VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

smartinf (Chrome)

https://forum.viry.cz:443/viewtopic.php?t=145572

Stránka 1 z 2

smartinf (Chrome)

Napsal: 08 srp 2015 15:19
od Bedy
Zdravím, potřebuji pomoct s touto ruskou stránkou. Vždy při startu počítače se mi zapne sám Chrome s touto stránkou.
Vím jedině, že je to zákeřný vir. A bohužel mi pomocí touto stránkou ukradli steam a email. Kdo ví tak prosím pomocte jak se toho zbavit.
Stránka : smartinf.ru

Re: smartinf (Chrome)

Napsal: 08 srp 2015 17:01
od Rudy
Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

Re: smartinf (Chrome)

Napsal: 08 srp 2015 17:23
od Bedy
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015 01
Ran by Tomáš (administrator) on TOMÁŠ-PC (08-08-2015 18:20:49)
Running from C:\Users\Tomáš\Desktop
Loaded Profiles: Tomáš (Available Profiles: Tomáš)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Crawler Group) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13876952 2015-06-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-08-01] (AVAST Software)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1785244648-1398429057-3041791308-1000\...\Run: [vzmjfdyetx] => explorer "http://zhebnina.ru/?utm_source=uoua03&u ... 55FDB28D57" <===== ATTENTION
HKU\S-1-5-21-1785244648-1398429057-3041791308-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
Lsa: [Authentication Packages] msv1_0 relog_ap
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-01] (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1785244648-1398429057-3041791308-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1785244648-1398429057-3041791308-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-01] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-09] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-01] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\..\Interfaces\{D88F1138-A5A4-43A8-B3AB-1BC7503E2410}: [DhcpNameServer] 192.168.16.1

FireFox:
========
FF ProfilePath: C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-1785244648-1398429057-3041791308-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tomáš\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)
FF Extension: Avira Browser Safety - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default\Extensions\abs@avira.com [2015-01-18]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default\Extensions\iobitascsurfingprotection@iobit.com [2015-08-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-17]
FF Extension: No Name - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default\extensions\abs@avira.com [not found]

