VIRY.CZ

Zdravím mam problém nejde to odstranit pořad se to vraci a adw cleaner to asi neodstraní Zakeřný ExtTag,ExtTags.Findit.xml prosím pomoc

Rsit :

Logfile of random's system information tool 1.10 (written by random/random)
Run by Freizi at 2015-08-25 14:02:40
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 54 GB (11%) free of 500 GB
Total RAM: 4094 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:02:43, on 25.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe
C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Overwolf\Overwolf.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\baidu\pps.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Common Files\Overwolf\0.87.58.0\OverwolfHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Overwolf\0.87.58.0\OverwolfBrowser.exe
C:\Users\Freizi\Desktop\adwcleaner_5.003.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Freizi.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQ8rByFi12mtGbM9gz3wIlz6IuaxKH0LJbMPHZzE8mUvDs1_S_3TYBHUojt-hP-65N1mKd5OZ77jeT0E
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [liandianqi] C:\Program Files (x86)\Cok Software\Cok Free Auto Clicker\AutoClicker.exe
O4 - HKLM\..\Run: [NCUpdateHelper] C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [apphide] C:\Program Files (x86)\baidu\pps.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\ProgramData\ExtTag\SaoCore.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Jobfix (dwwnioad) - Unknown owner - C:\Users\Freizi\AppData\Local\Saoranity.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ExtTag - Unknown owner - C:\ProgramData\ExtTag\ExtTag.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: HiSuiteOuc64.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NixSrv Service (NixSrv) - Unknown owner - C:\Program Files\NixSrv\NixSrv.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10038 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Users\Freizi\AppData\Local\Saoranity.exe upyateupda dwwnioad
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service
"C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service
"C:\Program Files\NixSrv\NixSrv.exe" /s iid=2904888 did=Missing sid= ref= id=63a228876d5bbab67fd1a38fcd570b687e0b62d11217f7b50a976f576af6dde6
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 0ab35d4f-e2e4-4502-8c4e-4b13b5efa4e9
\??\C:\Windows\system32\conhost.exe "-17892029042002311286-154045476-971747023118883612120892940552045331168-1767328599
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-87124033-940814661-3399875358274384617158279521742336933588722493-1912489956
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe"
"C:/Users/Freizi/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Overwolf\Overwolf.exe" -silent
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\baidu\pps.exe"
"C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files\PowerISO\PWRISOVM.EXE" -startup
C:\ProgramData\ExtTag\ExtTag.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\Freizi\AppData\Local\Steam\htmlcache" -steampid 2576 -buildid 1440016726 -steamid "0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\ProgramData\ExtTag\Zathdox.exe regname Stpro.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Common Files\Overwolf\0.87.58.0\OverwolfHelper.exe" "path=C:\Program Files (x86)\Overwolf\0.87.58.0\OWExplorerLauncher.dll
"C:\Program Files (x86)\Common Files\Overwolf\0.87.58.0\OverwolfHelper64.exe" "path=C:\Program Files (x86)\Overwolf\0.87.58.0\x64\OWExplorerLauncher.dll
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" C:\ProgramData\ExtTags\snp.sc
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" C:\ProgramData\ExtTags\snp.sc
"C:\Program Files (x86)\Overwolf\0.87.58.0\OverwolfBrowser.exe" --type=renderer --disable-gpu-compositing --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Overwolf\0.87.58.0\Locales" --log-file="C:\Users\Freizi\AppData\Local\Overwolf\Log\OverwolfBrowser_3936.log" --log-severity=error --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 OverwolfClient/0.87.58.0" --enable-media-stream --uncaught-exception-stack-size=20 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-gpu-compositing --channel="3936.0.621820735\258673074" /prefetch:673131151
"C:\Users\Freizi\Desktop\adwcleaner_5.003.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFRec&co=CZ&userid=9b384cfa-3860-90a8-8410-733f046aadd2&searchtype=sc&installDate=25.08.2015&barcodeid=50045888&channelid=888
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4120 CREDAT:267521 /prefetch:2
"C:\Program Files\Internet Explorer\iexplore.exe" http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFRec&co=CZ&userid=9b384cfa-3860-90a8-8410-733f046aadd2&searchtype=sc&installDate=25.08.2015&barcodeid=50045888&channelid=888
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4892 CREDAT:267521 /prefetch:2
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Freizi\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\PPZHYZ0.job - C:\Users\Freizi\AppData\Roaming\PPZHYZ0.exe --c=afgxQeskvbzxnDiPRIkFijVxtAx/P1IuPtvjLVGySIP2iSFxEio9t5wLcLwP7PKMGXqvLzQ4BTBtFuQp6vBDTN7UR2zsfOtH4pvCbBuhNCQ8cerihi3cJXugCQK4lkrMFe+l14C8yd7B2+UjBXVM2AdIY/2b8lMFJNC5ZhVWuF8J6xujP9Ler8g6YQDe6sCPSLaz+NetN9Sw4s5G79MCaftHLOilE30mgMz5XNIDiGg/RGoDBupwqlejyGdTSKuZeL7K17w1R5DB0SPP7nuTug99GTCy+aKvW4Lldy0LugposHiaiYSzmDnUrZlUfVXN5j2g/+szAdRrim4eoquxuw==
C:\Windows\tasks\squBHSz.job - C:\Users\Freizi\AppData\Roaming\squBHSz.exe --c=htx+a9PITgYZOxqjMp5BEP4t8oEzGXTW7/7avMdybUBuwFuXlRDK/Ra/AV+Lm9lXKZDIp5itZOr7ktSBooDK5PScztdLjNCxhuFbWG4C+evlJ4areAX/uU1zQfO+tKDyBQHsF2CtmbZ6WSD7JNq7i/TSU+Od4gP/0EaNONAT9MtVGEovSW1Xw798tbO19mLeaSqkPgx0HU1M7PMLChDuSBbtjiiZM1Ple3tc7vUgVfQVR0JC29Pj/vPodp2M5sRRby3zIxskTUKaKAqdFDJGmez9Jm9EtXx4tRy/IjW73pBBqENg/AulkBp2eipvHgKqhfNtsR6xqRBykHAU3FZvOA==

=========Mozilla firefox=========

ProfilePath - C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default\extensions\
cs@dictionaries.addons.mozilla.org

C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default\searchplugins\
findit.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-14 2631824]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-07-14 1710056]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"=C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe [2015-07-23 4691384]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-06-29 53282944]
"Overwolf"=C:\Program Files (x86)\Overwolf\Overwolf.exe [2015-07-19 41200]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-08-19 2899136]
"apphide"=C:\Program Files (x86)\baidu\pps.exe [2015-08-12 77824]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-01-22 106496]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2013-10-23 377368]
"liandianqi"=C:\Program Files (x86)\Cok Software\Cok Free Auto Clicker\AutoClicker.exe []
"NCUpdateHelper"=C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [2015-07-04 526240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\ProgramData\ExtTag\Sum-Trax.dll"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-25 13:53:32 ----D---- C:\ProgramData\ExtTags
2015-08-25 13:53:09 ----D---- C:\ProgramData\ExtTag
2015-08-25 13:21:45 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-08-25 12:58:29 ----D---- C:\Users\Freizi\AppData\Roaming\ppslog
2015-08-25 12:36:37 ----D---- C:\Program Files\trend micro
2015-08-25 12:36:36 ----D---- C:\rsit
2015-08-25 12:36:33 ----D---- C:\Windows\SYSWOW64\Flash
2015-08-25 12:28:07 ----D---- C:\ProgramData\update
2015-08-25 12:28:03 ----D---- C:\ProgramData\QWinManProQ
2015-08-25 12:28:03 ----A---- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-08-25 12:26:47 ----D---- C:\Program Files (x86)\baidu
2015-08-25 12:26:32 ----A---- C:\task.vbs
2015-08-25 11:22:51 ----D---- C:\Program Files (x86)\Drakensang Online
2015-08-25 06:01:13 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-25 06:01:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-24 11:38:34 ----D---- C:\Program Files (x86)\D3Crack
2015-08-24 11:34:25 ----D---- C:\Program Files\NixSrv
2015-08-24 11:33:08 ----D---- C:\ProgramData\CeroHimna
2015-08-23 17:59:11 ----D---- C:\Program Files (x86)\Diablo III
2015-08-21 16:28:28 ----D---- C:\Users\Freizi\AppData\Roaming\Battle.net
2015-08-21 16:28:19 ----D---- C:\ProgramData\Blizzard Entertainment
2015-08-21 16:28:19 ----D---- C:\Program Files (x86)\Battle.net
2015-08-21 16:27:10 ----D---- C:\ProgramData\Battle.net
2015-08-20 06:00:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-08-20 06:00:33 ----A---- C:\Windows\system32\mshtml.dll
2015-08-18 16:46:50 ----N---- C:\Windows\Setup1.exe
2015-08-18 16:46:48 ----A---- C:\Windows\ST6UNST.EXE
2015-08-18 13:48:34 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 13:48:34 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 12:55:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-18 12:55:16 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-08-18 12:55:16 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-08-18 12:55:16 ----A---- C:\Windows\system32\ntdll.dll
2015-08-18 12:55:15 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-18 12:55:15 ----A---- C:\Windows\system32\sysmain.dll
2015-08-18 12:55:15 ----A---- C:\Windows\system32\srcore.dll
2015-08-18 12:55:15 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-18 12:55:15 ----A---- C:\Windows\system32\kernel32.dll
2015-08-18 12:55:15 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-18 12:55:14 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-08-18 12:55:14 ----A---- C:\Windows\system32\wow64.dll
2015-08-18 12:55:14 ----A---- C:\Windows\system32\rstrui.exe
2015-08-18 12:55:14 ----A---- C:\Windows\system32\KernelBase.dll
2015-08-18 12:55:14 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-18 12:55:13 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-08-18 12:55:13 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-08-18 12:55:13 ----A---- C:\Windows\system32\winsrv.dll
2015-08-18 12:55:13 ----A---- C:\Windows\system32\smss.exe
2015-08-18 12:55:13 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-18 12:55:13 ----A---- C:\Windows\system32\kerberos.dll
2015-08-18 12:55:13 ----A---- C:\Windows\system32\conhost.exe
2015-08-18 12:55:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-08-18 12:55:12 ----A---- C:\Windows\system32\schannel.dll
2015-08-18 12:55:12 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-18 12:55:11 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-08-18 12:55:11 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-08-18 12:55:11 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-08-18 12:55:11 ----A---- C:\Windows\system32\wdigest.dll
2015-08-18 12:55:11 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-18 12:55:11 ----A---- C:\Windows\system32\sspicli.dll
2015-08-18 12:55:11 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-18 12:55:11 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-18 12:55:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-18 12:55:10 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-08-18 12:55:10 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-08-18 12:55:10 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-08-18 12:55:10 ----A---- C:\Windows\system32\srclient.dll
2015-08-18 12:55:10 ----A---- C:\Windows\system32\lsass.exe
2015-08-18 12:55:10 ----A---- C:\Windows\system32\auditpol.exe
2015-08-18 12:55:09 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-08-18 12:55:09 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-08-18 12:55:09 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-08-18 12:55:09 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-08-18 12:55:09 ----A---- C:\Windows\system32\wow64win.dll
2015-08-18 12:55:09 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-18 12:55:09 ----A---- C:\Windows\system32\secur32.dll
2015-08-18 12:55:09 ----A---- C:\Windows\system32\ntvdm64.dll
2015-08-18 12:55:09 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-18 12:55:09 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-18 12:55:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-18 12:55:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-18 12:55:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-18 12:55:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-08-18 12:55:08 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-08-18 12:55:08 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-18 12:55:08 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-08-18 12:55:08 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-08-18 12:55:08 ----A---- C:\Windows\system32\wow64cpu.dll
2015-08-18 12:55:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-18 12:55:08 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-18 12:55:08 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-18 12:55:08 ----A---- C:\Windows\system32\credssp.dll
2015-08-18 12:55:08 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-18 12:55:07 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-18 12:55:06 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-18 12:55:05 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-18 12:55:04 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-18 12:55:03 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-18 12:55:03 ----A---- C:\Windows\SYSWOW64\user.exe
2015-08-18 12:55:03 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-08-18 12:55:03 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-08-18 12:55:03 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-08-18 12:55:03 ----A---- C:\Windows\system32\msaudite.dll
2015-08-18 12:55:03 ----A---- C:\Windows\system32\adtschema.dll
2015-08-18 12:55:02 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-08-18 12:55:02 ----A---- C:\Windows\system32\msobjs.dll
2015-08-18 12:54:45 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-18 12:54:45 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-18 12:54:45 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-18 12:54:45 ----A---- C:\Windows\system32\mstscax.dll
2015-08-18 12:54:44 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-08-18 12:54:44 ----A---- C:\Windows\system32\aaclient.dll
2015-08-18 12:54:24 ----A---- C:\Windows\system32\basesrv.dll
2015-08-18 12:54:10 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-08-18 12:54:09 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-08-18 12:54:09 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-18 12:54:09 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-08-18 12:54:09 ----A---- C:\Windows\system32\iertutil.dll
2015-08-18 12:54:09 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-18 12:54:09 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-18 12:54:09 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-18 12:54:08 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-08-18 12:54:08 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-18 12:54:08 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-08-18 12:54:08 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-08-18 12:54:08 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-08-18 12:54:08 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-08-18 12:54:08 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-18 12:54:08 ----A---- C:\Windows\system32\iernonce.dll
2015-08-18 12:54:07 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-08-18 12:54:07 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-08-18 12:54:06 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-08-18 12:54:06 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-08-18 12:54:06 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-08-18 12:54:06 ----A---- C:\Windows\system32\urlmon.dll
2015-08-18 12:54:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-18 12:54:06 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-18 12:54:05 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-08-18 12:54:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-08-18 12:54:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-08-18 12:54:05 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-08-18 12:54:05 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-18 12:54:05 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-18 12:54:05 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-18 12:54:04 ----A---- C:\Windows\system32\iesetup.dll
2015-08-18 12:54:04 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-18 12:54:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-18 12:54:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-08-18 12:54:03 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-08-18 12:54:03 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-08-18 12:54:03 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-08-18 12:54:03 ----A---- C:\Windows\system32\vbscript.dll
2015-08-18 12:54:03 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-18 12:54:03 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-18 12:54:02 ----A---- C:\Windows\system32\ieui.dll
2015-08-18 12:54:02 ----A---- C:\Windows\system32\ieframe.dll
2015-08-18 12:54:02 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-18 12:54:01 ----A---- C:\Windows\system32\wininet.dll
2015-08-18 12:54:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-18 12:54:01 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-18 12:54:01 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-18 12:54:01 ----A---- C:\Windows\system32\jscript9.dll
2015-08-18 12:54:01 ----A---- C:\Windows\system32\jscript.dll
2015-08-18 12:54:00 ----A---- C:\Windows\system32\msrating.dll
2015-08-18 12:54:00 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-18 12:53:13 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-18 12:53:13 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-18 12:53:13 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-18 12:53:13 ----A---- C:\Windows\system32\davclnt.dll
2015-08-18 12:53:12 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-08-18 12:53:12 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-08-18 12:53:12 ----A---- C:\Windows\system32\msxml6.dll
2015-08-18 12:53:12 ----A---- C:\Windows\system32\msxml3.dll
2015-08-18 12:53:11 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-08-18 12:53:11 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-08-18 12:53:11 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-18 12:53:11 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-18 12:53:10 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-18 12:53:10 ----A---- C:\Windows\system32\win32k.sys
2015-08-18 12:53:10 ----A---- C:\Windows\system32\FntCache.dll
2015-08-18 12:53:10 ----A---- C:\Windows\system32\DWrite.dll
2015-08-18 12:53:10 ----A---- C:\Windows\system32\atmfd.dll
2015-08-18 12:53:09 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-18 12:53:08 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-18 12:53:08 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-18 12:53:07 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-18 12:53:07 ----A---- C:\Windows\system32\lpk.dll
2015-08-18 12:53:07 ----A---- C:\Windows\system32\dciman32.dll
2015-08-18 12:53:07 ----A---- C:\Windows\system32\atmlib.dll
2015-08-18 12:53:06 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-08-18 12:53:06 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-08-18 12:53:06 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-08-18 12:53:06 ----A---- C:\Windows\system32\fontsub.dll
2015-08-18 12:53:03 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-18 12:53:03 ----A---- C:\Windows\system32\notepad.exe
2015-08-18 12:53:03 ----A---- C:\Windows\notepad.exe
2015-08-18 12:53:00 ----A---- C:\Windows\system32\shell32.dll
2015-08-18 12:52:59 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-18 12:52:57 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-08-18 12:52:57 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-08-18 12:52:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-08-18 12:52:57 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-08-18 12:52:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-18 12:52:57 ----A---- C:\Windows\system32\wucltux.dll
2015-08-18 12:52:57 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-18 12:52:57 ----A---- C:\Windows\system32\wuapp.exe
2015-08-18 12:52:57 ----A---- C:\Windows\system32\wuapi.dll
2015-08-18 12:52:57 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-18 12:52:56 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-18 12:52:56 ----A---- C:\Windows\system32\wups2.dll
2015-08-18 12:52:56 ----A---- C:\Windows\system32\wups.dll
2015-08-18 12:52:56 ----A---- C:\Windows\system32\wudriver.dll
2015-08-18 12:52:56 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-18 12:52:56 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-11 19:23:27 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-08-11 15:36:48 ----A---- C:\Windows\ntbtlog.txt
2015-07-26 01:35:50 ----D---- C:\ProgramData\Steam
2015-07-26 01:28:29 ----D---- C:\Program Files (x86)\Company of Heroes 2

