VIRY.CZ

Dobrý den,

mám na pc problém s torntv, uz jsem ho odinstaloval, projel adcleanerem, cccleanerem a mbamem ale stale se mrcha nejakym zahadnym zpusobem drzi. Log prilozen

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ivana at 2014-11-27 23:03:42
Microsoft Windows 8.1
System drive C: has 837 GB (89%) free of 936 GB
Total RAM: 8083 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:03:47, on 27. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe
C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ivana.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\Common~1\McAfee\Platform\mcuicnt.exe" /platui /runkey
O4 - HKLM\..\Run: [BacKGround Agent] C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [abDocsDllLoader] C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [AcerPortal] "C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" startup
O4 - HKCU\..\Run: [icq] C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Ivana\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - TODO: <Company name> - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14754 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {cbd7f83e-78c0-4f8c-9b6da649b0fa6a07}
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" "C:\Users\Ivana\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" S-1-5-21-2236328081-253002499-3668650474-1001 400 408 "C:\ProgramData\acer\CCD"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\Windows\system32\mfevtps.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Windows\SysWOW64\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\saHook.dll", saHooker_Initialize_and_Wait
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\siteadvisor\x64\saHook.dll", saHooker_Initialize_and_Wait
C:\Windows\system32\svchost.exe -k imgsvc
taskhostex.exe
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
igfxHK.exe
igfxTray.exe
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5892.0.2074941685\737504680" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17,38 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3496 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="5892.2.1814041582\798139719" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="5892.3.1417352696\15128340" /prefetch:673131151
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="5892.4.1697444593\1746762570" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="5892.5.960100715\1977383944" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="5892.6.1192510672\1301337249" /prefetch:673131151
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe" --parent-window=0 chrome-extension://fheoggkfdfchfphceeifdbepaooicaho/ < \\.\pipe\chrome.nativeMessaging.in.1949c636ef6588e4 > \\.\pipe\chrome.nativeMessaging.out.1949c636ef6588e4
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe" --parent-window=0 chrome-extension://fheoggkfdfchfphceeifdbepaooicaho/
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" startup
"C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe" -CU
szndesktop.exe default start
"C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Common Files\mcafee\platform\McUICnt.exe" /platui /runkey
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe"
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\system32\igfxext.exe" -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5892.9.356676980\1312828217" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe" -hide
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="5892.11.1461399535\277611669" /prefetch:673131151
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"
"C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe"


"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 568 572 580 65536 576
"C:\Users\Ivana\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-10-14 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2014-10-30 294400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-10-14 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll [2014-10-30 241864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll [2014-10-30 294400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll [2014-10-30 241864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10 13671640]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-02 2199840]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-02-26 134784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22065760]
"AcerPortal"=C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2014-11-19 2452736]
"icq"=C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe [2014-10-03 35239432]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"cz.seznam.software.autoupdate"=C:\Users\Ivana\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-11-21 7063832]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"mcpltui_exe"=C:\Program Files\Common~1\McAfee\Platform\mcuicnt.exe [2014-08-05 642040]
"BacKGround Agent"=C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2014-11-17 62208]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-11-03 3835728]
"abDocsDllLoader"=C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [2014-11-20 90368]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-02-26 134784]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"midi4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-27 23:03:43 ----D---- C:\Program Files\trend micro
2014-11-27 23:03:42 ----D---- C:\rsit
2014-11-27 22:37:41 ----D---- C:\Windows\ERUNT
2014-11-27 22:25:28 ----D---- C:\AdwCleaner
2014-11-27 22:19:53 ----D---- C:\Program Files\CCleaner
2014-11-22 21:27:29 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2014-11-22 21:26:23 ----HD---- C:\ProgramData\CanonBJ
2014-11-22 21:26:17 ----A---- C:\Windows\system32\CNMLMAE.DLL
2014-11-21 16:05:55 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-21 16:05:55 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-21 16:05:55 ----A---- C:\Windows\system32\pku2u.dll
2014-11-21 16:05:55 ----A---- C:\Windows\system32\kerberos.dll
2014-11-21 16:03:23 ----SHD---- C:\Config.Msi
2014-11-16 17:33:33 ----A---- C:\Windows\SYSWOW64\vp6vfw.dll
2014-11-16 17:33:11 ----D---- C:\ProgramData\Package Cache
2014-11-16 17:13:57 ----D---- C:\Hry
2014-11-14 16:51:10 ----A---- C:\Windows\system32\user32.dll
2014-11-14 16:51:09 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-11-14 16:51:09 ----A---- C:\Windows\system32\drivers\WdNisDrv.sys
2014-11-14 16:51:09 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2014-11-14 16:51:09 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2014-11-14 16:51:08 ----A---- C:\Windows\SYSWOW64\winshfhc.dll
2014-11-14 16:51:08 ----A---- C:\Windows\system32\winshfhc.dll
2014-11-14 16:50:56 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-14 16:50:56 ----A---- C:\Windows\system32\msi.dll
2014-11-14 16:50:55 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-11-14 16:50:55 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-11-14 16:50:55 ----A---- C:\Windows\system32\msihnd.dll
2014-11-14 16:50:55 ----A---- C:\Windows\system32\consent.exe
2014-11-14 16:50:55 ----A---- C:\Windows\system32\authui.dll
2014-11-14 16:50:55 ----A---- C:\Windows\system32\appinfo.dll
2014-11-14 16:50:45 ----A---- C:\Windows\system32\generaltel.dll
2014-11-14 16:50:45 ----A---- C:\Windows\system32\devinv.dll
2014-11-14 16:50:45 ----A---- C:\Windows\system32\aepic.dll
2014-11-14 16:50:45 ----A---- C:\Windows\system32\aepdu.dll
2014-11-14 16:50:45 ----A---- C:\Windows\system32\aeinv.dll
2014-11-14 15:34:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-14 15:34:31 ----A---- C:\Windows\SYSWOW64\ncryptsslp.dll
2014-11-14 15:34:31 ----A---- C:\Windows\system32\schannel.dll
2014-11-14 15:34:31 ----A---- C:\Windows\system32\ncryptsslp.dll
2014-11-14 15:34:31 ----A---- C:\Windows\system32\dpapisrv.dll
2014-11-14 15:34:27 ----A---- C:\Windows\system32\rdpcorets.dll
2014-11-14 15:34:26 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-14 15:34:26 ----A---- C:\Windows\SYSWOW64\certcli.dll
2014-11-14 15:34:26 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-14 15:34:26 ----A---- C:\Windows\system32\rfxvmt.dll
2014-11-14 15:34:26 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-14 15:34:26 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-11-14 15:34:26 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-14 15:34:26 ----A---- C:\Windows\system32\drivers\cng.sys
2014-11-14 15:34:26 ----A---- C:\Windows\system32\certcli.dll
2014-11-14 15:34:26 ----A---- C:\Windows\system32\adtschema.dll
2014-11-14 15:34:25 ----A---- C:\Windows\system32\rdpudd.dll
2014-11-14 15:34:25 ----A---- C:\Windows\system32\msaudite.dll
2014-11-14 15:34:15 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-14 15:34:15 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-14 15:34:13 ----A---- C:\Windows\system32\wuaueng.dll
2014-11-14 15:34:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-11-14 15:34:12 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-11-14 15:34:12 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-11-14 15:34:12 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-11-14 15:34:12 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wuwebv.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wups2.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wups.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wudriver.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wucltux.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wuauclt.exe
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wuapp.exe
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wuapi.dll
2014-11-14 15:34:12 ----A---- C:\Windows\system32\wuaext.dll
2014-11-14 15:34:01 ----A---- C:\Windows\system32\mshtml.dll
2014-11-14 15:34:00 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-14 15:33:40 ----A---- C:\Windows\system32\ieframe.dll
2014-11-14 15:33:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-14 15:33:34 ----A---- C:\Windows\system32\jscript9.dll
2014-11-14 15:33:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-14 15:33:31 ----A---- C:\Windows\system32\wininet.dll
2014-11-14 15:33:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-14 15:33:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-14 15:33:28 ----A---- C:\Windows\system32\urlmon.dll
2014-11-14 15:33:27 ----A---- C:\Windows\system32\inetcomm.dll
2014-11-14 15:33:27 ----A---- C:\Windows\system32\iertutil.dll
2014-11-14 15:33:26 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-11-14 15:33:26 ----A---- C:\Windows\system32\actxprxy.dll
2014-11-14 15:33:25 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-11-14 15:33:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-14 15:33:25 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-14 15:33:24 ----A---- C:\Windows\system32\jscript.dll
2014-11-14 15:33:24 ----A---- C:\Windows\system32\ieui.dll
2014-11-14 15:33:23 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-14 15:33:23 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-14 15:33:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-14 15:33:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-14 15:33:22 ----A---- C:\Windows\system32\vbscript.dll
2014-11-14 15:33:21 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-14 15:33:19 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-14 15:33:19 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-14 15:33:18 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-14 15:33:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-14 15:33:18 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-14 15:33:18 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-14 15:33:17 ----A---- C:\Windows\system32\webcheck.dll
2014-11-14 15:33:17 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-14 15:33:16 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-11-14 15:33:16 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-14 15:33:16 ----A---- C:\Windows\SYSWOW64\hlink.dll
2014-11-14 15:33:16 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-14 15:33:15 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-14 15:33:15 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-11-14 15:33:15 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-14 15:33:15 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-11-14 15:33:15 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-11-14 15:33:15 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-11-14 15:33:15 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-14 15:33:15 ----A---- C:\Windows\system32\iesysprep.dll
2014-11-14 15:33:15 ----A---- C:\Windows\system32\iepeers.dll
2014-11-14 15:33:15 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-14 15:33:15 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-14 15:33:15 ----A---- C:\Windows\system32\hlink.dll
2014-11-14 15:33:14 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-11-14 15:33:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-14 15:33:14 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-11-14 15:33:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-14 15:33:14 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-11-14 15:33:14 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-11-14 15:33:14 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-14 15:33:14 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-14 15:33:14 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-11-14 15:33:14 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-14 15:33:14 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-14 15:33:14 ----A---- C:\Windows\system32\inseng.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-14 15:33:13 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-14 15:33:13 ----A---- C:\Windows\system32\pngfilt.dll
2014-11-14 15:33:13 ----A---- C:\Windows\system32\occache.dll
2014-11-14 15:33:13 ----A---- C:\Windows\system32\msrating.dll
2014-11-14 15:33:13 ----A---- C:\Windows\system32\licmgr10.dll
2014-11-14 15:33:13 ----A---- C:\Windows\system32\imgutil.dll
2014-11-14 15:33:13 ----A---- C:\Windows\system32\iernonce.dll
2014-11-14 15:33:12 ----A---- C:\Windows\SYSWOW64\url.dll
2014-11-14 15:33:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-14 15:33:12 ----A---- C:\Windows\system32\wextract.exe
2014-11-14 15:33:12 ----A---- C:\Windows\system32\url.dll
2014-11-14 15:33:12 ----A---- C:\Windows\system32\iesetup.dll
2014-11-14 15:33:12 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-11-14 15:33:11 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-11-14 15:33:11 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-11-14 15:33:11 ----A---- C:\Windows\system32\mshta.exe
2014-11-14 15:33:11 ----A---- C:\Windows\system32\msfeedssync.exe
2014-11-14 15:33:11 ----A---- C:\Windows\system32\iexpress.exe
2014-11-14 15:32:26 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-14 15:32:25 ----A---- C:\Windows\system32\msxml3.dll
2014-11-14 15:32:22 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-14 15:32:22 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-14 15:32:21 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-14 15:32:21 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-14 15:32:21 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-14 15:32:21 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-14 15:32:21 ----A---- C:\Windows\system32\win32k.sys
2014-11-14 15:32:21 ----A---- C:\Windows\system32\packager.dll
2014-11-14 15:32:21 ----A---- C:\Windows\system32\EncDump.dll
2014-11-14 15:32:21 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-14 15:32:21 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-14 15:32:21 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-14 15:32:21 ----A---- C:\Windows\system32\audiodg.exe
2014-11-14 15:32:20 ----A---- C:\Windows\system32\shell32.dll
2014-11-14 15:32:19 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-11-14 15:32:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-11-14 15:32:18 ----A---- C:\Windows\system32\twinui.dll
2014-11-14 15:32:18 ----A---- C:\Windows\system32\SettingsHandlers.dll
2014-11-14 15:32:17 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-11-14 15:32:16 ----A---- C:\Windows\system32\MFMediaEngine.dll
2014-11-14 15:32:16 ----A---- C:\Windows\system32\localspl.dll
2014-11-14 15:32:15 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2014-11-14 15:32:14 ----A---- C:\Windows\SYSWOW64\twinui.dll
2014-11-14 15:32:14 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2014-11-14 15:32:14 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2014-11-14 15:32:14 ----A---- C:\Windows\system32\win32spl.dll
2014-11-14 15:32:13 ----AC---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-11-14 15:32:13 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-11-14 15:32:13 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-11-14 15:32:13 ----A---- C:\Windows\system32\WsmSvc.dll
2014-11-14 15:32:13 ----A---- C:\Windows\system32\puiobj.dll
2014-11-14 15:32:13 ----A---- C:\Windows\system32\drivers\netio.sys
2014-11-14 15:32:12 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-11-14 15:32:12 ----A---- C:\Windows\system32\untfs.dll
2014-11-14 15:32:12 ----A---- C:\Windows\system32\FXSCOMEX.dll
2014-11-14 15:32:12 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-11-14 15:32:11 ----A---- C:\Windows\SYSWOW64\FXSAPI.dll
2014-11-14 15:32:11 ----A---- C:\Windows\system32\FXSAPI.dll
2014-11-10 23:10:53 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-11-10 23:10:36 ----D---- C:\ProgramData\Malwarebytes
2014-11-10 23:10:36 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-10 23:10:36 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-11-10 23:10:36 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-11-10 23:10:36 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-11-10 17:50:03 ----D---- C:\Program Files (x86)\Bethesda Softworks
2014-11-10 17:49:45 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-11-10 17:49:45 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-11-09 19:12:23 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-11-03 21:19:37 ----D---- C:\Windows\cs
2014-11-03 21:19:13 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-11-03 21:18:46 ----D---- C:\Program Files\Windows Live
2014-11-03 21:18:44 ----D---- C:\Windows\PCHEALTH
2014-11-03 21:18:37 ----D---- C:\Program Files (x86)\Windows Live
2014-11-03 21:17:36 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-11-03 21:17:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-11-03 21:17:36 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-11-03 21:17:36 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-11-03 21:17:34 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-11-03 21:17:32 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-11-03 21:17:13 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-11-03 21:17:13 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-11-03 21:16:30 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-11-03 21:16:30 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-11-03 18:12:12 ----AH---- C:\Windows\system32\drivers\Hamdrv.sys
2014-11-02 00:59:04 ----D---- C:\Users\Ivana\AppData\Roaming\vlc
2014-11-02 00:58:48 ----D---- C:\Program Files (x86)\VideoLAN
2014-11-01 13:51:48 ----D---- C:\Users\Ivana\AppData\Roaming\CyberLink
2014-10-31 23:37:11 ----D---- C:\Users\Ivana\AppData\Roaming\MPC-HC
2014-10-31 23:36:20 ----D---- C:\Program Files (x86)\Combined Community Codec Pack
2014-10-28 19:28:31 ----A---- C:\Windows\SYSWOW64\Access.dat
2014-10-28 19:16:58 ----D---- C:\Users\Ivana\AppData\Roaming\Tunngle
2014-10-28 19:16:57 ----A---- C:\Windows\system32\drivers\tap0901t.sys
2014-10-28 18:55:28 ----D---- C:\ProgramData\LogMeIn