Chrome:
=======
CHR Profile: C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (YouTube) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Adblock Plus) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-08]
CHR Extension: (Google Search) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Gmail) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1785244648-1398429057-3041791308-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-12]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-12]
CHR HKLM-x32\...\Chrome\Extension: [ilamgbdaebkbpkkmfmmfbnaamkhijdek] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [ofdgafmdegfkhfdfkmllfefmcmcjllec] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pnooffjhclkocplopffdbcdghmiffhji] - https://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (CinemaP-1.8cV17.01) - C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Extensions\afpabppcibfahafilhkbbgfnlncppdnc [2015-01-17]
OPR Extension: (No Name) - C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh [2015-01-17]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-01] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [236840 2015-05-27] (EasyAntiCheat Ltd)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-07-14] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3305824 2015-05-05] (INCA Internet Co., Ltd.) [File not signed]
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026944 2015-08-08] (Enigma Software Group USA, LLC.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [3037520 2015-01-26] (Crawler Group)
S3 TryAndDecideService; C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [495936 2008-03-06] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-28] (Microsoft Corporation)
S3 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [579904 2015-04-30] (WiseCleaner.com)
S2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [X]
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2014-06-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-01] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-01] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-08-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-01] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-01] (AVAST Software)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
S3 cpuz137; C:\Users\TOM~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [26856 2015-08-08] (CPUID)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-29] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-06-28] (Intel Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2015-01-29] (Synaptics Incorporated)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2011-08-24] (Windows (R) Win 7 DDK provider)
U3 Winsock; no ImagePath
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14560 2015-05-08] (wisecleaner.com)
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-08 18:20 - 2015-08-08 18:21 - 00018374 _____ C:\Users\Tomáš\Desktop\FRST.txt
2015-08-08 18:15 - 2015-08-08 18:20 - 00000000 ____D C:\FRST
2015-08-08 18:15 - 2015-08-08 18:15 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Downloads\FRSTLauncher.exe
2015-08-08 18:11 - 2015-08-08 18:11 - 00003820 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1439050261
2015-08-08 18:11 - 2015-08-08 18:11 - 00001146 _____ C:\Users\Public\Desktop\Opera.lnk
2015-08-08 18:11 - 2015-08-08 18:11 - 00001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-08 18:10 - 2015-08-08 18:10 - 00703448 _____ (Opera Software) C:\Users\Tomáš\Desktop\Opera_NI_stable.exe
2015-08-08 18:07 - 2015-08-08 18:07 - 02169856 _____ (Farbar) C:\Users\Tomáš\Desktop\FRST64.exe
2015-08-08 15:37 - 2015-08-08 16:48 - 00000000 ____D C:\ProgramData\Spyware Terminator
2015-08-08 15:37 - 2015-08-08 15:38 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2015-08-08 15:37 - 2015-08-08 15:37 - 00001049 _____ C:\Users\Public\Desktop\Spyware Terminator 2015.lnk
2015-08-08 15:37 - 2015-08-08 15:37 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Spyware Terminator
2015-08-08 15:37 - 2015-08-08 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2015
2015-08-08 15:04 - 2015-08-08 15:04 - 00931408 _____ (Google Inc.) C:\Users\Tomáš\Desktop\ChromeSetup.exe
2015-08-08 14:30 - 2015-08-08 14:30 - 00000000 ____D C:\Windows\system32\log
2015-08-08 14:29 - 2015-08-08 14:29 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Elex-tech
2015-08-08 14:23 - 2015-08-08 15:47 - 00006027 _____ C:\Windows\WindowsUpdate.log
2015-08-08 14:23 - 2015-08-08 15:34 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Enigma Software Group
2015-08-08 14:23 - 2015-08-08 14:23 - 00003326 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2015-08-08 14:23 - 2015-08-08 14:23 - 00000000 _____ C:\autoexec.bat
2015-08-08 14:22 - 2015-08-08 14:23 - 00000000 ____D C:\sh4ldr
2015-08-08 14:22 - 2015-08-08 14:22 - 00000000 ____D C:\Program Files\Enigma Software Group
2015-08-08 14:18 - 2015-08-08 15:41 - 00000112 _____ C:\Windows\setupact.log
2015-08-08 14:18 - 2015-08-08 15:40 - 00010754 _____ C:\Windows\PFRO.log
2015-08-08 14:18 - 2015-08-08 14:19 - 00409752 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-08 14:18 - 2015-08-08 14:18 - 00000000 _____ C:\Windows\setuperr.log
2015-08-08 13:37 - 2015-08-08 14:16 - 00000000 ____D C:\3590F75ABA9E485486C100C1A9D4FF06Z...ZZ..Z...ZZZZ
2015-08-08 11:26 - 2015-08-08 11:26 - 00109696 _____ C:\Users\Tomáš\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-07 21:05 - 2015-08-07 21:05 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-07 21:05 - 2015-08-07 21:05 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-07 21:05 - 2015-08-07 21:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-07 21:05 - 2015-08-07 21:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-07 21:02 - 2015-08-07 21:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-07 21:02 - 2015-08-07 21:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-07 21:02 - 2015-08-07 21:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 25195008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 14452224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-07 21:00 - 2015-08-07 21:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-07 21:00 - 2015-08-07 21:00 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-07 21:00 - 2015-08-07 21:00 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-07 21:00 - 2015-08-07 21:00 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-07 21:00 - 2015-08-07 21:00 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-07 21:00 - 2015-08-07 21:00 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-08-07 20:58 - 2015-08-07 20:58 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-08-07 20:58 - 2015-08-07 20:58 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-08-07 20:58 - 2015-08-07 20:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-08-07 20:57 - 2015-08-07 20:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-07 20:57 - 2015-08-07 20:57 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-08-07 20:57 - 2015-08-07 20:57 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-07 20:50 - 2015-08-07 20:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-08-07 20:50 - 2015-08-07 20:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-08-07 20:49 - 2015-08-07 20:49 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-08-07 20:49 - 2015-08-07 20:49 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-07 20:49 - 2015-08-07 20:49 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-08-07 20:49 - 2015-08-07 20:49 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-08-07 20:49 - 2015-08-07 20:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-08-06 10:28 - 2015-08-06 10:35 - 00000000 ____D C:\Users\Tomáš\Desktop\Gta san andreas
2015-08-05 18:15 - 2015-08-06 10:37 - 00000000 ____D C:\Users\Public\Documents\GTA San Andreas User Files
2015-08-05 17:52 - 2015-08-05 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2015-08-05 13:59 - 2015-08-05 13:59 - 00003184 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-08-05 13:58 - 2015-08-05 13:58 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\ProductData
2015-08-05 13:56 - 2015-08-08 14:25 - 00002904 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Tomáš
2015-08-05 13:56 - 2015-08-07 21:05 - 00002192 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-08-05 13:56 - 2015-08-05 13:56 - 00002872 _____ C:\Windows\System32\Tasks\ASC8_SkipUac_Tomáš