======List of files/folders modified in the last 1 month======

2015-08-25 14:00:01 ----D---- C:\AdwCleaner
2015-08-25 13:58:20 ----D---- C:\Windows\Temp
2015-08-25 13:54:10 ----D---- C:\Windows\system32\Tasks
2015-08-25 13:53:32 ----HD---- C:\ProgramData
2015-08-25 13:53:08 ----D---- C:\Windows\SysWOW64
2015-08-25 13:52:39 ----D---- C:\Program Files (x86)\Steam
2015-08-25 13:51:50 ----D---- C:\ProgramData\NVIDIA
2015-08-25 13:51:01 ----D---- C:\Windows\system32\config
2015-08-25 13:32:44 ----D---- C:\Users\Freizi\AppData\Roaming\Skype
2015-08-25 13:25:14 ----RD---- C:\Program Files (x86)
2015-08-25 13:24:17 ----D---- C:\Windows\Tasks
2015-08-25 13:21:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-25 13:20:01 ----SHD---- C:\System Volume Information
2015-08-25 13:19:28 ----D---- C:\Windows\system32\drivers
2015-08-25 13:13:54 ----D---- C:\Windows\System32
2015-08-25 13:13:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-25 13:13:53 ----D---- C:\Windows\inf
2015-08-25 13:13:49 ----D---- C:\Program Files (x86)\Overwolf
2015-08-25 13:01:21 ----D---- C:\Windows\addins
2015-08-25 12:36:37 ----RD---- C:\Program Files
2015-08-25 12:29:39 ----SHD---- C:\$Recycle.Bin
2015-08-25 12:29:20 ----SHD---- C:\Windows\Installer
2015-08-25 12:29:00 ----RSD---- C:\Windows\Fonts
2015-08-25 12:26:44 ----D---- C:\Windows\Prefetch
2015-08-24 11:35:32 ----SD---- C:\ProgramData\Microsoft
2015-08-24 11:34:19 ----D---- C:\Windows\system32\drivers\etc
2015-08-21 16:58:09 ----D---- C:\Users\Freizi\AppData\Roaming\uTorrent
2015-08-20 06:18:09 ----D---- C:\Windows\winsxs
2015-08-19 02:07:23 ----D---- C:\Windows\rescache
2015-08-18 19:27:24 ----D---- C:\Windows\Microsoft.NET
2015-08-18 19:27:04 ----RSD---- C:\Windows\assembly
2015-08-18 16:47:31 ----D---- C:\Windows
2015-08-18 15:41:59 ----D---- C:\Windows\system32\LogFiles
2015-08-18 15:00:50 ----D---- C:\Windows\SoftwareDistribution
2015-08-18 14:38:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-08-18 14:38:12 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-18 14:38:12 ----D---- C:\Windows\system32\cs-CZ
2015-08-18 14:38:11 ----D---- C:\Windows\AppPatch
2015-08-18 14:38:06 ----D---- C:\Windows\SYSWOW64\en-US
2015-08-18 14:38:06 ----D---- C:\Program Files\Internet Explorer
2015-08-18 14:38:05 ----D---- C:\Windows\system32\en-US
2015-08-18 14:38:05 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-18 14:38:02 ----D---- C:\Windows\PolicyDefinitions
2015-08-18 12:52:09 ----D---- C:\Windows\system32\catroot2
2015-08-18 12:43:07 ----D---- C:\Users\Freizi\AppData\Roaming\vlc
2015-08-18 12:33:25 ----D---- C:\Windows\Minidump
2015-08-11 19:24:02 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-01 20:20:39 ----D---- C:\Users\Freizi\AppData\Roaming\TS3Client

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2013-10-23 129944]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-01-22 77824]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-01-22 180224]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-03-13 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-14 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-05-31 333928]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 RTL85n64;Realtek 8180/8185 Extensible 802.11 Wireless Device Driver; C:\Windows\system32\DRIVERS\RTL85n64.sys [2009-06-10 378368]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbser;USB RS-232 Emulation Driver; C:\Windows\system32\DRIVERS\USBSER.sys [2015-05-07 33280]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 dwwnioad;Jobfix; C:\Users\Freizi\AppData\Local\Saoranity.exe [2015-08-24 50688]
R2 ExtTag;ExtTag; C:\ProgramData\ExtTag\ExtTag.exe [2015-08-23 34816]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-14 1155216]
R2 HiSuiteOuc64.exe;HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [2015-05-20 138544]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [2015-05-20 192304]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 NixSrv;NixSrv Service; C:\Program Files\NixSrv\NixSrv.exe [2015-08-23 379392]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-14 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-14 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-03 327296]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-16 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-13 149160]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\syswow64\GameMon.des [2014-11-14 3049608]
S3 OverwolfUpdater;Overwolf Updater Windows SCM; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-07-19 1001200]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-03-25 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

LOG ADW:

# AdwCleaner v5.003 - Logfile created 25/08/2015 at 14:00:01
# Updated 20/08/2015 by Xplode
# Database : 2015-08-23.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Freizi - FREIZI-PC
# Running from : C:\Users\Freizi\Desktop\adwcleaner_5.003.exe
# Option : Scan

***** [ Services ] *****

Service Found : ExtTag

***** [ Folders ] *****

Folder Found : C:\ProgramData\ExtTags
Folder Found : C:\ProgramData\ExtTag

***** [ Files ] *****

File Found : C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default\searchplugins\findit.xml

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
Key Found : HKLM\SOFTWARE\downchecker
Key Found : [x64] HKLM\SOFTWARE\downchecker

***** [ Web browsers ] *****


########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [899 bytes] ##########

Pořad tam je 8x jsem to dal smazat a 8x se vratil tentokrát i s programy nežadouci

