VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2015 01
Ran by Nikoláos (administrator) on DOMÁCÍ on 10-03-2015 19:18:03
Running from C:\Users\Nikoláos\Desktop\Antivíry
Loaded Profiles: Nikoláos (Available profiles: Nikoláos & Kateřina & Guest)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Crawler.com) C:\Program Files (x86)\CStart8\CStart8Tray64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dropbox, Inc.) C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(BitTorrent Inc.) C:\Users\Nikoláos\AppData\Roaming\uTorrent\uTorrent.exe
(EpicScale Inc.) C:\ProgramData\EpicScale\1\trzBA4D.tmp
(EpicScale Inc.) C:\ProgramData\EpicScale\1\trzBA4D.tmp
(EpicScale Inc.) C:\ProgramData\EpicScale\1\x64\EpicScale64.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-29] (Synaptics Incorporated)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [363520 2012-08-02] (IVT Corporation)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [580512 2012-07-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [CStart8] => C:\Program Files (x86)\CStart8\CStart8Tray64.exe [3138656 2013-10-03] (Crawler.com)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-23] (AVAST Software)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [MicrosoftSys] => C:\Users\Nikoláos\ApData\KeyLoggerNastaveni\MicrosoftSys.exe [50176 2014-02-23] (Microsoft ©)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1949592 2015-02-14] (APN)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\Run: [uTorrent] => C:\Users\Nikoláos\AppData\Roaming\uTorrent\uTorrent.exe [1742928 2015-03-06] (BitTorrent Inc.)
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\MountPoints2: {193f21a9-3be9-11e4-bef9-6c3be5f35b17} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\...\MountPoints2: {5142a0c1-4672-11e4-befb-6c3be5f35b17} - "F:\Startme.exe"
HKU\S-1-5-21-1767443611-160192221-3438823037-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [11776 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\rvlkl.lnk
ShortcutTarget: rvlkl.lnk -> C:\ProgramData\rvlkl\rvlkl.exe (Logixoft)
Startup: C:\Users\Nikoláos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
HKLM\...\AppCertDlls: [x64] -> c:\program files (x86)\browser tab search by ask\safetynut\x64\safetycrt.dll
HKLM\...\AppCertDlls: [x86] -> c:\program files (x86)\browser tab search by ask\safetynut\safetycrt.dll
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Nikoláos\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
BootExecute: autocheck autochk * aswBoot.exe /M:221a7159c64 /wow /dir:"C:\Program Files\AVAST Software\Avast"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\S-1-5-21-1767443611-160192221-3438823037-1001 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1767443611-160192221-3438823037-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-01] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-01] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
DPF: HKLM-x32 {ED5D862B-6A06-46DE-A929-F2C588742CBD} http://gcs.glovis.cz/install/TFSmartUpdater_m.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-04] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-04] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw.dll [2012-02-08] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-01-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-31]

Chrome:
=======
CHR HomePage: Default -> hxxp://kes_intra/
CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://kes_intra/", "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 34-332&t=4"
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefi ... earchTerms}
CHR Profile: C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-10-05]
CHR Extension: (Mouse Stroke) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\aeaoofnhgocdbnbeljkmbjdmhbcokfdb [2014-10-05]
CHR Extension: (Google Docs) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-15]
CHR Extension: (Google Drive) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-04]
CHR Extension: (YouTube) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-15]
CHR Extension: (Google Search) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-15]
CHR Extension: (Max Capacity Training) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpnmgihbpgolnjcciglbhklaabhkogin [2014-10-05]
CHR Extension: (AutoCAD 360) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcjeclnkejmbepoibfnamioojinoopln [2014-10-05]
CHR Extension: (Google Calendar) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-10-05]
CHR Extension: (PicMonkey) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdgokchhicmaiacmgegjnppjkgogdhm [2014-10-05]
CHR Extension: (Avast Online Security) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-16]
CHR Extension: (Sniper Team) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgbbaloijjnkpigapgmocdpoblnlec [2014-10-05]
CHR Extension: (Evernote Web) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2014-10-05]
CHR Extension: (Google Mail Checker) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-10-05]
CHR Extension: (Sochi 2014 Olympics of the Day) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkemoanghlknnemibhchcebcchaplhhi [2014-10-05]
CHR Extension: (Simple Christmas) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfngdachcmmioepljkfoippkhncdjbkf [2014-10-05]
CHR Extension: (Google Wallet) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-08]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2014-10-05]
CHR Extension: (Gmail) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-15]
CHR Profile: C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Slides) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-02]
CHR Extension: (Google Docs) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-03]
CHR Extension: (Google Drive) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-03]
CHR Extension: (YouTube) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-03]
CHR Extension: (Google Search) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-03]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eibfgbclmgnmffinenpipoibfdoblond [2013-02-03]
CHR Extension: (Google Sheets) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-02]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fkfpcckoflkdgjdobdkpclgngaahgbpi [2013-02-03]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghoooididkjbjjldgojdgceoinbhbjmh [2013-02-03]
CHR Extension: (Avast Online Security) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-02]
CHR Extension: (Seznam Lištička) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mgoblimgpefkcahebgokneaadhahmdah [2014-12-02]
CHR Extension: (Google Wallet) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-27]
CHR Extension: (Gmail) - C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-03]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-02-14]
CHR HKU\S-1-5-21-1767443611-160192221-3438823037-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\NIKOLO~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-05-04]
CHR HKU\S-1-5-21-1767443611-160192221-3438823037-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eibfgbclmgnmffinenpipoibfdoblond] - C:\Users\Nikoláos\AppData\Roaming\Seznam.cz\bin\listicka-chrome-rv-1.5.5.crx [2013-02-04]
CHR HKU\S-1-5-21-1767443611-160192221-3438823037-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkfpcckoflkdgjdobdkpclgngaahgbpi] - C:\Users\Nikoláos\AppData\Roaming\Seznam.cz\bin\listicka-chrome-email-1.3.2.crx [2013-02-04]
CHR HKU\S-1-5-21-1767443611-160192221-3438823037-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ghoooididkjbjjldgojdgceoinbhbjmh] - C:\Users\Nikoláos\AppData\Roaming\Seznam.cz\bin\listicka-chrome-slovnik-1.2.3.crx [2013-02-04]
CHR HKU\S-1-5-21-1767443611-160192221-3438823037-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mgoblimgpefkcahebgokneaadhahmdah] - C:\Users\Nikoláos\AppData\Roaming\Seznam.cz\bin\Partner-1.2.0.crx [2013-02-04]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-02-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-31] (APN LLC.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-01] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-01] (Avast Software)
S2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1544192 2012-08-02] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-07-10] (IVT Corporation) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-01-05] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-01] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-01] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-01] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [311968 2013-02-09] ()
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-08] (Ralink Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-02-08] ()
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [277648 2013-10-23] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-29] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-29] (Synaptics Incorporated)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-01] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-09 20:51 - 2015-03-09 20:51 - 00000000 ____D () C:\Users\Nikoláos\Downloads\BIFFY CLYRO - DISCOGRAPHY [aizu]
2015-03-09 20:49 - 2015-03-09 20:49 - 00025687 _____ () C:\Users\Nikoláos\Downloads\BIFFY_CLYRO_-_DISCOGRAPHY_[aizu].torrent
2015-03-09 20:47 - 2015-03-09 20:47 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Fifty Shades of Grey (Original Motion Picture Soundtrack)
2015-03-09 20:46 - 2015-03-09 20:46 - 00013290 _____ () C:\Users\Nikoláos\Downloads\VA_-_Fifty_Shades_of_Grey_(Original_Motion_Picture_Soundtrack)_{MP3-2015}.torrent
2015-03-09 20:45 - 2015-03-09 20:45 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Rihanna - The Greatest Hits (2013) [Mp3][www.lokotorrents.com]
2015-03-09 20:44 - 2015-03-09 20:44 - 00021720 _____ () C:\Users\Nikoláos\Downloads\Rihanna-TheGreatestHits2013Mp3 - ThePirateBay.TO.torrent
2015-03-09 20:43 - 2015-03-09 20:43 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Avril Lavigne the best songs 2013
2015-03-09 20:41 - 2015-03-09 20:41 - 00012367 _____ () C:\Users\Nikoláos\Downloads\Avril_Lavigne__the_best_songs__2013.torrent
2015-03-09 20:41 - 2015-03-09 20:41 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Hurts - Exile (iTunes Deluxe Edition) 2013 Pop 320kbps CBR MP3 [VX]
2015-03-09 20:40 - 2015-03-09 20:40 - 00012487 _____ () C:\Users\Nikoláos\Downloads\Hurts-ExileiTunesDeluxeEdition2013Pop320kbpsCBRMP3 - ThePirateBay.TO.torrent
2015-03-09 20:39 - 2015-03-09 20:39 - 00012029 _____ () C:\Users\Nikoláos\Downloads\KatyPerry-Unconditionally.mp3 - ThePirateBay.TO.torrent
2015-03-09 20:38 - 2015-03-09 20:38 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Alexis Jordan - Alexis Jordan [2011].www.lokotorrents.com
2015-03-09 20:37 - 2015-03-09 20:37 - 00017214 _____ () C:\Users\Nikoláos\Downloads\Alexis_Jordan_-_Alexis_Jordan_[2011].torrent
2015-03-09 20:35 - 2015-03-09 20:35 - 00016248 _____ () C:\Users\Nikoláos\Downloads\AlexisJordan-HappinessExtendedVersion.vob - ThePirateBay.TO.torrent
2015-03-06 13:05 - 2015-03-07 12:22 - 00001756 _____ () C:\Users\Nikoláos\AppData\Roaming\Microsoft\Windows\Start Menu\EPIC_SCALE.lnk
2015-03-06 13:00 - 2015-03-07 12:19 - 00000000 ____D () C:\ProgramData\EpicScale
2015-03-01 17:24 - 2015-03-09 20:55 - 00002895 _____ () C:\WINDOWS\setupact.log
2015-03-01 17:24 - 2015-03-01 17:24 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-03-01 13:58 - 2015-03-10 18:43 - 01668367 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-25 14:15 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-02-25 14:15 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-02-25 14:15 - 2014-10-29 02:27 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-02-25 14:15 - 2014-10-29 02:27 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2015-02-25 14:15 - 2014-10-29 02:04 - 00868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-02-25 14:15 - 2014-10-29 02:04 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2015-02-23 20:41 - 2015-02-23 20:41 - 00000860 _____ () C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2015-02-17 20:36 - 2015-02-17 21:17 - 00000000 ____D () C:\Users\Nikoláos\Desktop\FOTO Katka Xiaomi
2015-02-17 13:11 - 2015-02-17 13:11 - 00000110 ____H () C:\Users\Nikoláos\Desktop\IMG_20150216_131528.jpg.uid-zps
2015-02-17 13:10 - 2015-02-17 13:10 - 00000110 ____H () C:\Users\Nikoláos\Desktop\IMG_20150216_131804 (1).jpg.uid-zps
2015-02-15 07:43 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-15 07:43 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-14 12:15 - 2015-02-14 12:17 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Lucy.2014.HDRip.XviD-WARRiOR
2015-02-14 12:15 - 2015-02-14 12:15 - 00004649 _____ () C:\Users\Nikoláos\Downloads\[kickass.to]lucy.2014.hdrip.xvid.warrior.torrent
2015-02-14 12:12 - 2015-02-14 12:26 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Transformers Age of Extinction (2014)
2015-02-14 12:12 - 2015-02-14 12:12 - 00010651 _____ () C:\Users\Nikoláos\Downloads\[kickass.to]transformers.age.of.extinction.2014.720p.brrip.x264.yify.torrent
2015-02-14 10:53 - 2015-02-14 23:13 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Gone Girl (2014)
2015-02-14 10:53 - 2015-02-14 10:53 - 00010509 _____ () C:\Users\Nikoláos\Downloads\[kickass.to]gone.girl.2014.720p.brrip.x264.yify.torrent
2015-02-14 10:45 - 2015-02-14 10:52 - 00000000 ____D () C:\Users\Nikoláos\Downloads\The Hundred Foot Journey (2014)
2015-02-14 10:44 - 2015-02-14 10:44 - 00009532 _____ () C:\Users\Nikoláos\Downloads\[kickass.to]the.hundred.foot.journey.2014.720p.brrip.x264.yify.torrent
2015-02-11 10:35 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 10:35 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 10:35 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 10:35 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 10:35 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 10:35 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 10:35 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 10:35 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 10:35 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 10:35 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 10:35 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 10:35 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 10:35 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 10:35 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 10:35 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 10:35 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 10:35 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 10:35 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 10:35 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 10:35 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 10:35 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 10:35 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 10:35 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 10:35 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 10:34 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 10:34 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 10:34 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 10:34 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 10:34 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 10:34 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 10:34 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 10:34 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 10:34 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 10:34 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 10:34 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 10:34 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 10:34 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 10:34 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 10:34 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 10:34 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 10:34 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 10:34 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 10:34 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 10:34 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 10:34 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 10:34 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 10:34 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 10:34 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 10:34 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 10:34 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 10:34 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 10:34 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 10:34 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 10:34 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 10:34 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 10:34 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 10:34 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 10:34 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 10:34 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 10:34 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 10:34 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-11 10:34 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-11 10:34 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 10:33 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 10:33 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 10:33 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 10:33 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 10:33 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 10:33 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 10:33 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 10:33 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-08 06:48 - 2015-03-01 12:45 - 00000000 ___RD () C:\Users\Nikoláos\Dropbox
2015-02-08 06:48 - 2015-02-14 23:15 - 00001074 _____ () C:\Users\Nikoláos\Desktop\Dropbox.lnk
2015-02-08 06:40 - 2015-02-08 06:40 - 00355528 _____ (Dropbox, Inc.) C:\Users\Nikoláos\Desktop\DropboxInstaller.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-10 19:19 - 2013-01-29 19:09 - 00000000 ____D () C:\Users\Nikoláos\AppData\Roaming\uTorrent
2015-03-10 19:18 - 2014-04-06 07:07 - 00000000 ___RD () C:\Users\Nikoláos\Desktop\Antivíry
2015-03-10 19:18 - 2014-01-04 13:57 - 00000000 ____D () C:\FRST
2015-03-10 19:16 - 2013-02-01 21:28 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-03-10 19:14 - 2013-03-07 18:13 - 00465408 ___SH () C:\Users\Nikoláos\Desktop\Thumbs.db
2015-03-10 19:08 - 2013-02-02 12:54 - 00000974 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-10 19:03 - 2014-02-16 08:04 - 00003974 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{45697D60-F6CC-40CF-8A3E-089FE9D0AB55}
2015-03-10 19:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-10 18:40 - 2013-01-29 20:30 - 00000988 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1767443611-160192221-3438823037-1004UA.job
2015-03-09 20:57 - 2012-11-25 17:36 - 00004524 _____ () C:\WINDOWS\SysWOW64\LOCALSERVICE.INI
2015-03-09 20:57 - 2012-08-10 17:45 - 00000821 _____ () C:\WINDOWS\SysWOW64\bscs.ini
2015-03-09 20:40 - 2013-01-29 20:30 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1767443611-160192221-3438823037-1004Core.job
2015-03-09 19:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-09 18:56 - 2013-10-17 20:14 - 00003178 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForNikoláos
2015-03-09 18:56 - 2013-10-17 20:14 - 00000358 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForNikoláos.job
2015-03-09 18:56 - 2013-01-29 18:32 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1767443611-160192221-3438823037-1001
2015-03-09 16:46 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-03-06 13:00 - 2014-04-29 20:19 - 00000898 _____ () C:\Users\Nikoláos\Desktop\µTorrent.lnk
2015-03-06 13:00 - 2014-04-29 20:19 - 00000878 _____ () C:\Users\Nikoláos\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-03-04 21:05 - 2014-08-30 05:49 - 00000000 ____D () C:\Users\Nikoláos\Desktop\Subs
2015-03-04 17:07 - 2013-02-02 12:54 - 00000970 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-01 12:47 - 2014-01-05 13:39 - 00000000 ___DO () C:\Users\Nikoláos\SkyDrive
2015-03-01 12:46 - 2013-11-27 20:33 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-03-01 12:45 - 2014-08-18 06:15 - 00000000 ____D () C:\Users\Nikoláos\AppData\Roaming\Dropbox
2015-03-01 12:41 - 2014-09-14 09:51 - 00000000 ____D () C:\Users\Nikoláos\AppData\Local\HTC MediaHub
2015-03-01 12:41 - 2014-01-05 10:56 - 00000000 ____D () C:\Users\Nikoláos
2015-03-01 12:38 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-25 14:08 - 2013-01-30 20:17 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-02-22 12:45 - 2013-11-14 13:40 - 01938474 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-22 12:45 - 2013-11-14 13:24 - 00803244 _____ () C:\WINDOWS\system32\perfh005.dat
2015-02-22 12:45 - 2013-11-14 13:24 - 00184236 _____ () C:\WINDOWS\system32\perfc005.dat
2015-02-20 10:09 - 2013-02-02 12:54 - 00002203 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-19 16:20 - 2014-10-19 17:19 - 00000000 ____D () C:\ProgramData\rvlkl
2015-02-18 20:59 - 2013-08-22 14:25 - 01048576 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-15 18:51 - 2013-01-29 19:25 - 00000000 ____D () C:\Users\Nikoláos\AppData\Roaming\BSplayer
2015-02-15 08:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-14 23:15 - 2014-08-18 06:16 - 00000000 ____D () C:\Users\Nikoláos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-02-14 23:10 - 2014-04-02 20:38 - 00000000 ____D () C:\Users\Nikoláos\Downloads\Her [2013] DVDScr XviD-SaM[ETRG]
2015-02-14 23:02 - 2013-08-22 15:44 - 00396152 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 13:48 - 2013-08-14 20:22 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-11 13:36 - 2013-02-01 18:32 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-11 13:35 - 2014-12-12 05:54 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-11 13:35 - 2014-07-20 17:50 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-08 21:59 - 2013-10-20 16:02 - 00000000 ____D () C:\Users\Nikoláos\Desktop\FOTO a VIDEO mobil

Some content of TEMP:
====================
C:\Users\Nikoláos\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpypsoze.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-04 13:32

==================== End Of Log ============================

vycisti PC s ADWCleanerom

Děkuji za radu, vyčistím komp hned dneska. Chci se ještě zeptat...četl jsem, že poslední aktualizací uTorrentu jsem si pravděpodobně stáhl bitcoin miner... viz.tento článek http://www.ibtimes.co.uk/how-remove-uto ... pc-1490965 pokusím se dle tohoto postupu tento bitcoin miner odinstalovat. Mám jen dotaz, zda nemáte někdo zkušenost s tímto problémem a zda nemáte jiný účinný postup pro odstranění pomoct logu a pod.

Děkuji

BCM v logu nevidim
doporucujem:
- odinstalovat SpyBot - je neucinny
- prescanovat PC s MBAM - ak je tam BCM, tak ho najde

Dobrý den...log z adw-cleaneru
# AdwCleaner v4.112 - Logfile created 15/03/2015 at 08:09:52
# Updated 09/03/2015 by Xplode
# Database : 2015-03-05.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Nikoláos - DOMÁCÍ
# Running from : C:\Users\Nikoláos\Downloads\adwcleaner_4.112.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : APNMCP

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\rvlkl
Folder Deleted : C:\ProgramData\epicscale
Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
Folder Deleted : C:\Users\Nikoláos\AppData\Local\AskPartnerNetwork
Folder Deleted : C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\rvlkl.lnk

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\EpicScaleApp
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v41.0.2272.89

[C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF
[C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=209&systemid=488&v=a12834-332&apn_uid=5006239410524300&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
[C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://safesearch.lavasoft.com/results.php?q={searchTerms}&pr=blekko&id=adawaretb&v=2_0&ent=&u=CEFE24611C4FB4AD97A21F50099A6283&source=3336ca5f&toolbarid=&searchfeed=web&hsimp=yhs-lavasoft
[C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://safesearch.lavasoft.com/results.php?q={searchTerms}&pr=blekko&id=adawaretb&v=2_0&ent=&u=CEFE24611C4FB4AD97A21F50099A6283&source=3336ca5f&toolbarid=&searchfeed=web&hsimp=yhs-lavasoft
[C:\Users\Nikoláos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

*************************

AdwCleaner[R1].txt - [3495 bytes] - [15/03/2015 00:39:07]
AdwCleaner[S1].txt - [3156 bytes] - [15/03/2015 08:09:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3215 bytes] ##########

A log z MBAM

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 15. 3. 2015
Scan Time: 0:40:27
Logfile: malw.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.03.14.05
Rootkit Database: v2015.02.25.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: NikolA!os

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 528547
Time Elapsed: 44 min, 15 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
Keylogger.Logixoft, C:\ProgramData\rvlkl\rvlkl.exe, 3052, , [dc91063f4a40b4822f70fef460a59e62]

Modules: 0
(No malicious items detected)

Registry Keys: 5
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, , [0667bf86b0daeb4b15e6e3e552b130d0],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, , [e28b81c45733a2947df99b99ac597c84],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, , [e78648fd7f0b6ccad89df14300050cf4],
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, , [9dd0a1a461294fe798634385dc27d62a],
PUP.Optional.EpicScale, HKU\S-1-5-21-1767443611-160192221-3438823037-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\EpicScale, , [ef7e083d543682b40d28793148bb55ab],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 13
Keylogger.Logixoft, C:\ProgramData\rvlkl\rvlkl.exe, , [dc91063f4a40b4822f70fef460a59e62],
PUP.Optional.EpicScale, C:\ProgramData\EpicScale\18508.dat, , [95d8a99c8bff68ce4ba1cf61e41ef20e],
PUP.Optional.EpicScale, C:\ProgramData\EpicScale\32834.dat, , [d6979baa098174c2a547a38d3dc5fa06],
PUP.Optional.EpicScale, C:\ProgramData\EpicScale\EpicScale.exe, , [3934c2835436f34331bb111f10f232ce],
PUP.Optional.EpicScale, C:\ProgramData\EpicScale\1\EpicScale.dat, , [74f9b5904b3f191dba321d13bc46f907],
Keylogger.Logixoft, C:\Users\NikolA!os\Desktop\rkfree_setup.exe, , [9ad399ac3b4f80b6118e975be02548b8],
PUP.Optional.Softonic, C:\Users\NikolA!os\Desktop\SoftonicDownloader_for_revealer-keylogger.exe, , [135a0045ddad092db11c3822df2126da],
Application.ActualSpy, C:\Users\NikolA!os\Downloads\actualspy.exe, , [77f6380dfe8c56e0cb2839b857aee818],
PUP.Optional.Conduit, C:\Users\NikolA!os\Downloads\bsplayer266.1075.exe, , [d89561e4deacea4c0a0ee92c4eb88878],
Trojan.MSIL.Injector, C:\Users\NikolA!os\Downloads\Sex_After_Kids_2013_BRRip_x264-RARBG.exe, , [adc0ac99e4a6191d0be8bb1c759007f9],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\SPVCLdr64.dll, , [d79673d205857db986cfd1e75da4926e],
PUP.Optional.EpicScale, C:\Users\NikolA!os\AppData\Roaming\Microsoft\Windows\Start Menu\EPIC_SCALE.lnk, , [a5c857ee375364d20e29c2e8b1522cd4],
PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, , [74f9e95cc6c488ae3d3c0133ff063bc5],

Physical Sectors: 0
(No malicious items detected)


(end)

BCM sa nenasiel - zato kadeco ine
ak sa dal vsetko najdene zmazat, tak by pocitac mal byt OK

Ano potvrzuji, že MBAM a ADWcleaner....smazal vše bez problému, takže snad už to bude oK....

Děkuji mnohokráte za pomoc.

MBAM mozes odinstalovat
rado sa stalo