2015-08-05 13:56 - 2015-08-05 13:56 - 00001239 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-08-05 13:56 - 2015-08-05 13:56 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2015-08-05 13:56 - 2015-08-05 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-08-05 13:56 - 2015-08-05 13:56 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-08-04 19:19 - 2015-08-04 19:19 - 00000000 __SHD C:\Users\Tomáš\Desktop\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B303şşşş09D}
2015-08-01 22:31 - 2015-08-01 23:11 - 00000000 __SHD C:\WISE_DISKSCRUBTEMP
2015-08-01 21:06 - 2015-08-01 21:06 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\vlc
2015-08-01 20:59 - 2015-08-01 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-01 20:58 - 2015-08-01 20:58 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-08-01 15:43 - 2015-07-14 11:44 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-08-01 15:42 - 2015-08-01 15:42 - 08712192 _____ C:\Users\Tomáš\Desktop\hamachi.msi
2015-08-01 11:59 - 2015-08-01 11:59 - 00000000 ____D C:\Users\Tomáš\AppData\Local\Вoйти в Интeрнет
2015-08-01 11:51 - 2015-08-01 11:51 - 00000000 ____D C:\Users\Tomáš\AppData\Local\Поиcк в Интeрнете
2015-08-01 11:48 - 2015-08-01 11:48 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\MailProducts
2015-08-01 11:34 - 2015-08-01 11:34 - 00000974 _____ C:\Users\Public\Desktop\Steam.lnk
2015-08-01 11:31 - 2015-08-01 11:31 - 01476720 _____ C:\Users\Tomáš\Desktop\SteamSetup.exe
2015-08-01 11:29 - 2015-08-01 11:29 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-08-01 11:29 - 2015-08-01 11:29 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-07-31 22:22 - 2015-07-03 08:49 - 127070192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2015-07-31 18:31 - 2015-08-08 12:51 - 00000000 ____D C:\Program Files (x86)\QuadCoreM2
2015-07-31 10:12 - 2015-08-01 08:27 - 00000000 ____D C:\Users\Tomáš\Documents\Bandicam
2015-07-31 10:12 - 2015-07-31 10:12 - 00000999 _____ C:\Users\Tomáš\Documents\Bandicam.lnk
2015-07-31 10:12 - 2015-07-31 10:12 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\BANDISOFT
2015-07-31 10:12 - 2015-07-31 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2015-07-31 10:11 - 2015-07-31 10:12 - 00000000 ____D C:\Program Files (x86)\Bandicam
2015-07-31 10:11 - 2015-07-31 10:11 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2015-07-29 21:22 - 2015-07-29 21:22 - 00000000 ____D C:\Users\Tomáš\Documents\TacticalIntervention
2015-07-29 20:56 - 2015-07-29 20:56 - 00000221 _____ C:\Users\Tomáš\Desktop\Tactical Intervention.url
2015-07-29 20:43 - 2015-07-29 20:45 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\.technic
2015-07-29 20:29 - 2015-08-05 14:16 - 00000000 ____D C:\Users\Tomáš\AppData\Local\LogMeIn Hamachi
2015-07-29 20:29 - 2015-07-29 20:29 - 00000000 ____D C:\Users\Tomáš\AppData\Local\LogMeIn
2015-07-29 20:29 - 2015-07-29 20:29 - 00000000 ____D C:\ProgramData\LogMeIn
2015-07-29 20:28 - 2015-07-29 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-07-29 20:28 - 2015-07-29 20:28 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-07-28 22:55 - 2015-07-28 22:55 - 00001954 _____ C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk
2015-07-28 22:55 - 2015-07-28 22:55 - 00000000 _____ C:\dfu.log
2015-07-22 11:08 - 2015-07-22 11:08 - 00000000 ____D C:\Users\Tomáš\AppData\Local\CEF
2015-07-14 11:44 - 2015-07-14 11:44 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\Drivers\hamachi.sys
2015-07-09 19:12 - 2015-08-01 21:07 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2015-07-09 19:09 - 2015-07-09 19:10 - 04994408 _____ (Gaijin Entertainment ) C:\Users\Tomáš\Desktop\wt_launcher_1.0.1.538.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-08 18:11 - 2015-01-17 12:48 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-08 17:46 - 2014-06-28 18:50 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-08 17:31 - 2014-06-28 18:15 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-08 15:52 - 2009-07-14 06:45 - 00023904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-08 15:52 - 2009-07-14 06:45 - 00023904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-08 15:45 - 2015-01-17 14:12 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-08-08 15:41 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-08 15:10 - 2014-06-28 18:16 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-08 14:32 - 2015-06-01 17:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jed's Half-Life Model Viewer 1.3.6
2015-08-08 14:32 - 2014-06-28 20:35 - 00000000 ____D C:\Users\Tomáš\Desktop\Tom
2015-08-08 14:26 - 2015-05-30 23:04 - 00000000 ____D C:\Program Files (x86)\WaveL Pic2Pic Pro
2015-08-08 14:26 - 2014-06-28 18:05 - 00000000 ____D C:\Program Files\Tracker Software
2015-08-08 14:25 - 2015-06-24 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-08-08 14:25 - 2014-06-28 18:53 - 00000000 ____D C:\ProgramData\ProductData
2015-08-08 14:23 - 2014-06-28 17:16 - 00000000 ____D C:\Users\Tomáš
2015-08-08 14:21 - 2015-01-09 20:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-08-08 13:37 - 2015-01-10 20:41 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\TS3Client
2015-08-08 09:48 - 2015-05-08 09:37 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Wise Care 365
2015-08-08 09:13 - 2010-11-21 11:27 - 00669116 _____ C:\Windows\system32\perfh005.dat
2015-08-08 09:13 - 2010-11-21 11:27 - 00141744 _____ C:\Windows\system32\perfc005.dat
2015-08-08 09:13 - 2009-07-14 07:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-08 09:08 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-07 23:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-06 09:31 - 2015-01-27 15:56 - 76824576 _____ C:\Windows\system32\config\SOFTWARE.iodefrag
2015-08-06 09:31 - 2015-01-27 15:56 - 00290816 _____ C:\Windows\system32\config\DEFAULT.iodefrag
2015-08-06 09:31 - 2015-01-27 15:56 - 00061440 _____ C:\Windows\system32\config\SAM.iodefrag
2015-08-06 09:31 - 2015-01-27 15:56 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag
2015-08-06 09:31 - 2014-06-28 22:41 - 76824576 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-08-06 09:31 - 2014-06-28 22:41 - 00290816 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-08-06 09:31 - 2014-06-28 22:41 - 00061440 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-08-06 09:31 - 2014-06-28 22:41 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-08-05 17:43 - 2015-05-09 09:10 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-08-05 14:49 - 2015-06-01 17:42 - 00007607 _____ C:\Users\Tomáš\AppData\Local\Resmon.ResmonCfg
2015-08-05 13:57 - 2014-06-28 18:52 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\IObit
2015-08-04 13:48 - 2015-01-10 20:41 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-02 01:28 - 2014-09-01 10:18 - 00000365 _____ C:\Users\Tomáš\AppData\Roaming\ACJSQYOB
2015-08-01 20:45 - 2015-01-11 11:59 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\.minecraft
2015-08-01 11:52 - 2015-01-17 15:51 - 00000270 __RSH C:\ProgramData\ntuser.pol
2015-08-01 11:50 - 2014-06-28 17:18 - 00001434 _____ C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-01 11:48 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-01 11:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-08-01 11:34 - 2015-01-09 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-01 11:29 - 2015-01-17 14:12 - 01048856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00447944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00150672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-08-01 11:26 - 2015-01-09 22:18 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-01 09:00 - 2015-05-08 09:44 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2015-08-01 07:52 - 2015-01-11 11:50 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-31 15:47 - 2015-01-19 23:37 - 00000000 ____D C:\Games
2015-07-30 11:10 - 2015-01-10 14:43 - 00000219 _____ C:\Users\Tomáš\Desktop\Counter-Strike Global Offensive.url
2015-07-27 13:59 - 2015-05-09 09:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-27 11:26 - 2015-05-23 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopCD
2015-07-26 19:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2015-07-26 19:24 - 2015-05-30 18:45 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Sony
2015-07-26 00:59 - 2014-06-28 18:44 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Skype
2015-07-19 11:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-16 06:26 - 2014-06-28 18:15 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-12 22:40 - 2015-05-30 18:24 - 00000000 ____D C:\Users\Tomáš\AppData\Local\osu!