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:25-08-2015 01
Ran by Freizi (administrator) on FREIZI-PC (25-08-2015 21:40:22)
Running from C:\Users\Freizi\Desktop
Loaded Profiles: Freizi (Available Profiles: Freizi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Users\Freizi\AppData\Local\Saoranity.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
() C:\Program Files\NixSrv\NixSrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
() C:\ProgramData\ExtTag\ExtTag.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Akamai Technologies, Inc.) C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Akamai Technologies, Inc.) C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\baidu\pps.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\ProgramData\ExtTag\Danlax.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.87.58.0\OverwolfHelper.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.87.58.0\OverwolfHelper64.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\0.87.58.0\OverwolfBrowser.exe
() C:\Program Files\NixSrv\packages\5c58aeae-e6b5-4470-8a4a-8d73a0c3eb5e\NixHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2631824 2015-07-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [377368 2013-10-23] (Power Software Ltd)
HKLM-x32\...\Run: [liandianqi] => C:\Program Files (x86)\Cok Software\Cok Free Auto Clicker\AutoClicker.exe
HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [526240 2015-07-04] (NCSOFT Corporation)
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Freizi\AppData\Local\Akamai\netsession_win.exe [4691384 2015-07-23] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [41200 2015-07-19] (Overwolf LTD)
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\Run: [apphide] => C:\Program Files (x86)\baidu\pps.exe [77824 2015-08-12] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-03-24] (Microsoft Corporation)
AppInit_DLLs: C:\ProgramData\ExtTag\NewToing.dll => C:\ProgramData\ExtTag\NewToing.dll [135680 2015-08-25] ()
AppInit_DLLs-x32: C:\ProgramData\ExtTag\Mathtondox.dll => C:\ProgramData\ExtTag\Mathtondox.dll [121344 2015-08-25] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3703730259-3164073539-163999450-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQ8rByFi12mtGbM9gz3wIlz6IuaxKH0LJbMPHZzE8mUvDs1_S_3TYBHUojt-hP-65N1mKd5OZ77jeT0E
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
HKU\S-1-5-21-3703730259-3164073539-163999450-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3703730259-3164073539-163999450-1000 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3703730259-3164073539-163999450-1000 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABlquju5eT85emM96zGTUvcNMaYIYRQUgMt3oBhC9C-Paf9igOqTmShlqw9X0Ug_PFQN7hhmS_JSKFWyUyEeUixG9buY3DZIkKqA2FqSxsEmtfhjY3MSs7ER3ype7Ad-AVGptxB5ZYuvDLMbf&q={searchTerms}
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{A87FCF42-D1D4-42FD-9C90-A6FB0BFD45D9}: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default
FF NewTab: C:\\ProgramData\\ExtTags\\ff.NT
FF DefaultSearchEngine: findit
FF Homepage: C:\\ProgramData\\ExtTags\\ff.HP
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF SearchPlugin: C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default\searchplugins\findit.xml [2015-08-25]
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default\Extensions\cs@dictionaries.addons.mozilla.org [2015-06-18]
FF Extension: MEGA - C:\Users\Freizi\AppData\Roaming\Mozilla\Firefox\Profiles\gbhl6ikg.default\Extensions\firefox@mega.co.nz.xpi [2015-05-22]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [dnligehkhogpcngalffdoomehjcbecna] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gehmndecgbcffhmfjkenpamdgechcgpe] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 dwwnioad; C:\Users\Freizi\AppData\Local\Saoranity.exe [50688 2015-08-24] () [File not signed]
R2 ExtTag; C:\ProgramData\ExtTag\ExtTag.exe [34816 2015-08-23] () [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-14] (NVIDIA Corporation)
R2 HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [138544 2015-05-20] ()
R2 HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [192304 2015-05-20] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NixSrv; C:\Program Files\NixSrv\NixSrv.exe [379392 2015-08-23] () [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3049608 2014-11-14] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-14] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1001200 2015-07-19] (Overwolf LTD)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2015-05-07] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
S3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [378368 2009-06-10] (Realtek)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-25 21:40 - 2015-08-25 21:40 - 00013374 _____ C:\Users\Freizi\Desktop\FRST.txt
2015-08-25 21:39 - 2015-08-25 21:40 - 00000000 ____D C:\FRST
2015-08-25 21:36 - 2015-08-25 21:36 - 02186752 _____ (Farbar) C:\Users\Freizi\Desktop\FRST64.exe
2015-08-25 21:34 - 2015-08-25 21:34 - 00112640 _____ (forum.viry.cz) C:\Users\Freizi\Desktop\FRSTLauncher.exe
2015-08-25 21:34 - 2015-08-25 21:34 - 00015327 _____ C:\Users\Freizi\Desktop\LM.bat
2015-08-25 21:32 - 2015-08-25 21:34 - 00029696 _____ C:\Users\Freizi\AppData\Local\MSGBOX.EXE
2015-08-25 14:16 - 2015-08-25 14:16 - 00000000 ____D C:\ProgramData\ExtTags
2015-08-25 14:15 - 2015-08-25 14:16 - 00000000 ____D C:\ProgramData\ExtTag
2015-08-25 13:21 - 2015-08-25 14:16 - 00001202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-25 13:21 - 2015-08-25 14:16 - 00001196 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-25 13:21 - 2015-08-25 13:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-25 12:58 - 2015-08-25 12:58 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\ppslog
2015-08-25 12:36 - 2015-08-25 14:02 - 00000000 ____D C:\rsit
2015-08-25 12:36 - 2015-08-25 14:02 - 00000000 ____D C:\Program Files\trend micro
2015-08-25 12:36 - 2015-08-25 12:36 - 01222144 _____ C:\Users\Freizi\Desktop\RSITx64.exe
2015-08-25 12:36 - 2015-08-25 12:36 - 00000000 ____D C:\Windows\SysWOW64\Flash
2015-08-25 12:35 - 2015-08-25 12:35 - 00613255 _____ (CMI Limited) C:\Users\Freizi\AppData\Local\nsxED10.tmp
2015-08-25 12:29 - 2015-08-25 14:16 - 00000990 _____ C:\Windows\Tasks\squBHSz.job
2015-08-25 12:29 - 2015-08-25 12:29 - 00004020 _____ C:\Windows\System32\Tasks\squBHSz
2015-08-25 12:28 - 2015-08-25 13:08 - 00000000 ____D C:\ProgramData\update
2015-08-25 12:28 - 2015-08-25 13:05 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-25 12:28 - 2015-08-25 12:29 - 00000000 ____D C:\ProgramData\QWinManProQ
2015-08-25 12:28 - 2015-08-25 12:28 - 00000124 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-08-25 12:28 - 2015-08-25 12:28 - 00000000 ____D C:\Users\Public\QiYi
2015-08-25 12:26 - 2015-08-25 12:26 - 00000217 _____ C:\task.vbs
2015-08-25 12:26 - 2015-08-25 12:26 - 00000000 ____D C:\Program Files (x86)\baidu
2015-08-25 11:22 - 2015-08-25 11:22 - 00002005 _____ C:\Users\Freizi\Desktop\Drakensang Online.lnk
2015-08-25 11:22 - 2015-08-25 11:22 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2015-08-25 11:22 - 2015-08-25 11:22 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2015-08-25 09:35 - 2015-08-25 14:16 - 00002377 _____ C:\Windows\SysWOW64\findit.xml
2015-08-25 06:02 - 2015-08-25 06:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-25 06:01 - 2015-08-25 06:01 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-25 06:01 - 2015-08-25 06:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-24 23:55 - 2015-08-24 23:55 - 00003240 _____ C:\Windows\System32\Tasks\upyateupda
2015-08-24 11:49 - 2015-08-24 11:49 - 01605632 _____ C:\Users\Freizi\Desktop\adwcleaner_5.003.exe
2015-08-24 11:38 - 2015-08-24 11:38 - 00000000 ____D C:\Program Files (x86)\D3Crack
2015-08-24 11:37 - 2015-08-25 14:15 - 00000990 _____ C:\Windows\Tasks\PPZHYZ0.job
2015-08-24 11:37 - 2015-08-24 11:37 - 00004020 _____ C:\Windows\System32\Tasks\PPZHYZ0
2015-08-24 11:34 - 2015-08-24 13:34 - 00000000 ____D C:\Program Files\NixSrv
2015-08-24 11:34 - 2015-08-24 11:34 - 00050688 _____ C:\Users\Freizi\AppData\Local\Saoranity.exe
2015-08-24 11:34 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-08-24 11:33 - 2015-08-24 12:16 - 00000000 ____D C:\ProgramData\CeroHimna
2015-08-23 18:27 - 2015-08-23 18:27 - 00000000 ____D C:\Users\Freizi\Documents\Diablo III
2015-08-23 18:15 - 2015-08-23 18:15 - 00001175 _____ C:\Users\Public\Desktop\Diablo III.lnk
2015-08-23 18:15 - 2015-08-23 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2015-08-23 17:59 - 2015-08-23 18:26 - 00000000 ____D C:\Program Files (x86)\Diablo III
2015-08-21 16:28 - 2015-08-25 12:55 - 00000000 ____D C:\Users\Freizi\AppData\Local\Battle.net
2015-08-21 16:28 - 2015-08-23 17:58 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\Battle.net
2015-08-21 16:28 - 2015-08-21 16:28 - 00000000 ____D C:\Users\Freizi\AppData\Local\Blizzard Entertainment
2015-08-21 16:28 - 2015-08-21 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-08-21 16:28 - 2015-08-21 16:28 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-08-21 16:28 - 2015-08-21 16:28 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-21 16:27 - 2015-08-21 16:27 - 00000000 ____D C:\ProgramData\Battle.net
2015-08-20 06:00 - 2015-08-11 03:20 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-20 06:00 - 2015-08-11 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-20 06:00 - 2015-08-11 02:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-20 06:00 - 2015-08-11 02:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-18 17:04 - 2015-08-18 17:46 - 00000000 ____D C:\Users\Freizi\Documents\My Cheat Tables
2015-08-18 16:46 - 2015-08-18 16:46 - 00249856 ____N (Microsoft Corporation) C:\Windows\Setup1.exe
2015-08-18 16:46 - 2015-08-18 16:46 - 00073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE
2015-08-18 14:50 - 2015-08-25 13:25 - 00000000 ___RD C:\Users\Freizi\Virtual Machines
2015-08-18 13:48 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 13:48 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 12:55 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-18 12:55 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-18 12:55 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-18 12:55 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-18 12:55 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-18 12:55 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-18 12:55 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-18 12:55 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-18 12:55 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-18 12:55 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-18 12:55 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-18 12:55 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-18 12:55 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-18 12:55 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-18 12:55 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-18 12:55 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-18 12:55 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-18 12:55 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-18 12:55 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-18 12:55 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-18 12:55 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-18 12:55 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-18 12:55 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-18 12:55 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-18 12:55 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-18 12:55 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-18 12:55 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-18 12:55 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-18 12:55 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-18 12:55 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-18 12:55 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-18 12:55 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-18 12:55 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-18 12:55 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-18 12:55 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-18 12:55 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-18 12:55 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-18 12:55 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-18 12:55 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-18 12:55 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-18 12:55 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-18 12:55 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-18 12:55 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-18 12:55 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-18 12:55 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-18 12:55 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-18 12:54 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-18 12:54 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-18 12:54 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-18 12:54 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-18 12:54 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-18 12:54 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-18 12:54 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-18 12:54 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-18 12:54 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-18 12:54 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-18 12:54 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-18 12:54 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-18 12:54 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-18 12:54 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-18 12:54 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-18 12:54 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-18 12:54 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-18 12:54 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-18 12:54 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-18 12:54 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-18 12:54 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-18 12:54 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-18 12:54 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-18 12:54 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-18 12:54 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-18 12:54 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-18 12:54 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-18 12:54 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-18 12:54 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-18 12:54 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-18 12:54 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-18 12:54 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-18 12:54 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-18 12:54 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-18 12:54 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-18 12:54 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-18 12:54 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-18 12:54 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-18 12:54 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-18 12:54 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-18 12:54 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-18 12:54 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-18 12:54 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-18 12:54 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-18 12:54 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-18 12:54 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-18 12:54 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-18 12:54 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-18 12:54 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-18 12:54 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-18 12:54 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-18 12:54 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-18 12:54 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-18 12:54 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-18 12:54 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-18 12:54 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-18 12:54 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-18 12:54 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-18 12:54 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-08-18 12:54 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-18 12:54 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-18 12:54 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-18 12:54 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-18 12:53 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-18 12:53 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-18 12:53 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-18 12:53 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-18 12:53 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-18 12:53 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-18 12:53 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-18 12:53 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-18 12:53 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-18 12:53 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-18 12:53 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-18 12:53 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-18 12:53 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-18 12:53 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-18 12:53 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-18 12:53 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-18 12:53 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-18 12:53 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-18 12:53 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-18 12:53 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-18 12:53 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-18 12:53 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-18 12:53 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-18 12:53 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-18 12:53 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-18 12:53 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-18 12:52 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-18 12:52 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-18 12:52 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-18 12:52 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-18 12:52 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-18 12:52 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-18 12:52 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-18 12:52 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-18 12:52 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-18 12:33 - 2015-08-18 12:33 - 00477136 _____ C:\Windows\Minidump\081815-25178-01.dmp
2015-08-11 20:36 - 2015-08-10 16:03 - 1548591262 _____ C:\Users\Freizi\Desktop\Špión.Spy.2015.CZtitulky.HDRip.XviD.AC3.avi
2015-08-11 20:29 - 2015-08-25 21:39 - 00000000 ____D C:\Users\Freizi\Downloads\pondeli
2015-08-11 20:10 - 2015-08-11 20:10 - 00471208 _____ C:\Windows\Minidump\081115-27643-01.dmp
2015-08-11 20:08 - 2015-08-11 20:08 - 00478904 _____ C:\Windows\Minidump\081115-18298-01.dmp
2015-08-11 19:30 - 2015-08-18 12:33 - 265713611 _____ C:\Windows\MEMORY.DMP
2015-08-11 19:30 - 2015-08-11 19:30 - 00000000 _____ C:\Windows\Minidump\081115-16520-01.dmp
2015-08-11 19:23 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-08-11 19:11 - 2015-08-11 19:11 - 00479480 _____ C:\Windows\Minidump\081115-27190-01.dmp
2015-08-11 19:10 - 2015-08-11 19:10 - 00000000 _____ C:\Windows\Minidump\081115-17955-01.dmp
2015-08-11 19:08 - 2015-08-11 19:08 - 00000000 _____ C:\Windows\Minidump\081115-18033-01.dmp
2015-08-11 16:31 - 2015-08-11 16:31 - 00000000 _____ C:\Windows\Minidump\081115-17815-01.dmp
2015-08-11 16:30 - 2015-08-11 16:30 - 00000000 _____ C:\Windows\Minidump\081115-15880-01.dmp
2015-08-11 16:07 - 2015-08-11 16:07 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2015-08-11 15:46 - 2015-08-11 15:46 - 00471824 _____ C:\Windows\Minidump\081115-27112-01.dmp
2015-08-11 15:44 - 2015-08-11 15:44 - 00465232 _____ C:\Windows\Minidump\081115-20092-01.dmp
2015-08-11 15:36 - 2015-08-11 15:36 - 00570912 _____ C:\Windows\Minidump\081115-25849-01.dmp
2015-08-11 15:14 - 2015-08-11 15:14 - 00475728 _____ C:\Windows\Minidump\081115-15756-01.dmp
2015-08-11 15:11 - 2015-08-11 15:11 - 00532144 _____ C:\Windows\Minidump\081115-17284-01.dmp
2015-08-11 15:09 - 2015-08-11 15:09 - 00582992 _____ C:\Windows\Minidump\081115-17690-01.dmp
2015-08-10 12:24 - 2015-08-10 12:25 - 00000047 _____ C:\Users\Freizi\Desktop\zruseni.txt
2015-08-01 17:39 - 2015-08-01 17:39 - 00354952 _____ C:\Windows\Minidump\080115-17830-01.dmp
2015-08-01 00:37 - 2015-08-01 00:37 - 00361816 _____ C:\Windows\Minidump\080115-20763-01.dmp
2015-07-29 20:39 - 2015-07-29 20:39 - 00262144 _____ C:\Windows\Minidump\072915-18096-01.dmp
2015-07-26 02:50 - 2015-07-26 02:50 - 00001597 _____ C:\Users\Freizi\Desktop\RelicCoH2 – zástupce.lnk
2015-07-26 02:03 - 2015-07-26 02:03 - 00356416 _____ C:\Windows\Minidump\072615-36675-01.dmp
2015-07-26 01:35 - 2015-07-26 01:35 - 00000000 ____D C:\ProgramData\Steam
2015-07-26 01:28 - 2015-07-26 01:35 - 00000000 ____D C:\Program Files (x86)\Company of Heroes 2

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-25 19:15 - 2015-03-20 14:25 - 01661026 _____ C:\Windows\WindowsUpdate.log
2015-08-25 16:00 - 2015-03-23 14:09 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\Skype
2015-08-25 14:23 - 2009-07-14 06:45 - 00014832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-25 14:23 - 2009-07-14 06:45 - 00014832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-25 14:16 - 2015-05-22 17:12 - 00000000 ____D C:\Program Files (x86)\Steam
2015-08-25 14:16 - 2015-04-28 18:20 - 00000000 ____D C:\Users\Freizi\AppData\Local\Overwolf
2015-08-25 14:16 - 2015-03-20 14:28 - 00001405 _____ C:\Users\Freizi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-25 14:15 - 2015-03-21 16:39 - 00032578 _____ C:\Windows\PFRO.log
2015-08-25 14:15 - 2015-03-20 16:01 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-25 14:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-25 14:15 - 2009-07-14 06:51 - 00068763 _____ C:\Windows\setupact.log
2015-08-25 14:14 - 2015-04-28 18:28 - 00000000 ____D C:\AdwCleaner
2015-08-25 13:26 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-25 13:21 - 2015-03-20 16:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-25 13:13 - 2015-04-28 18:21 - 00000000 ____D C:\Program Files (x86)\Overwolf
2015-08-25 13:13 - 2009-07-14 17:18 - 00668198 _____ C:\Windows\system32\perfh005.dat
2015-08-25 13:13 - 2009-07-14 17:18 - 00140846 _____ C:\Windows\system32\perfc005.dat
2015-08-25 13:13 - 2009-07-14 07:13 - 01577410 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-25 13:01 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\addins
2015-08-25 13:01 - 2009-07-14 06:45 - 00328272 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-25 12:58 - 2015-03-20 16:01 - 00086872 _____ C:\Users\Freizi\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-25 12:54 - 2015-03-20 16:28 - 00001454 _____ C:\Users\Public\Desktop\WarThunder.lnk
2015-08-24 13:38 - 2015-03-23 14:07 - 00001246 _____ C:\Users\Freizi\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2015-08-24 13:38 - 2015-03-23 14:07 - 00001222 _____ C:\Users\Public\Desktop\GOM Player.lnk
2015-08-23 18:00 - 2015-06-16 20:44 - 00000000 ____D C:\Users\Freizi\Downloads\Titulky
2015-08-21 16:58 - 2015-04-29 22:25 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\uTorrent
2015-08-19 02:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-08-18 14:50 - 2015-03-20 14:27 - 00000000 ____D C:\Users\Freizi
2015-08-18 14:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-18 12:43 - 2015-03-21 02:29 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\vlc
2015-08-18 12:33 - 2015-03-21 16:39 - 00000000 ____D C:\Windows\Minidump
2015-08-18 12:26 - 2015-03-20 16:21 - 00000000 ____D C:\Users\Freizi\AppData\Local\Akamai
2015-08-11 19:24 - 2015-03-20 16:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-11 19:21 - 2015-03-20 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-11 01:16 - 2015-05-24 15:03 - 00000000 ____D C:\Users\Freizi\Desktop\DCIM
2015-08-11 00:16 - 2015-07-11 22:56 - 00001775 _____ C:\Users\Freizi\Desktop\Diablo II - Lord of Destruction.lnk
2015-08-01 20:20 - 2015-03-21 17:37 - 00000000 ____D C:\Users\Freizi\AppData\Roaming\TS3Client
2015-07-26 01:35 - 2015-03-20 16:27 - 00000000 ____D C:\Users\Freizi\Documents\My Games

==================== Files in the root of some directories =======

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Freizi\AppData\Roaming\PPZHYZ0
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Freizi\AppData\Roaming\squBHSz
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Freizi\AppData\Roaming\squBHSz.exe
2015-03-22 19:54 - 2015-03-23 22:23 - 0000676 _____ () C:\Users\Freizi\AppData\Roaming\__AvidCloudManager.log
2015-03-22 19:54 - 2015-03-22 19:58 - 0000676 _____ () C:\Users\Freizi\AppData\Roaming\__AvidCloudManagerPrevious.log
2015-03-22 19:55 - 2015-03-22 19:55 - 0003584 _____ () C:\Users\Freizi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-22 19:41 - 2015-05-22 19:41 - 0000000 ___SH () C:\Users\Freizi\AppData\Local\LumaEmu
2015-08-25 21:32 - 2015-08-25 21:34 - 0029696 _____ () C:\Users\Freizi\AppData\Local\MSGBOX.EXE
2015-08-25 12:35 - 2015-08-25 12:35 - 0613255 _____ (CMI Limited) C:\Users\Freizi\AppData\Local\nsxED10.tmp
2015-07-06 14:17 - 2015-07-14 22:13 - 0007608 _____ () C:\Users\Freizi\AppData\Local\Resmon.ResmonCfg
2015-08-24 11:34 - 2015-08-24 11:34 - 0050688 _____ () C:\Users\Freizi\AppData\Local\Saoranity.exe
2015-08-24 11:34 - 2015-08-24 11:34 - 0000187 _____ () C:\Users\Freizi\AppData\Local\Saoranity.exe.config
2015-08-25 12:28 - 2015-08-25 12:28 - 0000124 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Some files in TEMP:
====================
C:\Users\Freizi\AppData\Local\Temp\amisetup0934__13312.exe
C:\Users\Freizi\AppData\Local\Temp\binkw32.dll
C:\Users\Freizi\AppData\Local\Temp\d2l_Install.exe
C:\Users\Freizi\AppData\Local\Temp\ExPromo.exe
C:\Users\Freizi\AppData\Local\Temp\nsvBB99.tmp.exe
C:\Users\Freizi\AppData\Local\Temp\Quarantine.exe
C:\Users\Freizi\AppData\Local\Temp\setup3.exe
C:\Users\Freizi\AppData\Local\Temp\sfextra.dll
C:\Users\Freizi\AppData\Local\Temp\sqlite3.dll
C:\Users\Freizi\AppData\Local\Temp\tmp6969.tmp.exe
C:\Users\Freizi\AppData\Local\Temp\Updater.exe
C:\Users\Freizi\AppData\Local\Temp\~5C27.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-22 20:36

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:25-08-2015 01
Ran by Freizi (2015-08-25 21:41:38)
Running from C:\Users\Freizi\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3703730259-3164073539-163999450-500 - Administrator - Disabled)
Freizi (S-1-5-21-3703730259-3164073539-163999450-1000 - Administrator - Enabled) => C:\Users\Freizi
Guest (S-1-5-21-3703730259-3164073539-163999450-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
Aion (HKLM-x32\...\{B9291CA2-6FA5-44EA-8EE0-923EB32ADAAB}) (Version: 4.0.0.3 - NC Interactive, LLC)
Akamai NetSession Interface (HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Aktualizace NVIDIA 2.5.11.45 (Version: 2.5.11.45 - NVIDIA Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Company of Heroes 2 (HKLM-x32\...\Q29tcGFueW9mSGVyb2VzMg==_is1) (Version: 1 - )
CrystalDiskInfo 6.2.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.2 - Crystal Dew World)
Diablo II (HKLM-x32\...\Diablo II) (Version: - )
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Drakensang Online (HKLM-x32\...\Drakensang Online) (Version: - )
Enemy Front PROPER (HKLM-x32\...\Enemy Front PROPER_is1) (Version: - )
FreeMouseAutoClicker 3.6 (HKLM-x32\...\{292F00C5-25EF-4FBE-9873-13EF1F69DEED}_is1) (Version: - Advanced Mouse Auto Clicker ltd.)
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.69.5227 - Gretech Corporation)
HiSuite (HKLM-x32\...\Hi Suite) (Version: 41.003.55.00.06 - Huawei Technologies Co.,Ltd)
IP Camera Adapter (HKLM-x32\...\{6D140BFF-7CC5-4BFE-AD6D-47035FFE5F14}) (Version: 2.0.0.0 - Pavel Khlebovich)
Lineage II (HKLM-x32\...\{23664DA8-8872-4CF4-A2F2-327CC539823B}) (Version: 4.0.0.2 - NC Interactive, LLC)
Lineage® II: Freya (High Five) (HKLM-x32\...\{21040472-F8DF-48A9-A093-2986C1495670}) (Version: 198 - NCsoft)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 40.0.2 (x86 cs) (HKLM-x32\...\Mozilla Firefox 40.0.2 (x86 cs)) (Version: 40.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.19.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.19.0 - NEC Electronics Corporation) Hidden
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1599 - Electronic Arts)
NVIDIA GeForce Experience 2.5.11.45 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.11.45 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.87.58.0 - Overwolf Ltd.)
Overwolf.Setup.VC100CRTx64.Dist (HKLM\...\{EC9D5554-6852-4A55-81BB-AC02C7A8CFED}) (Version: 1.0.0 - Overwolf)
Ovládací panel NVIDIA 347.88 (Version: 347.88 - NVIDIA Corporation) Hidden
Ovladače videa společnosti Pinnacle (HKLM\...\{6DE721A5-5E89-4D74-994C-652BB3C0672E}) (Version: 12.1.0.030 - Pinnacle Systems)
Pinnacle Studio 16 - Install Manager (HKLM-x32\...\{F1886CD7-9F73-417A-92E9-7E0AB0F0E099}) (Version: 16.0.75 - Avid Technology, Inc.)
Pinnacle Studio 16 (HKLM-x32\...\{284BFDBC-DAC6-43EC-85A8-E1CEC0D3A114}) (Version: 16.0.0.75 - Avid Technology, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.8 - Power Software Ltd)
Python 2.7.10 (HKLM-x32\...\{E2B51919-207A-43EB-AE78-733F9C6797C2}) (Version: 2.7.10150 - Python Software Foundation)
Python 3.4.3 (HKLM-x32\...\{CCD588A7-8D55-49F1-A30C-47FAB40889ED}) (Version: 3.4.16490 - Python Software Foundation)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
SDÍLEJ.CZ Manager (HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\69f070f18ade444c) (Version: 0.0.1.42 - SDÍLEJ.CZ)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.11.45 - NVIDIA Corporation) Hidden
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Star Wars Jedi Knight Jedi Academy (HKLM-x32\...\{0D994CC5-819F-4657-84DD-397B8FE1EA80}) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Unity Web Player (HKU\S-1-5-21-3703730259-3164073539-163999450-1000\...\UnityWebPlayer) (Version: 4.6.3f1 - Unity Technologies ApS)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
War Thunder Launcher 1.0.1.502 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

20-08-2015 06:00:12 Windows Update
23-08-2015 19:25:02 Windows Update
25-08-2015 06:00:12 Windows Update
25-08-2015 13:19:47 Removed Microsoft Silverlight

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {08DCA055-DF4E-4592-98AC-F949AAF4D151} - System32\Tasks\{4C802E0D-D41A-45BB-A39B-093E8532F71F} => G:\SETUP.EXE
Task: {0A4D33C2-E2A0-466E-A212-C8C407C033E2} - System32\Tasks\upyateupda => C:\Windows\system32\config\systemprofile\AppData\Local\San-Phase [2015-08-24] ()
Task: {18A47860-EBBD-42BF-B63D-4884C37FB9F3} - System32\Tasks\{C6ADE81C-1F0F-482F-83CC-FCBC8F9A6F66} => pcalua.exe -a G:\INSTALL.EXE -d G:\
Task: {47018415-7C97-4AB9-9DCA-F6193FFB2DCA} - System32\Tasks\{417D71C1-38E2-4372-A4E2-22FC431D23E5} => pcalua.exe -a F:\SETUP.EXE -d F:\
Task: {5A9CCAB2-03E2-419F-9C09-EA4196D1BC8E} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-07-19] (Overwolf LTD)
Task: {5BBA69A9-CB56-42C9-844A-B8E11DC7B261} - System32\Tasks\PPZHYZ0 => C:\Users\Freizi\AppData\Roaming\PPZHYZ0.exe <==== ATTENTION
Task: {74E053D6-9345-48FE-838F-5005F2E866B3} - System32\Tasks\{C369DE4A-8E36-4EAE-AE84-6E958929A3CD} => F:\SETUP.EXE
Task: {809A3A64-ABB9-4A0D-9BB2-0E61233CD514} - System32\Tasks\{65E775AD-431E-4E7A-9C3D-555B14CBFB9F} => F:\SETUP.EXE
Task: {8FAA6EC9-E127-4ED5-BC46-26337651041B} - System32\Tasks\{7F044639-F9A0-4B73-BC13-4AE12A13D76E} => C:\Program Files (x86)\Diablo II\Diablo II.exe
Task: {A1EB16B8-207C-4E92-AE65-35BC834D912E} - System32\Tasks\{D9105A3A-92E8-415D-B141-BE690E9359DC} => F:\SETUP.EXE
Task: {BE91E10E-4B2D-4C94-839D-1A66FFF2012E} - System32\Tasks\squBHSz => C:\Users\Freizi\AppData\Roaming\squBHSz.exe [2015-04-20] () <==== ATTENTION
Task: {C158BE88-ACE2-4C8C-8DA7-D0D2BCEF8BD5} - System32\Tasks\{6656F9C8-10D6-4623-8ABF-7B6031D73393} => pcalua.exe -a C:\Windows\DIIUnin.exe -c C:\Windows\DIIUnin.dat

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\PPZHYZ0.job => C:\Users\Freizi\AppData\Roaming\PPZHYZ0.exe <==== ATTENTION
Task: C:\Windows\Tasks\squBHSz.job => C:\Users\Freizi\AppData\Roaming\squBHSz.exe <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2015-03-20 16:01 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-08-24 11:34 - 2015-08-24 11:34 - 00050688 _____ () C:\Users\Freizi\AppData\Local\Saoranity.exe
2015-06-29 05:17 - 2015-05-20 12:40 - 00138544 _____ () C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
2015-06-29 05:17 - 2015-05-20 12:40 - 00192304 _____ () C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
2015-08-23 08:47 - 2015-08-23 08:47 - 00379392 _____ () C:\Program Files\NixSrv\NixSrv.exe
2015-08-23 16:30 - 2015-08-23 16:30 - 00034816 _____ () C:\ProgramData\ExtTag\ExtTag.exe
2015-08-25 12:26 - 2015-08-12 00:00 - 00077824 ____H () C:\Program Files (x86)\baidu\pps.exe
2015-08-25 14:16 - 2015-08-25 14:16 - 00129024 _____ () C:\ProgramData\ExtTag\Danlax.exe
2015-08-24 13:34 - 2015-08-24 13:34 - 00855040 _____ () C:\Program Files\NixSrv\packages\5c58aeae-e6b5-4470-8a4a-8d73a0c3eb5e\NixHost.exe
2015-07-25 14:24 - 2015-07-14 21:06 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-07-19 13:05 - 2015-07-19 13:05 - 00025600 _____ () C:\Program Files (x86)\Overwolf\0.87.58.0\CoreAudioApi.dll
2015-07-19 13:05 - 2015-07-19 13:05 - 40555008 _____ () C:\Program Files (x86)\Overwolf\0.87.58.0\libcef.DLL
2015-07-19 13:05 - 2015-07-19 13:05 - 00146432 _____ () C:\Program Files (x86)\Overwolf\0.87.58.0\OWGameEventsConsumer.dll
2015-05-22 17:14 - 2015-07-03 18:12 - 00778240 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-05-22 17:14 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-05-22 17:14 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-05-22 17:14 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-05-22 17:14 - 2015-08-19 22:39 - 02413248 _____ () C:\Program Files (x86)\Steam\video.dll
2015-05-22 17:14 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-05-22 17:14 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-05-22 17:14 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-05-22 17:14 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-05-22 17:14 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-05-22 17:14 - 2015-08-19 22:39 - 00704192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-07-22 07:51 - 2015-07-27 03:13 - 00171008 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-05-22 17:14 - 2015-07-03 18:12 - 39553928 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-08-25 14:16 - 2015-08-25 14:16 - 00086016 _____ () C:\ProgramData\ExtTag\Stockphase.dll
2015-07-19 13:05 - 2015-07-19 13:05 - 00985088 _____ () C:\Program Files (x86)\Overwolf\0.87.58.0\ffmpegsumo.dll
2015-08-25 14:16 - 2015-08-25 14:16 - 01118208 _____ () C:\ProgramData\ExtTag\Treenimlab.dll
2015-08-25 14:16 - 2015-08-25 14:16 - 00364032 _____ () C:\ProgramData\ExtTag\SaoTraxsing.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3703730259-3164073539-163999450-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Freizi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{EBE15FF5-81AF-4A3F-BC6C-F86B4C937AE0}C:\users\freizi\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\freizi\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{15B8DF02-0872-4F86-A930-A6947334E0E3}C:\users\freizi\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\freizi\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DB235751-687A-404F-BAEC-DC5CF9C9EBD7}] => (Allow) C:\WarThunder\launcher.exe
FirewallRules: [{A0E1D6D8-6EC1-44A8-B91E-1AA77FA4A43B}] => (Allow) C:\WarThunder\launcher.exe
FirewallRules: [{878E1220-858E-44A5-8FAC-90E2EE02F79F}] => (Allow) C:\WarThunder\bpreport.exe
FirewallRules: [{E83042FA-12FE-40DC-9D39-4F5B708009E1}] => (Allow) C:\WarThunder\bpreport.exe
FirewallRules: [TCP Query User{97CBD562-7EC1-4828-8FDD-9DB3A545D287}C:\warthunder\aces.exe] => (Allow) C:\warthunder\aces.exe
FirewallRules: [UDP Query User{680E8FFA-C77F-4ECF-BD09-6AA7F54C8234}C:\warthunder\aces.exe] => (Allow) C:\warthunder\aces.exe
FirewallRules: [{A727B749-AD63-4FB4-9E70-7239E5BF64E4}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 16\programs\RM.exe
FirewallRules: [{F5E5F601-DEBC-4E06-8F5C-E498C5D1A262}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 16\programs\RM.exe
FirewallRules: [{2A613705-4860-40C2-9AF8-66A4E34C528E}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 16\programs\NGStudio.exe
FirewallRules: [{5414F5D2-64CA-4D9E-B8F6-C746987D593E}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 16\programs\NGStudio.exe
FirewallRules: [{40CBFB6D-4FEC-48DF-9D99-485FFC50A3D4}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 16\programs\UMI.exe
FirewallRules: [{EBF9E27D-C427-4A9A-8F7D-56FF6D543FA6}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 16\programs\UMI.exe
FirewallRules: [{477FB907-1F9E-42B9-9EDB-4D2C5A12213F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{276F60CC-9C61-4C1B-B61B-BC4254D2D1BA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{1552BF25-4EA5-4703-BB1A-5367AEFFA6A6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{D7E3AD3C-6169-485C-9B89-D7EFD4427CD0}C:\users\freizi\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\freizi\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{9200E93C-ECD6-471F-BC20-66E3017D4FDF}C:\users\freizi\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\freizi\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{057AF6DB-00B5-4EE1-A7C5-ADEE7F6FA0FE}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [UDP Query User{E1AEFC06-AF2D-4CF8-B0E6-A6149BCB9271}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [TCP Query User{58A4108C-9834-4C75-8E9D-D89C272E963F}C:\users\freizi\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\freizi\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{2B172CA2-E9FE-4FE1-9871-E7624E44131C}C:\users\freizi\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\freizi\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{47836355-6294-481D-AC8C-349958066829}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DC3C95C2-C31A-4F11-84DA-F5391991C38F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{52B36202-4584-4731-A9DB-15905A34FEB6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8D9D8C46-8AF5-4BFA-88B8-6AD880A83242}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{5E89A6C6-4F1D-4664-9BC0-56839DCCBDDE}C:\users\freizi\downloads\arena_client 0.54\arena_client 0.54\dta\client.bin] => (Allow) C:\users\freizi\downloads\arena_client 0.54\arena_client 0.54\dta\client.bin
FirewallRules: [UDP Query User{57111DBE-4989-43A9-81C1-6680F8916820}C:\users\freizi\downloads\arena_client 0.54\arena_client 0.54\dta\client.bin] => (Allow) C:\users\freizi\downloads\arena_client 0.54\arena_client 0.54\dta\client.bin
FirewallRules: [{B646793C-1A71-47AC-878D-C955103FBD78}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsx61E3.tmp\CnetInstaller-75627032.exe
FirewallRules: [{87B88759-78C9-4996-B992-7512452CB601}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsx61E3.tmp\CnetInstaller-75627032.exe
FirewallRules: [{623BABE0-019E-4F9C-81F1-E9F4E449B30B}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsz2883.tmp\Installer-75742161.exe
FirewallRules: [{303C56A7-25BF-482C-BD33-553B01857713}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsz2883.tmp\Installer-75742161.exe
FirewallRules: [{886127D5-FA88-4CDE-B7E5-C930DAEF9DA6}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsx6C09.tmp\Installer-75221696.exe
FirewallRules: [{6CD2DDC6-DFB2-4F47-9D52-1BD6407E5B2F}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsx6C09.tmp\Installer-75221696.exe
FirewallRules: [{2F222458-D7EF-437E-B307-E055DBD94165}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsa3EA.tmp\Installer-75221696.exe
FirewallRules: [{5624D71F-59AD-4774-A02C-ADAC6472F788}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsa3EA.tmp\Installer-75221696.exe
FirewallRules: [{9F3ABE7E-0E04-47AF-939D-C5C5E1D220FE}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsv8DFF.tmp\Installer-75221696.exe
FirewallRules: [{55659E26-482B-42AF-9667-B0B53F048159}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsv8DFF.tmp\Installer-75221696.exe
FirewallRules: [{D0506020-526C-410E-B53A-2B3D751D0D8E}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsr47BF.tmp\Installer-75221696.exe
FirewallRules: [{363533AD-0390-41E8-8B78-FA6FD76F70BF}] => (Allow) C:\Users\Freizi\AppData\Local\Temp\nsr47BF.tmp\Installer-75221696.exe
FirewallRules: [TCP Query User{BA05863D-B083-4965-B2CE-9C969C61F325}C:\users\freizi\desktop\nc\nc.exe] => (Allow) C:\users\freizi\desktop\nc\nc.exe
FirewallRules: [UDP Query User{9FCCD62F-0400-47AE-9088-A7DF14CC5E01}C:\users\freizi\desktop\nc\nc.exe] => (Allow) C:\users\freizi\desktop\nc\nc.exe
FirewallRules: [TCP Query User{B27C9A56-07F8-4714-AF39-224A20988590}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe
FirewallRules: [UDP Query User{F5622834-735B-48B3-B6EE-E2F47299D656}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [TCP Query User{3F3337ED-4AFF-4BF8-A784-D4CB6E694FE5}C:\program files (x86)\enemy front proper\bin32\enemyfront.exe] => (Allow) C:\program files (x86)\enemy front proper\bin32\enemyfront.exe
FirewallRules: [UDP Query User{F8CEABEA-DA01-40BB-86AE-A65FC0793656}C:\program files (x86)\enemy front proper\bin32\enemyfront.exe] => (Allow) C:\program files (x86)\enemy front proper\bin32\enemyfront.exe
FirewallRules: [{B8BB39E1-86C7-4FB6-9781-CAFCF1ED2DD6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7BE599B5-1B27-4235-943F-EFD214EFFAE6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7EA25788-099E-46CB-9A78-B6C5E363FB76}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{C7D59A66-5873-4F89-A623-80027B3623C3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{516BB654-A1FC-4F69-8E0E-1A144E392EB2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{BA6D6303-2E3A-4DD6-B95A-C886C44F62CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F0739F25-998A-4AE9-8FB8-117C4231CD22}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{7D4F1F23-72D6-475C-84AA-84C83D3DCBBF}C:\program files (x86)\company of heroes 2\reliccoh2.exe] => (Allow) C:\program files (x86)\company of heroes 2\reliccoh2.exe
FirewallRules: [UDP Query User{A0F250E0-EA78-4863-A389-6ADBF49B1597}C:\program files (x86)\company of heroes 2\reliccoh2.exe] => (Allow) C:\program files (x86)\company of heroes 2\reliccoh2.exe
FirewallRules: [{8C250886-2F0A-42AE-A450-1AC01436F5B0}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{5C2F513E-175A-4F33-B715-9582F6105749}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{753E266B-E9E7-4885-9965-8135B5788BAE}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{BA19829E-DE39-41FA-BB03-D9308227AD79}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{BD3DEAA4-C5B5-4676-97DF-96E0937BEEFB}] => (Allow) C:\ProgramData\CeroHimna\vobawou.exe
FirewallRules: [{2FB3437D-DB54-4769-9ED5-0423F609EC34}] => (Allow) C:\ProgramData\CeroHimna\vobawou.exe
FirewallRules: [{95983F0D-4CA5-4AF1-9C71-EA92D32D1DE0}] => (Allow) C:\ProgramData\CeroHimna\vobawou.exe
FirewallRules: [{1466772C-BB05-4A46-8A7F-A89EF8B03D59}] => (Allow) C:\ProgramData\CeroHimna\vobawou.exe
FirewallRules: [{CCBB20B3-7693-44DF-B2BC-E9C0C808113E}] => (Allow) C:\IQIYI Video\GeePlayer\GeePlayer.exe
FirewallRules: [{F732B467-576E-4FF1-A137-9CD664D3B325}] => (Allow) C:\Users\Freizi\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe
FirewallRules: [{81BB0056-E51C-4178-A4B4-E47B42CAC87B}] => (Allow) C:\IQIYI Video\LStyle\QyClient.exe
FirewallRules: [{5095148C-A881-4570-8D7D-B2E3FECB6C5C}] => (Allow) C:\IQIYI Video\LStyle\QyWebPlayer.exe
FirewallRules: [{9AF90A3C-AA2A-4F85-B118-FFF4BB9F8CD0}] => (Allow) C:\IQIYI Video\Common\QyKernel.exe
FirewallRules: [{AC009156-A02F-42AB-8B98-5E1A7CABCDD7}] => (Allow) C:\IQIYI Video\LStyle\QyPlayer.exe
FirewallRules: [{CF7D032B-7C50-40B5-8D61-C5C3DEFCBBE5}] => (Allow) C:\Users\Freizi\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe
FirewallRules: [{65DFB16D-B689-44FE-BA9D-75FBB992F212}] => (Allow) C:\IQIYI Video\LStyle\QyClient.exe
FirewallRules: [{1721A155-B7D7-4E5C-924C-9204A00D5B4A}] => (Allow) C:\IQIYI Video\LStyle\QyWebPlayer.exe
FirewallRules: [{E58EF16B-809D-4C94-B30E-ECFCC49B80D5}] => (Allow) C:\IQIYI Video\Common\QyKernel.exe
FirewallRules: [{7CCE14B8-8BFB-408F-BDBE-7754A237AAE4}] => (Allow) C:\IQIYI Video\LStyle\QyPlayer.exe
FirewallRules: [{6C948DE6-2005-41D2-8842-34B5DC9D1AC7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{55CC9F53-1091-4F4D-A5EF-1169E4C5D40A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Faulty Device Manager Devices =============

Name: Realtek 8185 Extensible 802.11b/g Wireless Device
Description: Realtek 8185 Extensible 802.11b/g Wireless Device
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp
Service: RTL85n64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/25/2015 08:21:45 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 08:21:45 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (08/25/2015 02:21:46 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 02:21:46 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (08/25/2015 01:58:44 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 01:58:44 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (08/25/2015 01:54:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program Skype_Update.7.8.102.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 6dc

Čas spuštění: 01d0df2ca7ae75af

Čas ukončení: 0

Cesta k aplikaci: C:\Program Files\NixSrv\packages\5c58aeae-e6b5-4470-8a4a-8d73a0c3eb5e\setup\Skype_Update.7.8.102.exe

ID hlášení:

Error: (08/25/2015 01:53:43 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program NixHost.exe verze 1.0.0.689 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: c3c

Čas spuštění: 01d0df2c7d6c43b4

Čas ukončení: 0

Cesta k aplikaci: C:\Program Files\NixSrv\packages\5c58aeae-e6b5-4470-8a4a-8d73a0c3eb5e\NixHost.exe

ID hlášení: e06fc8a1-4b1f-11e5-a0ae-485b39eeb720

Error: (08/25/2015 01:36:10 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 01:36:10 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač


System errors:
=============
Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Steam Client Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ExtTag byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Streamer Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Network Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NixSrv Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba HuaweiHiSuiteService64.exe byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (08/25/2015 02:14:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba HiSuiteOuc64.exe byla neočekávaně ukončena. Tento stav nastal již 1krát.


Microsoft Office:
=========================
Error: (08/25/2015 08:21:45 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 08:21:45 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (08/25/2015 02:21:46 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 02:21:46 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (08/25/2015 01:58:44 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 01:58:44 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (08/25/2015 01:54:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Skype_Update.7.8.102.exe0.0.0.06dc01d0df2ca7ae75af0C:\Program Files\NixSrv\packages\5c58aeae-e6b5-4470-8a4a-8d73a0c3eb5e\setup\Skype_Update.7.8.102.exe

Error: (08/25/2015 01:53:43 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: NixHost.exe1.0.0.689c3c01d0df2c7d6c43b40C:\Program Files\NixSrv\packages\5c58aeae-e6b5-4470-8a4a-8d73a0c3eb5e\NixHost.exee06fc8a1-4b1f-11e5-a0ae-485b39eeb720

Error: (08/25/2015 01:36:10 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (08/25/2015 01:36:10 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač


==================== Memory info ===========================

Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 45%
Total physical RAM: 4094.18 MB
Available physical RAM: 2216.43 MB
Total Virtual: 8186.38 MB
Available Virtual: 5894.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:488.28 GB) (Free:42.39 GB) NTFS
Drive d: () (Fixed) (Total:443.12 GB) (Free:328.41 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0FF9ED49)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================

Snad jsem to udělal spravně