======List of files/folders modified in the last 1 month======

2014-11-27 23:03:43 ----RD---- C:\Program Files
2014-11-27 23:03:43 ----D---- C:\Windows\Temp
2014-11-27 23:01:48 ----D---- C:\Users\Ivana\AppData\Roaming\Skype
2014-11-27 23:00:01 ----D---- C:\Windows\system32\sru
2014-11-27 22:59:27 ----RD---- C:\Windows\System32
2014-11-27 22:59:27 ----D---- C:\Windows\Inf
2014-11-27 22:59:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-27 22:55:33 ----D---- C:\Windows\Prefetch
2014-11-27 22:43:42 ----D---- C:\Windows\debug
2014-11-27 22:37:41 ----D---- C:\Windows
2014-11-27 22:27:26 ----RD---- C:\Program Files (x86)
2014-11-27 22:27:26 ----HD---- C:\ProgramData
2014-11-27 22:22:17 ----D---- C:\Users\Ivana\AppData\Roaming\uTorrent
2014-11-27 22:22:17 ----D---- C:\Users\Ivana\AppData\Roaming\DAEMON Tools Lite
2014-11-27 22:22:16 ----D---- C:\Windows\Panther
2014-11-27 22:22:16 ----D---- C:\Windows\Logs
2014-11-27 22:19:55 ----D---- C:\Windows\system32\Tasks
2014-11-27 14:41:16 ----D---- C:\Windows\system32\config
2014-11-26 19:46:11 ----SHD---- C:\System Volume Information
2014-11-26 19:38:10 ----D---- C:\Windows\Microsoft.NET
2014-11-25 13:18:20 ----SHD---- C:\Windows\Installer
2014-11-25 13:15:48 ----D---- C:\Users\Ivana\AppData\Roaming\Atheros
2014-11-24 21:54:47 ----RSD---- C:\Windows\assembly
2014-11-24 13:41:46 ----D---- C:\Windows\AppReadiness
2014-11-23 17:57:21 ----D---- C:\Windows\WinSxS
2014-11-23 17:56:52 ----D---- C:\Program Files (x86)\McAfee
2014-11-23 17:54:58 ----D---- C:\Windows\SysWOW64
2014-11-23 17:54:52 ----D---- C:\Windows\CbsTemp
2014-11-23 00:34:19 ----HD---- C:\Program Files\WindowsApps
2014-11-22 21:26:19 ----D---- C:\Windows\system32\DriverStore
2014-11-22 21:25:21 ----D---- C:\Windows\system32\drivers
2014-11-21 16:17:42 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-11-21 16:16:13 ----D---- C:\Program Files\Microsoft Office 15
2014-11-21 16:04:33 ----D---- C:\Program Files (x86)\Acer
2014-11-21 16:03:04 ----HD---- C:\OEM
2014-11-18 19:07:29 ----D---- C:\Windows\rescache
2014-11-17 09:51:26 ----D---- C:\Windows\system32\catroot
2014-11-16 21:44:33 ----D---- C:\Windows\system32\en-US
2014-11-16 21:44:33 ----D---- C:\Windows\system32\cs-CZ
2014-11-16 21:44:33 ----D---- C:\Program Files\Windows Defender
2014-11-16 21:44:33 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-16 21:44:32 ----SD---- C:\Windows\system32\CompatTel
2014-11-16 17:33:33 ----D---- C:\Program Files (x86)\Common Files
2014-11-16 17:32:33 ----RSD---- C:\Windows\Fonts
2014-11-16 11:10:40 ----D---- C:\Windows\system32\wbem
2014-11-16 10:58:07 ----D---- C:\Windows\SchCache
2014-11-15 00:12:15 ----D---- C:\Windows\SYSWOW64\migration
2014-11-15 00:12:15 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-15 00:12:15 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-15 00:12:15 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-15 00:12:14 ----RD---- C:\Windows\ToastData
2014-11-15 00:12:14 ----RD---- C:\Windows\ImmersiveControlPanel
2014-11-15 00:12:14 ----D---- C:\Windows\system32\migration
2014-11-15 00:12:14 ----D---- C:\Windows\apppatch
2014-11-15 00:12:14 ----D---- C:\Program Files\Internet Explorer
2014-11-15 00:11:29 ----D---- C:\Windows\system32\MRT
2014-11-15 00:07:33 ----A---- C:\Windows\system32\MRT.exe
2014-11-14 16:50:37 ----D---- C:\Windows\system32\catroot2
2014-11-14 11:17:47 ----D---- C:\ProgramData\Atheros
2014-11-14 10:05:07 ----D---- C:\Windows\Tasks
2014-11-12 11:03:39 ----D---- C:\ProgramData\Adobe
2014-11-11 19:56:33 ----A---- C:\Windows\SYSWOW64\dpnsvr.exe
2014-11-11 19:56:33 ----A---- C:\Windows\SYSWOW64\dpnhupnp.dll
2014-11-11 19:56:33 ----A---- C:\Windows\SYSWOW64\dpnhpast.dll
2014-11-11 19:56:33 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-11-11 19:56:33 ----A---- C:\Windows\SYSWOW64\dpnathlp.dll
2014-11-11 19:56:33 ----A---- C:\Windows\system32\dpnsvr.exe
2014-11-11 19:56:33 ----A---- C:\Windows\system32\dpnhupnp.dll
2014-11-11 19:56:33 ----A---- C:\Windows\system32\dpnhpast.dll
2014-11-11 19:56:33 ----A---- C:\Windows\system32\dpnet.dll
2014-11-11 19:56:33 ----A---- C:\Windows\system32\dpnathlp.dll
2014-11-11 19:56:31 ----A---- C:\Windows\SYSWOW64\dpwsockx.dll
2014-11-11 19:56:31 ----A---- C:\Windows\SYSWOW64\dpmodemx.dll
2014-11-11 19:56:31 ----A---- C:\Windows\SYSWOW64\dplayx.dll
2014-11-11 19:56:31 ----A---- C:\Windows\SYSWOW64\dplaysvr.exe
2014-11-10 17:50:02 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-11-09 20:29:43 ----SD---- C:\Users\Ivana\AppData\Roaming\Microsoft
2014-11-09 20:29:43 ----D---- C:\Users\Ivana\AppData\Roaming\Adobe
2014-11-05 12:31:17 ----D---- C:\Windows\system32\NDF
2014-11-04 13:24:39 ----D---- C:\Windows\system32\LogFiles
2014-11-03 21:18:44 ----D---- C:\Program Files\Common Files\microsoft shared
2014-11-03 21:15:42 ----SD---- C:\ProgramData\Microsoft
2014-11-01 21:58:13 ----D---- C:\Users\Ivana\AppData\Roaming\Seznam.cz
2014-11-01 13:53:53 ----D---- C:\ProgramData\CyberLink
2014-10-30 01:55:02 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-10-28 19:53:36 ----D---- C:\Windows\system32\wdi
2014-10-28 19:19:48 ----D---- C:\Windows\MediaViewer
2014-10-28 19:19:48 ----D---- C:\Windows\FileManager
2014-10-28 19:19:48 ----D---- C:\Windows\Camera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTATH_BUS;@oem16.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\Windows\System32\drivers\btath_bus.sys [2014-02-26 35016]
R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2014-07-18 786296]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [2014-07-18 348552]
R1 dtsoftbus01;@oem24.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-10-20 283064]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 athr;@oem15.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athwbx.sys [2014-02-14 3888640]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-02-26 598216]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [2014-07-18 72128]
R3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\Windows\system32\DRIVERS\Hamdrv.sys [2014-11-03 46136]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-03-07 3729920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-04-28 3949656]
R3 iwdbus;@oem8.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-03-01 27032]
R3 LMDriver;@oem20.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\Windows\System32\drivers\LMDriver.sys [2013-07-17 21360]
R3 MEIx64;@oem12.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-12-10 100312]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [2014-07-18 181704]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2014-07-18 313800]
R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [2014-07-18 526352]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [2014-07-24 444720]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2014-04-09 12697032]
R3 RadioShim;@oem20.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\Windows\System32\drivers\RadioShim.sys [2013-07-17 14680]
R3 RTL8168;@oem10.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-03-28 854744]
R3 RTSPER;@oem14.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2014-04-02 476888]
R3 SynRMIHID;@oem13.inf,%SynRMIHID.SVCDESC%;Synaptics HID Service; C:\Windows\system32\DRIVERS\SynRMIHID.sys [2014-02-19 42224]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\Windows\system32\drivers\mfeelamk.sys [2014-07-18 70600]
S3 AthBTPort;@oem19.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2014-02-26 89800]
S3 BTATH_A2DP;@oem18.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2014-02-26 355528]
S3 btath_avdt;@oem18.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2014-02-26 118984]
S3 BTATH_HCRP;@oem21.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\Windows\System32\drivers\btath_hcrp.sys [2014-02-26 179432]
S3 BTATH_LWFLT;@oem23.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2014-02-26 77464]
S3 BTATH_RCP;@oem25.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\Windows\System32\drivers\btath_rcp.sys [2014-02-26 137928]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [2013-09-23 197704]
S3 intaud_WaveExtensible;@oem7.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-03-01 38296]
S3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-03-07 450520]
S3 mfencrk;McAfee Inc. mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [2014-07-24 96592]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2014-03-18 167424]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2014-03-18 121088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [2014-02-26 319104]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2014-11-17 2709760]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-10-30 2443960]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-07-16 235008]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-11-03 2530128]
R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-03-21 282096]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-10 169432]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-10-21 417552]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-03-17 459496]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2014-09-04 562200]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 mfecore;McAfee Anti-Malware Core; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [2014-07-24 1041192]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2014-07-18 219752]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [2014-07-18 189912]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-14 769432]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-02 1617352]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-04-08 925128]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-03-06 2573544]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-03-22 457960]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-03-22 449768]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-01-25 222952]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-03 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-03-21 279024]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-03 116648]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [2013-07-25 334608]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2014-08-01 601864]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S4 McOobeSv2;McAfee OOBE Service2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-07-30 335064]

-----------------EOF-----------------

Zdravim

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Dik, uz to vypada v poradku, tady je log:


Zoek.exe v5.0.0.0 Updated 27-11-2014
Tool run by Ivana on p  28. 11. 2014 at 17:18:21,75.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ivana\AppData\Local\Temp\7zO857E.tmp\zoek.exe.com [Scan all users] [Script inserted]

==== System Restore Info ======================

28. 11. 2014 17:20:58 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\Webteh deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10EECBBD-CEDF-4266-A3CE-86B0368CA229} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{114AC49F-ACFE-4994-BFD3-881848A18DBA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1358652D-9C65-4AB2-9FEA-1DB5382BFC43} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14476797-35E4-42AD-9E4F-6175C6E46E2B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15BA03BD-83D8-4C3D-B283-D3D8815B2FF0} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15F13B14-338-49B1-933B-C25F976E67F4} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16F2AE4-8815-489B-8FC3-C02EE622885B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{185DEB82-5F69-47DA-9696-503C7E8DB2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1948A895-A08C-4B67-BB36-27497DCF2DC2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A53FCFD-9626-4EA7-BAC0-7D9D697BFFF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1AC1E121-78E6-42A1-B671-653B56FBFD96} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1AF6590A-F838-434E-AFD7-B93475A06427} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C38BCBC-5178-4D2A-B0C8-F71784B38BD7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EEA3F81-FB3D-481B-955A-B7FF414383D4} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F166D79-B48B-4EA9-8E1E-11728EA54D9B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FC27F08-7394-4079-9A28-5E1435A9025} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FDF335C-2B2C-428E-8596-E58BA94159F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{206E39C6-B837-43AB-9059-D565D9BE76D2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21BCEB82-B559-452A-8BE8-EB3761643D85} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22C06095-EC12-406F-AEB7-A3C528D86F1F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2417B0D2-DA77-40DF-9692-2A5E67E2AB} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2471267B-977-47ED-ACE1-6E4937163033} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24C1DCE5-F363-4BB7-A4F6-511AADD43966} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27E431A-4C95-458E-8AC1-B1C77592BB29} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28673098-32A-4363-A9B8-A790354CFA9B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{289304C5-A0CF-44F7-8A7B-77316ECB72E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{29D48B36-DE88-492D-8621-A31E76022E7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A025B78-D9BE-40CF-992B-7FCC4785BCEF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D3662E1-14A6-4B7E-A638-3648F864FD56} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DC57A36-24A1-4C23-A54D-4CDEAB1994E5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E583212-771B-4813-9854-8C7434A5DAC9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F5DFE5A-C956-43B9-AAF4-60465129C724} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3176A9B3-B2D2-47E6-8624-A88CAAE8160} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{327A14D2-E200-413E-B150-39FB63EDB5A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32DC3845-A063-40FF-B58D-D67B94B9FE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34FC7BC7-E8E3-4B3D-88EA-D88B3FBEE5BC} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3537C64C-3DC9-4EAE-BB61-1DACD2933B8E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35E3830F-43DD-4447-9E1D-102319C7CA4F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{370F13B6-7826-4F2C-8AEB-CE64C0A02984} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37EB192C-8372-4DE0-B03A-8E98E3CCA10} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A2C4FD9-B85F-40CE-9C85-E03A794F43F3} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A5B9D3C-F811-439F-BB16-5AAE874D9731} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B1BC9AF-613E-44C9-905C-64CD544F9CE5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41427CF-5300-481A-A6B1-56ABF931D598} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4270C9E0-DAC8-46ED-9357-585F144CD04} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44A7BBFC-166-42DC-B196-44D1BB9F3731} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{45719774-BC13-4116-A074-4DA4FBCE78C7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{45777E89-6A42-4F41-ADAF-F9E7833AEF8E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{45D40DCC-17D9-4E88-8558-9F2ABFB94513} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{460D1D62-330D-4F32-91B1-EAB4E5CA5BD5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{47E3C29E-D02B-402A-A840-E581BF0A3EE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{484F0326-4ABB-4934-8AED-D9F4FA395DE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48DCE753-4A7F-4EAC-94BE-69623A338AEA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49A86CF7-95E8-419C-8A9-AE1B538F479} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A95D3C8-C31E-4D1D-AE21-3A2BD91745E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AAD35EA-FC06-426E-9CF6-2E21A95F2A9B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ADECA81-F874-4518-9895-C3C6A27CC4E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B3DD037-DD25-4221-A38B-8F48AB9D21C5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B5A4337-1E54-4C00-A459-11CAC569970} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E278F6A-79D7-486D-B6A-E993B29F38BF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E82717F-701D-4033-839F-CC3819A21965} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4EA84960-1576-4595-8E40-13DC329FF319} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F2F06F2-7698-4DDD-81C9-DA6E22952976} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{504cdd53-6d0d-4ab4-86d5-96231f486fb7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5073F25D-CACE-4665-A773-5AA8BDA7314} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{51F8AC3E-359F-43B6-B76-1E5966443FD} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{528B92F9-807C-4D50-B2FD-9CC55D71A390} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52F322FE-6E4A-4412-AB89-8C5596F812AF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{541BBCBA-AE09-47E6-AD79-2E8B8E8FB488} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{565DB14D-1FC-4832-B5D7-5F23F861D6D6} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5693DEDB-DBE3-413D-BC64-C142129BBF27} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57D8D31-BDE7-4D62-95B7-B2B49B534B9E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{587EFC59-BF0F-441E-B921-F493B1FC4C5B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5AE6D1ED-39A9-407C-86CB-B88568833059} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BDE22DA-3AD6-483A-8BB-D3C95DC6FAC1} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BFEB9A6-70A2-4CF0-BC59-93A9F55150F2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5CD3A746-BA4F-41CF-B01A-4096863444D1} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{605109A7-F024-4C49-ACF-BD41D8DEF67E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6056A8C9-296E-4FCF-9A2F-A381F217E133} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60AC8DC6-537-4AF0-9990-8FB870C441D8} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60F90A18-6A8A-473C-A03E-A7E7FA57C753} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632882CF-E02E-4E59-B35D-4DFAE0755125} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6365CB1B-353-4EE7-8F5B-74CAEB6AD957} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64379FF-D7AB-494F-BE6C-8C61527B5FF9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{649EFE2D-7FE3-4307-A89-8AAA293D6BD} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{66D94E16-294D-4E4B-9585-AFA734DBE7ED} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67FBD188-8DD8-4D7D-A32C-8017547DB4E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{69192D70-ADA7-4E26-B0CE-12E31778CD40} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CE6F89B-5134-45CE-9026-CC8E542357F1} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CFB48A6-47F9-45C0-99C0-FD8160F6909A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6D8AC324-3487-4851-95B1-D259459FB4} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6FA562BF-86A9-4BBD-928-AF298F244D1A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7013D8F9-1A03-4A41-8BCA-9B524EF6BB2D} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70726FE1-D125-473F-87D0-41A98E5699A2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71155611-1011-47CE-ADE4-B2F9CB908081} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7226EE1C-CA69-4252-A3BB-20B4E1BE8AE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{729848A3-1687-4C36-AC23-8E1D5A81FED} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72B0E876-745C-4554-85CA-50262CF0CD61} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{745DF3D0-8A70-45D3-B684-DD2591F076BA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75043025-1a80-47c6-bb12-6567b72addfb} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75EF396-3794-4FF1-847A-24A24F64BA19} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7674CCD9-BC2C-4641-A190-A22DFA661CA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{775BEF1-8B9E-48D0-AE3B-4359E852CE56} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79CCAB12-B942-433A-BC69-414B4781EA8F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7ABFD20A-9C-445F-8A59-D5A6989525F2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B505A6E-F387-47B4-B077-48E2FBE485D} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C6A4884-BFD3-4ABD-B42E-CEE6C44E3B8} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D0ACAD8-1F05-44FE-AE68-1A762CE42B7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DB012CD-1A16-4806-B113-B89D3435D169} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E6034F8-6E44-4D3D-AC9E-8EBBB8EFA3} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FCF076F-1EB-4AB4-9368-A9D76C34B12} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8100243-BC7E-4B04-AC77-EDEAEF52E8FF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8183ACDF-7B7F-463A-A1FB-FAF499625FCA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81885652-3B3D-4FBC-A01B-238AF5D89C81} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{834E1C46-BFD1-4387-8C8E-D5DAB3AE582} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8664D4C6-9B9D-4B4D-B365-C3F494527F6E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8681804D-3EB3-4DEA-B9FB-F87CFEC06347} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86E86EED-9889-43A5-B33A-BD3834E74EC} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{889075BA-C870-4932-B799-DFFA38574059} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8ACC4AAA-A45D-449C-B5AE-8B8364BF6913} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8B75CAF-C01A-4759-A857-891A783FE97} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C6EDCBA-FF2F-4C03-AF16-42C92E527148} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D807BAB-CBB-4006-84F3-E9A334DAE5FD} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8ECB0B80-DC93-4B9B-BA23-27FFB7E8D7B8} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FA554C9-F288-4D78-BBA-4595564E1384} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FEA4F26-B9A-45B8-93C3-19AD161079CB} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{901C7E48-3B39-46DF-92FC-6992684BFAE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{915E5EA6-E2B-4967-AE24-DF9C5FF32F9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91B11041-1C20-454A-BD9D-692218C1DDD8} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91DEE7DE-A8E7-4A9F-A8C4-B39D5F98140} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92173B-9798-4740-A8C5-BBE3DBDB1E2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9330339A-6420-4707-BB80-245CDAD080BE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9393C81-A4DC-40DD-8FE3-3C82A8606694} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95a42a7a-b40b-4589-84b2-96d090a19fb7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{968F96FE-E4D4-4E98-86D9-4EF7FA7CFD} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97103997-653E-4DC0-9663-3133B83BB2B9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{972D1F8A-29BB-4858-8553-D22F92F283B3} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9778CF8A-38B6-42C4-81F2-6A20528CEB96} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{991864A4-F741-4DA6-B335-937FD024D240} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99269322-21B8-438D-8FFA-43EA6BD4C87F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99427DFF-11A3-41CB-8E97-23E69EE73E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A23A162-1523-4C73-8929-393A5E3EDF71} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9AAD57EB-21BC-4457-B0BD-C53A334E714E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF0DB3F-EB22-433C-A268-D5B6795E6040} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D24CD6D-A0F6-4800-B26F-CD5B2C761326} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A137AFCB-AEA2-4B7C-827-797477CDBDE} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A20C693B-FABE-4063-93C9-A79BCE4AD2EB} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2868E5B-61F1-4663-8AE4-F5E1EF8E202} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2C832A8-2B12-43B8-9759-258EC6DD751} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3803698-245A-4245-97D5-E623B8123B3} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A42CB2CF-80AC-4230-9D6D-97CC22801DBB} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5116639-43F7-4244-80B1-FEFC925BE2C7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5855799-655F-4AF8-A89B-A5FF99FBE40} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A686CB41-F42C-44BF-A6D1-8AA694B8EE1} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A834DDC2-BCB-4D6D-BB33-AA26D486ED3} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8CE7CFA-523-4EE3-A17E-B753453AB442} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A905B8F8-EA0E-4528-BFB7-4AFC3D95114B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A98E5132-9DA5-4316-A8CF-ACAC1570669D} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA552058-4932-4EF2-96F1-2CA783BFF0E0} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA57D5E1-DF66-441A-A29D-A2FE37373972} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD83A4B7-7A5B-4B5C-8408-22804BEB63B9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD88396D-6F80-40EE-89EE-C234A22A7C9D} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ADDEC27F-8145-42D9-B3A7-1F477BCE83D5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE182EDC-B79A-4CC5-B984-41ECCC2489F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF5D0489-8E54-4E62-A2FD-366B6C5431D7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B0226BBC-EE8B-43B7-9BD-F7DF9ADF1B9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B0679FFD-F46B-472F-BC64-785C85F2C9EA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B0F5EE71-7846-483F-9AE8-141513AD0A9} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2520503-FB42-476E-9630-7057A084BA94} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2E737F6-5742-4448-B1CF-5C5F23AA15C} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B74F0683-A49D-4AD7-82BB-BC4D9FB163F4} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA211834-A419-4113-858-887CFB91E5A8} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA351D0B-A8B9-492E-A721-36AF50694B56} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAC5A6CD-A1DB-4594-AFC2-F1E92D42FE71} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD930F0-EBB5-4E13-867A-59943E7A6531} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BE8727B5-51DD-479D-AB2E-6974F134E42} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C14295B-C5A-475E-9897-A2F78A76AD} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1BE1B5-D90D-471D-AE2C-D855EA78752} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1D48720-442F-4108-969E-10C11C13AC3F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C270CB10-7CD1-4E3F-BE13-D63928CFFAF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C445247B-E540-406F-85F4-648A72D3164} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C52629B3-1765-4C88-A521-ED4B52D93E2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C52D953D-7575-4929-849E-51F4E85AC42} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C5641A84-361E-4FC5-BCF4-DC692F811871} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C81939AF-6CD5-4857-B990-9A76C0185799} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB9BCDFD-3F59-464E-AB22-F14106F2EF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CBE1F850-7475-4290-84EE-3794FF71DF5E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CBF5C2F3-96-4C07-8814-E87D69F7164} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD34D859-B644-4A59-B240-27232C606E4C} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFC66C5D-5CC-468D-8792-94CD5EAB2716} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D022CA43-5609-4442-A1E4-40A3743D62F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D0E8B284-BC78-45C3-A9B6-907218D69F79} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D164758F-D796-4851-91F5-F4B2D3E482C5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D40885C2-EF74-43B4-8711-6F1C26AF253F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D49124BB-BFE7-4AA1-B02-8C1B4C44C665} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D653C21B-9319-4A04-A017-E247022229A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6B8BADD-E035-4AEA-8568-4581B33149E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6F4F0E5-727A-49E9-88B1-568B9DC360BB} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D75AD15B-9E1-402D-B753-9F55D1DEBA8F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D75F3120-ADEC-4F47-92D4-5148D29FD92C} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D85471E4-1344-4AF3-84DE-6856F3B8652} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8A2F113-9879-4C43-BDD3-9C134A42C59} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D94CD489-F6BC-40C2-8F62-E4C0279DD2C7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB8A542F-65B2-4CCB-88FE-CF69433645} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC46849D-3FAE-4ABF-85F3-AA4D4E1F6B57} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCF26706-8E81-4B09-8560-C3D37C5CA394} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB89FC2-D1EF-4EB8-B01-92646BDF7F6A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE781FD8-36B3-49F5-B7A-BF6F4FA57CA6} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEDA48B7-F933-4CAA-AC1A-EA4FE144A18} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0AD4D7-3A29-4C44-901-CF8B7C5B372} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E119FF60-1E9C-4287-BDF3-D7ACF18C995E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1359932-8E5B-4441-B48-BB1588A9A4DF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E16EBA54-9EFB-4CEB-9292-F2787A6CD45F} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1CD885A-963B-4D49-9654-CEA7FA3BEF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2380DD2-7A46-4DFB-9EE6-303CA870B70} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2637995-1907-4445-82CB-BE34B673F069} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E28BAA9E-B1E3-4F12-B643-A810438F858B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E38E12EE-4ED1-40F7-8E19-A24069E5E948} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3C8594F-F16F-4856-9098-2DC79D18BA20} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E578D692-316E-48D8-9BCE-D8D1FC26C710} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e5d36ebe-9825-494f-8418-4a191e80f468} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E5F5E006-EB84-4C89-ABE9-E77FBBA3C4ED} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E68F4C48-AB45-4162-A54A-E8165A2A9578} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7B2EBCB-298A-4649-AE71-4C205166F398} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E85E68C0-9FC1-4CC0-861A-94A393DF5CA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA469C58-3089-412C-857B-1AB32A2CE526} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC9E4DB7-877F-405B-85F6-E6803EA528DB} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECFFB777-D3B9-4685-9B4F-7CF71FA7B3FA} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED2F96AC-2303-4FE9-802A-43B66F2ACD4E} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDA59CED-C7E8-4DAE-BD39-52E12EC88E53} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE87F1F2-7009-4017-8091-F95A81307314} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFD02BA2-6218-4067-BDA7-EE19A98BE641} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFDB857A-5936-4DC7-B9EB-F0EEFFFCD694} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F112CDB-B39-4536-BDAA-66B8EC8720D4} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1A992C3-3F94-457B-9CCC-3929D1815BE5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1F34E90-EB16-4637-8475-ABE0B86DE5B5} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F23B7FC7-842D-43B1-B757-5DD6AD029E2} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2755166-DEB0-4EB8-A0F1-CB297EA0E750} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F388D52D-3811-408E-A1F7-AB9DD1BE4ECF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B18DEC-578C-48A4-AC63-37EAF7860A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F4A98BE7-C5A1-498C-B70-69288077874A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F4BF6548-314-46D9-8016-32113AFEB7AF} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F58C6B17-E65F-42F7-B2EA-E70C1C582E0} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F629D4C5-B25F-4204-A7A2-A0653162032} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F6F237C4-7D89-4696-AA4C-61449737D972} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F79B729E-4D89-452F-8AA6-DFD392F530F0} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9F2AA9-B33E-41C5-8531-60BDDBB11E82} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF3E676-37F2-4002-865C-499ECA8FDB8B} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FC96BE77-90B1-43EB-85E-146250D9AC3A} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD19503E-C2E7-4302-BF23-DDB4DBDEA3E4} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD42A2C9-F3A7-4714-BB93-1281A371CA3D} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD783E79-1D4B-43B6-8BA3-C5E1376E7B8} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE78ECD1-715C-47CA-A2C5-F2D092D210B7} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFA10425-C6E6-4C1F-AC44-F73FB5B3E817} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{31264a33-a653-46c4-af49-1232c59a7da5} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{31264a33-a653-46c4-af49-1232c59a7da5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{504cdd53-6d0d-4ab4-86d5-96231f486fb7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75043025-1a80-47c6-bb12-6567b72addfb} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95a42a7a-b40b-4589-84b2-96d090a19fb7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e5d36ebe-9825-494f-8418-4a191e80f468} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110611331111} deleted successfully
HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{31264a33-a653-46c4-af49-1232c59a7da5} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\Package Cache deleted
C:\Users\Default\AppData\Local\Pokki deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\PROGRA~3\uninstall369910.exe deleted
"C:\Windows\Installer\1754d.msi" deleted
"C:\Windows\Installer\1c23d.msi" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [23. 11. 2014 17:56]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fheoggkfdfchfphceeifdbepaooicaho - No path found[]

Seznam Lištička - Email - Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
Seznam Lištička - Slovník - Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
TheTorntv V10 - Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\caplfhpahpkhhckglldpmdmjclabckhc
SiteAdvisor - Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
oaenhjgmhjdjkjjfmbefgllcamnelmef - Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\oaenhjgmhjdjkjjfmbefgllcamnelmef

==== Chromium Fix ======================

C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\caplfhpahpkhhckglldpmdmjclabckhc deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_caplfhpahpkhhckglldpmdmjclabckhc_0.localstorage deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_caplfhpahpkhhckglldpmdmjclabckhc_0.localstorage-journal deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_caplfhpahpkhhckglldpmdmjclabckhc_0 deleted successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\caplfhpahpkhhckglldpmdmjclabckhc deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{C8B22E13-EB1C-4660-BB3A-27C709E4E3F7}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C8B22E13-EB1C-4660-BB3A-27C709E4E3F7}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{33B23620-AD10-4211-845D-59509D55FB4C} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_13415"
{4DDF222D-AB2D-4E67-9764-12511CE703C8} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_13415"
{5C7062B9-785E-477C-A214-14862870107E} Unknown Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_13415"
{94A3020A-7217-4C3C-B249-4CA4E13EA6CF} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_13415"
{ADBE8247-6457-48E0-A7CC-97F5405CF878} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415"
{C60E3FC3-0746-40DB-8BB3-1777C5407C87} Unknown Url="Not_Found"
{CC0DC0E3-A06F-4C86-B982-1D66734DBEB9} Unknown Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_13415"
{CC813F5C-8BAE-48A1-88F4-E5DEF0AC3B94} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_13415"
{D55905F0-7F86-4C9E-8DA3-9F32EB284BD5} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_13415"

==== Reset Google Chrome ======================

C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C60E3FC3-0746-40DB-8BB3-1777C5407C87} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F6486B12843E11F869800002C0A966 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B6846F20-4821-11E3-8F96-0800200C9A66} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\02F6486B12843E11F869800002C0A966 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\G841HYMO will be deleted at reboot
C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\MTL04VXU will be deleted at reboot
C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\O3MW7GH4 will be deleted at reboot
C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\OM3XZUTG will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=6003 folders=145 304211557 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Ivana\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Ivana\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\G841HYMO" not found
"C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\MTL04VXU" not found
"C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\O3MW7GH4" not found
"C:\Users\Ivana\AppData\Local\Microsoft\Windows\INetCache\IE\OM3XZUTG" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on p  28. 11. 2014 at 17:51:53,83 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100 a docistime

Tady je log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Ivana (administrator) on IROCI on 28-11-2014 22:59:42
Running from C:\Users\Ivana\Desktop
Loaded Profile: Ivana (Available profiles: Ivana)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
(ICQ) C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe
() C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.229\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.13\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.119\deploy\LolClient.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\Core\mchost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Ivana\Downloads\FRSTLauncher (4).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 2014-04-10] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-02] (NVIDIA Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] ( (Qualcomm®Atheros®))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [AcerPortal] => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2452736 2014-11-19] (Acer)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [icq] => C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-03] (ICQ)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Ivana\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\MountPoints2: {45100bc5-53a9-11e4-8262-f8a963dafa3c} - "F:\CD_Start.exe"
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {C60E3FC3-0746-40DB-8BB3-1777C5407C87} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {C8B22E13-EB1C-4660-BB3A-27C709E4E3F7} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {33B23620-AD10-4211-845D-59509D55FB4C} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {4DDF222D-AB2D-4E67-9764-12511CE703C8} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {5C7062B9-785E-477C-A214-14862870107E} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {94A3020A-7217-4C3C-B249-4CA4E13EA6CF} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {ADBE8247-6457-48E0-A7CC-97F5405CF878} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {CC0DC0E3-A06F-4C86-B982-1D66734DBEB9} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {CC813F5C-8BAE-48A1-88F4-E5DEF0AC3B94} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKU\S-1-5-21-2236328081-253002499-3668650474-1001 -> {D55905F0-7F86-4C9E-8DA3-9F32EB284BD5} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-05-27]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-05-27]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/?clid=12140
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-03]
CHR Extension: (Dokumenty Google) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-03]
CHR Extension: (Disk Google) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-03]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2014-10-03]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-10-20]
CHR Extension: (YouTube) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-03]
CHR Extension: (Vyhledávání Google) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-03]
CHR Extension: (Tabulky Google) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-03]
CHR Extension: (SiteAdvisor) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-10-03]
CHR Extension: (Peněženka Google) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-03]
CHR Extension: (oaenhjgmhjdjkjjfmbefgllcamnelmef) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\oaenhjgmhjdjkjjfmbefgllcamnelmef [2014-10-20]
CHR Extension: (Gmail) - C:\Users\Ivana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-03]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-11-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows (R) Win 7 DDK provider)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-06] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-10-21] (LogMeIn, Inc.)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-25] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617352 2014-04-02] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-22] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-22] (Acer Incorporate)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-25] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-26] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-20] (Disc Soft Ltd)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-11-03] (LogMeIn Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [476888 2014-04-02] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-28 22:59 - 2014-11-28 22:59 - 00026766 _____ () C:\Users\Ivana\Desktop\FRST.txt
2014-11-28 22:58 - 2014-11-28 22:58 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\FRSTLauncher (4).exe
2014-11-28 22:57 - 2014-11-28 22:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\Nepotvrzeno 822416.crdownload
2014-11-28 22:57 - 2014-11-28 22:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\Nepotvrzeno 194515.crdownload
2014-11-28 22:54 - 2014-11-28 22:59 - 00000000 ____D () C:\FRST
2014-11-28 22:54 - 2014-11-28 22:54 - 02117632 _____ (Farbar) C:\Users\Ivana\Desktop\FRST64.exe
2014-11-28 20:02 - 2014-11-28 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-11-28 19:18 - 2014-11-28 19:18 - 00003164 _____ () C:\Windows\System32\Tasks\{EE19569E-79A6-4E92-8A70-FDD4F0C899E3}
2014-11-28 17:50 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-28 17:20 - 2014-11-28 17:51 - 00058066 _____ () C:\zoek-results.log
2014-11-28 17:19 - 2014-11-28 17:19 - 00000000 ____D () C:\Users\Ivana\Downloads\zoek
2014-11-28 17:18 - 2014-11-28 17:51 - 00000000 ____D () C:\zoek_backup
2014-11-28 17:18 - 2014-11-28 17:18 - 04270204 _____ () C:\Users\Ivana\Downloads\zoek.zip
2014-11-28 17:17 - 2014-11-28 17:18 - 04277400 _____ () C:\Users\Ivana\Downloads\zoek.rar
2014-11-27 23:03 - 2014-11-27 23:03 - 01222144 _____ () C:\Users\Ivana\Downloads\RSITx64.exe
2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\rsit
2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files\trend micro
2014-11-27 22:37 - 2014-11-27 22:37 - 01032220 _____ (Thisisu) C:\Users\Ivana\Downloads\JRT.exe
2014-11-27 22:37 - 2014-11-27 22:37 - 00000000 ____D () C:\Windows\ERUNT
2014-11-27 22:34 - 2014-11-27 22:34 - 00050688 _____ (Atribune.org) C:\Users\Ivana\Downloads\ATF-Cleaner.exe
2014-11-27 22:29 - 2014-11-28 17:51 - 00001852 _____ () C:\Windows\PFRO.log
2014-11-27 22:25 - 2014-11-27 22:54 - 00000000 ____D () C:\AdwCleaner
2014-11-27 22:25 - 2014-11-27 22:25 - 02148864 _____ () C:\Users\Ivana\Downloads\adwcleaner_4.102.exe
2014-11-27 22:23 - 2014-11-27 22:23 - 00448512 _____ (OldTimer Tools) C:\Users\Ivana\Downloads\TFC.exe
2014-11-27 22:19 - 2014-11-27 22:19 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-27 22:19 - 2014-11-27 22:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-27 22:19 - 2014-11-27 22:19 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-27 22:18 - 2014-11-27 22:18 - 11580500 _____ () C:\Users\Ivana\Downloads\cc-setup.exe
2014-11-26 20:23 - 2014-11-26 20:23 - 00010687 _____ () C:\Users\Ivana\Downloads\[kickass.so]the.hobbit.the.desolation.of.smaug.2013.720p.brrip.x264.yify.torrent
2014-11-25 13:18 - 2014-11-25 13:18 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-11-23 17:59 - 2014-11-23 17:59 - 00000303 _____ () C:\Users\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Domácí skupina.lnk
2014-11-22 21:27 - 2014-11-22 21:27 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-11-22 21:27 - 2014-11-22 21:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series
2014-11-22 21:26 - 2014-11-22 21:26 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-11-22 21:26 - 2010-08-25 05:00 - 00361472 _____ (CANON INC.) C:\Windows\system32\CNMLMAE.DLL
2014-11-21 16:05 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-21 16:05 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-21 16:05 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-21 16:05 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-21 16:04 - 2014-11-21 16:04 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-11-16 17:48 - 2014-11-16 17:48 - 00000000 ____D () C:\Users\Ivana\Documents\Electronic Arts
2014-11-16 17:33 - 2011-02-18 15:07 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2014-11-16 17:32 - 2014-11-16 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2014-11-16 17:13 - 2014-11-16 17:13 - 00000000 ____D () C:\Hry
2014-11-16 11:45 - 2014-11-16 11:45 - 00017608 _____ () C:\Users\Ivana\Downloads\[CzT]The_Sims_4_2014_CZ_ (1).torrent
2014-11-16 11:35 - 2014-11-16 11:35 - 00017608 _____ () C:\Users\Ivana\Downloads\[CzT]The_Sims_4_2014_CZ_.torrent
2014-11-14 16:51 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-11-14 16:51 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-11-14 16:51 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-11-14 16:51 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-11-14 16:51 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-11-14 16:51 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2014-11-14 16:51 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2014-11-14 16:50 - 2014-11-05 00:38 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-14 16:50 - 2014-11-04 01:10 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-14 16:50 - 2014-10-31 05:53 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-11-14 16:50 - 2014-10-31 05:49 - 00537088 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-14 16:50 - 2014-10-31 05:24 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-11-14 16:50 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-11-14 16:50 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-14 16:50 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-14 16:50 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-11-14 16:50 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-11-14 16:50 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-11-14 16:50 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-11-14 16:50 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-11-14 15:34 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-14 15:34 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-14 15:34 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-11-14 15:34 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-11-14 15:34 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-11-14 15:34 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-11-14 15:34 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-11-14 15:34 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-11-14 15:34 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-11-14 15:34 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-11-14 15:34 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-11-14 15:34 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-11-14 15:34 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-11-14 15:34 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-11-14 15:34 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-11-14 15:34 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-11-14 15:34 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-11-14 15:34 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-11-14 15:34 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-14 15:34 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-14 15:34 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-14 15:34 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-11-14 15:34 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-11-14 15:34 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-14 15:34 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-14 15:34 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-11-14 15:34 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2014-11-14 15:34 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-11-14 15:34 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-14 15:34 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-14 15:34 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-11-14 15:34 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-14 15:34 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-11-14 15:34 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-11-14 15:34 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-11-14 15:34 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-14 15:34 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-11-14 15:34 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-14 15:33 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-11-14 15:33 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-14 15:33 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-11-14 15:33 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-11-14 15:33 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-14 15:33 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-14 15:33 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-14 15:33 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-14 15:33 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-14 15:33 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-14 15:33 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-11-14 15:33 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-14 15:33 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-14 15:33 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-14 15:33 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-11-14 15:33 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-14 15:33 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2014-11-14 15:33 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-14 15:33 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-14 15:33 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-14 15:33 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-14 15:33 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-14 15:33 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-11-14 15:33 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-14 15:33 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-14 15:33 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-14 15:33 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-11-14 15:33 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-11-14 15:33 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-14 15:33 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-14 15:33 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-14 15:33 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-11-14 15:33 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-14 15:33 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-11-14 15:33 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-11-14 15:33 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-11-14 15:33 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-14 15:33 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-14 15:33 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-14 15:33 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-14 15:33 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-14 15:33 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-14 15:33 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-11-14 15:33 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-11-14 15:33 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-14 15:33 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-11-14 15:33 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-11-14 15:33 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-11-14 15:33 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-11-14 15:33 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-11-14 15:33 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-14 15:33 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-11-14 15:33 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-14 15:33 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-11-14 15:33 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-14 15:33 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-14 15:33 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-14 15:33 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-14 15:33 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-14 15:33 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-14 15:33 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-11-14 15:33 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-14 15:33 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2014-11-14 15:33 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-11-14 15:33 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-14 15:33 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-14 15:33 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-11-14 15:33 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-14 15:33 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-14 15:33 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-11-14 15:33 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-11-14 15:33 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-11-14 15:33 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-14 15:33 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-11-14 15:33 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-14 15:33 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-11-14 15:33 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-14 15:33 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-11-14 15:33 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-14 15:33 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-11-14 15:33 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-11-14 15:33 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-14 15:33 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-14 15:33 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-14 15:33 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-14 15:33 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-11-14 15:33 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-11-14 15:33 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-14 15:33 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-14 15:33 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-14 15:32 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-14 15:32 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-14 15:32 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-14 15:32 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-14 15:32 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-14 15:32 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-11-14 15:32 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-14 15:32 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-14 15:32 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-14 15:32 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-14 15:32 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-14 15:32 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-14 15:32 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-14 15:32 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-11-14 15:32 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-14 15:32 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-11-14 15:32 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-11-14 15:32 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-11-14 15:32 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-11-14 15:32 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-11-14 15:32 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-11-14 15:32 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-11-14 15:32 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2014-11-14 15:32 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-11-14 15:32 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-11-14 15:32 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-11-14 15:32 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-11-14 15:32 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-11-14 15:32 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-11-14 15:32 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-11-14 15:32 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-11-14 15:32 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-11-14 15:32 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-11-14 15:32 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-11-14 15:32 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-14 15:32 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-11-14 15:32 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-11-14 15:32 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-14 15:32 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-11-14 15:32 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-11-14 15:32 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-11-14 11:17 - 2014-11-14 11:17 - 00000000 ____D () C:\Users\Ivana\AppData\Local\BMExplorer
2014-11-14 11:16 - 2014-11-28 10:50 - 00000000 ____D () C:\Users\Ivana\Documents\Bluetooth Folder
2014-11-14 10:05 - 2014-11-28 22:10 - 00000972 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738.job
2014-11-14 10:05 - 2014-11-28 17:51 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e.job
2014-11-14 10:05 - 2014-11-14 10:05 - 00003944 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738
2014-11-14 10:05 - 2014-11-14 10:05 - 00003708 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e
2014-11-11 20:52 - 2014-11-11 20:52 - 00003238 _____ () C:\Windows\System32\Tasks\{C04FF7D5-1C4D-455F-96C0-E2FD3F0B690B}
2014-11-11 19:54 - 2014-11-11 19:54 - 00003238 _____ () C:\Windows\System32\Tasks\{E9EEA3BC-AB7A-4DBE-9795-BFBFBC23C454}
2014-11-10 23:10 - 2014-11-23 17:58 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-10 23:10 - 2014-11-10 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-10 23:10 - 2014-11-10 23:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-10 23:10 - 2014-11-10 23:10 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-10 23:10 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-10 23:10 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-10 23:10 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-10 23:08 - 2014-11-10 23:09 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Ivana\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-10 18:11 - 2014-11-10 18:11 - 00000000 ____D () C:\Users\Ivana\Downloads\INSTALL_CD_Oblivion_CZ_Light
2014-11-10 18:09 - 2014-11-10 18:10 - 31925454 _____ () C:\Users\Ivana\Downloads\INSTALL_CD_Oblivion_CZ_Light.zip
2014-11-10 17:50 - 2014-11-10 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2014-11-10 17:50 - 2014-11-10 17:50 - 00000000 ____D () C:\Program Files (x86)\Bethesda Softworks
2014-11-10 17:49 - 2014-11-10 18:39 - 00000000 ____D () C:\Users\Ivana\AppData\Local\Oblivion
2014-11-10 17:49 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-11-10 17:49 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-11-10 17:47 - 2014-11-10 17:47 - 00029329 _____ () C:\Users\Ivana\Downloads\The_Elder_Scrolls_IV_Oblivion_Game_Of_The_Year_Deluxe_Edition.5881638.TPB.torrent
2014-11-09 20:29 - 2014-11-09 20:29 - 00000000 ____D () C:\Users\Ivana\AppData\Local\Adobe
2014-11-09 19:12 - 2014-11-09 19:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-11-09 19:12 - 2014-11-09 19:12 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-11-09 17:33 - 2014-11-09 20:15 - 1503408589 _____ () C:\Users\Ivana\Downloads\Mafia-1-–-Plna-Verze-Hry-–-CZ.rar
2014-11-08 10:03 - 2014-11-08 12:37 - 00000000 ____D () C:\Users\Ivana\Downloads\The Elder Scrolls IV Oblivion+Expansions
2014-11-04 23:55 - 2014-11-04 23:55 - 00000000 ____D () C:\Users\Ivana\AppData\Local\Microsoft Help
2014-11-04 23:54 - 2014-11-04 23:54 - 00000000 ____D () C:\Users\Ivana\Documents\Vlastní šablony Office
2014-11-03 22:01 - 2014-11-03 21:19 - 00001325 _____ () C:\Users\Ivana\Desktop\Movie Maker.lnk
2014-11-03 21:22 - 2014-11-03 21:22 - 00000000 ____D () C:\Users\Ivana\Tracing
2014-11-03 21:19 - 2014-11-03 21:19 - 00002506 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-11-03 21:19 - 2014-11-03 21:19 - 00001478 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-11-03 21:19 - 2014-11-03 21:19 - 00001394 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-11-03 21:19 - 2014-11-03 21:19 - 00001325 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-11-03 21:19 - 2014-11-03 21:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-11-03 21:19 - 2014-11-03 21:19 - 00000000 ____D () C:\Windows\cs
2014-11-03 21:19 - 2014-11-03 21:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-11-03 21:18 - 2014-11-03 21:19 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-11-03 21:18 - 2014-11-03 21:18 - 00000000 ____D () C:\Windows\PCHEALTH
2014-11-03 21:18 - 2014-11-03 21:18 - 00000000 ____D () C:\Program Files\Windows Live
2014-11-03 21:17 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-11-03 21:17 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-11-03 21:17 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-11-03 21:17 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-11-03 21:17 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-11-03 21:17 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-03 21:17 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-11-03 21:17 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-11-03 21:16 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-03 21:16 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-03 21:15 - 2014-11-24 20:15 - 00000000 ____D () C:\Users\Ivana\AppData\Local\Windows Live
2014-11-03 21:14 - 2014-11-03 21:14 - 01243336 _____ (společnost Microsoft Corporation) C:\Users\Ivana\Downloads\wlsetup-web.exe
2014-11-03 20:54 - 2014-11-03 20:54 - 13598617 _____ () C:\Users\Ivana\Downloads\wmminst.zip
2014-11-03 18:12 - 2014-11-03 18:12 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys
2014-11-02 00:59 - 2014-11-26 23:28 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\vlc
2014-11-02 00:58 - 2014-11-02 00:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-11-02 00:58 - 2014-11-02 00:58 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-11-02 00:56 - 2014-11-02 00:56 - 24743106 _____ () C:\Users\Ivana\Downloads\vlc-2.1.5-win32.exe
2014-11-01 13:51 - 2014-11-01 13:57 - 00000000 ____D () C:\Users\Ivana\Documents\CyberLink
2014-11-01 13:51 - 2014-11-01 13:57 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\CyberLink
2014-10-31 23:37 - 2014-10-31 23:37 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\MPC-HC
2014-10-31 23:36 - 2014-10-31 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
2014-10-31 23:36 - 2014-10-31 23:36 - 00000000 ____D () C:\Program Files (x86)\Combined Community Codec Pack
2014-10-31 23:35 - 2014-10-31 23:35 - 10420256 _____ (CCCP Project ) C:\Users\Ivana\Downloads\Combined-Community-Codec-Pack-2014-07-13.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-28 23:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-28 22:52 - 2014-10-03 15:17 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\Skype
2014-11-28 22:30 - 2014-07-23 20:56 - 01513785 _____ () C:\Windows\WindowsUpdate.log
2014-11-28 21:46 - 2014-10-03 15:08 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2236328081-253002499-3668650474-1001
2014-11-28 20:55 - 2014-10-03 15:10 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{0DA5DBAD-8649-4EF0-A6F3-3ADBC4E83A07}
2014-11-28 18:32 - 2014-10-03 21:02 - 00000000 ____D () C:\Users\Ivana\AppData\Local\CrashDumps
2014-11-28 17:55 - 2014-07-23 21:23 - 00739924 _____ () C:\Windows\system32\perfh005.dat
2014-11-28 17:55 - 2014-07-23 21:23 - 00151610 _____ () C:\Windows\system32\perfc005.dat
2014-11-28 17:55 - 2014-03-18 11:03 - 01745984 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-28 17:51 - 2014-10-28 18:55 - 00000000 ____D () C:\Users\Ivana\AppData\Local\LogMeIn Hamachi
2014-11-28 17:51 - 2014-10-03 15:35 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-28 17:51 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-28 17:51 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-27 22:47 - 2014-10-24 14:13 - 00000000 ___RD () C:\Users\Ivana\Desktop\Ostatní
2014-11-27 22:28 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-27 22:22 - 2014-10-20 21:15 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\DAEMON Tools Lite
2014-11-27 22:22 - 2014-10-06 20:19 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\uTorrent
2014-11-27 22:22 - 2014-05-27 07:58 - 00000000 ____D () C:\Windows\Panther
2014-11-27 14:48 - 2014-10-03 15:37 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-27 14:40 - 2014-10-03 15:06 - 00002158 _____ () C:\Users\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-26 23:26 - 2014-10-21 19:47 - 00000000 ___RD () C:\Users\Ivana\Desktop\Games
2014-11-25 13:18 - 2014-05-27 07:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-25 13:16 - 2014-10-03 15:05 - 00000000 ____D () C:\Users\Ivana\AppData\Local\clear.fi
2014-11-25 13:15 - 2014-10-03 15:03 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\Atheros
2014-11-24 22:27 - 2014-10-03 15:08 - 00000000 _____ () C:\Windows\system32\newflow.dat
2014-11-24 13:41 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-23 17:56 - 2014-05-27 07:24 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-11-23 17:54 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-21 16:16 - 2014-10-15 17:44 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-11-21 16:04 - 2014-05-27 07:12 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-11-21 16:03 - 2014-05-27 07:52 - 00000000 ___HD () C:\OEM
2014-11-20 15:24 - 2014-10-03 16:05 - 00000000 ___RD () C:\Users\Ivana\Desktop\Iroci
2014-11-18 19:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-18 13:14 - 2014-05-27 07:22 - 00002487 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-11-17 09:48 - 2013-08-22 15:44 - 00492496 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-16 21:44 - 2014-10-07 14:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-16 21:44 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-16 21:44 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-16 21:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-16 21:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-16 14:24 - 2014-10-03 15:02 - 00000000 ____D () C:\Users\Ivana\AppData\Local\Packages
2014-11-16 14:23 - 2014-10-24 16:46 - 00051712 ___SH () C:\Users\Ivana\Downloads\Thumbs.db
2014-11-16 10:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SchCache
2014-11-15 00:12 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2014-11-15 00:12 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-11-15 00:11 - 2014-10-03 20:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-15 00:07 - 2014-10-03 20:22 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-14 11:17 - 2014-07-23 21:07 - 00000000 ____D () C:\ProgramData\Atheros
2014-11-14 10:05 - 2014-10-24 19:41 - 00003944 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e
2014-11-14 10:05 - 2014-10-24 19:41 - 00000972 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e.job
2014-11-14 10:05 - 2014-10-03 15:35 - 00003708 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-12 11:03 - 2014-05-27 07:21 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-11 19:56 - 2013-08-22 12:22 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-11-11 19:56 - 2013-08-22 12:22 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2014-11-11 19:56 - 2013-08-22 12:17 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2014-11-11 19:56 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2014-11-11 19:56 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2014-11-11 19:56 - 2013-08-22 05:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2014-11-11 19:56 - 2013-08-22 05:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2014-11-11 19:56 - 2013-08-22 04:59 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2014-11-11 19:56 - 2013-08-22 04:56 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-11-11 19:56 - 2013-08-22 04:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2014-11-11 19:56 - 2013-08-22 04:51 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2014-11-11 19:56 - 2013-08-22 04:51 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2014-11-11 19:56 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2014-11-11 19:56 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2014-11-10 18:04 - 2014-10-03 15:02 - 00000000 ____D () C:\Users\Ivana\AppData\Local\VirtualStore
2014-11-10 17:50 - 2014-07-23 20:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-10 17:49 - 2014-10-20 21:11 - 00000000 ____D () C:\Users\Ivana\Documents\My Games
2014-11-09 20:29 - 2014-10-03 15:02 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\Adobe
2014-11-05 12:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-03 21:22 - 2014-10-03 15:01 - 00000000 ____D () C:\Users\Ivana
2014-11-03 21:18 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-01 21:58 - 2014-10-20 21:15 - 00000000 ____D () C:\Users\Ivana\AppData\Roaming\Seznam.cz
2014-11-01 13:58 - 2014-07-23 21:18 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-01 13:56 - 2014-10-03 16:49 - 00000000 ____D () C:\Users\Ivana\AppData\Local\Cyberlink
2014-11-01 13:53 - 2014-07-23 21:11 - 00000000 ____D () C:\ProgramData\CyberLink
2014-10-31 12:45 - 2014-10-03 15:15 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk
2014-10-30 01:55 - 2014-10-03 20:49 - 00714208 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-30 01:55 - 2014-10-03 20:49 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-26 19:38




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Acer) (Fixed) (Total:913.71 GB) (Free:825.46 GB) NTFS
Drive f: (SI_KOTN) (CDROM) (Total:1.29 GB) (Free:0 GB) CDFS

Available physical RAM: 4147.89 MB
Total physical RAM: 8083.27 MB
Percentage of memory in use: 48%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 2D98452F)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\Ivana\OneDrive:ms-properties

==================== Security Center ==================

AV: McAfee Anti-Virus and Antispyware (Disabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus and Antispyware (Disabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Ivana\Desktop" je 17646 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  
  HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
  HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
  HKLM\...\Policies\Explorer: [NoFolderOptions] 0
  HKLM\...\Policies\Explorer: [NoControlPanel] 0
  HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
  HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [icq] => C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-03] (ICQ)
  HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
  HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Ivana\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
  HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\MountPoints2: {45100bc5-53a9-11e4-8262-f8a963dafa3c} - "F:\CD_Start.exe" 
  
  SearchScopes: HKLM -> DefaultScope {C60E3FC3-0746-40DB-8BB3-1777C5407C87} URL = 
  SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKLM-x32 -> DefaultScope {C8B22E13-EB1C-4660-BB3A-27C709E4E3F7} URL = 
  SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  
  R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  
  2014-11-28 22:58 - 2014-11-28 22:58 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\FRSTLauncher (4).exe
  2014-11-28 22:57 - 2014-11-28 22:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\Nepotvrzeno 822416.crdownload
  2014-11-28 22:57 - 2014-11-28 22:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\Nepotvrzeno 194515.crdownload
  C:\Program Files (x86)\Skype\Toolbars
  2014-11-28 19:18 - 2014-11-28 19:18 - 00003164 _____ () C:\Windows\System32\Tasks\{EE19569E-79A6-4E92-8A70-FDD4F0C899E3}
  2014-11-28 17:50 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-11-28 17:20 - 2014-11-28 17:51 - 00058066 _____ () C:\zoek-results.log
  2014-11-28 17:19 - 2014-11-28 17:19 - 00000000 ____D () C:\Users\Ivana\Downloads\zoek
  2014-11-28 17:18 - 2014-11-28 17:51 - 00000000 ____D () C:\zoek_backup
  2014-11-28 17:18 - 2014-11-28 17:18 - 04270204 _____ () C:\Users\Ivana\Downloads\zoek.zip
  2014-11-28 17:17 - 2014-11-28 17:18 - 04277400 _____ () C:\Users\Ivana\Downloads\zoek.rar
  2014-11-27 23:03 - 2014-11-27 23:03 - 01222144 _____ () C:\Users\Ivana\Downloads\RSITx64.exe
  2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\rsit
  2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files\trend micro
  2014-11-27 22:37 - 2014-11-27 22:37 - 01032220 _____ (Thisisu) C:\Users\Ivana\Downloads\JRT.exe
  2014-11-27 22:37 - 2014-11-27 22:37 - 00000000 ____D () C:\Windows\ERUNT
  2014-11-27 22:34 - 2014-11-27 22:34 - 00050688 _____ (Atribune.org) C:\Users\Ivana\Downloads\ATF-Cleaner.exe
  2014-11-27 22:29 - 2014-11-28 17:51 - 00001852 _____ () C:\Windows\PFRO.log
  2014-11-27 22:25 - 2014-11-27 22:54 - 00000000 ____D () C:\AdwCleaner
  2014-11-27 22:25 - 2014-11-27 22:25 - 02148864 _____ () C:\Users\Ivana\Downloads\adwcleaner_4.102.exe
  2014-11-27 22:23 - 2014-11-27 22:23 - 00448512 _____ (OldTimer Tools) C:\Users\Ivana\Downloads\TFC.exe
  
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: {5E1DBD55-5E25-4B95-BE4A-E0BC3A0E79E8} - \3da1eff0-b932-4650-a212-1378f8995d7f No Task File <==== ATTENTION
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01
Ran by Ivana at 2014-11-30 02:09:15 Run:1
Running from C:\Users\Ivana\Desktop\Ostatní
Loaded Profile: Ivana (Available profiles: Ivana)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:

HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [icq] => C:\Users\Ivana\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-03] (ICQ)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Ivana\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Ivana\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\...\MountPoints2: {45100bc5-53a9-11e4-8262-f8a963dafa3c} - "F:\CD_Start.exe"

SearchScopes: HKLM -> DefaultScope {C60E3FC3-0746-40DB-8BB3-1777C5407C87} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {C8B22E13-EB1C-4660-BB3A-27C709E4E3F7} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

2014-11-28 22:58 - 2014-11-28 22:58 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\FRSTLauncher (4).exe
2014-11-28 22:57 - 2014-11-28 22:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\Nepotvrzeno 822416.crdownload
2014-11-28 22:57 - 2014-11-28 22:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ivana\Downloads\Nepotvrzeno 194515.crdownload
C:\Program Files (x86)\Skype\Toolbars
2014-11-28 19:18 - 2014-11-28 19:18 - 00003164 _____ () C:\Windows\System32\Tasks\{EE19569E-79A6-4E92-8A70-FDD4F0C899E3}
2014-11-28 17:50 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-28 17:20 - 2014-11-28 17:51 - 00058066 _____ () C:\zoek-results.log
2014-11-28 17:19 - 2014-11-28 17:19 - 00000000 ____D () C:\Users\Ivana\Downloads\zoek
2014-11-28 17:18 - 2014-11-28 17:51 - 00000000 ____D () C:\zoek_backup
2014-11-28 17:18 - 2014-11-28 17:18 - 04270204 _____ () C:\Users\Ivana\Downloads\zoek.zip
2014-11-28 17:17 - 2014-11-28 17:18 - 04277400 _____ () C:\Users\Ivana\Downloads\zoek.rar
2014-11-27 23:03 - 2014-11-27 23:03 - 01222144 _____ () C:\Users\Ivana\Downloads\RSITx64.exe
2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\rsit
2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files\trend micro
2014-11-27 22:37 - 2014-11-27 22:37 - 01032220 _____ (Thisisu) C:\Users\Ivana\Downloads\JRT.exe
2014-11-27 22:37 - 2014-11-27 22:37 - 00000000 ____D () C:\Windows\ERUNT
2014-11-27 22:34 - 2014-11-27 22:34 - 00050688 _____ (Atribune.org) C:\Users\Ivana\Downloads\ATF-Cleaner.exe
2014-11-27 22:29 - 2014-11-28 17:51 - 00001852 _____ () C:\Windows\PFRO.log
2014-11-27 22:25 - 2014-11-27 22:54 - 00000000 ____D () C:\AdwCleaner
2014-11-27 22:25 - 2014-11-27 22:25 - 02148864 _____ () C:\Users\Ivana\Downloads\adwcleaner_4.102.exe
2014-11-27 22:23 - 2014-11-27 22:23 - 00448512 _____ (OldTimer Tools) C:\Users\Ivana\Downloads\TFC.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {5E1DBD55-5E25-4B95-BE4A-E0BC3A0E79E8} - \3da1eff0-b932-4650-a212-1378f8995d7f No Task File <==== ATTENTION

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Windows\CurrentVersion\Run\\icq => value deleted successfully.
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value deleted successfully.
HKU\S-1-5-21-2236328081-253002499-3668650474-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value deleted successfully.
"HKU\S-1-5-21-2236328081-253002499-3668650474-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{45100bc5-53a9-11e4-8262-f8a963dafa3c}" => Key deleted successfully.
"HKCR\CLSID\{45100bc5-53a9-11e4-8262-f8a963dafa3c}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service deleted successfully.
"C:\Users\Ivana\Downloads\FRSTLauncher (4).exe" => File/Directory not found.
"C:\Users\Ivana\Downloads\Nepotvrzeno 822416.crdownload" => File/Directory not found.
"C:\Users\Ivana\Downloads\Nepotvrzeno 194515.crdownload" => File/Directory not found.
C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
C:\Windows\System32\Tasks\{EE19569E-79A6-4E92-8A70-FDD4F0C899E3} => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Users\Ivana\Downloads\zoek => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Ivana\Downloads\zoek.zip => Moved successfully.
C:\Users\Ivana\Downloads\zoek.rar => Moved successfully.
C:\Users\Ivana\Downloads\RSITx64.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Ivana\Downloads\JRT.exe => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Ivana\Downloads\ATF-Cleaner.exe => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Ivana\Downloads\adwcleaner_4.102.exe => Moved successfully.
C:\Users\Ivana\Downloads\TFC.exe => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfffea15ca839e.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfefba1ac0af8e.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfffea15fe1738.job => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5E1DBD55-5E25-4B95-BE4A-E0BC3A0E79E8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5E1DBD55-5E25-4B95-BE4A-E0BC3A0E79E8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3da1eff0-b932-4650-a212-1378f8995d7f" => Key deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 363.6 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse