VIRY.CZ

Zdravím, prosím Vás o kontrolu logu. Mám v notebooku nejakého šmejda, ktorý mi sám začne inštalovať rôzne programy (zatiaľ to bol crossbrowse, nejaky protect program, regcleaner a v chrome sa mi vždy zmení vyhľadávač).

3x som už použil Adwcleaner. Vždy skoro všetko vymaže a chvíľu to vyzerá OK, až kým sa nezačne opäť samoinštalácia.

Tu je log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by admin at 2015-07-29 10:19:44
Microsoft Windows 8.1
System drive C: has 48 GB (17%) free of 286 GB
Total RAM: 3982 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:19:56, on 29.7.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\Garena Plus\ggdllhost.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Users\admin\AppData\Local\Temp\nsh2179.tmp
C:\Program Files (x86)\MiuiTab\cmdshell.exe
C:\Program Files (x86)\MiuiTab\HPNotify.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\admin\AppData\Local\Temp\nsj652B.tmp
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: GoodTab Class - {1F91A9A1-01BA-4c81-863D-3BA0751E1419} - C:\Program Files (x86)\MiuiTab\SupTab.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [GarenaPlus] "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_35F47CA955883AC80F45949DB9B0CAE0] "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-21-3701647376-3946651554-1493002649-1003\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: Gta5Keygen.lnk = C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}\Gta5Keygen.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{04cffb49-6d93-11e3-824e-806e6f6e6963}: NameServer = 52.17.204.69,8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{109306A7-74D3-4D64-9D1D-0D449F736903}: NameServer = 52.17.204.69,8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{4BD8B877-1833-40E7-B408-9DE76B7F7BC3}: NameServer = 52.17.204.69,8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{592F78B9-78DD-441C-8141-316236FE1390}: NameServer = 52.17.204.69,8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{661C2270-E955-4442-8FDC-5E22E2B056DC}: NameServer = 52.17.204.69,8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{04cffb49-6d93-11e3-824e-806e6f6e6963}: NameServer = 52.17.204.69,8.8.8.8
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Wire Professional Version (comyninu) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Surge Protector Comma (fysebewo) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Kerning Down (gopibeko) - Unknown owner - C:\Users\admin\AppData\Local\67017300-1438039819-81E2-2202-AC220BAC81F5\snsd2113.tmp
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: Key In Bold Italic (hyverumu) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: IHProtect Service - XTab system - C:\Program Files (x86)\MiuiTab\ProtectService.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: mail update Service (mailUpdate) - Skytech Co., Ltd. - C:\ProgramData\MailUpdate\mailUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PDF Architect 2 - pdfforge GmbH - C:\Program Files (x86)\PDF Architect 2\ws.exe
O23 - Service: PDF Architect 2 Creator - pdfforge GmbH - C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
O23 - Service: pdfforge CrashHandler - pdfforge GmbH - C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - DTools LIMITED - C:\ProgramData\vWinManProv\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 13262 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
taskhostex.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Garena Plus\ggdllhost.exe" "C:\Program Files (x86)\Garena Plus\ggspawn.dll",rundll_entry
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\Explorer.EXE
KBFiltr.exe
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
"C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5\hnstC9DA.tmp"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5\knsl5338.tmp"
C:\Users\admin\AppData\Local\67017300-1438039819-81E2-2202-AC220BAC81F5\snsd2113.tmp
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5\jnstB15E.tmp"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\PDF Architect 2\creator-ws.exe"
"C:\WINDOWS\system32\GWX\GWX.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc

"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"

"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 6BC2EE42-A50E-41ED-95A2-3AD16C4C5A79 -Reinvoke
C:\Users\admin\AppData\Local\Temp\nsh2179.tmp /idn
C:\ProgramData\MailUpdate\mailUpdate.exe -service
C:\ProgramData\vWinManProv\ProtectWindowsManager.exe -service
"C:\Program Files (x86)\MiuiTab\ProtectService.exe"
"C:\Program Files (x86)\MiuiTab\cmdshell.exe"
HPNotify.exe -run -ptid=face
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.istartsurf.com/?type=sc&ts=1 ... X63JAP4XGT
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4328.0.1670336956\1565587331" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,21,44 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --enable-deferred-image-decoding --lang=sk --force-fieldtrials="*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*IconNTP/Default/*LoadStaleCacheExperiment/Disabled/*LocalNTPFast/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Enabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_01/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/group_01/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4328 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="4328.2.867518380\2028269758" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --enable-deferred-image-decoding --lang=sk --force-fieldtrials="*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*IconNTP/Default/*LoadStaleCacheExperiment/Disabled/*LocalNTPFast/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Enabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_01/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/group_01/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4328 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="4328.3.925805867\527525098" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --enable-deferred-image-decoding --lang=sk --force-fieldtrials="*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*IconNTP/Default/*LoadStaleCacheExperiment/Disabled/*LocalNTPFast/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Enabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_01/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/group_01/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4328 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="4328.9.2070283889\1112196855" /prefetch:673131151
C:\Users\admin\AppData\Local\Temp\nsj652B.tmp
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --enable-deferred-image-decoding --lang=sk --force-fieldtrials="*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*IconNTP/Default/*LoadStaleCacheExperiment/Disabled/*LocalNTPFast/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Enabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_01/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/group_01/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4328 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="4328.10.769485264\757691507" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 564 572 580 65536 576


C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\admin\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\LingoRock.job - c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}\gtavkeygenerator.exe-1438096425347.exe --startup=1 --single
C:\WINDOWS\tasks\PowerBuff.job - c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}\aba3.exe --startup=1 --single

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419}]
GoodTab Class - C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-27 544952]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-30 13550152]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-05-20 1308232]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GarenaPlus"=C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [2014-04-29 9936176]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-06-05 813896]
"GoogleChromeAutoLaunch_35F47CA955883AC80F45949DB9B0CAE0"=C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-28 91432]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]

C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Gta5Keygen.lnk - C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}\Gta5Keygen.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-07-29 10:19:44 ----D---- C:\rsit
2015-07-29 10:19:44 ----D---- C:\Program Files\trend micro
2015-07-29 10:12:44 ----D---- C:\ProgramData\IHProtectUpDate
2015-07-29 10:12:33 ----D---- C:\Program Files (x86)\MiuiTab
2015-07-29 10:12:21 ----D---- C:\ProgramData\vWinManProv
2015-07-29 10:12:00 ----D---- C:\Program Files (x86)\FriendlyError
2015-07-29 10:11:52 ----D---- C:\Users\admin\AppData\Roaming\istartsurf
2015-07-29 10:11:49 ----D---- C:\Users\admin\AppData\Roaming\MailUpdate
2015-07-29 10:11:49 ----D---- C:\ProgramData\MailUpdate
2015-07-29 09:31:25 ----D---- C:\Program Files (x86)\82e958fb-0e06-43e9-95fd-58d36032a358
2015-07-29 01:33:00 ----D---- C:\ProgramData\HWinManProH
2015-07-29 00:18:21 ----D---- C:\Program Files (x86)\3cf598fa-b918-4ddf-922a-0852e8f2a1e9
2015-07-29 00:15:56 ----D---- C:\ProgramData\3WinManPro3
2015-07-28 17:16:14 ----D---- C:\Program Files (x86)\Simply Block Ads
2015-07-28 15:17:21 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-07-28 15:12:50 ----A---- C:\WINDOWS\SYSWOW64\HRUPPROG.TXT
2015-07-27 23:41:30 ----D---- C:\Users\admin\AppData\Roaming\Opera Software
2015-07-27 23:39:02 ----D---- C:\Program Files (x86)\Opera
2015-07-27 23:32:42 ----D---- C:\Users\admin\AppData\Roaming\dlg
2015-07-27 23:30:57 ----D---- C:\Users\admin\AppData\Roaming\Mozilla
2015-07-27 23:29:33 ----D---- C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5
2015-07-27 23:28:55 ----D---- C:\ProgramData\7WinManPro7
2015-07-27 23:28:54 ----A---- C:\WINDOWS\prleth.sys
2015-07-27 23:28:54 ----A---- C:\WINDOWS\hgfs.sys
2015-07-24 19:54:11 ----D---- C:\Output
2015-07-24 19:52:12 ----D---- C:\Program Files (x86)\Excel-Xls to Pdf Converter
2015-07-21 21:57:58 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-07-21 21:57:58 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-07-21 21:57:58 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-07-21 21:57:58 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-07-15 23:22:59 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2015-07-15 23:22:59 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-07-15 23:22:59 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-07-15 23:22:58 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-07-15 23:22:58 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-07-15 23:22:58 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-07-15 23:22:58 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-07-15 23:22:58 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-07-15 23:22:58 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-07-15 23:22:58 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-07-15 23:22:58 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2015-07-15 23:22:57 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-07-15 23:22:57 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-07-15 23:22:57 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-07-15 23:22:57 ----A---- C:\WINDOWS\system32\wups.dll
2015-07-15 23:22:56 ----A---- C:\WINDOWS\system32\wups2.dll
2015-07-15 23:22:09 ----A---- C:\WINDOWS\system32\win32k.sys
2015-07-15 23:22:09 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\msv1_0.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-07-15 23:22:07 ----A---- C:\WINDOWS\system32\certcli.dll
2015-07-15 23:22:06 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2015-07-15 23:22:06 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-07-15 23:22:06 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-07-15 23:22:06 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-07-15 23:22:02 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-07-15 23:22:02 ----A---- C:\WINDOWS\system32\authui.dll
2015-07-15 23:22:01 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-07-15 23:22:01 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-07-15 23:22:01 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-07-15 23:22:01 ----A---- C:\WINDOWS\system32\msi.dll
2015-07-15 23:22:00 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2015-07-15 23:22:00 ----A---- C:\WINDOWS\system32\shell32.dll
2015-07-15 23:22:00 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-07-15 23:21:59 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-07-15 23:21:58 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-07-15 23:21:58 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-15 23:21:57 ----A---- C:\WINDOWS\system32\invagent.dll
2015-07-15 23:21:57 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-07-15 23:21:57 ----A---- C:\WINDOWS\system32\devinv.dll
2015-07-15 23:21:57 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2015-07-15 23:21:57 ----A---- C:\WINDOWS\system32\aeinv.dll
2015-07-15 23:21:57 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-07-15 23:21:56 ----AC---- C:\WINDOWS\system32\drivers\sermouse.sys
2015-07-15 23:21:56 ----AC---- C:\WINDOWS\system32\drivers\mouhid.sys
2015-07-15 23:21:56 ----AC---- C:\WINDOWS\system32\drivers\mouclass.sys
2015-07-15 23:21:56 ----AC---- C:\WINDOWS\system32\drivers\kbdhid.sys
2015-07-15 23:21:56 ----AC---- C:\WINDOWS\system32\drivers\kbdclass.sys
2015-07-15 23:21:56 ----AC---- C:\WINDOWS\system32\drivers\i8042prt.sys
2015-07-15 23:21:56 ----A---- C:\WINDOWS\system32\aepdu.dll
2015-07-15 23:21:55 ----AC---- C:\WINDOWS\system32\drivers\bthport.sys
2015-07-15 23:21:55 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2015-07-15 23:21:54 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2015-07-15 23:21:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 23:21:54 ----A---- C:\WINDOWS\system32\WSShared.dll
2015-07-15 23:21:54 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 23:21:53 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-07-15 23:21:52 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-07-15 23:21:50 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-07-15 23:21:49 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-07-15 23:21:38 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-07-15 23:21:37 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-07-15 23:21:36 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-07-15 23:21:36 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-07-15 23:21:35 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-07-15 23:21:35 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-07-15 23:21:28 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-07-15 23:21:27 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-07-15 23:21:27 ----A---- C:\WINDOWS\system32\wininet.dll
2015-07-15 23:21:26 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-07-15 23:21:26 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-07-15 23:21:26 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-07-15 23:21:26 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2015-07-15 23:21:26 ----A---- C:\WINDOWS\system32\ieui.dll
2015-07-15 23:21:26 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-07-15 23:21:25 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-07-15 23:21:25 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-07-15 23:21:25 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-07-15 23:21:24 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-07-15 23:21:22 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2015-07-15 23:21:21 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-07-15 23:21:21 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-07-15 23:21:19 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-07-15 23:21:19 ----A---- C:\WINDOWS\system32\msrating.dll
2015-07-15 23:21:19 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-07-15 23:21:17 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-07-15 23:21:15 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-07-15 23:21:15 ----A---- C:\WINDOWS\system32\jscript.dll
2015-07-15 23:21:13 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-07-15 23:21:10 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-07-15 23:21:10 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-07-15 23:21:10 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-07-15 23:21:07 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2015-07-15 23:21:07 ----A---- C:\WINDOWS\system32\ole32.dll
2015-07-15 23:21:03 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-07-15 23:21:03 ----A---- C:\WINDOWS\system32\fhcpl.dll
2015-07-15 23:21:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2015-07-15 23:20:58 ----A---- C:\WINDOWS\system32\apphelp.dll
2015-07-15 23:20:50 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-07-15 23:20:48 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-07-10 20:33:34 ----HD---- C:\$Windows.~BT
2015-07-02 08:37:49 ----D---- C:\AdwCleaner
2015-07-01 23:14:25 ----D---- C:\Users\admin\AppData\Roaming\Blender Foundation
2015-07-01 13:33:44 ----D---- C:\Program Files\Blender Foundation

======List of files/folders modified in the last 1 month======

2015-07-29 10:19:50 ----D---- C:\WINDOWS\Prefetch
2015-07-29 10:19:44 ----RD---- C:\Program Files
2015-07-29 10:19:29 ----D---- C:\WINDOWS\Temp
2015-07-29 10:18:34 ----D---- C:\WINDOWS\SysWOW64
2015-07-29 10:14:12 ----D---- C:\Users\admin\AppData\Roaming\uTorrent
2015-07-29 10:12:44 ----HD---- C:\ProgramData
2015-07-29 10:12:33 ----RD---- C:\Program Files (x86)
2015-07-29 10:02:04 ----D---- C:\WINDOWS\system32\sru
2015-07-29 09:55:50 ----D---- C:\WINDOWS\system32\config
2015-07-29 09:50:15 ----HD---- C:\Program Files\WindowsApps
2015-07-29 09:50:14 ----D---- C:\WINDOWS\AppReadiness
2015-07-29 09:41:44 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-07-29 09:39:14 ----D---- C:\WINDOWS\system32\Tasks
2015-07-29 09:38:05 ----D---- C:\WINDOWS\Tasks
2015-07-29 09:37:58 ----RD---- C:\WINDOWS\System32
2015-07-29 09:31:08 ----SHD---- C:\WINDOWS\Installer
2015-07-29 00:19:01 ----D---- C:\Program Files (x86)\Common Files
2015-07-29 00:18:32 ----D---- C:\Program Files (x86)\Adobe
2015-07-28 20:14:45 ----D---- C:\WINDOWS\WinSxS
2015-07-28 20:02:56 ----DC---- C:\WINDOWS\Panther
2015-07-28 17:16:26 ----D---- C:\ProgramData\15668432582899721
2015-07-28 17:01:20 ----D---- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
2015-07-28 16:44:35 ----D---- C:\WINDOWS\CbsTemp
2015-07-28 16:42:18 ----SHD---- C:\System Volume Information
2015-07-28 15:18:11 ----D---- C:\WINDOWS\Logs
2015-07-27 23:44:27 ----D---- C:\WINDOWS\Inf
2015-07-27 23:30:57 ----D---- C:\WINDOWS\system32\drivers\etc
2015-07-27 23:28:54 ----D---- C:\Windows
2015-07-27 13:03:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-25 09:47:32 ----SD---- C:\WINDOWS\system32\GWX
2015-07-23 12:19:49 ----D---- C:\WINDOWS\rescache
2015-07-21 11:45:35 ----D---- C:\WINDOWS\system32\DriverStore
2015-07-21 11:14:36 ----D---- C:\WINDOWS\system32\catroot2
2015-07-20 23:23:35 ----D---- C:\Program Files\Internet Explorer
2015-07-20 23:23:35 ----D---- C:\Program Files (x86)\Internet Explorer
2015-07-20 23:23:23 ----D---- C:\WINDOWS\WinStore
2015-07-20 23:23:22 ----D---- C:\WINDOWS\system32\sk-SK
2015-07-20 23:23:22 ----D---- C:\WINDOWS\apppatch
2015-07-20 23:23:19 ----D---- C:\WINDOWS\system32\drivers
2015-07-20 23:23:17 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-07-20 23:23:15 ----RD---- C:\WINDOWS\ToastData
2015-07-19 11:29:49 ----A---- C:\WINDOWS\system32\HRUPPROG.TXT
2015-07-19 11:29:37 ----D---- C:\Program Files (x86)\Hi-Rez Studios
2015-07-17 11:50:15 ----D---- C:\Users\admin\AppData\Roaming\Skype
2015-07-16 09:37:33 ----SD---- C:\WINDOWS\system32\CompatTel
2015-07-16 09:37:33 ----D---- C:\WINDOWS\system32\wbem
2015-07-16 09:37:33 ----D---- C:\WINDOWS\system32\appraiser
2015-07-16 09:36:27 ----D---- C:\WINDOWS\system32\MRT
2015-07-16 09:31:49 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-07-13 23:10:13 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-07-05 12:08:23 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-07-03 08:43:04 ----A---- C:\WINDOWS\system32\MRT.exe
2015-07-02 09:43:33 ----D---- C:\WINDOWS\SKB
2015-07-02 09:41:41 ----D---- C:\Program Files (x86)\Wordpress Admin Bar Control
2015-07-02 08:42:27 ----D---- C:\WINDOWS\system32\log
2015-07-01 09:40:46 ----D---- C:\WINDOWS\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-10 32544]
R0 Tpkd;Tpkd; C:\WINDOWS\system32\drivers\Tpkd.sys [2009-12-23 105592]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 dtsoftbus01;@oem17.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2013-10-30 283064]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 ATP;@oem6.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-04-16 65784]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-01-28 593000]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 HIDSwitch;@oem12.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-04 3441992]
R3 IntcDAud;@oem32.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-09 342528]
R3 iwdbus;@oem40.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-23 26008]
R3 kbfiltr;@oem15.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem30.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-10 12572960]
R3 RSBASTOR;@oem4.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-10-08 298640]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys []
S3 AndNetDiag;@oem46.inf,%Lgsi.Service.Name%;LGE AndroidNet USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgandnetdiag64.sys [2014-10-10 30720]
S3 ANDNetModem;@oem48.inf,%LGSI.Service.Name%;LGE AndroidNet USB Modem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem64.sys [2014-10-10 37376]
S3 AthBTPort;@oem11.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-03-27 89168]
S3 BTATH_A2DP;@oem10.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-03-27 346192]
S3 btath_avdt;@oem10.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-03-27 115280]
S3 BTATH_HCRP;@oem14.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-03-27 179432]
S3 BTATH_LWFLT;@oem16.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-03-27 77464]
S3 BTATH_RCP;@oem18.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-03-27 136784]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 dg_ssudbus;@oem19.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem39.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-23 39320]
S3 MAUSBMICRO;@oem43.inf,%MAUSBMICRO_SvcDesc%;Service for M-Audio Micro; C:\WINDOWS\system32\DRIVERS\MAudioMicro.sys [2009-09-03 187912]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys []
S3 mvusbews;@oem28.inf,%mvusbews.SvcDesc%;USB EWS Device; C:\WINDOWS\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 ssudmdm;@oem22.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-12-13 121088]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-10-05 110976]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R2 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-03-27 227968]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 comyninu;Wire Professional Version; C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5\hnstC9DA.tmp [2015-07-27 161792]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 fysebewo;Surge Protector Comma; C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5\knsl5338.tmp [2015-07-29 343552]
R2 gopibeko;Kerning Down; C:\Users\admin\AppData\Local\67017300-1438039819-81E2-2202-AC220BAC81F5\snsd2113.tmp [2015-07-27 120832]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2015-07-27 8704]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-04-29 127800]
R2 hyverumu;Key In Bold Italic; C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5\jnstB15E.tmp [2015-07-27 209920]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-09-13 2466448]
R2 IHProtect Service;IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [2015-07-27 125112]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 mailUpdate;mail update Service; C:\ProgramData\MailUpdate\mailUpdate.exe [2015-07-10 820736]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-07-08 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 PDF Architect 2 Creator;PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [2014-10-10 738856]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14 268976]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-07-09 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PDF Architect 2;PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [2014-10-10 1771560]
S3 pdfforge CrashHandler;pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [2014-10-10 861736]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-04-14 836288]

-----------------EOF-----------------

Zdravim

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Vďaka ,
tu je log:


Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by admin on st 29.07.2015 at 15:17:16,67.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\admin\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

29.7.2015 15:18:36 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) deleted successfully
C:\Users\admin\AppData\Roaming\Google Chrome Backup deleted successfully
C:\Users\admin\AppData\Roaming\Opera Software deleted successfully
C:\Users\admin\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\admin\AppData\Local\EmieSiteList deleted successfully
C:\Users\admin\AppData\Local\EmieUserList deleted successfully
C:\Users\admin\AppData\Local\Opera Software deleted successfully
C:\Users\admin\AppData\Local\PDFCreator deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3701647376-3946651554-1493002649-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully
HKEY_USERS\S-1-5-21-3701647376-3946651554-1493002649-1002\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} deleted successfully
HKEY_USERS\S-1-5-21-3701647376-3946651554-1493002649-1002\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\pdf_architect_2_conv@pdfarchitect.org deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dihesepu deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IHProtect Service deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
@="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe"

==== Deleting Files \ Folders ======================

C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) not found
C:\PROGRA~2\Simply Block Ads deleted
C:\PROGRA~2\Wordpress Admin Bar Control deleted
C:\Users\admin\AppData\Roaming\istartsurf deleted
C:\windows\SysNative\Tasks\LingoRock deleted
C:\windows\SysNative\Tasks\PowerBuff deleted
C:\PROGRA~3\15668432582899721 deleted
C:\Users\admin\AppData\Local\29652 deleted
C:\Users\admin\.android deleted
C:\PROGRA~2\3cf598fa-b918-4ddf-922a-0852e8f2a1e9 deleted
C:\PROGRA~2\82e958fb-0e06-43e9-95fd-58d36032a358 deleted
C:\LGExtract.exe deleted
C:\Users\admin\AppData\Roaming\dlg deleted
C:\Users\admin\AppData\Roaming\burnaware.ini deleted
C:\PROGRA~3\IHProtectUpDate deleted
C:\Users\admin\AppData\Local\MyWinLockerInstaller.txt-20140109.log deleted
C:\Users\admin\AppData\Local\nsn8E96.tmp deleted
C:\Users\admin\AppData\Local\67017300-1438039819-81E2-2202-AC220BAC81F5 deleted
C:\Users\admin\AppData\Local\MSGBOX.EXE deleted

==== Chromium Look ======================

Google Chrome Version: 43.0.2357.124


==== Chromium Startpages ======================

C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
hes":["\u003Call_urls>"],"run_at":"document_start"}],"content_security_policy":"default-src 'self'; script-src 'self'; frame-src 'self' http: https:; style-src 'self'","description":"GAIA Component Extension","incognito":"split","key":"MIGdMA0GCSqGSIb3DQEBAQUAA4GLADCBhwKBgQC4L17nAfeTd6Xhtx96WhQ6DSr8KdHeQmfzgCkieKLCgUkWdwB9G1DCuh0EPMDn1MdtSwUAT7xE36APEzi0X/UpKjOVyX8tCC3aQcLoRAE0aJAvCcGwK7qIaQaczHmHKvPC2lrRdzSoMMTC5esvHX+ZqIBMi123FOL0dGW6OPKzIwIBIw==","manifest_version":2,"name":"GaiaAuthExtension","permissions":["\u003Call_urls>","webRequest","webRequestBlocking"],"version":"0.0.1","web_accessible_resources":["main.css","main.html","main.js","offline.css","offline.html","offline.js","success.html","success.js","util.js"]},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\43.0.2357.124\\resources\\gaia_auth","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false},"mgndgikekgjfcpckkfioiadnlibdjbkf":{"active_permissions":{"api":[],"manifest_permissions":[]},"app_launcher_ordinal":"n","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13082629200552674","location":5,"manifest":{"app":{"launch":{"web_url":"http://THIS-WILL-BE-REPLACED"}},"description":"Rýchly, jednoduchý a bezpečný webový prehliadač vytvorený pre moderný web.","display_in_launcher":true,"display_in_new_tab_page":false,"icons":{"128":"product_logo_128.png","16":"product_logo_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB","name":"Chrome","version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\43.0.2357.124\\resources\\chrome_app","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false}}},"homepage":"http://www.istartsurf.com/?type=sy&ts=1 ... artup_urls":["http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"]}}


==== Chromium Fix ======================

C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_searches3.globososo.com_0.localstorage deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_searches3.globososo.com_0.localstorage-journal deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage-journal deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage deleted successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"
"Search Page"="http://www.istartsurf.com/web/?type=ds& ... earchTerms}"
"Default_Page_URL"="http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"
"Default_Search_URL"="http://www.istartsurf.com/web/?type=ds& ... earchTerms}"
"First Home Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.istartsurf.com/web/?type=ds& ... earchTerms}"
"Default_Page_URL"="http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"
"Start Page"="http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"
"Search Page"="http://www.istartsurf.com/web/?type=ds& ... earchTerms}"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.istartsurf.com/web/?type=ds& ... earchTerms}"
"Default_Page_URL"="http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"
"Start Page"="http://www.istartsurf.com/?type=hp&ts=1 ... X63JAP4XGT"
"Search Page"="http://www.istartsurf.com/web/?type=ds& ... earchTerms}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"First Home Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.bad was reset successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\UpdatusUser\Desktop\Counter Strike 1.6.lnk - C:\Program Files (x86)\Valve\cstrike.exe
C:\Users\UpdatusUser\Desktop\Half Life Source.lnk - C:\Program Files (x86)\Half Life\Half-Life Source.exe
C:\Users\UpdatusUser\Desktop\LGFlashTool.lnk - C:\LG\LGFlashTool\LGFlashTool.exe
C:\Users\UpdatusUser\Desktop\Scorpion's WinCheater 2.lnk - D:\Games\Scorpions WinCheater\Cheater2.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Blender.lnk - C:\Program Files\Blender Foundation\Blender\blender.exe

==== shortcuts in Users Start Menu ======================

C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... X63JAP4XGT

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation\Blender\Blender.lnk - C:\Program Files\Blender Foundation\Blender\blender.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation\Blender\Copyright.lnk - C:\Program Files\Blender Foundation\Blender\copyright.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation\Blender\GPL-license.lnk - C:\Program Files\Blender Foundation\Blender\GPL-license.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation\Blender\Readme.lnk - C:\Program Files\Blender Foundation\Blender\readme.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation\Blender\Uninstall.lnk - C:\Program Files (x86)\Blender Foundation\Blender\uninstall.exe

==== shortcuts in Quick Launch ======================

C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandizip.lnk - C:\Users\admin\AppData\Local\Bandizip\Bandizip64.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome Backup.lnk - C:\Program Files (x86)\Google Chrome Backup\gcb.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... X63JAP4XGT
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shutdown8.lnk - C:\Users\admin\AppData\Local\Shutdown8\Shutdown8.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\WINDOWS\system32\control.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1 ... X63JAP4XGT
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\KMPlayer.lnk - C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Office Word 2007.lnk - C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Shutdown8.exe.lnk - C:\Users\admin\AppData\Local\Shutdown8\Shutdown8.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Skype.lnk - C:\WINDOWS\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Smite.lnk - C:\Program Files (x86)\Hi-Rez Studios\HiRezLauncherUI.exe game=300 product=17
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Wow - odkaz.lnk - D:\Games\WoW2\Wow.exe
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== shortcuts After Repair ======================

C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~9338DF9D_is1 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\admin\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\admin\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\admin\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\admin\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=73 folders=14 5380217 bytes)

==== Empty Temp Folders ======================

C:\Users\admin\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\admin\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on st 29.07.2015 at 15:30:58,32 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-07-2015
Ran by admin (administrator) on ASUS (29-07-2015 16:49:53)
Running from C:\Users\admin\Desktop
Loaded Profiles: admin & UpdatusUser (Available Profiles: admin & UpdatusUser)
Platform: Windows 8.1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(forum.viry.cz) C:\Users\admin\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-05-20] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] (Atheros Communications)
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GarenaPlus] => C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9936176 2014-04-29] ()
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GoogleChromeAutoLaunch_35F47CA955883AC80F45949DB9B0CAE0] => "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
HKU\S-1-5-21-3701647376-3946651554-1493002649-1003\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Gta5Keygen.lnk [2015-04-23]
ShortcutTarget: Gta5Keygen.lnk -> C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}\Gta5Keygen.exe (No File)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
URLSearchHook: [S-1-5-21-3701647376-3946651554-1493002649-1003] ATTENTION ==> Default URLSearchHook is missing
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3701647376-3946651554-1493002649-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-27] (Thinkgood Co. Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{04cffb49-6d93-11e3-824e-806e6f6e6963}: [NameServer] 52.17.204.69,8.8.8.8
Tcpip\..\Interfaces\{109306A7-74D3-4D64-9D1D-0D449F736903}: [NameServer] 52.17.204.69,8.8.8.8
Tcpip\..\Interfaces\{4BD8B877-1833-40E7-B408-9DE76B7F7BC3}: [NameServer] 52.17.204.69,8.8.8.8
Tcpip\..\Interfaces\{4BD8B877-1833-40E7-B408-9DE76B7F7BC3}: [DhcpNameServer] 192.108.131.11 192.108.138.12 8.8.8.8
Tcpip\..\Interfaces\{592F78B9-78DD-441C-8141-316236FE1390}: [NameServer] 52.17.204.69,8.8.8.8
Tcpip\..\Interfaces\{592F78B9-78DD-441C-8141-316236FE1390}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{661C2270-E955-4442-8FDC-5E22E2B056DC}: [NameServer] 52.17.204.69,8.8.8.8

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [2013-12-19] ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default
CHR HKU\S-1-5-21-3701647376-3946651554-1493002649-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-07-27] (Hi-Rez Studios) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-03-27] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [30720 2014-10-10] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [37376 2014-10-10] (LG Electronics Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-10-30] (Disc Soft Ltd)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S3 MAUSBMICRO; C:\Windows\system32\DRIVERS\MAudioMicro.sys [187912 2009-09-03] (Avid Technology, Inc.)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S1 cmdHlp; System32\DRIVERS\cmdhlp.sys [X]
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-29 16:49 - 2015-07-29 16:50 - 00015518 _____ C:\Users\admin\Desktop\FRST.txt
2015-07-29 16:49 - 2015-07-29 16:49 - 00000000 ____D C:\FRST
2015-07-29 16:47 - 2015-07-29 16:47 - 00112640 _____ (forum.viry.cz) C:\Users\admin\Desktop\FRSTLauncher.exe
2015-07-29 16:47 - 2015-07-29 16:44 - 02169856 _____ (Farbar) C:\Users\admin\Desktop\FRST64.exe
2015-07-29 16:44 - 2015-07-29 16:44 - 02169856 _____ (Farbar) C:\Users\admin\Downloads\FRST64.exe
2015-07-29 15:28 - 2015-07-29 15:17 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-29 15:18 - 2015-07-29 15:30 - 00024232 _____ C:\zoek-results.log
2015-07-29 15:17 - 2015-07-29 15:27 - 00000000 ____D C:\zoek_backup
2015-07-29 15:16 - 2015-07-29 15:16 - 01308672 _____ C:\Users\admin\Downloads\zoek.exe
2015-07-29 15:16 - 2015-07-29 15:16 - 01308672 _____ C:\Users\admin\Desktop\zoek.exe
2015-07-29 10:19 - 2015-07-29 10:19 - 01222144 _____ C:\Users\admin\Downloads\RSITx64.exe
2015-07-29 10:19 - 2015-07-29 10:19 - 00000000 ____D C:\rsit
2015-07-29 10:19 - 2015-07-29 10:19 - 00000000 ____D C:\Program Files\trend micro
2015-07-29 10:12 - 2015-07-29 10:13 - 00000000 ____D C:\ProgramData\vWinManProv
2015-07-29 10:12 - 2015-07-29 10:12 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-07-29 10:12 - 2015-07-29 10:12 - 00000000 ____D C:\Program Files (x86)\FriendlyError
2015-07-29 10:11 - 2015-07-29 15:47 - 00000000 ____D C:\ProgramData\MailUpdate
2015-07-29 10:11 - 2015-07-29 10:11 - 00000000 ____D C:\Users\admin\AppData\Roaming\MailUpdate
2015-07-29 01:33 - 2015-07-29 01:34 - 00000000 ____D C:\ProgramData\HWinManProH
2015-07-29 00:56 - 2015-07-29 00:56 - 02248704 _____ C:\Users\admin\Downloads\adwcleaner_4.208.exe
2015-07-29 00:18 - 2015-07-29 09:30 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-29 00:15 - 2015-07-29 00:15 - 00000000 ____D C:\ProgramData\3WinManPro3
2015-07-28 17:44 - 2015-07-28 17:46 - 28234704 _____ C:\Users\admin\Downloads\GTA-5-CZ.rar
2015-07-28 17:13 - 2015-07-29 11:13 - 00000392 _____ C:\WINDOWS\Tasks\LingoRock.job
2015-07-28 16:42 - 2015-07-28 16:42 - 00895868 _____ C:\Users\admin\Downloads\3danalyzer-v236.zip
2015-07-28 15:17 - 2015-07-25 15:34 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-07-28 15:13 - 2015-07-28 15:13 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.EXIT
2015-07-28 15:12 - 2015-07-28 15:13 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.TXT
2015-07-28 00:11 - 2015-07-28 00:11 - 00030490 _____ C:\Users\admin\Documents\cc_20150728_001119.reg
2015-07-27 23:39 - 2015-07-27 23:49 - 00000000 ____D C:\Program Files (x86)\Opera
2015-07-27 23:30 - 2015-07-27 23:30 - 00000000 ____D C:\Users\admin\Documents\DailyPCClean
2015-07-27 23:30 - 2015-07-27 23:30 - 00000000 ____D C:\Users\admin\AppData\Roaming\Mozilla
2015-07-27 23:30 - 2014-11-25 00:02 - 00000035 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-07-27 23:29 - 2015-07-29 15:05 - 00000000 ____D C:\Program Files (x86)\67017300-1438032573-81E2-2202-AC220BAC81F5
2015-07-27 23:29 - 2015-07-27 23:29 - 00000000 ____D C:\Users\admin\AppData\Local\dpc_en_030010033
2015-07-27 23:28 - 2015-07-28 15:44 - 00000000 ____D C:\ProgramData\7WinManPro7
2015-07-27 23:28 - 2015-07-27 23:28 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-27 23:28 - 2015-07-27 23:28 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-07-27 22:33 - 2015-07-27 22:39 - 195687134 _____ C:\Users\admin\Downloads\mafia_freeride_1.0_by_majo-213.rar
2015-07-24 20:06 - 2015-07-24 20:06 - 00020340 _____ C:\Users\admin\Downloads\protikvasinková-dieta---tabulka-120128-%28by-sakul%29_%281%29.ods
2015-07-24 19:54 - 2015-07-24 19:54 - 00000000 ____D C:\Output
2015-07-24 19:52 - 2015-07-24 19:54 - 00000000 ____D C:\Program Files (x86)\Excel-Xls to Pdf Converter
2015-07-24 19:51 - 2015-07-24 19:51 - 03608164 _____ (Word-Pdf-Convert Software, Inc. ) C:\Users\admin\Downloads\excel_xls_to_pdf_converter.exe
2015-07-24 19:45 - 2015-07-24 19:46 - 03441152 _____ C:\Users\admin\Downloads\xlsviewer_setup.msi
2015-07-24 19:44 - 2015-07-24 19:44 - 00373128 _____ (Bytescout Software ) C:\Users\admin\Downloads\XLSViewer.exe
2015-07-24 17:43 - 2015-07-24 17:43 - 00060416 _____ C:\Users\admin\Downloads\protikvasinková-dieta---tabulka-120128-(by-sakul) (2).xls
2015-07-24 17:42 - 2015-07-24 17:42 - 00060416 _____ C:\Users\admin\Downloads\protikvasinková-dieta---tabulka-120128-(by-sakul) (1).xls
2015-07-24 17:35 - 2015-07-24 17:44 - 00060416 _____ C:\Users\admin\Downloads\protikvasinková-dieta---tabulka-120128-(by-sakul).xls
2015-07-23 14:49 - 2015-07-23 14:49 - 00105154 _____ C:\Users\admin\Downloads\[kat.cr]tower.of.power.discography.torrent
2015-07-21 21:57 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-07-21 21:57 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-07-21 21:57 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-07-21 21:57 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-07-15 23:22 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-07-15 23:22 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-07-15 23:22 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-07-15 23:22 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-07-15 23:22 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-07-15 23:22 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-07-15 23:22 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-07-15 23:22 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-07-15 23:22 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-07-15 23:22 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-07-15 23:22 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-07-15 23:22 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-07-15 23:22 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-07-15 23:22 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-07-15 23:22 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-07-15 23:22 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-07-15 23:22 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-07-15 23:22 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-07-15 23:22 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-07-15 23:22 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-07-15 23:22 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-07-15 23:22 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-07-15 23:22 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-07-15 23:22 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-07-15 23:22 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-07-15 23:22 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-07-15 23:22 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-07-15 23:22 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-07-15 23:22 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-07-15 23:22 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-07-15 23:22 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-07-15 23:22 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-07-15 23:22 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-07-15 23:22 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-07-15 23:22 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-07-15 23:22 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-07-15 23:22 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-07-15 23:22 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-07-15 23:22 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-07-15 23:22 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-07-15 23:22 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-07-15 23:22 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-07-15 23:22 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-07-15 23:22 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-07-15 23:21 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-07-15 23:21 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-07-15 23:21 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-07-15 23:21 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-07-15 23:21 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-07-15 23:21 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-07-15 23:21 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-07-15 23:21 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-07-15 23:21 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-07-15 23:21 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-07-15 23:21 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-07-15 23:21 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-07-15 23:21 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-07-15 23:21 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-07-15 23:21 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-07-15 23:21 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-07-15 23:21 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-07-15 23:21 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-07-15 23:21 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-07-15 23:21 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-07-15 23:21 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-07-15 23:21 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-07-15 23:21 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-07-15 23:21 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-07-15 23:21 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-07-15 23:21 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-07-15 23:21 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-07-15 23:21 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-07-15 23:21 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-07-15 23:21 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-07-15 23:21 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-07-15 23:21 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-07-15 23:21 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-07-15 23:21 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-07-15 23:21 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-07-15 23:21 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-07-15 23:21 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-07-15 23:21 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-07-15 23:21 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-07-15 23:21 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-07-15 23:21 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-07-15 23:21 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-07-15 23:21 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-07-15 23:21 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-07-15 23:21 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-07-15 23:21 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-07-15 23:21 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-07-15 23:21 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-07-15 23:21 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-07-15 23:21 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-07-15 23:21 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-07-15 23:21 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-07-15 23:21 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-07-15 23:21 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-07-15 23:21 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-07-15 23:21 - 2015-05-11 20:17 - 01201664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-07-15 23:21 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-07-15 23:21 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-15 23:21 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-07-15 23:21 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-07-15 23:21 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 23:21 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-07-15 23:21 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 23:21 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-07-15 23:21 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-07-15 23:21 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-07-15 23:21 - 2015-05-02 01:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-07-15 23:21 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-07-15 23:21 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls
2015-07-15 23:21 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-07-15 23:21 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-07-15 23:21 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-07-15 23:21 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-07-15 23:21 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-07-15 23:21 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-07-15 23:21 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-07-15 23:20 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-07-15 23:20 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-07-15 23:20 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-07-15 19:38 - 2015-07-15 20:17 - 702269288 _____ C:\Users\admin\Downloads\500-dní-se-Summer.flv
2015-07-15 12:31 - 2015-07-15 12:32 - 04577841 _____ C:\Users\admin\Downloads\Akupresura.rar
2015-07-15 12:26 - 2015-07-15 12:27 - 16523335 _____ C:\Users\admin\Downloads\Akupresura.zip
2015-07-14 19:01 - 2015-07-14 19:01 - 00016482 _____ C:\Users\admin\Downloads\[SkT]Kingsman-_Tajna_sluzba_-_Kingsman-_The_Secret_Service_(2014)(CZ)_=_CSFD_83%.torrent
2015-07-13 18:35 - 2015-07-13 18:35 - 00020133 _____ C:\Users\admin\Downloads\[SkT]Strazci_Galaxie_-_Guardians_of_the_Galaxy_(2014)(CZ)_=_CSFD_83%.torrent
2015-07-13 10:45 - 2015-07-13 10:45 - 00939020 _____ C:\Users\admin\Downloads\Prat-3.0-3.3.5.zip
2015-07-13 10:41 - 2015-07-13 10:41 - 01472996 _____ C:\Users\admin\Downloads\Prat-3.0-3.5.15.zip
2015-07-12 19:37 - 2015-07-12 20:36 - 1012840448 _____ C:\Users\admin\Downloads\retez-blaznu.avi
2015-07-10 20:33 - 2015-07-28 19:56 - 00000000 ___HD C:\$Windows.~BT
2015-07-09 18:03 - 2015-07-09 19:39 - 1695950848 _____ C:\Users\admin\Downloads\šéf---chef-(2014-CZ-dabing).avi
2015-07-09 17:19 - 2015-07-09 17:19 - 00016755 _____ C:\Users\admin\Downloads\[CNT]_Naruto_Shippuuden_419_[2B37428C].mkv.torrent
2015-07-04 01:33 - 2015-07-29 00:15 - 00000024 _____ C:\Users\admin\AppData\Roaming\appdataFr25.bin
2015-07-03 09:34 - 2015-07-03 09:40 - 122767222 _____ C:\Users\admin\Downloads\[CNT]_Naruto_Shippuuden_245_[F0EABF52].mkv
2015-07-03 00:24 - 2015-07-03 00:24 - 00019103 _____ C:\Users\admin\Downloads\[CNT]_Naruto_Shippuuden_245_[F0EABF52].mkv.torrent
2015-07-03 00:19 - 2015-07-03 00:26 - 129572453 _____ C:\Users\admin\Downloads\[CNT]_Naruto_Shippuuden_244_v2_[97D22F64].mkv
2015-07-03 00:00 - 2015-07-03 00:05 - 94424170 _____ C:\Users\admin\Downloads\[CNT]_Naruto_Shippuuden_243_v2_[DC44ABE3].mkv
2015-07-02 23:53 - 2015-07-02 23:53 - 00017592 _____ C:\Users\admin\Downloads\Naruto Shippuuden 243+244 v2.torrent
2015-07-02 23:51 - 2015-07-02 23:51 - 00017396 _____ C:\Users\admin\Downloads\[CNT]_Naruto_Shippuuden_418_[24936FD9].mkv.torrent
2015-07-02 08:53 - 2015-07-02 08:54 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.1.8.1057.exe
2015-07-02 08:37 - 2015-07-29 09:38 - 00000000 ____D C:\AdwCleaner
2015-07-01 23:14 - 2015-07-01 23:14 - 00000000 ____D C:\Users\admin\AppData\Roaming\Blender Foundation
2015-07-01 13:35 - 2015-07-01 13:35 - 00000000 ____D C:\Users\admin\.thumbnails
2015-07-01 13:34 - 2015-07-01 13:34 - 00001915 _____ C:\Users\Public\Desktop\Blender.lnk
2015-07-01 13:34 - 2015-07-01 13:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation
2015-07-01 13:33 - 2015-07-01 13:33 - 00000000 ____D C:\Program Files\Blender Foundation
2015-07-01 13:30 - 2015-07-01 13:32 - 44450790 _____ C:\Users\admin\Downloads\blender-2.66-windows64.exe
2015-07-01 11:53 - 2015-07-01 11:53 - 00000000 ____D C:\Users\admin\AppData\Local\GWX

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-29 16:43 - 2015-04-27 11:29 - 01225763 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-29 16:43 - 2015-03-20 12:10 - 00003496 _____ C:\WINDOWS\System32\Tasks\gg_uac_daemon_admin
2015-07-29 16:43 - 2013-10-30 20:45 - 00000000 ____D C:\Users\admin\AppData\Roaming\uTorrent
2015-07-29 16:40 - 2013-10-31 18:54 - 00005820 _____ C:\Users\admin\Documents\TombRaider.log
2015-07-29 16:37 - 2014-03-29 11:15 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-29 16:02 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-07-29 15:36 - 2013-11-03 10:28 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3701647376-3946651554-1493002649-1002
2015-07-29 15:30 - 2015-04-28 22:20 - 00007750 _____ C:\WINDOWS\setupact.log
2015-07-29 15:30 - 2013-10-31 02:32 - 00000062 _____ C:\Users\admin\AppData\Roaming\sp_data.sys
2015-07-29 15:30 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-29 15:29 - 2015-06-13 10:44 - 01028192 _____ C:\WINDOWS\PFRO.log
2015-07-29 15:27 - 2013-12-25 21:12 - 00001701 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-29 15:27 - 2013-12-25 20:40 - 00000000 ____D C:\Users\admin
2015-07-29 09:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-07-29 08:56 - 2015-06-17 08:56 - 00000332 _____ C:\WINDOWS\Tasks\PowerBuff.job
2015-07-29 00:18 - 2013-11-01 14:32 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-29 00:16 - 2014-11-25 00:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-28 20:02 - 2013-12-25 20:32 - 00000000 ___DC C:\WINDOWS\Panther
2015-07-28 17:01 - 2013-10-30 20:52 - 00000000 ____D C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
2015-07-28 16:44 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-07-27 23:43 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-07-27 13:03 - 2014-07-08 21:20 - 00057082 _____ C:\WINDOWS\system32\perfh01B.dat
2015-07-27 13:03 - 2014-07-08 21:20 - 00015696 _____ C:\WINDOWS\system32\perfc01B.dat
2015-07-27 13:03 - 2013-11-14 09:28 - 00932028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-25 19:31 - 2013-08-22 16:44 - 00379776 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-07-25 09:47 - 2015-04-05 08:09 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-07-23 12:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-07-20 23:23 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-07-20 23:23 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-07-20 23:23 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-07-19 11:29 - 2013-12-26 13:40 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2015-07-19 11:29 - 2013-12-19 23:48 - 00000003 _____ C:\WINDOWS\system32\HRUPPROG.TXT
2015-07-17 11:50 - 2013-11-15 19:35 - 00000000 ____D C:\Users\admin\AppData\Roaming\Skype
2015-07-16 09:37 - 2015-04-16 18:28 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-07-16 09:37 - 2015-03-12 23:22 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-07-16 09:36 - 2013-11-01 14:42 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-16 09:31 - 2015-04-05 08:09 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-07-14 19:38 - 2014-03-29 11:15 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-07-13 23:10 - 2015-03-12 23:37 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:10 - 2015-03-12 23:37 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-05 12:08 - 2013-12-25 21:57 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-07-03 08:43 - 2013-11-01 14:42 - 130333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-07-02 09:43 - 2013-11-14 09:16 - 00000000 ____D C:\WINDOWS\SKB
2015-07-02 08:42 - 2015-06-04 15:30 - 00000000 ____D C:\WINDOWS\system32\log
2015-07-01 11:52 - 2015-01-02 16:47 - 00000000 ____D C:\Users\admin\Documents\estetika
2015-07-01 09:40 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF

==================== Files in the root of some directories =======

2014-11-09 17:26 - 2014-11-09 17:26 - 0000604 ____H () C:\Program Files (x86)\STLL Notifier
2015-07-04 01:33 - 2015-07-29 00:15 - 0000024 _____ () C:\Users\admin\AppData\Roaming\appdataFr25.bin
2013-11-01 18:27 - 2013-12-28 01:44 - 0045270 _____ () C:\Users\admin\AppData\Roaming\room_v3.dat
2013-10-31 02:32 - 2015-07-29 15:30 - 0000062 _____ () C:\Users\admin\AppData\Roaming\sp_data.sys
2014-05-31 16:49 - 2014-09-18 21:23 - 0007605 _____ () C:\Users\admin\AppData\Local\Resmon.ResmonCfg
2013-05-01 13:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================


Available physical RAM: 2516.16 MB
Total physical RAM: 3981.68 MB
Percentage of memory in use: 36%

==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\LingoRock.job => c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}\gtavkeygenerator.exe-1438096425347.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\PowerBuff.job => c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}\aba3.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\admin\SkyDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\admin\Desktop" je 3 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  KU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GarenaPlus] => C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9936176 2014-04-29] ()
  HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
  HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
  HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GoogleChromeAutoLaunch_35F47CA955883AC80F45949DB9B0CAE0] => "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
  HKU\S-1-5-21-3701647376-3946651554-1493002649-1003\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
  Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Gta5Keygen.lnk [2015-04-23]
  ShortcutTarget: Gta5Keygen.lnk -> C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}\Gta5Keygen.exe (No File)
  
  URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
  URLSearchHook: [S-1-5-21-3701647376-3946651554-1493002649-1003] ATTENTION ==> Default URLSearchHook is missing
  SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-27] (Thinkgood Co. Limited)
  
  S1 cmdHlp; System32\DRIVERS\cmdhlp.sys [X]
  S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
  
  :\Program Files (x86)\MiuiTab
  C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}
  2015-07-29 16:49 - 2015-07-29 16:50 - 00015518 _____ C:\Users\admin\Desktop\FRST.txt
  2015-07-29 16:47 - 2015-07-29 16:47 - 00112640 _____ (forum.viry.cz) C:\Users\admin\Desktop\FRSTLauncher.exe
  2015-07-29 15:28 - 2015-07-29 15:17 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
  2015-07-29 15:18 - 2015-07-29 15:30 - 00024232 _____ C:\zoek-results.log
  2015-07-29 15:17 - 2015-07-29 15:27 - 00000000 ____D C:\zoek_backup
  2015-07-29 15:16 - 2015-07-29 15:16 - 01308672 _____ C:\Users\admin\Downloads\zoek.exe
  2015-07-29 15:16 - 2015-07-29 15:16 - 01308672 _____ C:\Users\admin\Desktop\zoek.exe
  2015-07-29 10:19 - 2015-07-29 10:19 - 01222144 _____ C:\Users\admin\Downloads\RSITx64.exe
  2015-07-29 10:19 - 2015-07-29 10:19 - 00000000 ____D C:\rsit
  2015-07-29 10:19 - 2015-07-29 10:19 - 00000000 ____D C:\Program Files\trend micro
  2015-07-29 10:12 - 2015-07-29 10:13 - 00000000 ____D C:\ProgramData\vWinManProv
  2015-07-29 10:12 - 2015-07-29 10:12 - 00000000 ____D C:\Program Files (x86)\MiuiTab
  2015-07-29 10:12 - 2015-07-29 10:12 - 00000000 ____D C:\Program Files (x86)\FriendlyError
  2015-07-29 10:11 - 2015-07-29 15:47 - 00000000 ____D C:\ProgramData\MailUpdate
  2015-07-29 10:11 - 2015-07-29 10:11 - 00000000 ____D C:\Users\admin\AppData\Roaming\MailUpdate
  2015-07-29 01:33 - 2015-07-29 01:34 - 00000000 ____D C:\ProgramData\HWinManProH
  2015-07-29 00:56 - 2015-07-29 00:56 - 02248704 _____ C:\Users\admin\Downloads\adwcleaner_4.208.exe
  2015-07-29 00:15 - 2015-07-29 00:15 - 00000000 ____D C:\ProgramData\3WinManPro3
  2015-07-28 15:13 - 2015-07-28 15:13 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.EXIT
  2015-07-28 15:12 - 2015-07-28 15:13 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.TXT
  2015-07-28 00:11 - 2015-07-28 00:11 - 00030490 _____ C:\Users\admin\Documents\cc_20150728_001119.reg
  
  Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\WINDOWS\Tasks\LingoRock.job => c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}\gtavkeygenerator.exe-1438096425347.exe <==== ATTENTION
  Task: C:\WINDOWS\Tasks\PowerBuff.job => c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}\aba3.exe <==== ATTENTION
  c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}
  c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Scan Tool (x64) Version:28-07-2015
Ran by admin (2015-07-30 10:48:59) Run:1
Running from C:\Users\admin\Desktop
Loaded Profiles: admin & UpdatusUser (Available Profiles: admin & UpdatusUser)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

KU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GarenaPlus] => C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9936176 2014-04-29] ()
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GoogleChromeAutoLaunch_35F47CA955883AC80F45949DB9B0CAE0] => "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
HKU\S-1-5-21-3701647376-3946651554-1493002649-1003\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Gta5Keygen.lnk [2015-04-23]
ShortcutTarget: Gta5Keygen.lnk -> C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}\Gta5Keygen.exe (No File)

URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
URLSearchHook: [S-1-5-21-3701647376-3946651554-1493002649-1003] ATTENTION ==> Default URLSearchHook is missing
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-27] (Thinkgood Co. Limited)

S1 cmdHlp; System32\DRIVERS\cmdhlp.sys [X]
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

:\Program Files (x86)\MiuiTab
C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}
2015-07-29 16:49 - 2015-07-29 16:50 - 00015518 _____ C:\Users\admin\Desktop\FRST.txt
2015-07-29 16:47 - 2015-07-29 16:47 - 00112640 _____ (forum.viry.cz) C:\Users\admin\Desktop\FRSTLauncher.exe
2015-07-29 15:28 - 2015-07-29 15:17 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-29 15:18 - 2015-07-29 15:30 - 00024232 _____ C:\zoek-results.log
2015-07-29 15:17 - 2015-07-29 15:27 - 00000000 ____D C:\zoek_backup
2015-07-29 15:16 - 2015-07-29 15:16 - 01308672 _____ C:\Users\admin\Downloads\zoek.exe
2015-07-29 15:16 - 2015-07-29 15:16 - 01308672 _____ C:\Users\admin\Desktop\zoek.exe
2015-07-29 10:19 - 2015-07-29 10:19 - 01222144 _____ C:\Users\admin\Downloads\RSITx64.exe
2015-07-29 10:19 - 2015-07-29 10:19 - 00000000 ____D C:\rsit
2015-07-29 10:19 - 2015-07-29 10:19 - 00000000 ____D C:\Program Files\trend micro
2015-07-29 10:12 - 2015-07-29 10:13 - 00000000 ____D C:\ProgramData\vWinManProv
2015-07-29 10:12 - 2015-07-29 10:12 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-07-29 10:12 - 2015-07-29 10:12 - 00000000 ____D C:\Program Files (x86)\FriendlyError
2015-07-29 10:11 - 2015-07-29 15:47 - 00000000 ____D C:\ProgramData\MailUpdate
2015-07-29 10:11 - 2015-07-29 10:11 - 00000000 ____D C:\Users\admin\AppData\Roaming\MailUpdate
2015-07-29 01:33 - 2015-07-29 01:34 - 00000000 ____D C:\ProgramData\HWinManProH
2015-07-29 00:56 - 2015-07-29 00:56 - 02248704 _____ C:\Users\admin\Downloads\adwcleaner_4.208.exe
2015-07-29 00:15 - 2015-07-29 00:15 - 00000000 ____D C:\ProgramData\3WinManPro3
2015-07-28 15:13 - 2015-07-28 15:13 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.EXIT
2015-07-28 15:12 - 2015-07-28 15:13 - 00000003 _____ C:\WINDOWS\SysWOW64\HRUPPROG.TXT
2015-07-28 00:11 - 2015-07-28 00:11 - 00030490 _____ C:\Users\admin\Documents\cc_20150728_001119.reg

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\LingoRock.job => c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}\gtavkeygenerator.exe-1438096425347.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\PowerBuff.job => c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}\aba3.exe <==== ATTENTION
c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}
c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
KU\S-1-5-21-3701647376-3946651554-1493002649-1002\...\Run: [GarenaPlus] => C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9936176 2014-04-29] () => Error: No automatic fix found for this entry.
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value removed successfully
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57 => value removed successfully
HKU\S-1-5-21-3701647376-3946651554-1493002649-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_35F47CA955883AC80F45949DB9B0CAE0 => value removed successfully
HKU\S-1-5-21-3701647376-3946651554-1493002649-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\WAB Migrate => value not found.
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Gta5Keygen.lnk => moved successfully.
C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}\Gta5Keygen.exe not found.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\ => value removed successfully
Could not restore Default URLSearchHook.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91A9A1-01BA-4c81-863D-3BA0751E1419}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{1F91A9A1-01BA-4c81-863D-3BA0751E1419}" => key removed successfully
cmdHlp => service removed successfully
MBAMSwissArmy => service removed successfully
:\Program Files (x86)\MiuiTab => Error: No automatic fix found for this entry.
"C:\ProgramData\{e05e7855-112f-18c5-e05e-e7855112e154}" => File/Folder not found.
C:\Users\admin\Desktop\FRST.txt => moved successfully.
C:\Users\admin\Desktop\FRSTLauncher.exe => moved successfully.
C:\WINDOWS\zoek-delete.exe => moved successfully.
C:\zoek-results.log => moved successfully.
C:\zoek_backup => moved successfully.
C:\Users\admin\Downloads\zoek.exe => moved successfully.
C:\Users\admin\Desktop\zoek.exe => moved successfully.
C:\Users\admin\Downloads\RSITx64.exe => moved successfully.
C:\rsit => moved successfully.
C:\Program Files\trend micro => moved successfully.
C:\ProgramData\vWinManProv => moved successfully.
C:\Program Files (x86)\MiuiTab => moved successfully.
C:\Program Files (x86)\FriendlyError => moved successfully.
C:\ProgramData\MailUpdate => moved successfully.
C:\Users\admin\AppData\Roaming\MailUpdate => moved successfully.
C:\ProgramData\HWinManProH => moved successfully.
C:\Users\admin\Downloads\adwcleaner_4.208.exe => moved successfully.
C:\ProgramData\3WinManPro3 => moved successfully.
C:\WINDOWS\SysWOW64\HRUPPROG.EXIT => moved successfully.
C:\WINDOWS\SysWOW64\HRUPPROG.TXT => moved successfully.
C:\Users\admin\Documents\cc_20150728_001119.reg => moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => moved successfully.
C:\WINDOWS\Tasks\LingoRock.job => moved successfully.
C:\WINDOWS\Tasks\PowerBuff.job => moved successfully.
"c:\programdata\{34875aa5-01df-2698-3487-75aa501d6a94}" => File/Folder not found.
"c:\programdata\{4ee438fe-dc92-d989-4ee4-438fedc9e3fb}" => File/Folder not found.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 427.8 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 10:50:15 ====

Jak se chova PC??

Vyzera ze je to uz ok. Jediny problem je chrome prehliadac. Vkuse vyhadzuje nejaku reklamu, ak by sa stym dalo este nieco spravit. Inak dobra praca, dakujem a prajem pekny den

Odinstalujte Chrome

Smazte jeho profil C:\Users\admin\AppData\Local\Google\Chrome

Nainstalujte zpatky Chrome a napiste ci reklamy otravuji

Pomohlo to. Reklamy sú preč Vďaka ešte raz. Majte sa

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remove disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse