VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-09-2015 01
Ran by gabi (administrator) on GABI-HP (28-09-2015 12:22:00)
Running from C:\Users\gabi\Desktop
Loaded Profiles: gabi (Available Profiles: gabi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\HP HD Webcam [Fixed]\Monitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(ArcSoft, Inc.) C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\audiosrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Portrait Displays, Inc) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(forum.viry.cz) C:\Users\gabi\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2919992 2011-01-27] (Hewlett-Packard Company)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [MfeEpePcMonitor] => C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe [200704 2011-02-09] ()
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-08-19] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-11-25] (Synaptics Incorporated)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [299576 2011-01-29] (Hewlett-Packard Company)
HKLM-x32\...\Run: [File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12274688 2011-02-07] (Hewlett-Packard)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [HP HD Webcam [Fixed]_Monitor] => C:\Program Files (x86)\HP HD Webcam [Fixed]\monitor.exe [267128 2010-11-26] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DTRun] => c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [517456 2010-11-24] (ArcSoft Inc.)
HKLM-x32\...\Run: [HPQuickWebProxy] => c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528 2011-11-10] (Hewlett-Packard Company)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-20] (AVAST Software)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [184736 2012-09-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-08-11] (PDF Complete Inc)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-3242728014-2549106500-174690154-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3242728014-2549106500-174690154-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-01-09] (Google Inc.)
HKU\S-1-5-21-3242728014-2549106500-174690154-1001\...\MountPoints2: {848d0145-3a69-11e1-bab9-806e6f6e6963} - G:\Autorun.exe
HKU\S-1-5-21-3242728014-2549106500-174690154-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
Lsa: [Notification Packages] DPPassFilter EpePcNp64 scecli
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-20] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.10.1.1
Tcpip\..\Interfaces\{9B189F3B-97A3-4981-A0BC-6FCE4F9AFCA2}: [DhcpNameServer] 10.10.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3242728014-2549106500-174690154-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {274daec0-c4e8-4f30-9e5c-9424990769b9} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^0D^xdm271^YYA^cz&si=slot84984&ptb=60FB90DF-1C49-4FFE-B3E8-8DD3F7714200&ind=2014122811&n=780d133b&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3242728014-2549106500-174690154-1001 -> {1F5BBEFD-D4E8-4C3C-AA7E-B7B9712AF1E2} URL = hxxp://www.search.ask.com/web?p2=%5EBBE%5EOSJ0 ... erms}&psv=
SearchScopes: HKU\S-1-5-21-3242728014-2549106500-174690154-1001 -> {274daec0-c4e8-4f30-9e5c-9424990769b9} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^0D^xdm271^YYA^cz&si=slot84984&ptb=60FB90DF-1C49-4FFE-B3E8-8DD3F7714200&ind=2014122811&n=780d133b&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-3242728014-2549106500-174690154-1001 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
BHO: No Name -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-20] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-23] (Google Inc.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: No Name -> {074d3229-0a22-491b-b9dd-ff3171d75f25} -> No File
BHO-x32: No Name -> {0eeaa2c3-0cd7-4364-b82e-f9257081c860} -> No File
BHO-x32: File Sanitizer for HP ProtectTools -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2011-02-07] (Hewlett-Packard)
BHO-x32: No Name -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-09-28] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-20] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-09-28] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-23] (Google Inc.)
Toolbar: HKLM-x32 - No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
Toolbar: HKLM-x32 - No Name - {07189b84-b33b-4a1e-9b32-ad203c983c20} - No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)
Toolbar: HKU\S-1-5-21-3242728014-2549106500-174690154-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-3242728014-2549106500-174690154-1001 -> No Name - {07189B84-B33B-4A1E-9B32-AD203C983C20} - No File
Toolbar: HKU\S-1-5-21-3242728014-2549106500-174690154-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-23] (Google Inc.)

FireFox:
========
FF ProfilePath: C:\Users\gabi\AppData\Roaming\Mozilla\Firefox\Profiles\7a26gg4k.default
FF Homepage: www.seznam.cz
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-09-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-09-28] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-3242728014-2549106500-174690154-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\gabi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-10] (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-11-25]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt => not found

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxps://www.seznam.cz/?clid=22668"
CHR DefaultSearchURL: Default -> hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam
CHR DefaultSuggestURL: Default -> hxxp://suggest.fulltext.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Profile: C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-09]
CHR Extension: (Disk Google) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-09]
CHR Extension: (YouTube) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-09]
CHR Extension: (Vyhledávání Google) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-09]
CHR Extension: (Avast Online Security) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-10]
CHR Extension: (Peněženka Google) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-09]
CHR Extension: (Gmail) - C:\Users\gabi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-09]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-01]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-20] (AVAST Software)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [486224 2011-11-10] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [464440 2011-05-10] (Hewlett-Packard Company)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [647680 2012-01-09] (Macrovision Europe Ltd.) [File not signed]
R3 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1028096 2012-01-09] (Macrovision Europe Ltd.) [File not signed]
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [133688 2011-01-28] (Hewlett-Packard Company)
R2 HPFSService; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [320000 2011-02-07] (Hewlett-Packard) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [281656 2011-01-29] (Hewlett-Packard Company)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1318912 2011-02-09] () [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-11] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [323072 2013-08-19] (IDT, Inc.) [File not signed]
R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [502464 2010-11-11] (ArcSoft, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-03-07] (Xobni Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [32192 2010-11-11] (ArcSoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-07-20] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-07-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-07-20] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-07-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-07-20] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150160 2015-07-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-07-20] (AVAST Software)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [64312 2011-05-10] (Hewlett-Packard Company)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [168008 2011-02-09] (McAfee, Inc.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2612728 2011-02-12] (Sunplus Technology)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-28 12:22 - 2015-09-28 12:22 - 00023071 _____ C:\Users\gabi\Desktop\FRST.txt
2015-09-28 12:20 - 2015-09-28 12:22 - 00000000 ____D C:\FRST
2015-09-28 12:19 - 2015-09-28 12:19 - 00112640 _____ (forum.viry.cz) C:\Users\gabi\Desktop\FRSTLauncher.exe
2015-09-28 12:16 - 2015-09-28 12:16 - 02192384 _____ (Farbar) C:\Users\gabi\Desktop\FRST64.exe
2015-09-09 17:50 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2015-09-09 17:50 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-09-09 17:50 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll
2015-09-09 17:50 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\windows\SysWOW64\InkEd.dll
2015-09-09 17:50 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-09-09 17:50 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-09-09 17:50 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-09-09 17:50 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-09-09 17:50 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2015-09-09 17:50 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-09-09 17:49 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-09-09 17:49 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-09-09 17:49 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-09-09 17:49 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-09-09 17:49 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-09-09 17:49 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-09-09 17:49 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-09-09 17:49 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-09-09 17:49 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-09-09 17:49 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-09-09 17:49 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-09-09 17:49 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-09-09 17:49 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-09-09 17:49 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-09-09 17:49 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-09-09 17:49 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-09-09 17:49 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-09-09 17:49 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-09-09 17:49 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-09-09 17:49 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-09-09 17:49 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-09-09 17:49 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-09-09 17:49 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-09-09 17:49 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 17:49 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-09-09 17:49 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-09-09 17:49 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-09-09 17:49 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-09-09 17:49 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-09-09 17:49 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-09-09 17:49 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-09-09 17:49 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-09-09 17:49 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-09-09 17:49 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-09-09 17:49 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-09-09 17:49 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-09-09 17:49 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-09-09 17:49 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-09-09 17:49 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-09-09 17:49 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-09-09 17:49 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-09-09 17:49 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-09-09 17:49 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-09-09 17:49 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-09-09 17:49 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-09-09 17:49 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-09 17:49 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-09-09 17:49 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-09-09 17:49 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-09-09 17:49 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-09-09 17:49 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-09-09 17:49 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-09-09 17:49 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-09-09 17:49 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-09-09 17:49 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-09-09 17:49 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-09-09 17:49 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-09-09 17:49 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-09-09 17:49 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-09-09 17:49 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-09-09 17:49 - 2015-07-23 02:06 - 05568960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-09-09 17:49 - 2015-07-23 02:06 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-09-09 17:49 - 2015-07-23 02:06 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-09-09 17:49 - 2015-07-23 02:03 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-09-09 17:49 - 2015-07-23 02:03 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-09-09 17:49 - 2015-07-23 02:03 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-09-09 17:49 - 2015-07-23 02:03 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-09-09 17:49 - 2015-07-23 02:03 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-09-09 17:49 - 2015-07-23 02:02 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-09-09 17:49 - 2015-07-23 02:02 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-09-09 17:49 - 2015-07-23 02:02 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-09-09 17:49 - 2015-07-23 02:01 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-09-09 17:49 - 2015-07-23 02:01 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-09-09 17:49 - 2015-07-23 02:01 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-09-09 17:49 - 2015-07-23 01:58 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-09-09 17:49 - 2015-07-23 01:57 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 17:49 - 2015-07-23 01:51 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-09-09 17:49 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-09-09 17:49 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-09-09 17:49 - 2015-07-22 19:54 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-09-09 17:49 - 2015-07-22 19:53 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-09-09 17:49 - 2015-07-22 19:52 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-09-09 17:49 - 2015-07-22 19:52 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-09-09 17:49 - 2015-07-22 19:52 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-09-09 17:49 - 2015-07-22 19:52 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-09-09 17:49 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-09-09 17:49 - 2015-07-22 19:52 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-09-09 17:49 - 2015-07-22 19:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-09-09 17:49 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-09-09 17:49 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-09-09 17:49 - 2015-07-22 18:45 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-09-09 17:49 - 2015-07-22 18:44 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-09-09 17:49 - 2015-07-22 18:44 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-09-09 17:49 - 2015-07-22 18:34 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-09-09 17:49 - 2015-07-22 18:34 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-09-09 17:49 - 2015-07-22 18:31 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 18:31 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 18:31 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 17:49 - 2015-07-22 18:31 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 17:49 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-09-09 17:49 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-09-09 17:49 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-09-09 17:49 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-09-09 17:48 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-09-09 17:48 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-09-09 17:48 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-09-09 17:48 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-09-09 17:48 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-09-09 17:48 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-09-09 17:48 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-09-09 17:48 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-09-09 17:48 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-09-09 17:48 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-09-09 17:48 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-09-09 17:48 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-09-09 17:48 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-09-09 17:48 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-09-09 17:48 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-09-09 17:48 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-09-09 17:48 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-09-09 17:48 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-09-09 17:48 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-09-09 17:48 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-09-09 17:48 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-09-09 17:48 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-09-09 17:48 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-09-09 17:48 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-09-09 17:48 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-09-09 17:48 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-09-09 17:48 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-09-09 17:48 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-09-09 17:48 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-09-09 17:47 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-09-09 17:47 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-09-09 17:47 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-09-09 17:47 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-09-09 17:47 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-09-09 17:47 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-09-09 17:47 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-09-09 17:47 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-09-09 17:47 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-09-09 17:47 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-09-09 17:47 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-09-09 17:47 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-09-09 17:47 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-09-09 17:47 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-09-09 17:47 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-09-03 21:05 - 2015-09-03 21:05 - 00262144 _____ C:\windows\Minidump\090315-35006-01.dmp
2015-09-02 14:09 - 2015-09-02 14:09 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-28 12:20 - 2009-07-14 06:45 - 00028576 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-28 12:20 - 2009-07-14 06:45 - 00028576 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-28 12:17 - 2012-01-09 04:15 - 01558968 _____ C:\windows\WindowsUpdate.log
2015-09-28 12:15 - 2014-01-09 20:48 - 00000952 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-28 12:10 - 2012-01-02 20:41 - 00000000 ____D C:\ProgramData\PDFC
2015-09-28 12:08 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-09-28 12:08 - 2009-07-14 06:51 - 00268522 _____ C:\windows\setupact.log
2015-09-28 11:23 - 2014-03-16 17:48 - 00000000 ____D C:\ProgramData\Oracle
2015-09-28 11:22 - 2014-03-16 17:47 - 00000000 ____D C:\Program Files (x86)\Java
2015-09-28 11:21 - 2014-03-16 17:47 - 00097888 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2015-09-28 11:18 - 2012-11-07 18:14 - 00003962 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{9C8131ED-1C3A-4E96-8A35-C6027C9D412E}
2015-09-28 11:17 - 2012-12-12 20:05 - 00000000 ____D C:\Users\gabi\AppData\Roaming\Skype
2015-09-25 13:42 - 2014-01-09 20:48 - 00000914 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-09-24 14:10 - 2009-07-14 07:08 - 00032556 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-09-23 14:57 - 2013-11-25 12:09 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-09-22 16:33 - 2014-01-09 20:48 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-09-22 16:33 - 2014-01-09 20:48 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-22 16:33 - 2014-01-09 20:48 - 00003852 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-09-21 18:37 - 2012-07-22 18:59 - 00003216 _____ C:\windows\System32\Tasks\HPCeeScheduleForGABI-HP$
2015-09-21 18:37 - 2012-07-22 18:59 - 00000340 _____ C:\windows\Tasks\HPCeeScheduleForGABI-HP$.job
2015-09-21 15:42 - 2012-09-17 16:33 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log
2015-09-21 15:31 - 2012-01-02 19:36 - 00669568 _____ C:\windows\system32\perfh005.dat
2015-09-21 15:31 - 2012-01-02 19:36 - 00141938 _____ C:\windows\system32\perfc005.dat
2015-09-21 15:31 - 2009-07-14 07:13 - 01586170 _____ C:\windows\system32\PerfStringBackup.INI
2015-09-19 08:37 - 2012-10-05 14:23 - 00000000 ____D C:\Users\gabi\AppData\Local\CrashDumps
2015-09-17 15:10 - 2014-01-09 20:48 - 00003948 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-17 15:10 - 2014-01-09 20:48 - 00003696 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-17 15:10 - 2014-01-09 20:48 - 00000948 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-09 20:28 - 2009-07-14 06:45 - 00268800 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-09 20:25 - 2011-02-11 06:47 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 20:25 - 2009-07-14 05:20 - 00000000 ____D C:\windows\PolicyDefinitions
2015-09-09 19:18 - 2013-11-22 19:52 - 00000000 ____D C:\windows\system32\MRT
2015-09-03 21:05 - 2012-12-21 19:18 - 00000000 ____D C:\windows\Minidump
2015-09-03 21:04 - 2012-12-21 19:18 - 521218484 _____ C:\windows\MEMORY.DMP

==================== Files in the root of some directories =======


Some files in TEMP:
====================
C:\Users\gabi\AppData\Local\Temp\APNSetup.exe
C:\Users\gabi\AppData\Local\Temp\AtpTimerInfo.dll
C:\Users\gabi\AppData\Local\Temp\drm_dialogs.dll
C:\Users\gabi\AppData\Local\Temp\DSSExp.exe
C:\Users\gabi\AppData\Local\Temp\Extract.exe
C:\Users\gabi\AppData\Local\Temp\f-g7fpa3.dll
C:\Users\gabi\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\gabi\AppData\Local\Temp\imiof62k.dll
C:\Users\gabi\AppData\Local\Temp\install_flashplayer11x32ax_gtba_chra_dy_aaa_aih.exe
C:\Users\gabi\AppData\Local\Temp\install_flashplayer11x32ax_gtba_chra_dy_aaa_aih_1.exe
C:\Users\gabi\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\gabi\AppData\Local\Temp\puhpofhf.dll
C:\Users\gabi\AppData\Local\Temp\Resource.exe
C:\Users\gabi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\gabi\AppData\Local\Temp\SP52641.exe
C:\Users\gabi\AppData\Local\Temp\SP53858.exe
C:\Users\gabi\AppData\Local\Temp\sp54620.exe
C:\Users\gabi\AppData\Local\Temp\SP54922.exe
C:\Users\gabi\AppData\Local\Temp\SP56488.exe
C:\Users\gabi\AppData\Local\Temp\SP56729.exe
C:\Users\gabi\AppData\Local\Temp\SP57498.exe
C:\Users\gabi\AppData\Local\Temp\sp58915.exe
C:\Users\gabi\AppData\Local\Temp\SP58930.exe
C:\Users\gabi\AppData\Local\Temp\SP59118.exe
C:\Users\gabi\AppData\Local\Temp\SP59202.exe
C:\Users\gabi\AppData\Local\Temp\SP59213.exe
C:\Users\gabi\AppData\Local\Temp\SP59291.exe
C:\Users\gabi\AppData\Local\Temp\SP59529.exe
C:\Users\gabi\AppData\Local\Temp\SP59530.exe
C:\Users\gabi\AppData\Local\Temp\SP60769.exe
C:\Users\gabi\AppData\Local\Temp\SP61104.exe
C:\Users\gabi\AppData\Local\Temp\SP63779.exe
C:\Users\gabi\AppData\Local\Temp\sp64126.exe
C:\Users\gabi\AppData\Local\Temp\SP71068.exe
C:\Users\gabi\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\gabi\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\gabi\AppData\Local\Temp\whq7rhlf.dll
C:\Users\gabi\AppData\Local\Temp\xwcgbzoy.dll
C:\Users\gabi\AppData\Local\Temp\{5F16E107-400E-4770-BAA5-D637CA274AE4}-GoogleToolbarInstaller_updater_signed.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForGABI-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\windows\Tasks\HPCeeScheduleForgabi.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\gabi\Desktop" je 3682 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001


==================== End Of Log ==============================

Zdravim

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

# AdwCleaner v5.009 - Logfile created 28/09/2015 at 19:34:41
# Updated 27/09/2015 by Xplode
# Database : 2015-09-27.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : gabi - GABI-HP
# Running from : C:\Users\gabi\Desktop\adwcleaner_5.009.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
[-] Folder Deleted : C:\Program Files (x86)\SereneScreen
[-] Folder Deleted : C:\Program Files (x86)\MarineAquarium3Free_57
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\AskPartnerNetwork
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SereneScreen
[-] Folder Deleted : C:\Users\gabi\AppData\Local\AskPartnerNetwork
[-] Folder Deleted : C:\Users\gabi\AppData\Local\iac
[-] Folder Deleted : C:\Users\gabi\AppData\Local\MarineAquarium3Free_57
[-] Folder Deleted : C:\Users\gabi\AppData\Local\Temp\apn
[-] Folder Deleted : C:\Users\gabi\AppData\LocalLow\MarineAquarium3Free_57

***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Adobe Flash Player Updater

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.FeedManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.FeedManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.HTMLMenu
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.HTMLMenu.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.HTMLPanel
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.HTMLPanel.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.MultipleButton
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.MultipleButton.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.PseudoTransparentPlugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.PseudoTransparentPlugin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.ScriptButton
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.ScriptButton.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.SettingsPlugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.SettingsPlugin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.ThirdPartyInstaller
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.ThirdPartyInstaller.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.ToolbarProtector
[-] Key Deleted : HKLM\SOFTWARE\Classes\MarineAquarium3Free_57.ToolbarProtector.1
[-] Key Deleted : HKCU\Software\Classes\CLSID\{327F75ED-061B-4339-8CC6-5DD45AD1396D}
[!] Key Not Deleted : HKCU\Software\Classes\CLSID\{327f75ed-061b-4339-8cc6-5dd45ad1396d}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EDA1DCA1-C71D-46E7-B504-6CEFD21EE60D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC721FC9-8900-4E3D-A4BE-359E6AF8E9BB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E55EBB8C-FB31-4A98-A514-4ECC5FD9C634}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F90C885B-332C-4379-965C-3EF665F369DC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD4285FA-3345-4B73-92E5-4DE464EDC3B2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D35349A7-84D1-4A70-8536-E9C1F77DCF5B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C0FD73B4-C692-4061-B36F-BC15B111314C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3ca77147-e5a4-43ba-80b2-efa3245f8d88}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3f9c1414-58f0-4fbb-9ee6-ab948b604ebd}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{536e7ae2-c94c-4256-b035-8ec24e6245dd}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7706dcce-fed8-4ed7-80b2-5f88c33ee317}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94c67622-4e77-495a-9457-c8064c92a228}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ad750e83-1c56-4196-90e3-e5a0f3c5421c}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{C0FD73B4-C692-4061-B36F-BC15B111314C}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{cc721fc9-8900-4e3d-a4be-359e6af8e9bb}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{d35349a7-84d1-4a70-8536-e9c1f77dcf5b}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{dd4285fa-3345-4b73-92e5-4de464edc3b2}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{e55ebb8c-fb31-4a98-a514-4ecc5fd9c634}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{eda1dca1-c71d-46e7-b504-6cefd21ee60d}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{f153e08e-19e7-4ece-bb2b-afe06394c6ea}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{f90c885b-332c-4379-965c-3ef665f369dc}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DA60568C-C30E-4680-ADEA-89BF1DD050EA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5777FB26-1203-4D16-A47F-24B3FF5E0476}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{71AC0D70-4274-4B53-8101-26F7249EAFE4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0A4376DD-C64A-4499-86BA-54578FD3BE3E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1E66D651-C63F-4B5A-8DBB-4C093647BF9B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E3BEAE8-5B73-4AA4-8191-6AAD3E17D7CC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E1700B22-E107-4EC6-943E-5FBBADF213B3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C71EA797-7B15-438B-894A-9AB54D752430}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3C4E958B-177E-4B3A-A998-4B0263A9564D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{638B87E0-5EF3-45FA-ACB8-2C7C67958665}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A1F6969-2069-4036-A0AB-07D4628DF5A1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6F776034-C1E7-41CB-B099-839FCA62E732}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4D12989-AF1C-4363-BFCF-B9AD96D18B0F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB84548C-47C9-4323-820B-9E46B50E9947}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{00C5EDB1-1261-41EB-8FEE-9C0C2CD98058}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D458D0D1-08F3-4DC9-9C67-ADE048AE0EF9}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{00C5EDB1-1261-41EB-8FEE-9C0C2CD98058}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09E63BA3-09C7-4D20-9E4B-2EBAD3BE5B50}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{199350AF-34C3-496F-A764-F4BF91CF2835}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2F868090-A282-4C80-AC30-F743C9BECADF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{83783D62-EC4A-4CDD-ACB3-B2A4BF184959}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A29BA259-04A2-426B-949F-D486E674DF9B}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D458D0D1-08F3-4DC9-9C67-ADE048AE0EF9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DBC4BE0B-800C-4075-9521-A9F6B00D6982}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB84548C-47C9-4323-820B-9E46B50E9947}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FDB8F0C7-ADF7-4A45-B762-FE8EF4970DBD}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5637-4300-76A7-7A786E7484D7}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEAA2C3-0CD7-4364-B82E-F9257081C860}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074D3229-0A22-491B-B9DD-FF3171D75F25}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EDA1DCA1-C71D-46E7-B504-6CEFD21EE60D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CC721FC9-8900-4E3D-A4BE-359E6AF8E9BB}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DD4285FA-3345-4B73-92E5-4DE464EDC3B2}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D35349A7-84D1-4A70-8536-E9C1F77DCF5B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C0FD73B4-C692-4061-B36F-BC15B111314C}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C0FD73B4-C692-4061-B36F-BC15B111314C}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{cc721fc9-8900-4e3d-a4be-359e6af8e9bb}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d35349a7-84d1-4a70-8536-e9c1f77dcf5b}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{dd4285fa-3345-4b73-92e5-4de464edc3b2}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{eda1dca1-c71d-46e7-b504-6cefd21ee60d}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F90C885B-332C-4379-965C-3EF665F369DC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F4D12989-AF1C-4363-BFCF-B9AD96D18B0F}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f90c885b-332c-4379-965c-3ef665f369dc}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4F524A2D-5637-4300-76A7-7A786E7484D7}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{07189B84-B33B-4A1E-9B32-AD203C983C20}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{07189B84-B33B-4A1E-9B32-AD203C983C20}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DA60568C-C30E-4680-ADEA-89BF1DD050EA}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5777FB26-1203-4D16-A47F-24B3FF5E0476}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{71AC0D70-4274-4B53-8101-26F7249EAFE4}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0A4376DD-C64A-4499-86BA-54578FD3BE3E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1E66D651-C63F-4B5A-8DBB-4C093647BF9B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E3BEAE8-5B73-4AA4-8191-6AAD3E17D7CC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E1700B22-E107-4EC6-943E-5FBBADF213B3}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C71EA797-7B15-438B-894A-9AB54D752430}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3C4E958B-177E-4B3A-A998-4B0263A9564D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{638B87E0-5EF3-45FA-ACB8-2C7C67958665}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6A1F6969-2069-4036-A0AB-07D4628DF5A1}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6F776034-C1E7-41CB-B099-839FCA62E732}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F4D12989-AF1C-4363-BFCF-B9AD96D18B0F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5637-4300-76A7-7A786E7484D7}
[-] Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4F524A2D-5637-4300-76A7-7A786E7484D7}]
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\SereneScreen
[-] Key Deleted : HKCU\Software\MarineAquarium3Free_57
[-] Key Deleted : HKCU\Software\AppDataLow\Software\MarineAquarium3Free_57
[-] Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
[-] Key Deleted : HKLM\SOFTWARE\SereneScreen
[-] Key Deleted : HKLM\SOFTWARE\MarineAquarium3Free_57
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SereneScreen Marine Aquarium Lite_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MarineAquarium3Free_57bar Uninstall Internet Explorer
[!] Key Not Deleted : [x64] HKCU\Software\AskPartnerNetwork
[!] Key Not Deleted : [x64] HKCU\Software\SereneScreen
[!] Key Not Deleted : [x64] HKCU\Software\MarineAquarium3Free_57
[-] Key Deleted : [x64] HKLM\SOFTWARE\AskPartnerNetwork
[!] Key Not Deleted : HKU\S-1-5-21-3242728014-2549106500-174690154-1001\Software\AppDataLow\Software\MarineAquarium3Free_57
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F5BBEFD-D4E8-4C3C-AA7E-B7B9712AF1E2}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{274daec0-c4e8-4f30-9e5c-9424990769b9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{274daec0-c4e8-4f30-9e5c-9424990769b9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F5BBEFD-D4E8-4C3C-AA7E-B7B9712AF1E2}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{274daec0-c4e8-4f30-9e5c-9424990769b9}
[!] Key Not Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[!] Key Not Deleted : HKU\S-1-5-21-3242728014-2549106500-174690154-1001\Software\Microsoft\Internet Explorer\SearchScopes\{1F5BBEFD-D4E8-4C3C-AA7E-B7B9712AF1E2}
[!] Key Not Deleted : HKU\S-1-5-21-3242728014-2549106500-174690154-1001\Software\Microsoft\Internet Explorer\SearchScopes\{274daec0-c4e8-4f30-9e5c-9424990769b9}

***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [15048 bytes] ##########

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 28.9.2015
Čas skenování: 20:58
Protokol: malw.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.28.06
Databáze rootkitů: v2015.09.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: gabi

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 619190
Uplynulý čas: 3 hod, 0 min, 25 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 5
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0C1C3D4A-DCFF-443D-A49F-4ABB6AF151AF}, , [41056acbddae5adca6e2209149bb38c8],
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B6E803D8-1514-4AA2-A53E-358400DFBB94}, , [d670e3523b507cba592fab0613f1d927],
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E9E780CC-8821-4B00-B4F9-F4C4F82BE2C7}, , [271f51e4b4d784b28ff9a8095aaa25db],
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECD011BE-BC4C-45DD-85BC-70E5F36806D9}, , [59ed2b0adcaf4bebb2d6d8d99074fe02],
PUP.Optional.ASK.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4F524A2D-5637-4300-76A7-A758B70C1902}, , [a99d2f06c4c756e08ede12c39f6525db],

Hodnoty registru: 5
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0c1c3d4a-dcff-443d-a49f-4abb6af151af}|AppPath, C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin, , [41056acbddae5adca6e2209149bb38c8]
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{b6e803d8-1514-4aa2-a53e-358400dfbb94}|AppPath, C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin, , [d670e3523b507cba592fab0613f1d927]
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e9e780cc-8821-4b00-b4f9-f4c4f82be2c7}|AppPath, C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin, , [271f51e4b4d784b28ff9a8095aaa25db]
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ecd011be-bc4c-45dd-85bc-70e5f36806d9}|AppPath, C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin, , [59ed2b0adcaf4bebb2d6d8d99074fe02]
PUP.Optional.ASK.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4F524A2D-5637-4300-76A7-A758B70C1902}|InstallSource, C:\ProgramData\APN\APN-Stub\ORJ-V7C\, , [a99d2f06c4c756e08ede12c39f6525db]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 50
PUP.Optional.APNToolBar, C:\Users\gabi\AppData\Local\Temp\APNSetup.exe, , [d76fe4516e1d52e429c29525659c2ed2],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\CREXT.DLL.vir, , [d175a98c810a3bfbd5a2bff354b136ca],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57bar.dll.vir, , [95b18fa632599a9c0c6bfbb77e878d73],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57bprtct.dll.vir, , [c5812b0a9bf0c175ec8b2c865aab1ce4],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57datact.dll.vir, , [361063d21b7088ae99debcf6bb4a5ba5],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57dlghk.dll.vir, , [f35347ee6328ba7cd2a57d353ec74bb5],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57dlghk64.dll.vir, , [63e3a88def9cf5411f587a38b352fa06],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57feedmg.dll.vir, , [b6904aeb682310262552b3ffaa5b41bf],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57highin.exe.vir, , [68debe779eed70c6ed8a07ab8283857b],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57hkstub.dll.vir, , [e0662e07315a89ad40377e3405009d63],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57htmlmu.dll.vir, , [89bd9e978b00ce68fa7d585a57ae1fe1],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57httpct.dll.vir, , [a3a3e05594f7c76fa0d72f83679ef808],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57idle.dll.vir, , [ad9976bfcfbc7cbadd9aefc3778e857b],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57medint.exe.vir, , [16307fb6d6b551e524537c36cb3a07f9],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57mlbtn.dll.vir, , [c383fc393952c472aacdf9b95aab18e8],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57Plugin.dll.vir, , [be8887ae1d6efc3a5720634fd72e7789],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57reghk.dll.vir, , [182eba7b523991a5492e0ca69273b050],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57regiet.dll.vir, , [1f27cf66ec9f95a1accb9b17e421c739],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57script.dll.vir, , [192d9c99aeddd363b6c1c6ec9d6805fb],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57skin.dll.vir, , [c58152e3dead7abc97e0337f5fa6c63a],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57skplay.exe.vir, , [80c6f83dd8b3ca6c85f24270df26df21],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57SrcAs.dll.vir, , [fa4c91a4b0dba492b9be09a940c5b848],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57tpinst.dll.vir, , [4501a98cf09b22144037c6ecc04550b0],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\APPINTEGRATORSTUB.DLL.vir, , [d472f63fe5a672c4e88ff4be32d3d62a],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\AppIntegratorStub64.dll.vir, , [6dd9f63f25668aac1067951d35d038c8],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\ASSISTMONITOR.DLL.vir, , [bf87d16413788bab8aed931fb74ebd43],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\ASSISTMONITOR64.DLL.vir, , [60e6fd382368f6400c6b941e1ee77b85],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\CrExtP57.exe.vir, , [98aea590acdffe3883f4ae04e61fbd43],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\DPNMNGR.DLL.vir, , [271f260f0487cd69ee898d25f114d52b],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\FF-NativeMessagingDispatcher.dll.vir, , [67df81b4becd171ff186149efc09cf31],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\HKFXMGR.DLL.vir, , [1c2a87ae4942a98d314642709471e719],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\HKFXMGR64.DLL.vir, , [81c588add6b5290dd3a40ca6858049b7],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\HPG.DLL.vir, , [bd89fa3b3952f83ee592f9b991749967],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\Hpg64.dll.vir, , [da6c66cf92f94aec2552773b61a4dc24],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\T8EPMSUP.DLL.vir, , [a1a550e55536a492581f7042f213e31d],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\T8EXTEX.DLL.vir, , [cc7a3afbff8cad8983f4d5dd976ea957],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\T8EXTPEX.DLL.vir, , [fc4a33029cef063080f7486ade273ec2],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\T8HTML.DLL.vir, , [72d45adb612a181e5324a50d40c55ba5],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\T8RES.DLL.vir, , [76d0e35265263006db9c852dc3426d93],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\T8TICKER.DLL.vir, , [51f5f63f1a715bdbff78862c54b1b947],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\TOOLBARGUARD.DLL.vir, , [8db9270e4e3d96a00b6c8a283ec715eb],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\TOOLBARGUARD64.DLL.vir, , [2d190035d0bbdc5a8fe84f636f960df3],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\TPIMANAGERCONSOLE.EXE.vir, , [10364ce944477eb89bdcb3ff8283748c],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\VERIFY.DLL.vir, , [b690bb7a3853330383f489290005ed13],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL.vir, , [a5a1bd78731852e47502e7cb8b7abf41],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL.vir, , [c5816acb02891224bfb8f4bedb2a9b65],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE.vir, , [5beb78bd276491a5690e8f23ff064cb4],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\assists\ie_enable\ARBITER.DLL.vir, , [7fc75adbf19add5912655c5632d344bc],
PUP.Optional.MindSpark, C:\AdwCleaner\Quarantine\C\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\assists\ie_enable\ARBITER64.DLL.vir, , [2a1c5cd9c7c4b581d3a4278ba3626898],
Malware.Trace, C:\Users\gabi\Desktop\.url, , [4204fc39c7c4f2442d33206707fc4db3],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

kviki píše:Malware.Trace, C:\Users\gabi\Desktop\.url, , [4204fc39c7c4f2442d33206707fc4db3],

Tohle znate?


Vsechny nalezy nechte odstranit (ten, na ktery se ptam, necham na vas). Po odstraneni a restartu pc test s MBAM zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.




7.11. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975