VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosim o kontrolu, pc si dela co chce

https://forum.viry.cz:443/viewtopic.php?t=140890

Stránka 1 z 2

Prosim o kontrolu, pc si dela co chce

Napsal: 23 říj 2014 17:27
od eamon
Zdravim,prosim o kontrolu, pc si dela co chce v prohlizeci otevira sam dalsi stranky a pridava reklamy do stranek, dale i kdyz u pc treba nesedim hlasi avast treba 4 zabranene utoky, dale mi stale nachazi neoblibene rozsireni v prohlizeci ktere sice odstrani nicmene za par minut opet zpet.


Logfile of random's system information tool 1.10 (written by random/random)
Run by Eamon at 2014-10-23 18:21:01
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 27 GB (9%) free of 286 GB
Total RAM: 8156 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:21:17, on 23.10.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\HsMgr.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Nsasoft\RegAuditor\RegAuditor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Eamon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: cb53b500f3e90131a6091fb939dcadf40061915 - {11111111-1111-1111-1111-110611191115} - C:\Program Files (x86)\Senses\Senses-bho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Eamon\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 10094 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler64.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss ea069708-24f2-4e68-ae6f-7967a6440214 1
\??\C:\Windows\system32\conhost.exe "-213914467519765019821884322882-363950718-1895240652461833666237364327-616408161
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "1052340706-30223737488565238903289723-447904294-1512355937602753174-1087334196
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\SysWOW64\rundll32.exe" C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
"C:\Windows\SysWOW64\HsMgr.exe" Envoke
"C:\Windows\system\HsMgr64.exe" Envoke
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\Windows\system32\SearchIndexer.exe /Embedding
szndesktop.exe default start
"C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "1525731179403890905780763071-1684283139484592595-469018309-206718801-1754248580
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
taskeng.exe {A6310861-0A16-4C10-9195-F164D622079B}
"C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-6.exe" /rawdata=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

"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Nsasoft\RegAuditor\RegAuditor.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4808.0.1163617193\1722964286" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16,44 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc6 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4411 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Unused_2/PasswordGeneration/Disabled/PasswordManagerUI/Bubble/Prerender/Prerender15minTTL/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SDCH/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/group_86/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --channel="4808.4.823038962\254295757" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4808.5.1354839408\493382521" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe13_ Global\UsGthrCtrlFltPipeMssGthrPipe13 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Eamon\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-1.job - C:\Program Files (x86)\Senses\Senses-codedownloader.exe /rawdata=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
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-11.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-11.exe /rawdata=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
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-3.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-3.exe /rawdata=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
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-4.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-4.exe /rawdata=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
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-5.exe /rawdata=EGrmGApEzdwmOZc+Er3b2RmqzSft1CwFRoNa9roKvC9A48V94x1by4obRu41pD3KHZ/TmUQhty5kp6p5Cj+C9SfdLii9q4f+8Z/14DwBoUFQzxIMyikoPvCOrRrzMmEGNATmrbSuwkpxT2ue3AxuvMm53hsX5vGqyFQZq+zA5bbAh+ebd9RCKtaB9nOI2zSE8pEO8NvKs70QRxrlqxhelWAZFV76ms4upPzDovTVsXjuhD82Ljz1DizGnBCvk/fsIoTk6P7D/QR/mMcSe8BKWEUr27MyfBJ2vG09ZWOl0iYccaGUFSCUisdFTUY5cL4w6YQh0c4Ws6OiPO3qUEbSsrkGbw74b4tfdmijJAe24h5ZvY9k2aFvefqT1jfCH+6vGHcg3/gGXP5CS0eYIr4qKI+iyFfDe5WTizfaksne2WCiZzfT4lYp3o7guAeegNOdvrL7gfnbeA2QMbFU8da4HV0mMyw4P5qwBVcT3TZ1jtSWyGoq/wos9C8HbohGQEfrAFxos1YTANmR5SzTh7afisotTc5DPf94GLaU382qQqnxLVbfYZAyz9+LYid+V6l86k3MjjLcZzuKB/n6YbMlha8HF+EhZHSDdcW+cI/6UBgo3rg8rPr0iC9lbWTxSLeD0Gpr1p/4PrC3FzC5iAmXYGnxksXH/gIum/5pML+/BSplaWaBFCf7y5CDVGsMwhW0WcdQNJ9B9cREc9GZWYl/P/STvpWdvkMlsTEETLrO7vX75etnggxZ0wA/XxaBcKl96+WU3Ujk1rKzak5AVGcT6tsZoJyQDhyZcfNa4i5+QM6fVh+kHeqEcT+yW4OoI6BGWQFx6oe5GQQ+7yTLl7WiI3nGjWESO2nqmmJc5Zq6W91sPsiV7kRskiuA1ljHMH/JlhhCG4NG3QLHRtCvg5kyE8DIcrnWooJj+nWVD1o8/4xczcplxskpeZlxT0p2u+oNEd2ifxvwtocdlYUl8RGZxWaLgjBQP8yDNyGvTdvulKkf1g80GN+ZPWafVUTDPw9fCrrKz8FGxZciwXa5IjZG+EYeSArEgwyoHRrUHRUAJOzIzTGkUOrPZCV6Q0nE8AHx4+jwHHoWI8leuVU3kSfydWfVvnvKH1P4m2+UAWOtb29c8QZb5mO/pKtxDzQnC/1AiaQkBvG0aMGYoiXA5kTZQ+rgduIvztJKwUW7HsJbZHU=
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5_user.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-5.exe /rawdata=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
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-6.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-6.exe /rawdata=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
C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-7.job - C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-7.exe /rawdata=rjCZ82DlZWLIujm1UiubjrjPN46XO6bO1iTSmJS/yc9H2Ahu161I37t1ExqA5RvKf0/zdmC7gYcnDeu3jPLzPFnTwnfJB+mRgkcBjl90WofSrQT1kM72vllyK/bXzUhOkmk6I8SV9QD04x9Oign2Hvyb4AXGA/iaU3j9kgX52IGOV9BDoOXyq0xRdaSIb3J64TljGD8HinZFAmYcvFtSijg8/ArrjkL/vGHMo6qaRmD21vkPMeTxN2BNXcBHUPkq29qH9MMyt7+B5gfzNPLFB7aZVdJ+OsjiXnLGgMLkchtZz2KLs7Evmtau0uR2sXp+Im1c2zLlebW4LO+LgFvxgLiDVr5+xYQWCY1iD+0e3eKKloCCXewb+yAgCd2E+TEe3zAKnXRCAVEQ4n1v8C/MLOSS0RkDWdZyjyNjvRcpRTK9XvKE+6rUc/0q68p/zVEUsv+fk9o8criBnfCujCp7HEW240AJA26qlLY20d+E/Qf0233/2cSR0EfAOuy1x7jbKUB74DNdyCfjuKco7C5GX/vshTHCTLeV670i7Bd3kI8ZMAOVKMROyKy2gWCx4FDyF4kjVfXumEz+hLtAr0Zh/36qu6Qua5XdKSGurDPNsZtoK76dQLBAwLiw3SPZvqtFPG+NoyW5ffI0yLB38yCEBnyxFVUkwBvVl/6HsiOKy8wKt0r1lUtSXkZUUgp7e/B/4dLCRwILud5rRqojNMmkg3e9hIvDMZwOitRAetKn8wMmm2bt8jAQ4ZtixKYBgUean52DtACrDQcYTFAFeIsJIn0YN8tEThns0NciSTQKItsRVBDJU3UxBZQOMg4LXB3fYtTVP8GALOQgbNh8xsibOlooK1wAfVcNAYfVwQ/0hQsLJHTL8f1pP3k+DLp4r78cQFTCGapEcVlGk/40cy94WYAZHaB5Ntq10vqoo9YJ/WA0kqJIftsrSdufZagA6jc1yzt7ltotAkQoXr2mry5ejbswVGryAYB5B7DsFEI0HjBN21zIb33R2HeF9MqBkoBpKA+JOEv3PkuZHaSTIrK7HBCRHdQaZismeDG8/4WC1OK3QS8rBemwIMbMwRHh7LsCnngNm2UOu9ApPiTFZU9hRke0xU7+SvxE7So5g/L2w+GZecFCCLyOLYBoszC0lUVS6sq8fSR/uNFPhRNqpoBPGxQDSBRDtOiG7Xl4rVag92tTt2KsQR+JzOoBXmwum6NKS+Dpcy2+ZwITsT1wZtXgwbD1f6h89c35vkFvvc+Y4mib6pQz9zRel2ykqfGc09BLnhUtDuTlfE15ibLqfDSmVCvAoWuCSomBLhDLyV5326mS185cPYb52qQWstS0Ioie52FRd68dCg7sjlUch7a3v1hCyLYPqw500KZ1dUF2izq9hDABfhPhKTfARFLsjr5x1ftGjGnnzl75Qj4ndyrStPtZj8Wf1rF954aGv5TrqVf8XjS029NB/wf3aCP5yupQ7cVLQi7CRdrpY9yNKQ6rdyf191NHPbcutr9/PzbpWszwXaRbO9TBwklaxl8n2NuLKFjKkwJRTLka3ORMaW06wY6itB99LOagvxr/BryBSBVKJ1OcHnw9VTT5d/G1rMIKn0mVZYSQf9TMCbv3pgm15aEuwsIS6gkF750E5JTQNrDkqXiUm7Kvkwy6UIPRuTAK9TFAGAhmEwXhy7agMQJHz7YPi4219AIwX/cBkv5JtvZzm9KoxldMMtzk7aI8sThT+Hclqwxrryf6EC7DtiPSnLLrY5Kp4twfcV7wzW7mrG00648zbWneqOempLMbWPImza6c/qX2sn1jU9tR0j0PAA68vH6SNgPyeMFEQVT4O22vSCYTiE+J0/TTlZzoab9rBygfPJqiUkMAJKCqa7IrNg==
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\QTOI.job - C:\Users\Eamon\AppData\Roaming\QTOI.exe /infocmdline=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
C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 78f01119-9f6b-4afb-bc17-49905d19aec1.job - C:\Program Files\SUPERAntiSpyware\SASTask.exe "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" /TASK:78f01119-9f6b-4afb-bc17-49905d19aec1
C:\Windows\tasks\SUPERAntiSpyware Scheduled Task d6210b91-a7a5-438e-953b-63eeb8b99b17.job - C:\Program Files\SUPERAntiSpyware\SASTask.exe "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" /TASK:d6210b91-a7a5-438e-953b-63eeb8b99b17
C:\Windows\tasks\SYTVHF.job - C:\Users\Eamon\AppData\Roaming\SYTVHF.exe /infocmdline=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

=========Mozilla firefox=========

ProfilePath - C:\Users\Eamon\AppData\Roaming\Mozilla\Firefox\Profiles\ci3hmcx9.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}]
Senses - C:\Program Files (x86)\Senses\Senses-bho64.dll [2014-10-21 753568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-16 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}]
Senses - C:\Program Files (x86)\Senses\Senses-bho.dll [2014-10-21 559520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-17 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-16 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-17 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CmPCIaudio"=C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544]
"Cmaudio8768GX"=C:\Windows\syswow64\HsMgr.exe [2008-07-11 200704]
"Cmaudio8768GX64"=C:\Windows\system\HsMgr64.exe [2008-07-11 282112]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-09-17 2799784]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-09-17 2460488]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Eamon\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-10-07 7767832]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-09-26 6482200]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-31 4085896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-10-23 18:21:01 ----D---- C:\rsit
2014-10-23 18:21:01 ----D---- C:\Program Files\trend micro
2014-10-23 18:18:23 ----D---- C:\Program Files (x86)\Nsasoft
2014-10-22 18:32:12 ----D---- C:\Program Files (x86)\Ryse Son of Rome
2014-10-21 13:49:18 ----A---- C:\Users\Eamon\AppData\Roaming\QTOI.exe
2014-10-21 13:48:35 ----A---- C:\Users\Eamon\AppData\Roaming\SYTVHF.exe
2014-10-21 13:48:27 ----D---- C:\Program Files (x86)\Senses
2014-10-20 18:19:49 ----D---- C:\ProgramData\Codemasters
2014-10-20 15:26:23 ----D---- C:\Windows\system32\log
2014-10-17 19:43:15 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-10-17 19:43:10 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-10-17 19:43:10 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-10-17 19:43:10 ----A---- C:\Windows\SYSWOW64\java.exe
2014-10-17 19:42:56 ----D---- C:\Program Files (x86)\Java
2014-10-17 13:22:38 ----D---- C:\Users\Eamon\AppData\Roaming\LavasoftStatistics
2014-10-16 19:12:34 ----A---- C:\autoexec.bat
2014-10-16 17:49:43 ----D---- C:\Users\Eamon\AppData\Roaming\Frogwares
2014-10-16 17:08:03 ----D---- C:\ProgramData\IePluginServices
2014-10-16 17:06:09 ----AD---- C:\ProgramData\TEMP
2014-10-16 16:33:57 ----D---- C:\Users\Eamon\AppData\Roaming\Steam
2014-10-16 12:27:09 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-10-16 12:27:09 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-10-16 12:27:09 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-10-16 12:27:09 ----A---- C:\Windows\system32\mscories.dll
2014-10-16 12:27:09 ----A---- C:\Windows\system32\mscorier.dll
2014-10-16 12:27:09 ----A---- C:\Windows\system32\dfshim.dll
2014-10-15 22:33:22 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2014-10-15 10:12:57 ----A---- C:\Windows\system32\win32k.sys
2014-10-15 10:12:45 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2014-10-15 10:12:45 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-10-15 10:12:45 ----A---- C:\Windows\system32\drmv2clt.dll
2014-10-15 10:12:45 ----A---- C:\Windows\system32\blackbox.dll
2014-10-15 10:12:43 ----A---- C:\Windows\system32\wmp.dll
2014-10-15 10:12:42 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-10-15 10:12:42 ----A---- C:\Windows\system32\mf.dll
2014-10-15 10:12:41 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-10-15 10:12:41 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-10-15 10:12:41 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-10-15 10:12:40 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-10-15 10:12:39 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-10-15 10:12:39 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-10-15 10:12:39 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-10-15 10:12:39 ----A---- C:\Windows\system32\quartz.dll
2014-10-15 10:12:39 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2014-10-15 10:12:39 ----A---- C:\Windows\system32\ci.dll
2014-10-15 10:12:39 ----A---- C:\Windows\system32\AudioEng.dll
2014-10-15 10:12:38 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-10-15 10:12:38 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-10-15 10:12:38 ----A---- C:\Windows\system32\wintrust.dll
2014-10-15 10:12:38 ----A---- C:\Windows\system32\winresume.exe
2014-10-15 10:12:38 ----A---- C:\Windows\system32\winload.exe
2014-10-15 10:12:38 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-10-15 10:12:38 ----A---- C:\Windows\system32\evr.dll
2014-10-15 10:12:38 ----A---- C:\Windows\system32\EncDump.dll
2014-10-15 10:12:38 ----A---- C:\Windows\system32\cryptsvc.dll
2014-10-15 10:12:38 ----A---- C:\Windows\system32\crypt32.dll
2014-10-15 10:12:37 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-10-15 10:12:37 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-10-15 10:12:37 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-10-15 10:12:37 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-10-15 10:12:37 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-10-15 10:12:37 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-10-15 10:12:37 ----A---- C:\Windows\system32\mfplat.dll
2014-10-15 10:12:37 ----A---- C:\Windows\system32\cryptui.dll
2014-10-15 10:12:37 ----A---- C:\Windows\system32\audiosrv.dll
2014-10-15 10:12:37 ----A---- C:\Windows\system32\AudioSes.dll
2014-10-15 10:12:36 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-10-15 10:12:36 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-10-15 10:12:36 ----A---- C:\Windows\system32\srcore.dll
2014-10-15 10:12:36 ----A---- C:\Windows\system32\pcasvc.dll
2014-10-15 10:12:36 ----A---- C:\Windows\system32\cryptsp.dll
2014-10-15 10:12:35 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-10-15 10:12:35 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2014-10-15 10:12:35 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-10-15 10:12:35 ----A---- C:\Windows\system32\rstrui.exe
2014-10-15 10:12:35 ----A---- C:\Windows\system32\msscp.dll
2014-10-15 10:12:35 ----A---- C:\Windows\system32\msnetobj.dll
2014-10-15 10:12:35 ----A---- C:\Windows\system32\audiodg.exe
2014-10-15 10:12:35 ----A---- C:\Windows\system32\appidsvc.dll
2014-10-15 10:12:35 ----A---- C:\Windows\system32\appidapi.dll
2014-10-15 10:12:34 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-10-15 10:12:34 ----A---- C:\Windows\system32\drivers\appid.sys
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-10-15 10:12:33 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2014-10-15 10:12:33 ----A---- C:\Windows\system32\srclient.dll
2014-10-15 10:12:33 ----A---- C:\Windows\system32\spwmp.dll
2014-10-15 10:12:33 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-10-15 10:12:33 ----A---- C:\Windows\system32\rrinstaller.exe
2014-10-15 10:12:33 ----A---- C:\Windows\system32\mfps.dll
2014-10-15 10:12:33 ----A---- C:\Windows\system32\mfpmp.exe
2014-10-15 10:12:33 ----A---- C:\Windows\system32\dxmasf.dll
2014-10-15 10:12:33 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 10:12:33 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 10:12:32 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-10-15 10:12:32 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-10-15 10:12:32 ----A---- C:\Windows\system32\wmploc.DLL
2014-10-15 10:12:32 ----A---- C:\Windows\system32\mferror.dll
2014-10-15 10:12:25 ----A---- C:\Windows\system32\generaltel.dll
2014-10-15 10:12:25 ----A---- C:\Windows\system32\aepdu.dll
2014-10-15 10:12:25 ----A---- C:\Windows\system32\aeinv.dll
2014-10-15 10:12:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-10-15 10:12:23 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-10-15 10:12:23 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-10-15 10:12:23 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-10-15 10:12:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-10-15 10:12:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-10-15 10:12:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-10-15 10:12:22 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-15 10:12:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-10-15 10:12:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-10-15 10:12:22 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 10:12:22 ----A---- C:\Windows\system32\iernonce.dll
2014-10-15 10:12:22 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-10-15 10:12:22 ----A---- C:\Windows\system32\ie4uinit.exe
2014-10-15 10:12:21 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-10-15 10:12:21 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-10-15 10:12:21 ----A---- C:\Windows\system32\urlmon.dll
2014-10-15 10:12:21 ----A---- C:\Windows\system32\iedkcs32.dll
2014-10-15 10:12:20 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-10-15 10:12:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-10-15 10:12:20 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-10-15 10:12:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-10-15 10:12:20 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-15 10:12:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 10:12:20 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-10-15 10:12:20 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-15 10:12:19 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-10-15 10:12:19 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-10-15 10:12:19 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-10-15 10:12:19 ----A---- C:\Windows\system32\iesetup.dll
2014-10-15 10:12:19 ----A---- C:\Windows\system32\iertutil.dll
2014-10-15 10:12:18 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-10-15 10:12:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-10-15 10:12:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-10-15 10:12:18 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-10-15 10:12:18 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-10-15 10:12:18 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-15 10:12:18 ----A---- C:\Windows\system32\ieui.dll
2014-10-15 10:12:18 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-15 10:12:17 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-10-15 10:12:17 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-15 10:12:17 ----A---- C:\Windows\system32\jscript9diag.dll
2014-10-15 10:12:17 ----A---- C:\Windows\system32\jscript9.dll
2014-10-15 10:12:17 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-15 10:12:17 ----A---- C:\Windows\system32\ieframe.dll
2014-10-15 10:12:16 ----A---- C:\Windows\system32\wininet.dll
2014-10-15 10:12:16 ----A---- C:\Windows\system32\vbscript.dll
2014-10-15 10:12:16 ----A---- C:\Windows\system32\msrating.dll
2014-10-15 10:12:16 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-10-15 10:12:16 ----A---- C:\Windows\system32\ieapfltr.dll
2014-10-15 10:12:15 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 10:12:15 ----A---- C:\Windows\system32\mshtml.dll
2014-10-15 09:51:07 ----A---- C:\Windows\system32\msi.dll
2014-10-15 09:51:06 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-10-15 09:51:02 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-10-15 09:51:02 ----A---- C:\Windows\system32\rastls.dll
2014-10-15 09:50:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-10-15 09:50:55 ----A---- C:\Windows\system32\mstscax.dll
2014-10-15 09:50:54 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-10-15 09:50:54 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-10-15 09:50:54 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-10-15 09:50:54 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-10-15 09:50:54 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-10-15 09:50:54 ----A---- C:\Windows\system32\winsta.dll
2014-10-15 09:50:54 ----A---- C:\Windows\system32\winlogon.exe
2014-10-15 09:50:54 ----A---- C:\Windows\system32\TSpkg.dll
2014-10-15 09:50:54 ----A---- C:\Windows\system32\termsrv.dll
2014-10-15 09:50:54 ----A---- C:\Windows\system32\rdpcorets.dll
2014-10-15 09:50:54 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-10-15 09:50:54 ----A---- C:\Windows\system32\mstsc.exe
2014-10-15 09:50:54 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-10-15 09:50:54 ----A---- C:\Windows\system32\credssp.dll
2014-10-15 09:50:53 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-10-15 09:50:46 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-10-15 09:50:46 ----A---- C:\Windows\system32\packager.dll
2014-10-01 12:07:30 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-10-01 12:07:30 ----A---- C:\Windows\system32\qdvd.dll
2014-09-28 14:07:28 ----RD---- C:\Program Files (x86)\Skype
2014-09-26 15:58:08 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-09-26 15:58:08 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2014-10-23 18:21:04 ----D---- C:\Windows\Temp
2014-10-23 18:21:01 ----D---- C:\Program Files
2014-10-23 18:18:23 ----RD---- C:\Program Files (x86)
2014-10-23 18:18:21 ----D---- C:\Windows\Prefetch
2014-10-23 18:11:14 ----D---- C:\Windows\SysWOW64
2014-10-23 18:11:14 ----D---- C:\Windows
2014-10-23 18:11:14 ----D---- C:\Program Files (x86)\Common Files
2014-10-23 18:11:09 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-23 18:11:06 ----RSD---- C:\Windows\Fonts
2014-10-23 18:11:06 ----D---- C:\Windows\Help
2014-10-23 18:08:16 ----D---- C:\Users\Eamon\AppData\Roaming\uTorrent
2014-10-23 18:08:16 ----D---- C:\Users\Eamon\AppData\Roaming\DAEMON Tools Lite
2014-10-23 18:08:07 ----D---- C:\Windows\inf
2014-10-23 18:04:26 ----D---- C:\Program Files\CCleaner
2014-10-23 11:02:13 ----D---- C:\Windows\system32\config
2014-10-23 10:45:07 ----D---- C:\Program Files\SUPERAntiSpyware
2014-10-23 10:43:10 ----D---- C:\ProgramData\NVIDIA
2014-10-22 22:15:49 ----D---- C:\Users\Eamon\AppData\Roaming\Skype
2014-10-22 18:35:57 ----SHD---- C:\System Volume Information
2014-10-21 15:02:26 ----D---- C:\Windows\System32
2014-10-21 15:02:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-21 13:51:04 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-10-21 13:50:23 ----D---- C:\Windows\Tasks
2014-10-21 13:50:23 ----D---- C:\Windows\system32\Tasks
2014-10-21 13:48:40 ----SHD---- C:\Windows\Installer
2014-10-20 18:19:49 ----HD---- C:\ProgramData
2014-10-20 18:06:32 ----D---- C:\Games
2014-10-20 15:45:23 ----D---- C:\Windows\system32\drivers
2014-10-17 19:43:28 ----D---- C:\ProgramData\Oracle
2014-10-17 15:08:40 ----D---- C:\Program Files\Common Files
2014-10-16 22:23:36 ----D---- C:\Windows\winsxs
2014-10-16 17:27:17 ----HD---- C:\Windows\system32\GroupPolicy
2014-10-16 17:27:17 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-10-16 17:16:34 ----D---- C:\Windows\debug
2014-10-16 17:04:33 ----D---- C:\Users\Eamon\AppData\Roaming\Seznam.cz
2014-10-16 14:32:35 ----D---- C:\Windows\rescache
2014-10-16 13:52:25 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-10-16 12:39:46 ----D---- C:\Windows\Microsoft.NET
2014-10-16 12:37:11 ----RSD---- C:\Windows\assembly
2014-10-16 12:20:21 ----D---- C:\Windows\system32\catroot2
2014-10-16 12:11:15 ----D---- C:\Windows\SYSWOW64\Dism
2014-10-16 12:11:15 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-10-16 12:11:15 ----D---- C:\Program Files\Windows Media Player
2014-10-16 12:11:15 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-16 12:11:13 ----D---- C:\Windows\system32\en-US
2014-10-16 12:11:13 ----D---- C:\Windows\system32\Dism
2014-10-16 12:11:13 ----D---- C:\Windows\system32\cs-CZ
2014-10-16 12:11:11 ----D---- C:\Windows\system32\CodeIntegrity
2014-10-16 12:11:11 ----D---- C:\Windows\system32\Boot
2014-10-16 12:11:10 ----SD---- C:\Windows\system32\CompatTel
2014-10-16 12:11:09 ----D---- C:\Program Files\Internet Explorer
2014-10-16 12:11:08 ----D---- C:\Windows\SYSWOW64\en-US
2014-10-15 22:38:48 ----D---- C:\ProgramData\Microsoft Help
2014-10-15 22:33:12 ----D---- C:\Windows\system32\MRT
2014-10-15 22:27:54 ----A---- C:\Windows\system32\MRT.exe
2014-10-15 09:50:37 ----D---- C:\Windows\system32\catroot
2014-10-05 15:40:56 ----D---- C:\Windows\Logs
2014-10-02 15:53:02 ----N---- C:\Windows\system32\MpSigStub.exe
2014-09-28 14:07:32 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-16 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-16 224896]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-07-30 386680]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-16 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-07-16 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-16 427360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-08-02 283064]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-16 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-16 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-16 92008]
R3 cmuda3;C-Media PCI Audio Interface; C:\Windows\system32\drivers\cmudax3.sys [2011-03-30 2491392]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-08-07 65152]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-08-07 88832]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-09-17 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-09-17 19272]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-09-04 38048]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-04-10 849992]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-28 58536]
S3 ahj3zvgw;ahj3zvgw; C:\Windows\system32\drivers\ahj3zvgw.sys []
S3 athr;Atheros – ovladač pro zařízení pro rozšiřitelnou bezdrátovou síť LAN; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\fet6x64.sys [2009-06-10 47872]
S3 netr28x;Ralink 802.11n – bezdrátový ovladač pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 netr7364;Gigabyte RT73 - ovladač pro bezdrátovou síť pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr7364.sys [2009-06-10 707072]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-08-13 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-16 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-09-17 1148744]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-09-17 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-09-17 19439944]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-09-13 934216]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-07-06 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2013-07-06 107832]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-09-13 411968]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-21 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-14 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-14 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-19 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-08-15 119408]
S3 NMSAccessU;NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-07-02 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 23 říj 2014 17:29
od vyosek
Zdravim :)

:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
  • Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 23 říj 2014 18:36
od eamon
OTL logfile created on: 23.10.2014 18:54:07 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Eamon\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17358)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,96 Gb Total Physical Memory | 5,61 Gb Available Physical Memory | 70,44% Memory free
15,93 Gb Paging File | 13,31 Gb Available in Paging File | 83,60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279,36 Gb Total Space | 26,34 Gb Free Space | 9,43% Space Free | Partition Type: NTFS
Drive E: | 232,88 Gb Total Space | 185,85 Gb Free Space | 79,81% Space Free | Partition Type: NTFS
Drive F: | 298,09 Gb Total Space | 228,21 Gb Free Space | 76,56% Space Free | Partition Type: NTFS
Drive G: | 25,91 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: EAMON-PC | User Name: Eamon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2014.10.23 18:51:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Eamon\Downloads\OTL.exe
PRC - [2014.10.21 13:48:49 | 001,212,832 | ---- | M] (Object Browser) -- C:\Program Files (x86)\Senses\1b58c730-65b5-4e0d-a515-021b356a0503-6.exe
PRC - [2014.10.19 00:07:30 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler.exe
PRC - [2014.10.10 04:04:06 | 000,854,344 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014.09.17 04:15:08 | 002,460,488 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014.09.17 04:14:57 | 001,795,912 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2014.09.13 22:12:58 | 000,411,968 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2014.09.12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014.07.31 15:44:52 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2014.07.16 15:44:32 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014.03.04 11:19:52 | 003,696,912 | ---- | M] (Disc Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2013.07.06 12:55:17 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2013.07.06 12:55:00 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013.04.12 10:13:24 | 000,457,208 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
PRC - [2008.07.11 15:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe


========== Modules (No Company Name) ==========

MOD - [2014.10.21 13:48:49 | 000,139,168 | ---- | M] () -- C:\Program Files (x86)\Senses\8d530ec7-bf35-43d6-bd2f-dc57dad62877.dll
MOD - [2014.10.10 04:04:04 | 014,902,600 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\PepperFlash\pepflashplayer.dll
MOD - [2014.10.10 04:04:02 | 008,910,664 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\pdf.dll
MOD - [2014.10.10 04:03:56 | 001,042,760 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libglesv2.dll
MOD - [2014.10.10 04:03:54 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libegl.dll
MOD - [2014.10.10 04:03:53 | 001,681,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\ffmpegsumo.dll
MOD - [2014.07.16 15:44:35 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014.07.16 15:44:33 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll
MOD - [2013.09.05 00:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2013.04.29 11:54:54 | 001,663,000 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\libfoxcub.dll
MOD - [2013.04.22 12:47:54 | 000,541,208 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\postak3.dll
MOD - [2013.04.12 10:13:24 | 000,457,208 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
MOD - [2013.03.29 13:37:34 | 000,059,384 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\18385libfoxloader.dll
MOD - [2013.03.25 16:39:52 | 000,894,968 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\lightspeed.dll
MOD - [2008.07.11 15:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe


========== Services (SafeList) ==========

SRV:64bit: - [2014.09.19 03:25:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014.09.17 04:14:56 | 001,148,744 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
SRV:64bit: - [2014.09.17 04:14:52 | 019,439,944 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2014.08.13 18:49:09 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2014.07.16 15:44:32 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2014.10.21 13:51:05 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.09.17 04:14:57 | 001,795,912 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2014.09.13 22:12:58 | 000,411,968 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2014.09.12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014.08.15 18:10:37 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014.03.21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013.09.11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2013.07.06 12:55:17 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2013.07.06 12:55:00 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2008.10.20 21:18:26 | 000,071,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014.09.17 06:51:20 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2014.09.17 04:14:52 | 000,019,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:64bit: - [2014.09.04 21:14:38 | 000,038,048 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2014.08.02 15:21:12 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2014.07.30 12:42:23 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2014.07.16 15:44:53 | 000,427,360 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
DRV:64bit: - [2014.07.16 15:44:38 | 001,041,168 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
DRV:64bit: - [2014.07.16 15:44:38 | 000,224,896 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2014.07.16 15:44:38 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2014.07.16 15:44:38 | 000,092,008 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
DRV:64bit: - [2014.07.16 15:44:38 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2014.07.16 15:44:38 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2014.07.16 15:44:38 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
DRV:64bit: - [2013.04.10 11:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2012.08.28 14:27:24 | 000,058,536 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2012.08.07 15:09:00 | 000,088,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2012.08.07 15:09:00 | 000,065,152 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.07.22 18:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:64bit: - [2011.07.12 23:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:64bit: - [2011.03.30 12:16:32 | 002,491,392 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cmudax3.sys -- (cmuda3)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010.11.21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009.06.10 22:35:58 | 000,047,872 | ---- | M] (VIA Technologies, Inc. ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fet6x64.sys -- (FETNDIS)
DRV:64bit: - [2009.06.10 22:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)
DRV:64bit: - [2009.06.10 22:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}: "URL" = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}: "URL" = http://search.seznam.cz/?sourceid=quick ... earchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}: "URL" = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes,DefaultScope = {15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IESR02
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}: "URL" = http://search.seznam.cz/?sourceid=quick ... earchTerms}
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{52AE174B-A5EB-4CDA-B85D-42F0BD5B190A}: "URL" = http://encyklopedie.seznam.cz/search?q= ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{87D854F8-2170-4ECA-9DCC-82F2ACAB4030}: "URL" = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{9AD5D1E8-8522-4F87-80E5-68E839780E4F}: "URL" = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}: "URL" = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{AAAD57E5-F909-45EC-A89B-778D4A40A05E}: "URL" = http://www.mapy.cz/?query={searchTerms} ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{AB4AB3B2-8603-46E5-A2AF-DC15AFFD41E1}: "URL" = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{D455EE11-1273-4605-840A-504957543C4D}: "URL" = http://search.seznam.cz/?q={searchTerms ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{D9CFDB88-9CC7-4618-9FCA-34363CD1A66D}: "URL" = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{E8F316CD-9869-463C-B146-06B7E8D1BCC5}: "URL" = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..\SearchScopes\{F14B1102-1C65-4B44-B033-F00DB48E86F4}: "URL" = http://www.novinky.cz/hledej?w={searchT ... arch_12454
IE - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "mystartsearch"
FF - prefs.js..browser.startup.homepage: "https://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll File not found
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.07.16 15:44:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\faststartff@gmail.com: C:\Users\Eamon\AppData\Roaming\Mozilla\Firefox\Profiles\ci3hmcx9.default\extensions\faststartff@gmail.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2014.01.25 16:43:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Eamon\AppData\Roaming\Mozilla\Extensions
[2014.10.23 18:01:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Eamon\AppData\Roaming\Mozilla\Firefox\Profiles\ci3hmcx9.default\extensions
[2014.08.15 18:10:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014.08.15 18:10:38 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd\1.2.13_0\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgbdhkpacgdhfabeceekiafonfkipohm\1.0_0\
CHR - Extension: No name found = C:\Users\Eamon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Senses) - {11111111-1111-1111-1111-110611191115} - C:\Program Files (x86)\Senses\Senses-bho64.dll (Object Browser)
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Senses) - {11111111-1111-1111-1111-110611191115} - C:\Program Files (x86)\Senses\Senses-bho.dll (Object Browser)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:64bit: - HKLM..\Run: [Cmaudio8768GX] C:\Windows\syswow64\HsMgr.exe ()
O4:64bit: - HKLM..\Run: [Cmaudio8768GX64] C:\Windows\system\HsMgr64.exe ()
O4:64bit: - HKLM..\Run: [CmPCIaudio] C:\Windows\Syswow64\CMICNFG3.dll (C-Media Corporation)
O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [seznam-listicka-distribuce] C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000..\Run: [cz.seznam.software.autoupdate] C:\Users\Eamon\AppData\Roaming\Seznam.cz\szninstall.exe ()
O4 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000..\Run: [cz.seznam.software.szndesktop] C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe ()
O4 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..Trusted Domains: localhost ([]http in Internet)
O15 - HKU\S-1-5-21-365329572-2436669202-1961577668-1000\..Trusted Domains: mojebanka.cz ([www] https in Trusted sites)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{730F6FE2-F745-4C1A-A319-0608BAAAEC3B}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2014.10.16 19:12:34 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.12.12 00:00:00 | 000,000,041 | R--- | M] () - G:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{166ebc0e-1a32-11e4-92c7-94de802fa095}\Shell - "" = AutoRun
O33 - MountPoints2\{166ebc0e-1a32-11e4-92c7-94de802fa095}\Shell\AutoRun\command - "" = G:\setup.exe -- [1999.12.12 00:00:00 | 000,644,175 | R--- | M] (CODEX )
O33 - MountPoints2\{63d20e26-8419-11e3-8dc2-94de802fa095}\Shell - "" = AutoRun
O33 - MountPoints2\{63d20e26-8419-11e3-8dc2-94de802fa095}\Shell\AutoRun\command - "" = H:\DPFMate350.exe
O33 - MountPoints2\{b83f1306-511d-11e4-8c38-94de802fa095}\Shell - "" = AutoRun
O33 - MountPoints2\{b83f1306-511d-11e4-8c38-94de802fa095}\Shell\AutoRun\command - "" = I:\DPFMate350.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (sdnclean64.exe)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2014.10.23 18:21:01 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.10.23 18:21:01 | 000,000,000 | ---D | C] -- C:\rsit
[2014.10.23 18:18:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegAuditor
[2014.10.23 18:18:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nsasoft
[2014.10.22 19:09:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ryse Son of Rome
[2014.10.22 18:32:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ryse Son of Rome
[2014.10.21 13:49:18 | 001,464,224 | ---- | C] (Object Browser) -- C:\Users\Eamon\AppData\Roaming\QTOI.exe
[2014.10.21 13:48:35 | 001,943,456 | ---- | C] (Object Browser) -- C:\Users\Eamon\AppData\Roaming\SYTVHF.exe
[2014.10.21 13:48:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Senses
[2014.10.20 18:19:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2014.10.20 18:19:46 | 000,000,000 | ---D | C] -- C:\Users\Eamon\AppData\Local\SKIDROW
[2014.10.20 15:26:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\log
[2014.10.17 19:43:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2014.10.17 19:43:15 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2014.10.17 19:43:10 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2014.10.17 19:43:10 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2014.10.17 19:43:10 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2014.10.17 19:43:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014.10.17 19:42:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2014.10.17 13:22:38 | 000,000,000 | ---D | C] -- C:\Users\Eamon\AppData\Roaming\LavasoftStatistics
[2014.10.16 19:12:17 | 000,000,000 | ---D | C] -- C:\Users\Eamon\Start Menu
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2014.10.23 18:55:54 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.10.23 18:48:00 | 000,004,464 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-6.job
[2014.10.23 18:21:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014.10.23 18:18:23 | 000,001,153 | ---- | M] () -- C:\Users\Eamon\Desktop\RegAuditor.lnk
[2014.10.23 18:12:00 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.10.23 18:04:27 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014.10.23 13:49:36 | 000,004,464 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-4.job
[2014.10.23 13:49:04 | 000,001,334 | ---- | M] () -- C:\Windows\tasks\QTOI.job
[2014.10.23 13:49:00 | 000,003,750 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-1.job
[2014.10.23 13:49:00 | 000,002,760 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5_user.job
[2014.10.23 13:49:00 | 000,002,760 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5.job
[2014.10.23 13:48:07 | 000,003,784 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-3.job
[2014.10.23 13:48:03 | 000,005,490 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-11.job
[2014.10.23 13:48:03 | 000,001,338 | ---- | M] () -- C:\Windows\tasks\SYTVHF.job
[2014.10.23 13:48:01 | 000,004,128 | ---- | M] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-7.job
[2014.10.23 10:50:54 | 000,026,768 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.10.23 10:50:54 | 000,026,768 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.10.23 10:43:38 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.10.23 10:43:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.10.23 10:43:03 | 2118,815,743 | -HS- | M] () -- C:\hiberfil.sys
[2014.10.22 19:09:06 | 000,001,157 | ---- | M] () -- C:\Users\Eamon\Desktop\Ryse Son of Rome.lnk
[2014.10.21 15:02:26 | 001,584,554 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014.10.21 15:02:26 | 000,668,866 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2014.10.21 15:02:26 | 000,654,254 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014.10.21 15:02:26 | 000,141,526 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2014.10.21 15:02:26 | 000,122,126 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014.10.21 13:51:04 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014.10.21 13:51:04 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014.10.21 13:49:18 | 001,464,224 | ---- | M] (Object Browser) -- C:\Users\Eamon\AppData\Roaming\QTOI.exe
[2014.10.21 13:48:35 | 001,943,456 | ---- | M] (Object Browser) -- C:\Users\Eamon\AppData\Roaming\SYTVHF.exe
[2014.10.20 18:18:54 | 000,001,653 | ---- | M] () -- C:\Users\Eamon\Desktop\Play F1 2013.lnk
[2014.10.17 19:43:01 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2014.10.17 19:42:58 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2014.10.17 19:42:58 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2014.10.17 19:42:58 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2014.10.16 19:12:34 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014.10.23 18:55:54 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.10.23 18:18:23 | 000,001,153 | ---- | C] () -- C:\Users\Eamon\Desktop\RegAuditor.lnk
[2014.10.22 19:09:06 | 000,001,157 | ---- | C] () -- C:\Users\Eamon\Desktop\Ryse Son of Rome.lnk
[2014.10.21 13:49:46 | 000,002,760 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5_user.job
[2014.10.21 13:49:38 | 000,002,760 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5.job
[2014.10.21 13:49:21 | 000,003,750 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-1.job
[2014.10.21 13:49:19 | 000,001,334 | ---- | C] () -- C:\Windows\tasks\QTOI.job
[2014.10.21 13:49:00 | 000,004,464 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-4.job
[2014.10.21 13:48:46 | 000,004,464 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-6.job
[2014.10.21 13:48:43 | 000,004,128 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-7.job
[2014.10.21 13:48:37 | 000,005,490 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-11.job
[2014.10.21 13:48:36 | 000,001,338 | ---- | C] () -- C:\Windows\tasks\SYTVHF.job
[2014.10.21 13:48:30 | 000,003,784 | ---- | C] () -- C:\Windows\tasks\1b58c730-65b5-4e0d-a515-021b356a0503-3.job
[2014.10.20 18:18:54 | 000,001,653 | ---- | C] () -- C:\Users\Eamon\Desktop\Play F1 2013.lnk
[2014.10.16 19:12:34 | 000,000,000 | ---- | C] () -- C:\autoexec.bat
[2014.09.01 10:18:44 | 000,002,086 | ---- | C] () -- C:\Users\Eamon\AppData\Roaming\QTOI
[2014.09.01 10:18:44 | 000,001,248 | ---- | C] () -- C:\Users\Eamon\AppData\Roaming\SYTVHF
[2014.02.11 15:10:35 | 000,000,085 | ---- | C] () -- C:\Windows\wininit.ini
[2013.11.16 15:02:41 | 000,302,592 | ---- | C] () -- C:\Windows\mauninst.exe
[2013.07.06 12:55:09 | 000,107,832 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013.07.06 12:54:59 | 002,250,024 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2013.07.06 12:54:59 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013.07.04 15:12:11 | 000,000,000 | ---- | C] () -- C:\Users\Eamon\regbcm
[2013.07.02 12:34:54 | 000,000,161 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2013.07.01 18:28:18 | 000,200,704 | ---- | C] () -- C:\Windows\SysWow64\HsMgr.exe
[2013.07.01 18:28:18 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\VmixP6.dll
[2013.07.01 18:28:17 | 000,000,317 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.cfl
[2013.07.01 18:27:27 | 000,003,518 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.cfg
[2013.07.01 18:27:27 | 000,002,754 | ---- | C] () -- C:\Windows\cmudax3.ini
[2013.07.01 18:27:27 | 000,000,211 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.imi
[2013.07.01 17:59:30 | 001,559,268 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014.06.25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014.06.25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 23 říj 2014 18:37
od eamon
[2013.12.03 20:32:37 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\AVAST Software
[2014.03.06 15:55:15 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\BSplayer
[2013.07.01 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\BSplayer Pro
[2013.09.28 18:52:54 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Canneverbe_Limited
[2014.10.23 18:08:16 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\DAEMON Tools Lite
[2014.04.11 18:48:43 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Dropbox
[2014.04.11 18:48:43 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\DropboxMaster
[2014.10.16 17:49:43 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Frogwares
[2013.10.31 12:59:17 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Mumble
[2014.10.16 17:04:33 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Seznam.cz
[2014.10.16 16:33:57 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Steam
[2013.07.06 18:32:07 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Theta
[2014.10.23 18:08:16 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\uTorrent
[2013.11.27 14:54:48 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Wargaming.net

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,032,556 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013.07.01 17:38:03 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014.03.14 20:40:21 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.03.14 20:40:23 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014.03.18 14:05:57 | 000,000,510 | ---- | C] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 78f01119-9f6b-4afb-bc17-49905d19aec1.job
[2014.03.18 14:05:57 | 000,000,510 | ---- | C] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d6210b91-a7a5-438e-953b-63eeb8b99b17.job
[2014.10.21 13:48:30 | 000,003,784 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-3.job
[2014.10.21 13:48:36 | 000,001,338 | ---- | C] () -- C:\Windows\Tasks\SYTVHF.job
[2014.10.21 13:48:37 | 000,005,490 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-11.job
[2014.10.21 13:48:43 | 000,004,128 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-7.job
[2014.10.21 13:48:46 | 000,004,464 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-6.job
[2014.10.21 13:49:00 | 000,004,464 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-4.job
[2014.10.21 13:49:19 | 000,001,334 | ---- | C] () -- C:\Windows\Tasks\QTOI.job
[2014.10.21 13:49:21 | 000,003,750 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-1.job
[2014.10.21 13:49:38 | 000,002,760 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5.job
[2014.10.21 13:49:46 | 000,002,760 | ---- | C] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5_user.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010.11.21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.21 05:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.21 05:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.21 05:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.21 05:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.21 05:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SysNative\drivers\tcpip.sys
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2012.10.03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.05.08 08:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
[2013.09.08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014.04.05 04:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010.11.21 05:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.09.07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2013.05.08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
[2013.07.06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2012.10.03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2013.11.26 13:34:34 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=F55B41AA6114568AC558ADBABDA85620 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22525_none_11c3cc3c962abcc3\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2014.03.04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014.07.17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014.07.17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014.07.16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe

< >

< %systemroot%*.* /U /s >
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[5 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\47bca83565569e2e3b5c20252c0613e6\*.tmp files -> C:\Windows\SoftwareDistribution\Download\47bca83565569e2e3b5c20252c0613e6\*.tmp -> ]
[2 C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp files -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp -> ]
[2 C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp files -> C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp -> ]
[2 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp files -> C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp -> ]
[2 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp files -> C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\APPLICATION Data\*. >

< %ALLUSERSPROFILE%\APPLICATION Data\*.exe /s >

< %APPDATA%\*. >
[2013.07.04 16:56:01 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Adobe
[2013.12.03 20:32:37 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\AVAST Software
[2014.03.06 15:55:15 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\BSplayer
[2013.07.01 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\BSplayer Pro
[2013.09.28 18:52:54 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Canneverbe_Limited
[2014.10.23 18:08:16 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\DAEMON Tools Lite
[2014.04.11 18:48:43 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Dropbox
[2014.04.11 18:48:43 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\DropboxMaster
[2014.02.17 15:25:40 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\dvdcss
[2014.10.16 17:49:43 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Frogwares
[2013.07.01 22:33:59 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Identities
[2014.10.17 13:22:38 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\LavasoftStatistics
[2013.07.01 17:38:07 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Macromedia
[2010.11.21 11:38:07 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Media Center Programs
[2014.04.05 03:38:40 | 000,000,000 | --SD | M] -- C:\Users\Eamon\AppData\Roaming\Microsoft
[2014.01.25 16:43:55 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Mozilla
[2013.10.31 12:59:17 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Mumble
[2013.07.03 15:06:12 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\NVIDIA
[2013.12.03 18:51:59 | 000,000,000 | RH-D | M] -- C:\Users\Eamon\AppData\Roaming\SecuROM
[2014.10.16 17:04:33 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Seznam.cz
[2014.10.22 22:15:49 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Skype
[2014.10.16 16:33:57 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Steam
[2014.03.18 14:05:51 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\SUPERAntiSpyware.com
[2013.07.06 18:32:07 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Theta
[2014.10.23 18:08:16 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\uTorrent
[2014.07.01 16:15:05 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\vlc
[2013.11.27 14:54:48 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Wargaming.net
[2014.09.06 16:06:39 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\Winamp
[2013.07.03 13:06:47 | 000,000,000 | ---D | M] -- C:\Users\Eamon\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2014.10.21 13:49:18 | 001,464,224 | ---- | M] (Object Browser) -- C:\Users\Eamon\AppData\Roaming\QTOI.exe
[2014.10.21 13:48:35 | 001,943,456 | ---- | M] (Object Browser) -- C:\Users\Eamon\AppData\Roaming\SYTVHF.exe
[2009.08.11 21:21:26 | 000,087,552 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\AC3 Filter\ac3config.exe
[2009.08.11 21:21:30 | 000,090,112 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\AC3 Filter\spdif_test.exe
[2010.03.22 14:52:04 | 000,697,690 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
[2012.10.11 09:01:20 | 001,175,371 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\FFDShow\unins000.exe
[2010.08.14 10:42:54 | 000,113,152 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\Haali media splitter\dsmux.exe
[2010.08.14 10:45:10 | 000,358,400 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\Haali media splitter\gdsmux.exe
[2010.08.14 10:42:06 | 000,137,728 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\Haali media splitter\mkv2vfr.exe
[2010.09.30 15:30:22 | 000,042,305 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
[2014.03.19 14:17:02 | 032,667,896 | ---- | M] (Dropbox, Inc.) -- C:\Users\Eamon\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2014.03.19 14:18:14 | 000,244,648 | ---- | M] (Dropbox, Inc.) -- C:\Users\Eamon\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2014.03.19 14:17:06 | 000,143,616 | ---- | M] (Dropbox, Inc.) -- C:\Users\Eamon\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2013.05.16 15:25:04 | 001,062,472 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\szninstall.exe
[2013.04.29 12:53:34 | 000,045,560 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
[2013.04.22 12:48:46 | 000,047,640 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\postak.exe
[2013.04.12 10:13:24 | 000,457,208 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
[2013.04.12 10:10:22 | 000,092,664 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe
[2013.04.16 13:52:34 | 000,055,808 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\data\ffinstall\ffkill.exe
[2011.12.19 11:04:28 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\data\ffinstall\reg.exe
[2013.04.16 13:52:36 | 000,077,824 | ---- | M] () -- C:\Users\Eamon\AppData\Roaming\Seznam.cz\data\ffinstall\regctrl.exe
[2014.10.10 12:39:38 | 001,385,808 | ---- | M] (BitTorrent Inc.) -- C:\Users\Eamon\AppData\Roaming\uTorrent\uTorrent.exe
[2014.04.12 18:27:03 | 001,852,496 | ---- | M] (BitTorrent Inc.) -- C:\Users\Eamon\AppData\Roaming\uTorrent\updates\3.4.0_30596.exe
[2014.04.12 18:27:07 | 001,264,984 | ---- | M] (BitTorrent Inc.) -- C:\Users\Eamon\AppData\Roaming\uTorrent\updates\3.4.1_30740.exe
[2014.10.09 19:13:57 | 001,272,400 | ---- | M] (BitTorrent Inc.) -- C:\Users\Eamon\AppData\Roaming\uTorrent\updates\3.4.1_31139.exe
[2014.10.10 12:39:38 | 001,385,808 | ---- | M] (BitTorrent Inc.) -- C:\Users\Eamon\AppData\Roaming\uTorrent\updates\3.4.2_34309.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.JOB >
[2014.10.23 13:49:00 | 000,003,750 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-1.job
[2014.10.23 13:48:03 | 000,005,490 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-11.job
[2014.10.23 13:48:07 | 000,003,784 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-3.job
[2014.10.23 13:49:36 | 000,004,464 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-4.job
[2014.10.23 13:49:00 | 000,002,760 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5.job
[2014.10.23 13:49:00 | 000,002,760 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-5_user.job
[2014.10.23 18:48:00 | 000,004,464 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-6.job
[2014.10.23 13:48:01 | 000,004,128 | ---- | M] () -- C:\Windows\Tasks\1b58c730-65b5-4e0d-a515-021b356a0503-7.job
[2014.10.23 18:21:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014.10.23 10:43:38 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.10.23 19:12:00 | 000,000,952 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014.10.23 13:49:04 | 000,001,334 | ---- | M] () -- C:\Windows\Tasks\QTOI.job
[2014.03.18 14:05:57 | 000,000,510 | ---- | M] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 78f01119-9f6b-4afb-bc17-49905d19aec1.job
[2014.03.18 14:05:57 | 000,000,510 | ---- | M] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d6210b91-a7a5-438e-953b-63eeb8b99b17.job
[2014.10.23 13:48:03 | 000,001,338 | ---- | M] () -- C:\Windows\Tasks\SYTVHF.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2014.10.21 13:51:04 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\system32\FlashPlayerApp.exe
[2014.10.21 13:51:04 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\system32\FlashPlayerCPLApp.cpl

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"cz.seznam.software.autoupdate" = "C:\Users\Eamon\AppData\Roaming\Seznam.cz\szninstall.exe" -c -- [2013.05.16 15:25:04 | 001,062,472 | ---- | M] ()
"cz.seznam.software.szndesktop" = "C:\Users\Eamon\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q -- [2013.04.12 10:10:22 | 000,092,664 | ---- | M] ()
"SUPERAntiSpyware" = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe -- [2014.10.07 16:07:55 | 007,767,832 | ---- | M] (SUPERAntiSpyware)
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2014.03.04 11:19:52 | 003,696,912 | ---- | M] (Disc Soft Ltd)
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.21 05:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
"CCleaner Monitoring" = "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR -- [2014.09.26 16:04:08 | 006,482,200 | ---- | M] (Piriform Ltd)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2014.08.15 18:10:38 | 000,275,568 | ---- | M] (Mozilla Corporation) MD5=10F36FB8CD6218CD7F818268E0F3F9C6 -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2014.10.07 04:04:46 | 000,812,736 | ---- | M] (Microsoft Corporation) MD5=F9F310F9FB7F294F00ABDD03453D8CEE -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\APPLICATION\chrome.exe /md5 >
[2014.10.10 04:04:06 | 000,854,344 | ---- | M] (Google Inc.) MD5=B53D59915A356B06C1D7DE5B22B4177C -- C:\Program Files (x86)\Google\Chrome\APPLICATION\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.10.23 18:55:54 | 000,000,512 | ---- | M] () MD5=43DDCC25BD9E563B1BF3075390F48CB1 -- C:\PhysicalMBR.bin
[1 C:\*.tmp files -> C:\*.tmp -> ]

< >

< *crack* /s >
[2014.02.05 19:41:19 | 000,213,184 | ---- | M] () -- \Games\World_of_Tanks\res\audio\objects_ice_crack.fsb
[2010.11.09 08:49:48 | 040,868,256 | ---- | M] () -- \Program Files (x86)\Activision\Call of Duty - Black Ops\zone\Common\mp_cracked.ff
[2010.11.09 08:49:48 | 000,019,296 | ---- | M] () -- \Program Files (x86)\Activision\Call of Duty - Black Ops\zone\English\en_mp_cracked.ff
[2014.01.02 18:53:22 | 000,000,032 | R--- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\SKIDROWCRACK.COM.txt
[2014.01.02 18:53:22 | 000,000,113 | R--- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\SKIDROWCRACK.COM.url
[2014.01.02 19:21:52 | 000,000,032 | R--- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\Support\SKIDROWCRACK.COM.txt
[2014.01.02 19:21:52 | 000,000,113 | R--- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\Support\SKIDROWCRACK.COM.url

< *keygen* /s >

< *loader* /s >
[2013.10.04 00:06:54 | 000,001,924 | ---- | M] () -- \Games\F1\F1 2013\ai\track_statistics_loader.xml
[2013.10.04 00:06:54 | 000,000,115 | ---- | M] () -- \Games\F1\F1 2013\audio\audio_loader.xml
[2013.10.04 00:06:54 | 000,000,342 | ---- | M] () -- \Games\F1\F1 2013\scenes\garage_loader.xml
[2013.10.04 00:06:54 | 000,001,042 | ---- | M] () -- \Games\F1\F1 2013\scenes\paddock_gameloader.xml
[2013.10.04 00:06:54 | 000,000,645 | ---- | M] () -- \Games\F1\F1 2013\scenes\paddock_loader.xml
[2013.10.04 00:06:54 | 000,001,986 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader.xml
[2013.10.04 00:06:54 | 000,001,832 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_gaqa.xml
[2013.10.04 00:06:54 | 000,001,830 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_gara.xml
[2013.10.04 00:06:54 | 000,001,831 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_gate.xml
[2013.10.04 00:06:54 | 000,001,807 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_gate_nt.xml
[2013.10.04 00:06:54 | 000,001,832 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_gawc.xml
[2013.10.04 00:06:54 | 000,002,060 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_pfqa.xml
[2013.10.04 00:06:54 | 000,002,060 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_pfra.xml
[2013.10.04 00:06:54 | 000,002,058 | ---- | M] () -- \Games\F1\F1 2013\scenes\parcferme_loader_pfwc.xml
[2013.10.04 00:06:54 | 000,000,629 | ---- | M] () -- \Games\F1\F1 2013\scenes\pitstop_loader.xml
[2013.10.04 00:06:54 | 000,000,722 | ---- | M] () -- \Games\F1\F1 2013\scenes\race_marshal_loader.xml
[2013.10.04 00:06:54 | 000,001,587 | ---- | M] () -- \Games\F1\F1 2013\scenes\trackside_garage_loader.xml
[2013.10.04 00:06:54 | 000,001,578 | ---- | M] () -- \Games\F1\F1 2013\scenes\trackside_garage_reloader.xml
[2013.10.04 00:06:54 | 000,000,149 | ---- | M] () -- \Games\F1\F1 2013\system\osd_loader.xml
[2013.06.12 13:05:20 | 000,071,208 | ---- | M] () -- \Games\World_of_Tanks\PhysXLoader.dll
[2014.06.04 11:31:51 | 000,001,508 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\eulaversionloader.pyc
[2014.02.05 19:41:19 | 000,002,209 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\graphicspresetsloader.pyc
[2014.02.05 19:41:19 | 000,007,130 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\guicolorsloader.pyc
[2014.02.05 19:41:19 | 000,003,955 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\guisoundsloader.pyc
[2014.02.05 19:41:19 | 000,006,579 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\logindataloader.pyc
[2014.02.05 19:41:19 | 000,002,753 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\windowsstoreddataloader.pyc
[2014.09.17 13:48:49 | 000,001,502 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\scaleform\framework\entities\abstract\loadermanagermeta.pyc
[2014.09.17 13:48:49 | 000,006,833 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\scaleform\framework\managers\loaders.pyc
[2014.09.17 13:48:49 | 000,003,415 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\helpers\rssdownloader.pyc
[2014.09.17 13:48:49 | 000,007,350 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\tutorial\loader.pyc
[2014.02.05 19:41:19 | 000,011,286 | ---- | M] () -- \Games\World_of_Tanks\res_bw\scripts\common\lib\unittest\loader.pyc
[2013.03.09 08:17:04 | 000,268,440 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2013.03.09 08:17:04 | 000,019,080 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2014.09.17 04:14:17 | 001,169,224 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\ExtensionLoader.dll
[2014.06.10 16:42:34 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2014.06.10 16:42:34 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2014.06.10 16:42:30 | 000,070,464 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2014.06.10 16:42:30 | 000,085,312 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2014.10.21 13:49:32 | 001,062,816 | ---- | M] () -- \Program Files (x86)\Senses\Senses-codedownloader.exe
[2013.01.21 16:03:44 | 000,030,608 | ---- | M] () -- \Program Files (x86)\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
[2013.11.14 18:57:21 | 000,434,176 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\Assassin's Creed IV Black Flag Gold Edition-SKIDROWCRACK\uplay_r1_loader.dll
[2012.07.12 15:03:08 | 000,329,056 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2014.07.16 15:44:31 | 000,071,968 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader32.exe
[2014.07.16 15:44:31 | 000,085,376 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader64.exe
[2013.03.09 08:52:18 | 000,364,168 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2013.03.09 08:52:18 | 000,019,080 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2013.05.16 16:41:22 | 001,152,288 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{381B0D17-0D96-4349-B869-B50D2C147FB6}\ExtensionLoader.dll
[2014.07.30 12:42:42 | 000,057,728 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\img\dt_dadget_loader.png
[2014.07.30 12:42:43 | 000,057,728 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin1\dt_dadget_loader.png
[2014.07.30 12:42:43 | 000,057,728 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin2\dt_dadget_loader.png
[2014.07.30 12:42:43 | 000,057,728 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin3\dt_dadget_loader.png
[2014.07.30 12:42:43 | 000,057,728 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin4\dt_dadget_loader.png
[2014.07.30 12:42:43 | 000,061,770 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin5\dt_dadget_loader.png
[2014.07.30 12:42:43 | 000,061,770 | ---- | M] () -- \Users\Eamon\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin6\dt_dadget_loader.png
[2013.10.07 12:23:01 | 000,012,811 | ---- | M] () -- \Users\Eamon\AppData\Local\Overwolf\InstallerCache\preloader_3337.gif
[2014.07.24 14:53:16 | 000,072,638 | ---- | M] () -- \Users\Eamon\AppData\Local\Skype\Apps\login\images\loader.gif
[2014.07.24 14:53:16 | 000,003,032 | ---- | M] () -- \Users\Eamon\AppData\Local\Skype\Apps\login\images\loader.png
[2014.07.24 14:53:16 | 000,006,012 | ---- | M] () -- \Users\Eamon\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif
[2014.07.24 14:53:16 | 000,021,956 | ---- | M] () -- \Users\Eamon\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif
[2014.07.24 14:53:16 | 000,009,772 | ---- | M] () -- \Users\Eamon\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png
[2014.10.04 08:43:23 | 001,172,288 | ---- | M] () -- \Users\Eamon\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\16.13.56.0\GFExperience\ExtensionLoader.dll
[2014.10.04 08:44:03 | 000,897,344 | ---- | M] () -- \Users\Eamon\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\16.13.56.0\NVI2\NVDownloader.dll
[2014.10.04 08:41:46 | 000,000,818 | ---- | M] () -- \Users\Eamon\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\16.13.56.0\NVI2\NVI2DownloaderExt.CFG
[2014.10.04 08:41:46 | 000,811,840 | ---- | M] () -- \Users\Eamon\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\16.13.56.0\NVI2\NVI2DownloaderExt.DLL
[2013.04.15 13:32:10 | 000,060,416 | ---- | M] () -- \Users\Eamon\AppData\Roaming\Seznam.cz\bin\18385libfoxloader-x64.dll
[2013.03.29 13:37:34 | 000,059,384 | ---- | M] () -- \Users\Eamon\AppData\Roaming\Seznam.cz\bin\18385libfoxloader.dll
[2013.07.01 18:28:55 | 000,000,165 | ---- | M] () -- \Users\Eamon\AppData\Roaming\Seznam.cz\conf\szndesktop.d\libfoxloader.conf
[2013.04.15 10:11:08 | 000,031,512 | ---- | M] () -- \Users\Eamon\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libfoxloader-3.1.2-win32.zip
[2013.03.25 16:27:20 | 000,000,665 | ---- | M] () -- \Users\Eamon\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxloader_3_1_2.install.bat
[2013.03.25 16:27:26 | 000,000,117 | ---- | M] () -- \Users\Eamon\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxloader_3_1_2.uninstall.bat
[2013.11.14 18:57:21 | 000,434,176 | ---- | M] () -- \Users\Eamon\Downloads\Assassins Creed IV.Black Flag SPECIAL EDITION crac + cz\ac4.crack.v3+v4\crack v4\uplay_r1_loader.dll
[2014.10.23 13:49:00 | 000,025,106 | ---- | M] () -- \Windows\Prefetch\SENSES-CODEDOWNLOADER.EXE-5A78CD46.pf
[2014.07.08 23:51:48 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_da-dk_2e996e2009f56895.manifest
[2014.07.08 23:51:22 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_de-de_2bc5035c0bcbbd2f.manifest
[2014.07.08 23:51:25 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_el-gr_d45b30eefae125bd.manifest
[2014.07.08 23:52:01 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_en-us_d4b5d954faa9c8f4.manifest
[2014.07.08 23:51:37 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_es-es_d4813638fad0ba99.manifest
[2014.07.08 23:51:22 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_fi-fi_739c3ae5efeaacc3.manifest
[2014.07.08 23:51:31 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_fr-fr_7738ac37eda2d0fb.manifest
[2014.07.08 23:52:03 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_hu-hu_bea92c7fd202a017.manifest
[2014.07.08 23:51:46 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_it-it_6160a27ec4d4b679.manifest
[2014.07.08 23:51:51 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_ja-jp_0386218bb7efc854.manifest
[2014.07.08 23:51:11 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_ko-kr_a6effe40aa608f6a.manifest
[2014.07.08 23:51:17 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_nb-no_8f827f758285bb26.manifest
[2014.07.08 23:51:46 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_nl-nl_8dc1cab383b1c4fb.manifest
[2014.07.08 23:51:44 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_pl-pl_d3fe253568d432af.manifest
[2014.07.08 23:51:31 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_pt-br_d6520fd9675dc693.manifest
[2014.07.08 23:51:12 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_pt-pt_d733df4566cd366f.manifest
[2014.07.08 23:51:24 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_ru-ru_1dd6f1094baec49b.manifest
[2014.07.08 23:51:26 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_sv-se_b9d1db7e42d7cef6.manifest
[2014.07.08 23:51:38 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_tr-tr_62df25c53193d0e7.manifest
[2014.07.08 23:51:46 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_zh-cn_343c43c2e1cba306.manifest
[2014.07.08 23:51:18 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_zh-hk_32e73c50e2a71596.manifest
[2014.07.08 23:51:24 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_zh-tw_38388118df3c7f76.manifest
[2014.07.08 23:51:13 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_da-dk_2f183ce5231b2177.manifest
[2014.07.08 23:51:30 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_de-de_2c43d22124f17611.manifest
[2014.07.08 23:51:21 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_el-gr_d4d9ffb41406de9f.manifest
[2014.07.08 23:52:05 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_en-us_d534a81a13cf81d6.manifest
[2014.07.08 23:51:12 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_es-es_d50004fe13f6737b.manifest
[2014.07.08 23:51:30 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_fi-fi_741b09ab091065a5.manifest
[2014.07.08 23:51:13 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_fr-fr_77b77afd06c889dd.manifest
[2014.07.08 23:52:05 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_hu-hu_bf27fb44eb2858f9.manifest
[2014.07.08 23:52:05 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_it-it_61df7143ddfa6f5b.manifest
[2014.07.08 23:51:54 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_ja-jp_0404f050d1158136.manifest
[2014.07.08 23:51:36 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_ko-kr_a76ecd05c386484c.manifest
[2014.07.08 23:51:59 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_nb-no_90014e3a9bab7408.manifest
[2014.07.08 23:51:59 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_nl-nl_8e4099789cd77ddd.manifest
[2014.07.08 23:52:00 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_pl-pl_d47cf3fa81f9eb91.manifest
[2014.07.08 23:51:49 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_pt-br_d6d0de9e80837f75.manifest
[2014.07.08 23:52:02 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_pt-pt_d7b2ae0a7ff2ef51.manifest
[2014.07.08 23:51:44 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_ru-ru_1e55bfce64d47d7d.manifest
[2014.07.08 23:51:29 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_sv-se_ba50aa435bfd87d8.manifest
[2014.07.08 23:51:22 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_tr-tr_635df48a4ab989c9.manifest
[2014.07.08 23:51:34 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_zh-cn_34bb1287faf15be8.manifest
[2014.07.08 23:51:42 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_zh-hk_33660b15fbccce78.manifest
[2014.07.08 23:51:10 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_zh-tw_38b74fddf8623858.manifest
[2014.07.08 23:51:20 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_9f5264e54ecc21f2.manifest
[2014.07.08 23:51:14 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_da-dk_3c8c450c45121df1.manifest
[2014.07.08 23:51:52 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_de-de_39b7da4846e8728b.manifest
[2014.07.08 23:52:05 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_el-gr_e24e07db35fddb19.manifest
[2014.07.08 23:51:04 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_en-us_e2a8b04135c67e50.manifest
[2014.07.08 23:51:24 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_es-es_e2740d2535ed6ff5.manifest
[2014.07.08 23:51:45 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_fi-fi_818f11d22b07621f.manifest
[2014.07.08 23:51:32 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_fr-fr_852b832428bf8657.manifest
[2014.07.08 23:51:35 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_hu-hu_cc9c036c0d1f5573.manifest
[2014.07.08 23:51:44 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_it-it_6f53796afff16bd5.manifest
[2014.07.08 23:51:38 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_ja-jp_1178f877f30c7db0.manifest
[2014.07.08 23:51:25 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_ko-kr_b4e2d52ce57d44c6.manifest
[2014.07.08 23:51:05 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_nb-no_9d755661bda27082.manifest
[2014.07.08 23:52:02 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_nl-nl_9bb4a19fbece7a57.manifest
[2014.07.08 23:51:42 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_pl-pl_e1f0fc21a3f0e80b.manifest
[2014.07.08 23:51:05 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_pt-br_e444e6c5a27a7bef.manifest
[2014.07.08 23:51:28 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_pt-pt_e526b631a1e9ebcb.manifest
[2014.07.08 23:52:03 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_ru-ru_2bc9c7f586cb79f7.manifest
[2014.07.08 23:51:34 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_sv-se_c7c4b26a7df48452.manifest
[2014.07.08 23:51:13 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_tr-tr_70d1fcb16cb08643.manifest
[2014.07.08 23:51:20 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_zh-cn_422f1aaf1ce85862.manifest
[2014.07.08 23:52:03 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_zh-hk_40da133d1dc3caf2.manifest
[2014.07.08 23:51:19 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_zh-tw_462b58051a5934d2.manifest
[2014.07.08 23:51:06 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_cs-cz_9fd133aa67f1dad4.manifest
[2014.07.08 23:51:38 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_da-dk_3d0b13d15e37d6d3.manifest
[2014.07.08 23:51:07 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_de-de_3a36a90d600e2b6d.manifest
[2014.07.08 23:51:50 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_el-gr_e2ccd6a04f2393fb.manifest
[2014.07.08 23:51:25 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_en-us_e3277f064eec3732.manifest
[2014.07.08 23:51:49 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_es-es_e2f2dbea4f1328d7.manifest
[2014.07.08 23:51:40 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_fi-fi_820de097442d1b01.manifest
[2014.07.08 23:51:20 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_fr-fr_85aa51e941e53f39.manifest
[2014.07.08 23:51:44 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_hu-hu_cd1ad23126450e55.manifest
[2014.07.08 23:51:56 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_it-it_6fd24830191724b7.manifest
[2014.07.08 23:51:55 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_ja-jp_11f7c73d0c323692.manifest
[2014.07.08 23:51:28 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_ko-kr_b561a3f1fea2fda8.manifest
[2014.07.08 23:51:47 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_nb-no_9df42526d6c82964.manifest
[2014.07.08 23:51:12 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_nl-nl_9c337064d7f43339.manifest
[2014.07.08 23:52:04 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_pl-pl_e26fcae6bd16a0ed.manifest
[2014.07.08 23:51:54 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_pt-br_e4c3b58abba034d1.manifest
[2014.07.08 23:51:13 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_pt-pt_e5a584f6bb0fa4ad.manifest
[2014.07.08 23:51:29 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_ru-ru_2c4896ba9ff132d9.manifest
[2014.07.08 23:51:35 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_sv-se_c843812f971a3d34.manifest
[2014.07.08 23:51:35 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_tr-tr_7150cb7685d63f25.manifest
[2014.07.08 23:51:11 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_zh-cn_42ade974360e1144.manifest
[2014.07.08 23:51:20 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_zh-hk_4158e20236e983d4.manifest
[2014.07.08 23:51:32 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_zh-tw_46aa26ca337eedb4.manifest
[2014.08.19 05:35:52 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_9dd39e01816788fc.manifest
[2014.08.19 05:26:54 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4a1393e567d30fe7c8759065d8382098\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.22780_none_9e4e6b9e9a90dc82.manifest
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:39:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_68daf829926cc6a9\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:40:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:39:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_695ac552ab919bbb\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:40:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.08 07:11:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_692597a0abb965cc\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 04:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 13:03:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_69637bfcab8b6996\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:28:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.10.15 22:36:29 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96.manifest
[2014.10.15 22:36:30 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96_winload.efi.mui_35ee487d
[2014.10.15 22:36:30 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96_winload.exe.mui_3bc5b827
[2014.10.15 22:36:30 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96_winresume.efi.mui_f412814e
[2014.10.15 22:36:30 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96_winresume.exe.mui_ff8b5358
[2014.10.15 22:36:30 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0.manifest
[2014.10.15 22:36:30 | 000,693,176 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0_winload.efi_75834aa0
[2014.10.15 22:36:30 | 000,619,056 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0_winload.exe_75835076
[2014.10.15 22:36:30 | 000,616,352 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0_winresume.efi_85cd069f
[2014.10.15 22:36:30 | 000,532,176 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2010.11.21 11:26:16 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2014.07.08 23:51:46 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96.manifest
[2014.07.08 23:52:03 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_cs-cz_91de5cbe2cd52578.manifest
[2010.11.21 05:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2014.08.19 05:35:45 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2014.08.19 05:26:49 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22780_none_b98696ee9ca07f56.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:39:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_0cbc5ca5da0f5573\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:40:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:39:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_0d3c29cef3342a85\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.02 13:40:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.08 06:59:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_0d06fc1cf35bf496\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 03:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 12:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:56E2E879

< End of report >

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 23 říj 2014 18:38
od eamon
OTL Extras logfile created on: 23.10.2014 18:54:07 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Eamon\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17358)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,96 Gb Total Physical Memory | 5,61 Gb Available Physical Memory | 70,44% Memory free
15,93 Gb Paging File | 13,31 Gb Available in Paging File | 83,60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279,36 Gb Total Space | 26,34 Gb Free Space | 9,43% Space Free | Partition Type: NTFS
Drive E: | 232,88 Gb Total Space | 185,85 Gb Free Space | 79,81% Space Free | Partition Type: NTFS
Drive F: | 298,09 Gb Total Space | 228,21 Gb Free Space | 76,56% Space Free | Partition Type: NTFS
Drive G: | 25,91 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: EAMON-PC | User Name: Eamon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{040C8881-C98E-486A-B11B-B99EE691AC69}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |
"{0686740A-A5BC-489F-A757-3E58D0922D19}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0B607810-569A-4B46-B799-36FA3846E433}" = lport=445 | protocol=6 | dir=in | app=system |
"{1766FF10-6FE0-45E1-9213-ECED2A723A5F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1B806B94-BEA7-49E6-8A69-5B624A0749B2}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{243613CB-0C22-4BC6-A667-3454AD25C5F0}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{249E6A9A-2EB3-4FAC-8DA9-BFAC485A0CDF}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{24A10B27-2495-4CFC-9513-3D5D76825567}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{25516EBF-D99A-4279-B64A-2875B1B33F34}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2B6B45BC-FEA4-4C62-87B9-91BFBEF21C1D}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{2BBA5933-FA44-486B-855C-B8340CE69FAA}" = lport=2869 | protocol=6 | dir=in | app=system |
"{312440DC-DF85-470A-A23C-C3411445B01A}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{312E19C7-E4C3-44E6-8DC9-369AF993AA2F}" = lport=139 | protocol=6 | dir=in | app=system |
"{3255A12A-84CE-4A38-B7DE-7640DC84840C}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{330EE4B0-1160-46FE-9C21-8DB8F26F3EEB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{381C8F02-0C29-430B-9C9A-CE1BC38BE0A3}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{4480AA4F-2E71-4BF5-979F-6E98A07B9C46}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{483E3805-0C38-48C4-9DA4-45C0E911BDA6}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4A6A7F24-F159-4CBE-ABCE-02F5AF657ECA}" = rport=10243 | protocol=6 | dir=out | app=system |
"{5255C5C6-1437-4BEC-879A-3B984D852A51}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5A049356-003F-4E22-9A86-90B71666FEB6}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{5F03904D-CA7D-4C08-AFC0-0DDABD90BED7}" = lport=138 | protocol=17 | dir=in | app=system |
"{6E2C00ED-32D1-49EF-91B8-1F25A0BBA598}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{6EB5C46D-4F1D-4941-B141-603513E920F0}" = rport=138 | protocol=17 | dir=out | app=system |
"{7E2B2079-CED6-49CC-8473-8968CB4CCC1D}" = lport=10243 | protocol=6 | dir=in | app=system |
"{8E059272-1D72-436D-B8A9-1C5BD1E32947}" = lport=137 | protocol=17 | dir=in | app=system |
"{8FB0B2E1-1356-4079-8D6D-E21704342E70}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{9134FE3D-FC62-48A7-84AF-F2E43430A105}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{91B3E0DA-707D-4ACE-BFF6-EB4EE46364B7}" = rport=139 | protocol=6 | dir=out | app=system |
"{92BE04CD-DC05-42A6-AA0B-C8E91EB02593}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{98F7831D-BDB1-4AAF-8F3B-2CBFF65DA8DD}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{99119154-7880-4277-A245-2917982FBDCB}" = rport=445 | protocol=6 | dir=out | app=system |
"{99DEB2AD-DF78-4A91-88C7-E2053ED1F77C}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{9C15B399-DD9B-4FE1-900C-C4A4732A2A87}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A9F94287-4FB2-47EE-92D6-A7AD3389E498}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BCB6B129-24DB-4DD8-B0FB-4C31E47CF627}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{BD907923-F12E-4B97-A6A9-74A87318BEFF}" = rport=137 | protocol=17 | dir=out | app=system |
"{D954D90E-45A4-4F56-94DA-BF3E6DD33BD8}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DF3946D3-DCA5-48B7-833D-8A099D7F0AF7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E1AF53B8-4C23-4823-914A-FA6C828B34B3}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{EBB0BA33-69F9-445A-92A8-7D46496CF9CD}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{ECC6A100-A9A2-4718-B0DC-CF44A9A37C33}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{F6F34DF7-EE49-4680-BA0B-B95C43089168}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{046828F3-5617-4A12-A7DB-C46648E81B82}" = protocol=6 | dir=out | app=system |
"{08AD5BF5-E54B-4208-9AE9-05904DD10B3D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{0E6DA2F7-B6BB-4E57-ACDE-C61F20133C81}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{163395ED-470B-4396-8CB6-5FADBD5DE2E9}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{18206669-C965-41B2-BBA3-57E8434A8B6D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1A87DAA5-5430-42A7-BA20-E8E60DA56169}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\far cry 2\bin\fc2editor.exe |
"{1AAF2287-8859-441A-AF99-353FD44233A8}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{23F87F0E-CE98-4D9A-928C-6262472C6DD6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{26CFB4BB-D933-40AC-ABF7-E121761D9C2B}" = protocol=6 | dir=in | app=c:\users\eamon\appdata\roaming\utorrent\utorrent.exe |
"{2AE5115D-7920-44B2-AB46-ED1BB13B993E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{40A981A0-0E60-4668-9AB4-4E6ECC71F024}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{569AD547-BFFA-481D-A71A-D9D2120C3914}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{5A156722-C0C0-4E8B-8C4B-273D669B8AC5}" = protocol=17 | dir=in | app=c:\users\eamon\appdata\roaming\dropbox\bin\dropbox.exe |
"{600E0F1A-1419-4A19-9284-90A689C3190A}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\far cry 2\bin\fc2launcher.exe |
"{71788F52-FD83-4C7E-80C7-F7DD7E2CA744}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{75777B48-02C8-4674-8541-2D9A3F280FAB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{77D331E7-5D9B-4A9F-83BC-B31C04D2839F}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{87941A1D-7BE2-4CFB-BB5B-4409CD55D452}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{8F40AB93-DE6E-4BEE-BD04-06BE22EEF022}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8F99D5B5-DAA4-4343-BC7D-A86C713EBF97}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\far cry 2\bin\fc2editor.exe |
"{9329A1FC-FD98-4E49-AF7B-C19CCB29C11E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{9408B0BB-4DEF-4129-B6E3-EC0CE6E5AAF6}" = protocol=17 | dir=in | app=c:\users\eamon\appdata\roaming\utorrent\utorrent.exe |
"{9477098A-FEFE-45BD-9147-812224F08DB4}" = protocol=17 | dir=in | app=c:\users\eamon\downloads\utorrent.exe |
"{95C9FC39-3EA7-4892-8356-E963C12F3089}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A74F0614-EA3F-49C5-8953-4F97577947E9}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{AC914DD8-4AE6-4672-B417-BCC5564A9A54}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B915F1C6-240E-4A3B-9226-1EE42D51064F}" = protocol=6 | dir=in | app=c:\users\eamon\appdata\roaming\dropbox\bin\dropbox.exe |
"{BACDEF6A-19F2-4611-AD60-B52418368A5D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C211C681-17B7-4CB7-9FE0-DDE206E52475}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\far cry 2\bin\farcry2.exe |
"{C3AB982B-581B-4E2C-9757-17C45DA3BBCD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C794125F-6DCD-4E65-A6C3-BE05032D4119}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CC2D768D-1157-4DE9-86C9-20657628D046}" = protocol=6 | dir=in | app=c:\users\eamon\downloads\utorrent.exe |
"{CC41CCC1-8EBB-4DCC-95C6-68B3546C4228}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\far cry 2\bin\farcry2.exe |
"{D1B70027-8A54-49E9-9597-BD4A7732DFFE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DA5E31A2-F403-42FC-8B92-B672F8585AA8}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{DD80FE51-BB63-4620-BF4E-07DCC35F2EF2}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{E20F7C3C-72DD-4299-B71A-1F67DFCB341F}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{E2CE1BF8-08F2-4F68-877E-4F7F8CE5EB4A}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\far cry 2\bin\fc2launcher.exe |
"{E6220C3A-7807-42AC-8205-38654E1AEE8D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EA79A59B-9A7A-41D5-8AB5-A83C88F00B4C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EA9208B8-0F72-4221-9465-432B7EBFB683}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{FEE411CE-A702-4E7B-AA51-21251712814A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{6954883C-03AC-4D71-B2B8-080B78111F64}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"TCP Query User{758BF38D-AB99-450E-8A30-11481CA2490E}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{EAA45135-4B16-4D0D-8F1E-978EBFA8D438}C:\program files (x86)\activision\call of duty - black ops\blackops.exe" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty - black ops\blackops.exe |
"UDP Query User{2B3C830D-B690-4707-AC87-C0BB985FD882}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{7DA06B1C-AB89-46C4-A15D-F07DA98CAE83}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"UDP Query User{F624F11A-E4B7-4313-9255-0EA6E8CC67C2}C:\program files (x86)\activision\call of duty - black ops\blackops.exe" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty - black ops\blackops.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{14297226-E0A0-3781-8911-E9D529552663}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{2BFD590F-1D73-3533-E734-FDDAC3746E4A}" = AMD Catalyst Install Manager
"{50813B8C-FCBB-3C61-8039-EAAA93029066}" = Microsoft .NET Framework 4.5.1 (CSY)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2010
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 344.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 344.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 344.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.1.2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Ovladač řídící jednotky 3D Vision 344.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.14.0702
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 16.13.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService" = NVIDIA GeForce Experience Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.3.32.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 16.13.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.25
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{EC9D5554-6852-4A55-81BB-AC02C7A8CFED}" = Overwolf.Setup.VC100CRTx64.Dist
"CCleaner" = CCleaner
"C-Media PCI Audio Driver" = C-Media PCI Audio Device

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 6.20
"{26A24AE4-039D-4CA4-87B4-2F03217071FF}" = Java 7 Update 71
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{59E4543A-D49D-4489-B445-473D763C79AF}" = Microsoft Games for Windows - LIVE Redistributable
"{631141AD-79AA-447F-B403-21C704D39B8C}" = UPC Fiber Power Optimizer
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{90140000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.09) - Czech
"{B455E95A-B804-439F-B533-336B1635AE97}" = NVIDIA PhysX
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E1AA8B0F-1176-36F1-8A91-AA19CF39C2F6}" = Google Chrome
"{E4E3E62E-16D7-425E-009C-DCB5E64F5955}" = FIFA 2005
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2
"Adobe Flash Player ActiveX" = Adobe Flash Player 15 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"avast" = avast! Free Antivirus
"BSPlayerf" = BS.Player FREE
"Call of Duty: Black Ops_is1" = Call of Duty: Black Ops
"Coiffeur" = Kadeřník
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"DAEMON Tools Lite" = DAEMON Tools Lite
"FormatFactory" = FormatFactory 3.3.4.0
"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"Mozilla Firefox 31.0 (x86 cs)" = Mozilla Firefox 31.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"OpenAL" = OpenAL
"Polda V_is1" = Polda V
"RegAuditor_is1" = RegAuditor 2.4.6
"Ryse Son of Rome_is1" = Ryse Son of Rome
"Uplay" = Uplay
"VLC media player" = VLC media player 2.1.1
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 5.00 (32-bit)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-365329572-2436669202-1961577668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"SeznamInstall" = Seznam Software
"uTorrent" = µTorrent
"Winamp Detect" = Winamp Detector Plug-in

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 17.10.2014 13:42:04 | Computer Name = Eamon-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Služba Šifrování selhala při volání OnIdentity() v objektu System
Writer. Details: AddWin32ServiceFiles: Unable to back up image of service IePlugin
Services since QueryServiceConfig API failed System Error: Systém nemůže nalézt uvedený
soubor. .

Error - 18.10.2014 4:11:32 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 18.10.2014 12:43:04 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 19.10.2014 4:40:16 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 19.10.2014 14:21:02 | Computer Name = Eamon-PC | Source = Windows Backup | ID = 4104
Description =

Error - 20.10.2014 5:53:43 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 21.10.2014 7:44:10 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 21.10.2014 7:48:39 | Computer Name = Eamon-PC | Source = MsiInstaller | ID = 11309
Description =

Error - 21.10.2014 8:58:37 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 22.10.2014 7:21:11 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.10.2014 4:44:46 | Computer Name = Eamon-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.10.2014 9:14:56 | Computer Name = Eamon-PC | Source = Application Hang | ID = 1002
Description = Program setup.exe verze 2.1002.162.1274 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
f60 Čas spuštění: 01cfeec16487e225 Čas ukončení: 5 Cesta k aplikaci: C:\Users\Eamon\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\16.13.56.0\setup.exe

ID
hlášení: 8a3719cb-5ab6-11e4-aac8-94de802fa095

[ Media Center Events ]
Error - 1.7.2013 12:14:17 | Computer Name = Eamon-PC | Source = MCUpdate | ID = 0
Description = 18:14:16 - Chyba při připojování k Internetu 18:14:17 - Nelze kontaktovat
server..

[ System Events ]
Error - 16.10.2014 11:26:45 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7031
Description = Služba Update PodoWeb byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error - 16.10.2014 11:26:50 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7000
Description = Služba Update PodoWeb neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 16.10.2014 11:35:42 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7000
Description = Služba Update Cantataweb neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 16.10.2014 11:35:42 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7000
Description = Služba Update PodoWeb neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 16.10.2014 13:19:39 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7024
Description = Služba Windows Search ukončena s chybou %%-1073473535, specifickou
pro službu.

Error - 16.10.2014 13:19:39 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7031
Description = Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error - 17.10.2014 7:37:54 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7034
Description = Služba IePlugin Services byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 19.10.2014 4:44:21 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby Schedule bylo dosaženo časového
limitu (30000 ms).

Error - 19.10.2014 16:03:52 | Computer Name = Eamon-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.

Error - 20.10.2014 5:52:57 | Computer Name = Eamon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).


< End of report >

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 23 říj 2014 22:07
od vyosek
:arrow: Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna domaci verze :?:

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 24 říj 2014 11:32
od eamon
Ano pouzivam original, souhlasim ze to neni bezne ale kdyz ho dostanete jako darek proc ne.

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 24 říj 2014 12:53
od vyosek
:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 24 říj 2014 13:11
od eamon
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.21.2014:1)
OS: Windows 7 Ultimate x64
Ran by Eamon on p  24.10.2014 at 14:07:06,93
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update surftastic
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622192215}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622192215}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateSurftastic_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateSurftastic_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilSurftastic_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilSurftastic_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\updateSurftastic_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\updateSurftastic_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilSurftastic_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilSurftastic_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D455EE11-1273-4605-840A-504957543C4D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}



~~~ Files

Successfully deleted: [File] "C:\Windows\wininit.ini"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\iepluginservices"
Successfully deleted: [Folder] "C:\Users\Eamon\appdata\local\globalupdate"



~~~ FireFox

Successfully deleted: [File] C:\Users\Eamon\AppData\Roaming\mozilla\firefox\profiles\ci3hmcx9.default\user.js
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\faststartff@gmail.com
Successfully deleted the following from C:\Users\Eamon\AppData\Roaming\mozilla\firefox\profiles\ci3hmcx9.default\prefs.js

user_pref("browser.search.defaultenginename", "mystartsearch");
user_pref("extensions.crossrider.bic", "14919ecf2c3af8dacd509d5c6ea98bd4");
Emptied folder: C:\Users\Eamon\AppData\Roaming\mozilla\firefox\profiles\ci3hmcx9.default\minidumps [21 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  24.10.2014 at 14:11:00,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 24 říj 2014 13:17
od eamon
# AdwCleaner v4.001 - Report created 24/10/2014 at 14:14:08
# DB v2014-10-23.2
# Updated 20/10/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Eamon - EAMON-PC
# Running from : C:\Users\Eamon\Downloads\adwcleaner_4.001.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\Users\Public\Documents\Goobzo
Folder Deleted : C:\Users\Public\Documents\YTAHelper
Folder Deleted : C:\Users\Eamon\AppData\Local\CrashRpt
Folder Deleted : C:\Program Files (x86)\Senses
Folder Deleted : C:\Users\Eamon\AppData\Roaming\Mozilla\Firefox\Profiles\ci3hmcx9.default\Extensions\warnerroberts@hotmail.com
File Deleted : C:\Users\Eamon\daemonprocess.txt
File Deleted : C:\Windows\System32\log\iSafeKrnlCall.log

***** [ Scheduled Tasks ] *****

Task Deleted : AmiUpdXp
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-1
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-11
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-3
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-4
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-5
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-5_user
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-6
Task Deleted : 1b58c730-65b5-4e0d-a515-021b356a0503-7

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\bi_client_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\bi_client_RASMANCS
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\Goobzo
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Senses
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\Senses-nv
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\Senses
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v31.0 (x86 cs)


-\\ Google Chrome v38.0.2125.104


*************************

AdwCleaner[R2].txt - [6533 octets] - [24/10/2014 14:12:32]
AdwCleaner[S2].txt - [6379 octets] - [24/10/2014 14:14:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [6439 octets] ##########

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 24 říj 2014 18:48
od vyosek
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 25 říj 2014 05:20
od eamon
Pc se nerestartovalo a vice toho program neudelal.





Zoek.exe v5.0.0.0 Updated 24-10-2014
Tool run by Eamon on p 24.10.2014 at 19:57:34,95.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Eamon\Downloads\zoek\zoek.scr [Scan all users] [Script inserted]

===== Runcheck 19:59:01,13 =====

--- Create Environment Variables 19:59:03,66
--- Create System Restore Point 19:59:16,15
--- Checking Input 19:59:51,24
--- Reset Hosts File 20:00:10,35
--- AU AppData Check 20:00:12,64
--- Remove From Windows Installer 20:00:19,13
--- IE Startpage Check 20:02:16,08
--- Program Files DB Check 20:04:15,51
--- C:\Users\Default\AppData\Roaming DB Check 20:05:30,53
--- C:\Users\Default User\AppData\Roaming DB Check 20:05:30,53
--- C:\Users\Eamon\AppData\Roaming DB Check 20:05:30,53
--- C:\Windows\SysNative\config\systemprofile\AppData\Roaming DB Check 20:05:30,53
--- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming DB Check 20:05:30,53
--- C:\Windows\serviceprofiles\networkservice\AppData\Roaming DB Check 20:05:30,53
--- C:\Windows\serviceprofiles\Localservice\AppData\Roaming DB Check 20:05:30,53
--- C:\Users\Eamon DB Check 20:08:58,36
--- C:\PROGRA~3 DB Check 20:09:26,93
--- C:\Users\Default\AppData\Local DB Check 20:09:30,16
--- C:\Users\Default User\AppData\Local DB Check 20:09:30,16
--- C:\Users\Eamon\AppData\Local DB Check 20:09:30,16
--- C:\Windows\SysNative\config\systemprofile\AppData\Local DB Check 20:09:30,16
--- C:\Windows\sysWoW64\config\systemprofile\AppData\Local DB Check 20:09:30,16
--- C:\Windows\serviceprofiles\networkservice\AppData\Local DB Check 20:09:30,16
--- C:\Windows\serviceprofiles\Localservice\AppData\Local DB Check 20:09:30,16
--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs DB Check 20:11:53,10
--- C:\Users\Eamon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs DB Check 20:12:08,04
--- Tasks DB Check 20:12:17,20
--- Downloads DB Check 20:12:23,24
--- C:\Users\Eamon\AppData\LocalLow DB Check 20:12:30,70
--- C:\Windows\SysNative\config\systemprofile\AppData\LocalLow DB Check 20:12:30,70
--- C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow DB Check 20:12:30,70
--- C:\Windows\serviceprofiles\networkservice\AppData\LocalLow DB Check 20:12:30,70
--- C:\Windows\serviceprofiles\Localservice\AppData\LocalLow DB Check 20:12:30,70
--- Tasks2 DB Check 20:14:02,61
--- Documents DB Check 20:14:45,63
--- C:\Users\Eamon\AppData\Roaming\Mozilla\Firefox\Profiles\ci3hmcx9.default DB Check 20:14:54,37
--- C:\Users\Public\Desktop DB Check 20:14:58,61
--- C:\Users\Eamon\Desktop DB Check 20:15:04,27
--- Services DB Check 20:15:18,70
--- FF prefs.js DB Check 20:15:50,49
--- Emptyclsid 20:17:08,23
--- Del by CLSID 20:17:15,45
--- Delete Services 20:18:06,69
--- Firefox Fix 20:18:11,42
--- Delete files\folders 20:18:15,33
--- Create Backups 20:18:15,68

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 25 říj 2014 07:20
od vyosek
Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 25 říj 2014 12:56
od eamon
FRSTLauncher jsem spustil jako spravce ovsem program pise pristup byl odepren co stim??

Re: Prosim o kontrolu, pc si dela co chce

Napsal: 25 říj 2014 12:57
od eamon
pise neni platna aplikace typu win 32
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz