverlayIdentifiers: [0YndCase0Sync] -> {63D48440-63AB-44D0-B323-4731DFCDE9E9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
  ShellIconOverlayIdentifiers: [0YndCase1Modified] -> {7E7DC279-E6BE-4D57-9DEC-14FA0339DBC0} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
  ShellIconOverlayIdentifiers: [0YndCase2Error] -> {FB2FE984-05F5-4512-9D9B-69D3DE61F6D9} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
  ShellIconOverlayIdentifiers: [0YndCase3Shared] -> {AF8D197E-7022-4c3d-BD88-68AD35C9C169} => C:\Program Files\Yandex\YandexDisk\bin\YandexDiskOverlays-2398.dll ()
  
  ProxyEnable: Internet Explorer proxy is enabled.
  ProxyServer: http=127.0.0.1:54351;https=127.0.0.1:54351
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ru.msn.com/?ocid=iehp
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x95233489EEB8CC01
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ru
  SearchScopes: HKCU - DefaultScope {657D88FB-2062-49A4-AEA7-7A36CC250064} URL = http://yandex.ru/yandsearch?clid=1782899&text={searchTerms}
  SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
  SearchScopes: HKCU - {657D88FB-2062-49A4-AEA7-7A36CC250064} URL = http://yandex.ru/yandsearch?clid=1782899&text={searchTerms}
  SearchScopes: HKCU - {77712A7F-38D3-4348-85A4-647F8EF62E7E} URL = https://www.google.com/search?q={searchTerms}
  BHO: Визуальные закладки -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File
  DPF: HKLM-x32 {093500E9-F79F-4C52-A9B5-D8C7E4B3023E} file:///C:/Users/user/AppData/Local/Temp/o3d51CE.tmp.cab
  DPF: HKLM-x32 {810B649C-CEAE-4AC9-BF26-81341B49E913} file:///C:/Users/user/AppData/Local/Temp/o3d432C.tmp.cab
  Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
  Hosts: Hosts file not detected in the default directory
  
  FF NetworkProxy: "type", 4
  FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\mailru---.xml
  FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\mailru.xml
  FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\personas-for-firefox.xml
  FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\yandex.xml
  FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\searchplugins\yqs-barff-yandex.xml
  FF Extension: Advanced SystemCare Surfing Protection - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\ascsurfingprotection@iobit.com [2014-07-24]
  FF Extension: uToolbar - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\4jx1p5se.default\Extensions\toolbar@unet.com.xpi [2013-11-16]
  FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-29]
  
  S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
  
  C:\Program Files\Yandex
  C:\Users\user\AppData\Roaming\Browser Extensions
  C:\Program Files (x86)\IObit
  2014-10-09 05:27 - 2014-10-09 04:55 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-10-09 04:56 - 2014-10-09 07:41 - 00015971 _____ () C:\zoek-results.log
  2014-10-09 04:54 - 2014-10-09 05:13 - 00000000 ____D () C:\zoek_backup
  2014-10-09 04:53 - 2014-10-09 04:53 - 01290752 _____ () C:\Users\user\Desktop\zoek.exe
  2014-10-08 23:43 - 2014-10-09 03:09 - 00000000 ____D () C:\Users\user\Desktop\Arash
  2014-10-06 04:53 - 2014-10-06 04:53 - 00003366 _____ () C:\Users\user\Desktop\AdwCleaner[S1].txt
  2014-10-06 04:48 - 2014-10-06 04:48 - 01375089 _____ () C:\Users\user\Desktop\adwcleaner_3.311.exe
  2014-10-06 04:42 - 2014-10-06 04:42 - 00003274 _____ () C:\Users\user\Desktop\JRT.txt
  2014-10-06 04:35 - 2014-10-06 04:35 - 00000000 ____D () C:\Windows\ERUNT
  2014-10-06 04:34 - 2014-10-06 04:34 - 01704938 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
  2014-10-04 22:05 - 2014-10-09 22:43 - 00028185 _____ () C:\Users\user\Desktop\FRST.txt
  2014-10-04 22:05 - 2014-10-04 22:06 - 00060946 _____ () C:\Users\user\Desktop\Addition.txt
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[Daniil]

Nechce se to ulozit, co delat. Muzete to popsat podrobneji asi delam neco spatne.

[vyosek]

Stahnete si tedy fixlist odsud http://leteckaposta.cz/540739272

Ulozte na plochu

Spustte FRST a kliknete na FIX

Restart PC a dejte mi sem fixlog.txt, ktery se vytvoril