Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by PEPAN (administrator) on PEPAN-PC on 14-02-2015 01:03:53
Running from C:\Users\PEPAN\Desktop
Loaded Profiles: PEPAN (Available profiles: PEPAN)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ActMask Co.,Ltd -
HTTP://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(ActMask Co.,Ltd -
http://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Mad Catz Inc) C:\Program Files\Mad Catz\S.T.R.I.K.E.3\STRIKE3_Profiler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Curse) C:\Users\PEPAN\AppData\Local\Apps\2.0\9Q18ARP5.H7M\AVY98QCM.4VN\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\CurseClient.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(BitTorrent Inc.) C:\Users\PEPAN\AppData\Roaming\uTorrent\uTorrent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\PEPAN\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Cm108Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)
HKLM\...\Run: [S.T.R.I.K.E.3] => C:\Program Files\Mad Catz\S.T.R.I.K.E.3\STRIKE3_Profiler.exe [40448 2013-07-18] (Mad Catz Inc)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2014-07-15] (Realtek Semiconductor)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [797648 2014-09-23] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-01-30] (Raptr, Inc)
HKU\S-1-5-21-2708150872-3862926175-3264410124-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
HKU\S-1-5-21-2708150872-3862926175-3264410124-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2708150872-3862926175-3264410124-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-18\...\Policies\system: [DisableLockWorkstation] 0
Startup: C:\Users\PEPAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
BootExecute: autocheck autochk * sh4native Sh4Removal
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2708150872-3862926175-3264410124-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-2708150872-3862926175-3264410124-1000] => 91.225.102.8:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-2708150872-3862926175-3264410124-1000\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2708150872-3862926175-3264410124-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-2708150872-3862926175-3264410124-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000}
https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2708150872-3862926175-3264410124-1000: @mail.ru/GameCenter -> C:\Users\PEPAN\AppData\Local\Mail.Ru\GameCenter\NPDetector.dll No File
FF Plugin HKU\S-1-5-21-2708150872-3862926175-3264410124-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PEPAN\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
Chrome:
=======
CHR StartupUrls: Default -> "
https://www.google.sk/"
CHR Profile: C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-23]
CHR Extension: (Google Drive) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-15]
CHR Extension: (YouTube) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-23]
CHR Extension: (Adblock Plus) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-23]
CHR Extension: (Google Search) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-23]
CHR Extension: (Google Sheets) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-23]
CHR Extension: (Peňaženka Google) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-23]
CHR Extension: (Gmail) - C:\Users\PEPAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-23]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [Not Found]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-04-11] () [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-03-13] (Intel Corporation)
S4 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [180200 2013-02-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation)
S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S4 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2099712 2014-10-21] (MSI) [File not signed]
S4 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4026880 2014-09-26] (MSI) [File not signed]
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2118656 2014-10-23] () [File not signed]
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-09-26] () [File not signed]
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1993216 2014-09-26] () [File not signed]
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2242048 2014-10-21] () [File not signed]
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-07-28] () [File not signed]
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [550400 2014-09-25] () [File not signed]
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [1723856 2014-09-18] (Micro-Star International)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [29728 2013-05-28] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-30] ()
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [121856 2012-10-21] (ActMask Co.,Ltd -
HTTP://WWW.ALL2PDF.COM) [File not signed]
S4 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [503296 2013-05-07] () [File not signed]
S4 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
S4 SuperRAIDSvc; C:\MSI\Super RAID\SuperRAIDSvc.exe [14848 2013-06-03] () [File not signed]
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [15888 2013-04-01] (Intel(R) Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-05-07] (Qualcomm Atheros, Inc.)
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21048 2013-02-13] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21048 2013-02-13] ()
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [25448 2013-01-07] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-02-13] ()
S3 KbFilter_Kb_FlexDef3x; C:\Windows\System32\DRIVERS\KbFilter_FlexDef3x.sys [22016 2012-10-16] (Siliten) [File not signed]
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-05-07] (Qualcomm Atheros, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation)
S3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0045.sys [28768 2014-04-25] (SoftEther VPN Project at University of Tsukuba, Japan.)
S3 NTIOLib_1_0_1; C:\MSI\Super RAID\NTIOLib_X64.sys [14136 2012-06-11] (MSI)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7816vC70\NTIOLib_X64.sys [11888 2011-01-06] (MSI) [File not signed]
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S2 RAMDriv; C:\Windows\System32\DRIVERS\ramdriv.sys [81912 2012-12-27] (Micro-Star Int'l Co., Ltd.)
S2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [81912 2012-12-27] (Micro-Star Int'l Co., Ltd.)
R3 SaiK1112; C:\Windows\System32\DRIVERS\SaiK1112.sys [180992 2013-07-19] (Saitek)
S3 SaiK1703; C:\Windows\System32\DRIVERS\SaiK1703.sys [180544 2012-09-20] (Saitek)
R3 SaiK1713; C:\Windows\System32\DRIVERS\SaiK1713.sys [180544 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-07-19] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
S3 SaiU1703; C:\Windows\System32\DRIVERS\SaiU1703.sys [47168 2012-09-20] (Saitek)
R3 SaiU1713; C:\Windows\System32\DRIVERS\SaiU1713.sys [47168 2012-09-20] (Saitek)
S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [39168 2014-10-08] (SteelSeries Corporation)
S3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-03-25] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-14 01:03 - 2015-02-14 01:04 - 00020710 _____ () C:\Users\PEPAN\Desktop\FRST.txt
2015-02-14 01:03 - 2015-02-14 01:03 - 00000000 ____D () C:\FRST
2015-02-13 21:50 - 2015-02-13 22:02 - 1839380480 ____R () C:\Users\PEPAN\Downloads\Hunger.Games.The.Catching.Fire.2013.BRRip.XviD.CZ.avi
2015-02-13 21:49 - 2015-02-13 21:49 - 00018137 _____ () C:\Users\PEPAN\Downloads\[CzT]Hunger_Games_Vrazedna_pomsta_The_Hunger_Games_Catching_Fire_2013_CZ_.torrent
2015-02-13 16:15 - 2015-02-13 16:15 - 00112640 _____ (forum.viry.cz) C:\Users\PEPAN\Desktop\FRSTLauncher.exe
2015-02-13 16:13 - 2015-02-13 16:13 - 02134016 _____ (Farbar) C:\Users\PEPAN\Downloads\FRST64.exe
2015-02-13 15:45 - 2015-02-13 16:15 - 00112640 _____ (forum.viry.cz) C:\Users\PEPAN\Downloads\FRSTLauncher.exe
2015-02-13 15:44 - 2015-02-13 15:45 - 02134016 _____ (Farbar) C:\Users\PEPAN\Desktop\FRST64.exe
2015-02-13 11:39 - 2015-02-13 11:40 - 324213982 _____ () C:\Users\PEPAN\Downloads\Supernatural.S10E13.720p.x264-LOL.mkv
2015-02-13 11:19 - 2015-02-13 11:19 - 00016467 _____ () C:\Users\PEPAN\Downloads\Supernatural_S10E13.rar
2015-02-13 08:15 - 2015-02-13 21:42 - 00003022 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-02-12 17:05 - 2015-02-13 15:35 - 00000000 ____D () C:\Users\PEPAN\Desktop\nika zima
2015-02-12 16:44 - 2015-02-12 16:47 - 710496906 _____ () C:\Users\PEPAN\Downloads\nika zima.zip
2015-02-11 19:20 - 2015-02-11 19:20 - 00798720 _____ () C:\Users\PEPAN\Downloads\Fázy vývoja tímu - pre učiteľov.ppt
2015-02-10 21:09 - 2015-02-10 21:14 - 992569344 ____R () C:\Users\PEPAN\Downloads\huga.avi
2015-02-10 21:09 - 2015-02-10 21:09 - 00019470 _____ () C:\Users\PEPAN\Downloads\[CzT]Hunger_Games_The_Hunger_Games_CZ_2012_.torrent
2015-02-10 14:41 - 2015-02-10 14:51 - 1968893952 ____R () C:\Users\PEPAN\Downloads\Beauty.and.the.Beast.2014.BDRip.XViD.AC3.CZ-GRiNGO.avi
2015-02-10 14:41 - 2015-02-10 14:41 - 00019358 _____ () C:\Users\PEPAN\Downloads\[CzT]Kraska_a_zvire_La_Belle_et_la_b_te_2014_CZ_.torrent
2015-02-09 02:54 - 2015-02-13 21:41 - 00000784 _____ () C:\Windows\setupact.log
2015-02-09 02:54 - 2015-02-09 02:54 - 00010936 _____ () C:\Windows\PFRO.log
2015-02-09 02:54 - 2015-02-09 02:54 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-09 01:11 - 2015-02-09 01:11 - 00000687 _____ () C:\Users\Public\Desktop\Far Cry 4.lnk
2015-02-08 23:56 - 2015-02-09 00:27 - 00000000 ____D () C:\Users\PEPAN\Downloads\Far Cry 4
2015-02-08 23:56 - 2015-02-08 23:56 - 00051138 _____ () C:\Users\PEPAN\Downloads\[CzT]Far_Cry_4_2014_CZ_ (1).torrent
2015-02-07 23:44 - 2015-02-07 23:44 - 00000000 ____D () C:\Users\PEPAN\Desktop\prevodovka
2015-02-07 23:43 - 2015-02-07 23:51 - 1750190080 ____R () C:\Users\PEPAN\Downloads\Fire.with.Fire.2012.480p.BDRip.XViD.AC3.CZ-GRiNGO.avi
2015-02-07 23:42 - 2015-02-07 23:42 - 00017276 _____ () C:\Users\PEPAN\Downloads\[CzT]Nezahravej_si_s_ohnem_Fire_with_Fire_2012_CZ_.torrent
2015-02-06 21:31 - 2015-02-06 21:40 - 1690521600 _____ () C:\Users\PEPAN\Downloads\Zatím-spolu-zatím-živí---CZ-dabing.avi
2015-02-06 21:29 - 2015-02-06 21:29 - 00013662 _____ () C:\Users\PEPAN\Downloads\[CzT]Zatim_spolu_zatim_zivi_Knight_and_Day_2010_720p_.torrent
2015-02-06 21:29 - 2015-02-06 21:29 - 00000000 ____D () C:\Users\PEPAN\Downloads\Zatim spolu,zatim zivi 720p mkv
2015-02-06 20:42 - 2015-02-06 20:48 - 1001308512 ____R () C:\Users\PEPAN\Downloads\Zatím spolu,zatím živi.mp4
2015-02-06 20:41 - 2015-02-06 20:41 - 00020014 _____ () C:\Users\PEPAN\Downloads\[CzT]Zatim_spolu_zatim_zivi_Knight_and_Day_2010_CZ_.torrent
2015-02-06 08:01 - 2015-02-06 08:01 - 00019264 ____H () C:\Users\PEPAN\Downloads\Mejdan v Las Vegas CZDAB.AVI.mta
2015-02-06 08:01 - 2015-02-06 08:01 - 00013711 ____H () C:\Users\PEPAN\Downloads\Supernatural.S10E12.HDTV.x264-LOL.MP4.mta
2015-02-05 21:18 - 2015-02-05 21:30 - 1466051612 _____ () C:\Users\PEPAN\Downloads\Mejdan v Las Vegas CZDAB.avi
2015-02-05 21:17 - 2015-02-05 21:18 - 735702082 _____ () C:\Users\PEPAN\Downloads\Mejdan v Las Vegas.avi
2015-02-05 21:16 - 2015-02-05 21:16 - 00014585 _____ () C:\Users\PEPAN\Downloads\[CzT]Mejdan_v_Las_Vegas_What_Happens_in_Vegas (1).torrent
2015-02-05 21:15 - 2015-02-05 21:16 - 1466051612 _____ () C:\Users\PEPAN\Downloads\mejdan_v_las_vegas-komedie-CZ.avi
2015-02-05 21:14 - 2015-02-05 21:14 - 00014556 _____ () C:\Users\PEPAN\Downloads\[CzT]Mejdan_v_Las_Vegas_What_Happens_in_Vegas.torrent
2015-02-04 23:05 - 2015-02-04 23:06 - 00000000 ____D () C:\Users\PEPAN\Desktop\mechanika teoria
2015-02-03 00:57 - 2015-02-04 01:41 - 02886531 _____ () C:\Users\PEPAN\Desktop\Bez názvu-1.psd
2015-02-02 07:20 - 2015-02-02 07:20 - 00019246 ____H () C:\Users\PEPAN\Downloads\nonicolemoniquejohnny_720.MP4.mta
2015-02-02 01:18 - 2015-02-02 01:18 - 00021044 ____H () C:\Users\PEPAN\Downloads\Czech Garden Party 3 Part 3.MP4.mta
2015-02-01 15:33 - 2015-02-01 15:33 - 00012014 _____ () C:\Users\PEPAN\Downloads\[CzT]Nicole_Aniston_Monique_Alexander_720pHD_.torrent
2015-02-01 15:32 - 2015-02-01 15:32 - 00014154 _____ () C:\Users\PEPAN\Downloads\[CzT]Czech_Garden_Party_3_Part_3_CZ_.torrent
2015-02-01 15:31 - 2015-02-01 15:31 - 00924780 _____ () C:\Users\PEPAN\Downloads\[CzT]Fake_Taxi_720pHD_.torrent
2015-02-01 15:28 - 2015-02-01 15:28 - 00013239 _____ () C:\Users\PEPAN\Downloads\[CzT]PublicAgent_E265_Kiera_2015_CZ_1080p_.torrent
2015-01-31 21:21 - 2015-02-01 12:53 - 00000000 ____D () C:\Users\PEPAN\Downloads\A.Million.Ways.to.Die.in.the.West.2014.THEATRICAL.480p.BDRip.AC3.XviD.4play.CZ
2015-01-31 21:12 - 2015-01-31 21:12 - 00018595 _____ () C:\Users\PEPAN\Downloads\[CzT]Vsechny_cesty_vedou_do_hrobu_A_Million_Ways_to_Die_in_the_West_2014_CZ_.torrent
2015-01-31 10:59 - 2015-01-31 10:59 - 00020701 ____H () C:\Users\PEPAN\Downloads\Step.Up.All.In.2014.480p.BDRip.XviD.AC3.CZ-4play.AVI.mta
2015-01-30 23:46 - 2015-01-30 23:46 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\Unity
2015-01-30 23:31 - 2015-01-30 23:31 - 01080608 _____ (Unity Technologies ApS) C:\Users\PEPAN\Downloads\UnityWebPlayer.exe
2015-01-30 23:31 - 2015-01-30 23:31 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\Unity
2015-01-30 21:11 - 2015-01-30 21:20 - 1851385856 ____R () C:\Users\PEPAN\Downloads\Step.Up.All.In.2014.480p.BDRip.XviD.AC3.CZ-4play.avi
2015-01-30 21:00 - 2015-01-30 21:00 - 00018236 _____ () C:\Users\PEPAN\Downloads\[CzT]Let_s_Dance_All_In_Step_Up_All_In_2014_CZ_.torrent
2015-01-30 20:59 - 2015-01-30 20:59 - 00015400 _____ () C:\Users\PEPAN\Downloads\[CzT]John_Wick_2014_Webrip_.torrent
2015-01-30 20:47 - 2015-02-01 12:53 - 00017180 ____H () C:\Users\PEPAN\Downloads\That.Awkward.Moment.2014.480p.BDRip.XViD.AC3.CZ-GRiNGO.AVI.mta
2015-01-30 18:32 - 2015-01-30 18:41 - 1799446528 _____ () C:\Users\PEPAN\Downloads\That.Awkward.Moment.2014.480p.BDRip.XViD.AC3.CZ-GRiNGO.avi
2015-01-30 18:32 - 2015-01-30 18:32 - 00017761 _____ () C:\Users\PEPAN\Downloads\[CzT]_Ne_zadani_That_Awkward_Moment_2014_CZ_.torrent
2015-01-30 08:14 - 2015-01-31 10:59 - 00014167 ____H () C:\Users\PEPAN\Downloads\Supernatural.S10E11.HDTV.x264-LOL.MP4.mta
2015-01-29 16:15 - 2015-01-29 16:18 - 215629998 _____ () C:\Users\PEPAN\Downloads\Supernatural.S10E11.HDTV.x264-LOL.mp4
2015-01-29 16:15 - 2015-01-29 16:15 - 00016757 _____ () C:\Users\PEPAN\Downloads\Supernatural_S10E11.rar
2015-01-28 21:06 - 2015-01-28 21:06 - 01431704 _____ () C:\Users\PEPAN\Downloads\ivankove-časti (1).rar
2015-01-28 01:13 - 2015-01-27 17:36 - 00000000 ____D () C:\Users\PEPAN\Desktop\ivankove časti
2015-01-28 01:12 - 2015-01-28 01:12 - 01431704 _____ () C:\Users\PEPAN\Downloads\ivankove-časti.rar
2015-01-27 08:01 - 2015-01-27 08:01 - 00016431 ____H () C:\Users\PEPAN\Downloads\[TonightsGirlfriend] Nicole Aniston - Vanilla (23.01.15).MP4.mta
2015-01-27 08:01 - 2015-01-27 08:01 - 00016159 ____H () C:\Users\PEPAN\Downloads\FakeAgent - Summer.MP4.mta
2015-01-25 23:05 - 2015-01-25 23:34 - 00000000 ____D () C:\Users\PEPAN\Desktop\Nika tlačiť
2015-01-24 13:30 - 2015-01-24 13:30 - 00001427 _____ () C:\Users\PEPAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-24 13:28 - 2015-01-24 13:31 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\systweak
2015-01-24 13:28 - 2015-01-24 13:30 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\Opera Software
2015-01-24 13:28 - 2015-01-24 13:30 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\Opera Software
2015-01-24 13:28 - 2014-12-08 17:01 - 00020216 _____ () C:\Windows\system32\roboot64.exe
2015-01-24 13:27 - 2015-01-24 13:30 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-24 13:27 - 2015-01-24 13:27 - 00001191 _____ () C:\Users\Public\Desktop\Free Mouse Auto Clicker.lnk
2015-01-24 13:27 - 2015-01-24 13:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Mouse Auto Clicker
2015-01-24 13:27 - 2015-01-24 13:27 - 00000000 ____D () C:\Program Files (x86)\Free Mouse Auto Clicker
2015-01-24 12:41 - 2015-01-24 12:41 - 00014380 ____H () C:\Users\PEPAN\Downloads\Sprosťárny.AVI.mta
2015-01-23 08:01 - 2015-01-23 08:01 - 00016485 ____H () C:\Users\PEPAN\Downloads\Sedm.Zivotu.2008..AVI.mta
2015-01-23 08:01 - 2015-01-23 08:01 - 00012091 ____H () C:\Users\PEPAN\Downloads\Supernatural.S10E10.HDTV.x264-LOL.MP4.mta
2015-01-21 22:15 - 2015-01-21 22:16 - 78678046 _____ () C:\Users\PEPAN\Downloads\casti 2.rar
2015-01-21 14:14 - 2015-01-18 17:02 - 00000000 ____D () C:\Users\PEPAN\Desktop\všetko na čs2
2015-01-21 14:13 - 2015-01-21 14:13 - 54558945 _____ () C:\Users\PEPAN\Downloads\v-etko na ès2.rar
2015-01-21 01:46 - 2015-01-21 01:46 - 00389120 _____ () C:\Users\PEPAN\Downloads\Vypocet_ozubenych_kolies.pps
2015-01-21 01:45 - 2015-01-21 01:45 - 00565760 _____ () C:\Users\PEPAN\Downloads\Vypocet ozubenych kol - KONI - fan.ppt
2015-01-18 12:35 - 2015-01-18 12:35 - 00013861 ____H () C:\Users\PEPAN\Downloads\The Maze Runner cz dabing.AVI.mta
2015-01-17 11:13 - 2015-01-17 11:13 - 00017692 ____H () C:\Users\PEPAN\Downloads\Bláznivá dovolená v Evropě.AVI.mta
2015-01-16 19:54 - 2015-01-16 19:54 - 00000797 _____ () C:\Users\PEPAN\Desktop\Fraps videa.lnk
2015-01-16 19:12 - 2015-01-20 15:39 - 00000000 ____D () C:\Users\PEPAN\Desktop\wow videa
2015-01-16 18:57 - 2015-01-16 18:57 - 00000000 ____D () C:\Windows\cs
2015-01-16 18:56 - 2015-01-16 18:56 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-01-16 08:36 - 2015-01-16 08:36 - 00019365 ____H () C:\Users\PEPAN\Downloads\Babovresky (2013).AVI.mta
2015-01-15 23:59 - 2015-01-16 00:07 - 00000000 ____D () C:\Users\PEPAN\Downloads\Babovresky.2.2014.DVDRip.XviD.AC3.CZ-TreZzoR
2015-01-15 18:13 - 2015-01-15 18:14 - 19311204 _____ () C:\Users\PEPAN\Downloads\Priklady.rar
2015-01-15 18:06 - 2015-01-15 18:06 - 25866084 _____ () C:\Users\PEPAN\Downloads\1,2,2,3,3,1,66,51,65,.rar
2015-01-15 18:06 - 2015-01-15 18:06 - 17027762 _____ () C:\Users\PEPAN\Downloads\Nový prieèinok.rar
2015-01-15 18:05 - 2015-01-20 21:47 - 00000000 ____D () C:\Users\PEPAN\Desktop\casti 2
2015-01-15 18:05 - 2015-01-15 18:05 - 08875938 _____ () C:\Users\PEPAN\Downloads\casti2 od mascenika.rar
2015-01-15 18:05 - 2015-01-15 18:05 - 07596654 _____ () C:\Users\PEPAN\Downloads\casti II priklady.rar
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-14 01:04 - 2014-03-20 07:37 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\uTorrent
2015-02-14 00:57 - 2014-03-19 20:40 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 00:51 - 2014-03-18 23:49 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\Skype
2015-02-14 00:42 - 2014-03-20 17:58 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\Deployment
2015-02-14 00:24 - 2014-10-23 12:06 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 22:28 - 2014-12-25 19:05 - 00831488 ___SH () C:\Users\PEPAN\Downloads\Thumbs.db
2015-02-13 21:44 - 2014-03-18 21:28 - 01818405 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 21:43 - 2014-03-19 14:57 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\Raptr
2015-02-13 21:41 - 2014-10-23 12:06 - 00000932 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 21:41 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 18:15 - 2014-03-19 08:35 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\Battle.net
2015-02-12 13:53 - 2014-03-19 07:41 - 00000000 ___RD () C:\Users\PEPAN\Desktop\Pepan
2015-02-12 13:38 - 2014-06-15 01:35 - 00000000 ____D () C:\Users\PEPAN\Desktop\Se
2015-02-12 13:07 - 2014-06-23 17:42 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\Adobe
2015-02-11 22:12 - 2014-11-29 01:29 - 00000000 ___HD () C:\MSIServiceCfg_CC
2015-02-11 21:08 - 2014-03-18 22:18 - 00000000 ____D () C:\MSI
2015-02-09 01:18 - 2014-03-22 21:25 - 00000000 ____D () C:\Users\PEPAN\Documents\My Games
2015-02-09 01:17 - 2014-10-05 18:48 - 00487562 _____ () C:\spyhunter.fix
2015-02-09 01:17 - 2014-03-18 23:23 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\CrashDumps
2015-02-09 01:11 - 2014-03-20 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2015-02-09 00:17 - 2014-04-04 23:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-09 00:14 - 2014-03-18 22:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-09 00:13 - 2014-04-01 15:19 - 00000000 ____D () C:\Users\PEPAN\AppData\Local\Rockstar Games
2015-02-09 00:13 - 2014-04-01 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-02-09 00:12 - 2014-03-19 07:37 - 00000000 ____D () C:\Hry
2015-02-09 00:12 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-09 00:11 - 2014-06-13 17:30 - 00000000 ____D () C:\ProgramData\Origin
2015-02-09 00:10 - 2014-07-01 20:05 - 00000000 ____D () C:\Users\PEPAN\Documents\Electronic Arts
2015-02-05 19:16 - 2014-03-19 20:40 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 19:16 - 2014-03-19 20:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 19:16 - 2014-03-19 20:40 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 21:36 - 2014-06-23 17:50 - 00000000 ____D () C:\Users\PEPAN\Desktop\steam ucty
2015-02-04 19:19 - 2014-10-23 12:06 - 00003932 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 19:19 - 2014-10-23 12:06 - 00003680 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 02:16 - 2014-03-25 17:54 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2015-02-02 13:12 - 2014-03-19 14:56 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-01-31 21:27 - 2009-07-14 16:18 - 00659218 _____ () C:\Windows\system32\perfh005.dat
2015-01-31 21:27 - 2009-07-14 16:18 - 00140386 _____ () C:\Windows\system32\perfc005.dat
2015-01-31 21:27 - 2009-07-14 06:13 - 01579710 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-30 19:13 - 2014-03-19 19:22 - 00000000 ____D () C:\Users\PEPAN\AppData\Roaming\OBS
2015-01-30 18:47 - 2014-11-17 16:39 - 00000000 ____D () C:\Program Files\OBS
2015-01-26 22:18 - 2014-03-19 07:49 - 00000000 ____D () C:\Users\PEPAN\Desktop\Jeble obrazky
2015-01-25 22:41 - 2014-04-07 15:36 - 00000000 ____D () C:\Users\PEPAN\Documents\Assassin's Creed IV Black Flag
2015-01-25 02:12 - 2009-07-14 05:45 - 00014752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-25 02:12 - 2009-07-14 05:45 - 00014752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-24 13:30 - 2014-10-15 08:17 - 00001393 _____ () C:\Users\PEPAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-01-23 20:29 - 2014-03-19 07:44 - 00000000 ____D () C:\Users\PEPAN\Desktop\Škola
2015-01-17 15:45 - 2009-07-14 06:08 - 00032568 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-16 18:56 - 2014-03-26 09:25 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-01-16 18:55 - 2014-03-26 09:24 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-16 18:33 - 2014-03-20 18:58 - 00000000 ____D () C:\Fraps
2015-01-15 17:57 - 2015-01-12 22:22 - 887093022 ____R () C:\Users\PEPAN\Downloads\Prázdniny.v.Amerike.avi
==================== Files in the root of some directories =======
2014-07-15 15:37 - 2014-09-16 19:16 - 0001480 _____ () C:\Users\PEPAN\AppData\Local\Adobe Uložit pro web 12.0 Prefs
2014-11-10 20:26 - 2014-11-10 20:26 - 0004608 _____ () C:\Users\PEPAN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-18 22:22 - 2014-03-18 22:25 - 0000352 _____ () C:\Users\PEPAN\AppData\Local\killertool.log
2014-03-20 08:46 - 2014-03-20 08:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some content of TEMP:
====================
C:\Users\PEPAN\AppData\Local\Temp\BRSVC_11351553_hlp.exe
C:\Users\PEPAN\AppData\Local\Temp\devcon64.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-03 14:18
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:729.57 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (SSD) (Fixed) (Total:238.47 GB) (Free:167.76 GB) NTFS
Drive g: (USB DISK) (Removable) (Total:3.65 GB) (Free:2.8 GB) FAT32
Available physical RAM: 5591.72 MB
Total physical RAM: 8119.95 MB
Percentage of memory in use: 31%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 714E13D2)
Partition 1: (Not Active) - (Size=238.5 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A2352D42)
Partition 1: (Active) - (Size=931.4 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.7 GB) - (Type=0C)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\PEPAN\Desktop" je 14193 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AllShareAgent
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackgroundContainer
"C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\PEPAN\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenuEx
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cm108Sound
C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CommandCenter
C:\Program Files (x86)\MSI\CommandCenter\StartCommandCenter.exe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvolveClient
C:\Program Files\Echobit\Evolve\EvolveClient.exe -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Fast Boot
C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameCenterMailRu
"C:\Users\PEPAN\appdata\local\mail.ru\gamecenter\
gamecenter@mail.ru.exe" -autostart [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrpConv
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMSS
C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Launch LCore
C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Live Update
C:\Program Files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe /reminder [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate 5
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS
C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MBCfg64
C:\Windows\system32\PrintDisp.exe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrintDisp
"C:\Program Files (x86)\Raptr\raptrstub.exe" --startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr
C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC
C:\Program Files\SmartTechnology\Software\SaiMfd.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaiMfd
C:\Users\PEPAN\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SansaDispatch
"C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe" /uihelp [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoftEther VPN Client UI Helper
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sound Blaster Cinema
"C:\Users\PEPAN\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify
"C:\Users\PEPAN\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC
C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SteelSeries Engine
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Super-Charger
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
C:\Windows\UpdReg.EXE [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON
"C:\Users\PEPAN\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^iSCTsysTray.lnk
C:\PROGRA~1\Intel\INTEL(~3\ISCTSY~1.EXE
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LOLRecorder.lnk
C:\PROGRA~2\LOLREP~1\LOLREC~1.EXE -minimize [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk
C:\PROGRA~1\MCAFEE~1\38A880~1.141\SSSCHE~1.EXE [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PrivateTunnel.lnk
C:\PROGRA~2\OPENVP~1\PRIVAT~1\core\ovpntray.exe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Qualcomm Atheros Killer Network Manager.lnk
C:\PROGRA~1\QUALCO~1\KILLER~1\KILLER~1.EXE -minimized [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SoftEther VPN Client Manager Startup.lnk
C:\PROGRA~1\SOFTET~1\VPNCMG~1.EXE /startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SteelSeries Engine 3.lnk
C:\Users\PEPAN\AppData\Roaming\CURSEC~1\Bin\Curse.exe /startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^PEPAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk
C:\Users\PEPAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^PEPAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip
C:\Windows\system32\schtasks.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^PEPAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registr�cia v�robku.lnk
C:\Users\PEPAN\AppData\Local\Temp\_UNINS~1.BAT [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^PEPAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^PEPAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^_uninst_64395630.lnk
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================