==================== Files in the root of some directories =======

2014-09-01 10:18 - 2015-08-02 01:28 - 0000365 _____ () C:\Users\Tomáš\AppData\Roaming\ACJSQYOB
2015-05-01 22:43 - 2015-05-01 22:43 - 0000037 ___SH () C:\Users\Tomáš\AppData\Local\20986331705021ca58edc424.96250074
2015-02-18 12:13 - 2015-02-18 12:14 - 0004608 _____ () C:\Users\Tomáš\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-01 17:42 - 2015-08-05 14:49 - 0007607 _____ () C:\Users\Tomáš\AppData\Local\Resmon.ResmonCfg
2014-06-28 17:51 - 2014-06-28 17:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Tomáš\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-02 21:17

==================== End of log ============================

Re: smartinf (Chrome)

Napsal: 08 srp 2015 18:46
od Rudy
Teď spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: smartinf (Chrome)

Napsal: 08 srp 2015 19:26
od Bedy
# AdwCleaner v4.208 - Log vytvořen 08/08/2015 v 20:17:00
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-08-01.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Tomáš - TOMÁŠ-PC
# Spuštěno z : C:\Users\Tomáš\Desktop\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****

Služba Smazáno : sp_rsdrv2

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files (x86)\PricceLess
Složka Smazáno : C:\Program Files (x86)\PriceLeess
Složka Smazáno : C:\Program Files (x86)\YouttUbeAdBLockE
Složka Smazáno : C:\Users\Tomáš\AppData\Roaming\Elex-tech
Složka Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Extensions\afpabppcibfahafilhkbbgfnlncppdnc
Složka Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_afpabppcibfahafilhkbbgfnlncppdnc_0.localstorage
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_afpabppcibfahafilhkbbgfnlncppdnc_0.localstorage-journal
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\databases\chrome-extension_afpabppcibfahafilhkbbgfnlncppdnc_0
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Local Extension Settings\afpabppcibfahafilhkbbgfnlncppdnc
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_akaelkiagnbfcccfnmbimdbplecgbikh_0.localstorage
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\databases\chrome-extension_akaelkiagnbfcccfnmbimdbplecgbikh_0
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\Opera Software\Opera Stable\Local Extension Settings\akaelkiagnbfcccfnmbimdbplecgbikh
Soubor Smazáno : C:\Windows\System32\log\iSafeKrnlCall.log
Soubor Smazáno : C:\Users\Tomáš\AppData\Roaming\ACJSQYOB

***** [ Naplánované úlohy ] *****

Úloha Smazáno : amiupdaterExd
Úloha Smazáno : amiupdaterExi

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
Klíč Smazáno : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
Klíč Smazáno : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Klíč Smazáno : HKLM\SOFTWARE\1902769c-839a-4f71-9258-779a731ceefe
Klíč Smazáno : HKLM\SOFTWARE\32d5db45-ce12-4880-8626-796c3b887b2e
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{be0fb33b}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905563}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655985529}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906663}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666986629}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{230332DF-D235-47EE-BC42-60860EF144CD}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905563}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655985529}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906663}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666986629}
Klíč Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}
Klíč Smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909

Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v


-\\ Google Chrome v44.0.2403.130

[C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Homepage] : management","nativeMessaging","searchProvider","startupPages","storage","tabs","webRequest","webRequestBlocking"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"manifest_permissions":[],"scriptable_host":["*://*.ask.com/

-\\ Opera v31.0.1889.99


*************************

AdwCleaner[R0].txt - [5415 bytů] - [08/08/2015 20:15:23]
AdwCleaner[S0].txt - [4710 bytů] - [08/08/2015 20:17:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4768 bytů] ##########

Re: smartinf (Chrome)

Napsal: 08 srp 2015 20:20
od Rudy
Dejte nový log FRST.

Re: smartinf (Chrome)

Napsal: 08 srp 2015 20:47
od Bedy
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015 01
Ran by Tomáš (administrator) on TOMÁŠ-PC (08-08-2015 21:45:56)
Running from C:\Users\Tomáš\Desktop
Loaded Profiles: Tomáš (Available Profiles: Tomáš)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Crawler Group) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13876952 2015-06-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-08-01] (AVAST Software)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1785244648-1398429057-3041791308-1000\...\Run: [vzmjfdyetx] => explorer "http://zhebnina.ru/?utm_source=uoua03&u ... 55FDB28D57" <===== ATTENTION
HKU\S-1-5-21-1785244648-1398429057-3041791308-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
Lsa: [Authentication Packages] msv1_0 relog_ap
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-01] (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1785244648-1398429057-3041791308-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-01] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-09] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-01] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.16.1
Tcpip\..\Interfaces\{D88F1138-A5A4-43A8-B3AB-1BC7503E2410}: [DhcpNameServer] 192.168.16.1

FireFox:
========
FF ProfilePath: C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-1785244648-1398429057-3041791308-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tomáš\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)
FF Extension: Avira Browser Safety - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default\Extensions\abs@avira.com [2015-01-18]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default\Extensions\iobitascsurfingprotection@iobit.com [2015-08-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-17]
FF Extension: No Name - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\6VjxELl7.default\extensions\abs@avira.com [not found]

Chrome:
=======
CHR Profile: C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (YouTube) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Adblock Plus) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-08]
CHR Extension: (Google Search) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Gmail) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-12]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-12]
CHR HKLM-x32\...\Chrome\Extension: [ilamgbdaebkbpkkmfmmfbnaamkhijdek] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [ofdgafmdegfkhfdfkmllfefmcmcjllec] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pnooffjhclkocplopffdbcdghmiffhji] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-01] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [236840 2015-05-27] (EasyAntiCheat Ltd)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-07-14] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3305824 2015-05-05] (INCA Internet Co., Ltd.) [File not signed]
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026944 2015-08-08] (Enigma Software Group USA, LLC.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [3037520 2015-01-26] (Crawler Group)
S3 TryAndDecideService; C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [495936 2008-03-06] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-28] (Microsoft Corporation)
S3 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [579904 2015-04-30] (WiseCleaner.com)
S2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [X]
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2014-06-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-01] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-01] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-08-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-01] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-01] (AVAST Software)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
S3 cpuz137; C:\Users\TOM~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [26856 2015-08-08] (CPUID)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-29] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-06-28] (Intel Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2015-01-29] (Synaptics Incorporated)
S2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2011-08-24] (Windows (R) Win 7 DDK provider)
U3 Winsock; no ImagePath
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14560 2015-05-08] (wisecleaner.com)
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-08 21:45 - 2015-08-08 21:45 - 00068317 _____ C:\Users\Tomáš\Desktop\FRST3.txt
2015-08-08 21:45 - 2015-08-08 21:45 - 00017772 _____ C:\Users\Tomáš\Desktop\FRST.txt
2015-08-08 21:44 - 2015-08-08 21:45 - 00034264 _____ C:\Users\Tomáš\Desktop\Addition.txt
2015-08-08 21:43 - 2015-08-08 21:43 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Downloads\FRSTLauncher (4).exe
2015-08-08 21:42 - 2015-08-08 21:42 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Downloads\FRSTLauncher (3).exe
2015-08-08 21:42 - 2015-08-08 21:42 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Downloads\FRSTLauncher (2).exe
2015-08-08 21:42 - 2015-08-08 21:42 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Downloads\FRSTLauncher (1).exe
2015-08-08 20:15 - 2015-08-08 20:17 - 00000000 ____D C:\AdwCleaner
2015-08-08 20:09 - 2015-08-08 20:15 - 00072003 _____ C:\Users\Tomáš\Desktop\hesla.txt
2015-08-08 18:15 - 2015-08-08 21:45 - 00000000 ____D C:\FRST
2015-08-08 18:15 - 2015-08-08 18:15 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Downloads\FRSTLauncher.exe
2015-08-08 18:11 - 2015-08-08 18:11 - 00003820 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1439050261
2015-08-08 18:11 - 2015-08-08 18:11 - 00001146 _____ C:\Users\Public\Desktop\Opera.lnk
2015-08-08 18:11 - 2015-08-08 18:11 - 00001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-08 18:10 - 2015-08-08 18:10 - 00703448 _____ (Opera Software) C:\Users\Tomáš\Desktop\Opera_NI_stable.exe
2015-08-08 18:07 - 2015-08-08 18:07 - 02169856 _____ (Farbar) C:\Users\Tomáš\Desktop\FRST64.exe
2015-08-08 15:37 - 2015-08-08 16:48 - 00000000 ____D C:\ProgramData\Spyware Terminator
2015-08-08 15:37 - 2015-08-08 15:38 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2015-08-08 15:37 - 2015-08-08 15:37 - 00001049 _____ C:\Users\Public\Desktop\Spyware Terminator 2015.lnk
2015-08-08 15:37 - 2015-08-08 15:37 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Spyware Terminator
2015-08-08 15:37 - 2015-08-08 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2015
2015-08-08 15:04 - 2015-08-08 15:04 - 00931408 _____ (Google Inc.) C:\Users\Tomáš\Desktop\ChromeSetup.exe
2015-08-08 14:30 - 2015-08-08 20:17 - 00000000 ____D C:\Windows\system32\log
2015-08-08 14:23 - 2015-08-08 20:23 - 00009346 _____ C:\Windows\WindowsUpdate.log
2015-08-08 14:23 - 2015-08-08 15:34 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Enigma Software Group
2015-08-08 14:23 - 2015-08-08 14:23 - 00003326 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2015-08-08 14:23 - 2015-08-08 14:23 - 00000000 _____ C:\autoexec.bat
2015-08-08 14:22 - 2015-08-08 14:23 - 00000000 ____D C:\sh4ldr
2015-08-08 14:22 - 2015-08-08 14:22 - 00000000 ____D C:\Program Files\Enigma Software Group
2015-08-08 14:18 - 2015-08-08 20:18 - 00000168 _____ C:\Windows\setupact.log
2015-08-08 14:18 - 2015-08-08 15:40 - 00010754 _____ C:\Windows\PFRO.log
2015-08-08 14:18 - 2015-08-08 14:19 - 00409752 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-08 14:18 - 2015-08-08 14:18 - 00000000 _____ C:\Windows\setuperr.log
2015-08-08 13:37 - 2015-08-08 14:16 - 00000000 ____D C:\3590F75ABA9E485486C100C1A9D4FF06Z...ZZ..Z...ZZZZ
2015-08-08 11:26 - 2015-08-08 11:26 - 00109696 _____ C:\Users\Tomáš\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-07 21:05 - 2015-08-07 21:05 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-07 21:05 - 2015-08-07 21:05 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-07 21:05 - 2015-08-07 21:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-07 21:05 - 2015-08-07 21:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-07 21:05 - 2015-08-07 21:05 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-07 21:04 - 2015-08-07 21:04 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-07 21:02 - 2015-08-07 21:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-07 21:02 - 2015-08-07 21:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-07 21:02 - 2015-08-07 21:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-07 21:02 - 2015-08-07 21:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-07 21:02 - 2015-08-07 21:02 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-08-07 21:01 - 2015-08-07 21:01 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 25195008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 14452224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-07 21:00 - 2015-08-07 21:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-07 21:00 - 2015-08-07 21:00 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-07 21:00 - 2015-08-07 21:00 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-07 21:00 - 2015-08-07 21:00 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-07 21:00 - 2015-08-07 21:00 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-07 21:00 - 2015-08-07 21:00 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-07 21:00 - 2015-08-07 21:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-07 21:00 - 2015-08-07 21:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-08-07 20:58 - 2015-08-07 20:58 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-08-07 20:58 - 2015-08-07 20:58 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-08-07 20:58 - 2015-08-07 20:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-08-07 20:58 - 2015-08-07 20:58 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-08-07 20:57 - 2015-08-07 20:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-07 20:57 - 2015-08-07 20:57 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-08-07 20:57 - 2015-08-07 20:57 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-07 20:54 - 2015-08-07 20:54 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-07 20:52 - 2015-08-07 20:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-07 20:52 - 2015-08-07 20:52 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-07 20:50 - 2015-08-07 20:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-08-07 20:50 - 2015-08-07 20:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-08-07 20:49 - 2015-08-07 20:49 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-08-07 20:49 - 2015-08-07 20:49 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-07 20:49 - 2015-08-07 20:49 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-08-07 20:49 - 2015-08-07 20:49 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-08-07 20:49 - 2015-08-07 20:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-08-07 20:49 - 2015-08-07 20:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-08-06 10:28 - 2015-08-06 10:35 - 00000000 ____D C:\Users\Tomáš\Desktop\Gta san andreas
2015-08-05 18:15 - 2015-08-06 10:37 - 00000000 ____D C:\Users\Public\Documents\GTA San Andreas User Files
2015-08-05 17:52 - 2015-08-05 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2015-08-05 13:59 - 2015-08-05 13:59 - 00003184 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-08-05 13:58 - 2015-08-05 13:58 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\ProductData
2015-08-05 13:56 - 2015-08-08 14:25 - 00002904 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Tomáš
2015-08-05 13:56 - 2015-08-07 21:05 - 00002192 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-08-05 13:56 - 2015-08-05 13:56 - 00002872 _____ C:\Windows\System32\Tasks\ASC8_SkipUac_Tomáš
2015-08-05 13:56 - 2015-08-05 13:56 - 00001239 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-08-05 13:56 - 2015-08-05 13:56 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2015-08-05 13:56 - 2015-08-05 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-08-05 13:56 - 2015-08-05 13:56 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-08-04 19:19 - 2015-08-04 19:19 - 00000000 __SHD C:\Users\Tomáš\Desktop\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B303şşşş09D}
2015-08-01 22:31 - 2015-08-01 23:11 - 00000000 __SHD C:\WISE_DISKSCRUBTEMP
2015-08-01 21:06 - 2015-08-01 21:06 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\vlc
2015-08-01 20:59 - 2015-08-01 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-01 20:58 - 2015-08-01 20:58 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-08-01 15:43 - 2015-07-14 11:44 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-08-01 15:42 - 2015-08-01 15:42 - 08712192 _____ C:\Users\Tomáš\Desktop\hamachi.msi
2015-08-01 11:59 - 2015-08-01 11:59 - 00000000 ____D C:\Users\Tomáš\AppData\Local\Вoйти в Интeрнет
2015-08-01 11:51 - 2015-08-01 11:51 - 00000000 ____D C:\Users\Tomáš\AppData\Local\Поиcк в Интeрнете
2015-08-01 11:48 - 2015-08-01 11:48 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\MailProducts
2015-08-01 11:34 - 2015-08-01 11:34 - 00000974 _____ C:\Users\Public\Desktop\Steam.lnk
2015-08-01 11:31 - 2015-08-01 11:31 - 01476720 _____ C:\Users\Tomáš\Desktop\SteamSetup.exe
2015-08-01 11:29 - 2015-08-01 11:29 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-08-01 11:29 - 2015-08-01 11:29 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-07-31 22:22 - 2015-07-03 08:49 - 127070192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2015-07-31 18:31 - 2015-08-08 12:51 - 00000000 ____D C:\Program Files (x86)\QuadCoreM2
2015-07-31 10:12 - 2015-08-01 08:27 - 00000000 ____D C:\Users\Tomáš\Documents\Bandicam
2015-07-31 10:12 - 2015-07-31 10:12 - 00000999 _____ C:\Users\Tomáš\Documents\Bandicam.lnk
2015-07-31 10:12 - 2015-07-31 10:12 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\BANDISOFT
2015-07-31 10:12 - 2015-07-31 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2015-07-31 10:11 - 2015-07-31 10:12 - 00000000 ____D C:\Program Files (x86)\Bandicam
2015-07-31 10:11 - 2015-07-31 10:11 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2015-07-29 21:22 - 2015-07-29 21:22 - 00000000 ____D C:\Users\Tomáš\Documents\TacticalIntervention
2015-07-29 20:56 - 2015-07-29 20:56 - 00000221 _____ C:\Users\Tomáš\Desktop\Tactical Intervention.url
2015-07-29 20:43 - 2015-07-29 20:45 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\.technic
2015-07-29 20:29 - 2015-08-05 14:16 - 00000000 ____D C:\Users\Tomáš\AppData\Local\LogMeIn Hamachi
2015-07-29 20:29 - 2015-07-29 20:29 - 00000000 ____D C:\Users\Tomáš\AppData\Local\LogMeIn
2015-07-29 20:29 - 2015-07-29 20:29 - 00000000 ____D C:\ProgramData\LogMeIn
2015-07-29 20:28 - 2015-07-29 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-07-29 20:28 - 2015-07-29 20:28 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-07-28 22:55 - 2015-07-28 22:55 - 00001954 _____ C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk
2015-07-28 22:55 - 2015-07-28 22:55 - 00000000 _____ C:\dfu.log
2015-07-22 11:08 - 2015-07-22 11:08 - 00000000 ____D C:\Users\Tomáš\AppData\Local\CEF
2015-07-14 11:44 - 2015-07-14 11:44 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\Drivers\hamachi.sys
2015-07-09 19:12 - 2015-08-01 21:07 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2015-07-09 19:09 - 2015-07-09 19:10 - 04994408 _____ (Gaijin Entertainment ) C:\Users\Tomáš\Desktop\wt_launcher_1.0.1.538.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-08 21:46 - 2014-06-28 18:50 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-08 21:31 - 2014-06-28 18:15 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-08 20:28 - 2009-07-14 06:45 - 00023904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-08 20:28 - 2009-07-14 06:45 - 00023904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-08 20:21 - 2015-01-17 14:12 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-08-08 20:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-08 18:11 - 2015-01-17 12:48 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-08 15:10 - 2014-06-28 18:16 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-08 14:32 - 2015-06-01 17:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jed's Half-Life Model Viewer 1.3.6
2015-08-08 14:32 - 2014-06-28 20:35 - 00000000 ____D C:\Users\Tomáš\Desktop\Tom
2015-08-08 14:26 - 2015-05-30 23:04 - 00000000 ____D C:\Program Files (x86)\WaveL Pic2Pic Pro
2015-08-08 14:26 - 2014-06-28 18:05 - 00000000 ____D C:\Program Files\Tracker Software
2015-08-08 14:25 - 2015-06-24 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-08-08 14:25 - 2014-06-28 18:53 - 00000000 ____D C:\ProgramData\ProductData
2015-08-08 14:23 - 2014-06-28 17:16 - 00000000 ____D C:\Users\Tomáš
2015-08-08 14:21 - 2015-01-09 20:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-08-08 13:37 - 2015-01-10 20:41 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\TS3Client
2015-08-08 09:48 - 2015-05-08 09:37 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Wise Care 365
2015-08-08 09:13 - 2010-11-21 11:27 - 00669116 _____ C:\Windows\system32\perfh005.dat
2015-08-08 09:13 - 2010-11-21 11:27 - 00141744 _____ C:\Windows\system32\perfc005.dat
2015-08-08 09:13 - 2009-07-14 07:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-08 09:08 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-07 23:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-06 09:31 - 2015-01-27 15:56 - 76824576 _____ C:\Windows\system32\config\SOFTWARE.iodefrag
2015-08-06 09:31 - 2015-01-27 15:56 - 00290816 _____ C:\Windows\system32\config\DEFAULT.iodefrag
2015-08-06 09:31 - 2015-01-27 15:56 - 00061440 _____ C:\Windows\system32\config\SAM.iodefrag
2015-08-06 09:31 - 2015-01-27 15:56 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag
2015-08-06 09:31 - 2014-06-28 22:41 - 76824576 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-08-06 09:31 - 2014-06-28 22:41 - 00290816 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-08-06 09:31 - 2014-06-28 22:41 - 00061440 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-08-06 09:31 - 2014-06-28 22:41 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-08-05 17:43 - 2015-05-09 09:10 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-08-05 14:49 - 2015-06-01 17:42 - 00007607 _____ C:\Users\Tomáš\AppData\Local\Resmon.ResmonCfg
2015-08-05 13:57 - 2014-06-28 18:52 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\IObit
2015-08-04 13:48 - 2015-01-10 20:41 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-01 20:45 - 2015-01-11 11:59 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\.minecraft
2015-08-01 11:52 - 2015-01-17 15:51 - 00000270 __RSH C:\ProgramData\ntuser.pol
2015-08-01 11:50 - 2014-06-28 17:18 - 00001434 _____ C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-01 11:48 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-01 11:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-08-01 11:34 - 2015-01-09 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-01 11:29 - 2015-01-17 14:12 - 01048856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00447944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00150672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-08-01 11:29 - 2015-01-17 14:12 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-08-01 11:26 - 2015-01-09 22:18 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-01 09:00 - 2015-05-08 09:44 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2015-08-01 07:52 - 2015-01-11 11:50 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-31 15:47 - 2015-01-19 23:37 - 00000000 ____D C:\Games
2015-07-30 11:10 - 2015-01-10 14:43 - 00000219 _____ C:\Users\Tomáš\Desktop\Counter-Strike Global Offensive.url
2015-07-27 13:59 - 2015-05-09 09:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-27 11:26 - 2015-05-23 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopCD
2015-07-26 19:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2015-07-26 19:24 - 2015-05-30 18:45 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Sony
2015-07-26 00:59 - 2014-06-28 18:44 - 00000000 ____D C:\Users\Tomáš\AppData\Roaming\Skype
2015-07-19 11:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-16 06:26 - 2014-06-28 18:15 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-12 22:40 - 2015-05-30 18:24 - 00000000 ____D C:\Users\Tomáš\AppData\Local\osu!

==================== Files in the root of some directories =======

2015-05-01 22:43 - 2015-05-01 22:43 - 0000037 ___SH () C:\Users\Tomáš\AppData\Local\20986331705021ca58edc424.96250074
2015-02-18 12:13 - 2015-02-18 12:14 - 0004608 _____ () C:\Users\Tomáš\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-01 17:42 - 2015-08-05 14:49 - 0007607 _____ () C:\Users\Tomáš\AppData\Local\Resmon.ResmonCfg
2014-06-28 17:51 - 2014-06-28 17:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Tomáš\AppData\Local\Temp\avgnt.exe
C:\Users\Tomáš\AppData\Local\Temp\Quarantine.exe
C:\Users\Tomáš\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-02 21:17

==================== End of log ============================

Re: smartinf (Chrome)

Napsal: 08 srp 2015 21:15
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKU\S-1-5-21-1785244648-1398429057-3041791308-1000\...\Run: [vzmjfdyetx] => explorer "http://zhebnina.ru/?utm_source=uoua03&u ... 55FDB28D57" <===== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\ProgramData\DP45977C.lfl
C:\Users\Tomáš\AppData\Local\Temp
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Doporučuji odinstalovat Advanced System Care. Tímto programem si může laik poškodit operační systém.

Re: smartinf (Chrome)

Napsal: 08 srp 2015 21:45
od Bedy
Fix result of Farbar Recovery Scan Tool (x64) Version:08-08-2015 01
Ran by Tomáš (2015-08-08 22:44:57) Run:1
Running from C:\Users\Tomáš\Desktop
Loaded Profiles: Tomáš (Available Profiles: Tomáš)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKUS-1-5-21-1785244648-1398429057-3041791308-1000...Run [vzmjfdyetx] = explorer httpzhebnina.ruutm_source=uoua03&utm_content=d785e288698b3d2f264f147424f85cdf&utm_term=BE184511A9953082F9F75055FDB28D57 ===== ATTENTION
GroupPolicy Group Policy on Chrome detected ======= ATTENTION
CHR HKLMSOFTWAREPoliciesGoogle Policy restriction ======= ATTENTION
HKLMSOFTWAREPoliciesMicrosoftInternet Explorer Policy restriction ======= ATTENTION
SearchScopes HKU.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes HKUS-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes HKUS-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO Skype Click to Call for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - CProgram Files (x86)SkypeToolbarsInternet Explorer x64skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
CProgram Files (x86)SkypeToolbars
BHO-x32 Skype Click to Call for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - CProgram Files (x86)SkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - CProgram Files (x86)SkypeToolbarsInternet Explorer x64skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32 skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - CProgram Files (x86)SkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FF Plugin @microsoft.comGENUINE - disabled [No File]
FF Plugin-x32 @microsoft.comGENUINE - disabled [No File]
R2 c2cautoupdatesvc; CProgram Files (x86)SkypeToolbarsAutoUpdateSkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; CProgram Files (x86)SkypeToolbarsPNRSvcSkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
CWindowsTasksGoogleUpdateTaskMachineUA.job
CWindowsSystem32TasksGoogleUpdateTaskMachineUA
CProgramDataDP45977C.lfl
CUsersTomášAppDataLocalTemp
End
*****************

HKUS-1-5-21-1785244648-1398429057-3041791308-1000...Run [vzmjfdyetx] = explorer httpzhebnina.ruutm_source=uoua03&utm_content=d785e288698b3d2f264f147424f85cdf&utm_term=BE184511A9953082F9F75055FDB28D57 ===== ATTENTION => Error: No automatic fix found for this entry.
GroupPolicy Group Policy on Chrome detected ======= ATTENTION => Error: No automatic fix found for this entry.
CHR HKLMSOFTWAREPoliciesGoogle Policy restriction ======= ATTENTION => Error: No automatic fix found for this entry.
HKLMSOFTWAREPoliciesMicrosoftInternet Explorer Policy restriction ======= ATTENTION => Error: No automatic fix found for this entry.
SearchScopes HKU.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = => Error: No automatic fix found for this entry.
SearchScopes HKUS-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = => Error: No automatic fix found for this entry.
SearchScopes HKUS-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = => Error: No automatic fix found for this entry.
BHO Skype Click to Call for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - CProgram Files (x86)SkypeToolbarsInternet Explorer x64skypeieplugin.dll [2015-05-01] (Microsoft Corporation) => Error: No automatic fix found for this entry.
CProgram Files (x86)SkypeToolbars => Error: No automatic fix found for this entry.
BHO-x32 Skype Click to Call for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - CProgram Files (x86)SkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) => Error: No automatic fix found for this entry.
Handler skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - CProgram Files (x86)SkypeToolbarsInternet Explorer x64skypeieplugin.dll [2015-05-01] (Microsoft Corporation) => Error: No automatic fix found for this entry.
Handler-x32 skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - CProgram Files (x86)SkypeToolbarsInternet ExplorerSkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) => Error: No automatic fix found for this entry.
FF Plugin @microsoft.comGENUINE - disabled [No File] => Error: No automatic fix found for this entry.
FF Plugin-x32 @microsoft.comGENUINE - disabled [No File] => Error: No automatic fix found for this entry.
c2cautoupdatesvc => Service stopped successfully.
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => Service stopped successfully.
c2cpnrsvc => service removed successfully
CWindowsTasksGoogleUpdateTaskMachineUA.job => Error: No automatic fix found for this entry.
CWindowsSystem32TasksGoogleUpdateTaskMachineUA => Error: No automatic fix found for this entry.
CProgramDataDP45977C.lfl => Error: No automatic fix found for this entry.
CUsersTomášAppDataLocalTemp => Error: No automatic fix found for this entry.

==== End of Fixlog 22:44:57 ====

Re: smartinf (Chrome)

Napsal: 08 srp 2015 21:52
od Rudy
Nějak to nemazalo. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Re: smartinf (Chrome)

Napsal: 08 srp 2015 22:57
od Bedy
Jaký log, máte na mysli? FRST? V tomto programu, co jste mi poslal, se mi žádný log nezobrazuje či nenabízí.

Re: smartinf (Chrome)

Napsal: 09 srp 2015 10:43
od Rudy
Log by se měl otevřít ihned po skenu a vypadá takto: http://forum.viry.cz/viewtopic.php?f=13 ... 4#p1410175 .

Re: smartinf (Chrome)

Napsal: 09 srp 2015 14:09
od Bedy
zkoušel jsem další sken a zase nic, ani na ploše nic..

Re: smartinf (Chrome)

Napsal: 09 srp 2015 15:54
od Rudy
Koukněte se do adresáře MBAM, musí tam být. Všichni mi ho zatím sem dali.

Re: smartinf (Chrome)

Napsal: 10 srp 2015 14:44
od Bedy
Konečně... :D

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10.8.2015
Čas skenování: 11:22
Protokol: mbam.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.08.10.02
Databáze rootkitů: v2015.08.06.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Tomáš

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 517445
Uplynulý čas: 4 hod, 19 min, 39 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
Trojan.Agent.W, C:\Windows\Setup\SCRIPTS\Windows7Loader.exe, , [ca60ee196d1ec4724588f30ada2a748c],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz