VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

worm vbs jenxcus

https://forum.viry.cz:443/viewtopic.php?t=147185

Stránka 1 z 2

worm vbs jenxcus

Napsal: 12 pro 2015 19:47
od radek.ctibor
Dobrý den,

zřejmě jsem si do počítače nátahl virus worm vbs jenxcus, který mi zablokoval data na dvou flashkách. Soubory na nich se zobrazují jen jako zástupce, ale data na nich jsou, když jsem flashku připojil k settop boxu, tak jsem soubory normálně otevřel a spustil. Prosím, jak je možné tento vir odstranit a obnovit data na flashkách? Předem děkuji za odpověď.

Re: worm vbs jenxcus

Napsal: 12 pro 2015 20:04
od Rudy
Zdravím!
PC můžeme vyčistit. Nejprve flešku připojte a pusťte na ni USBFix: http://forum.viry.cz/viewtopic.php?f=24&t=140144 .

Re: worm vbs jenxcus

Napsal: 14 pro 2015 18:05
od radek.ctibor
Děkuji moc za pomoc, obě flasky jsem připojil a nechal vyčistit USBFixem a data jsou opět na světě! :D

Re: worm vbs jenxcus

Napsal: 14 pro 2015 18:21
od Rudy
Tak to jsem rád. Nebylo by ale od věci kouknout se do PC, jestli tam něco nezbylo. Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Re: worm vbs jenxcus

Napsal: 16 pro 2015 20:04
od radek.ctibor
Zdravím, posílám požadované soubory FRST a Addition. Snad v PC už žádný vir není :-)

Re: worm vbs jenxcus

Napsal: 16 pro 2015 21:08
od Rudy
Zatím je tu nevidím. :)

Re: worm vbs jenxcus

Napsal: 17 pro 2015 16:16
od radek.ctibor
Zřejmě je to jako přílohu nenačetlo. Tak druhý pokus :-)

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:16-12-2015 03
Ran by Cynik (administrator) on CYNIK-HP (16-12-2015 19:39:26)
Running from D:\Downloads\Programs
Loaded Profiles: Cynik (Available Profiles: Cynik)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(ACD Systems) C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16407296 2015-11-02] (Realtek Semiconductor)
HKLM-x32\...\Run: [ACPW05EN] => C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe [822384 2011-11-17] (ACD Systems)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [200704 2007-08-07] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-04] (AVAST Software)
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2741616 2011-03-04] (Hewlett-Packard Company)
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3911248 2015-12-04] (Tonec Inc.)
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Winlogon: [Shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-04] (AVAST Software)
Startup: C:\Users\Cynik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk [2013-03-09]
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sasnative64SmartDefragBootTime.exe
CHR HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.40.68.2 195.129.12.83
Tcpip\..\Interfaces\{F2738CA7-B2BB-4F49-BA38-EAFC8FBC7461}: [DhcpNameServer] 62.40.68.2 195.129.12.83

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> {AA05920B-91DF-4DB1-9151-63AE892C4CF4} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10809
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-09-28] (Internet Download Manager, Tonec Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-25] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-09-28] (Internet Download Manager, Tonec Inc.)
BHO-x32: No Name -> {1bb173b0-6833-417b-bdcf-df277f01407e} -> No File
BHO-x32: No Name -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
BHO-x32: No Name -> {741CDDFF-4C8B-2B84-5E08-58AA8A3D4D24} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-25] (AVAST Software)
BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No File
Toolbar: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> No Name - {8721248B-7D30-4CFD-9674-A52BCC829178} - No File

FireFox:
========
FF ProfilePath: C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default
FF DefaultSearchEngine: Google
FF DefaultSearchEngine,S:
FF DefaultSearchUrl: hxxps://www.google.com/search
FF SearchEngineOrder.1: Google
FF SearchEngineOrder.1,S:
FF SelectedSearchEngine,S:
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxps://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\user.js [2015-12-16]
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-11-09]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\Extensions\ascsurfingprotection@iobit.com [2015-11-23] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha8187.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8187\ff => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta732.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ff => not found
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-05]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-05]
FF HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Cynik\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Cynik\AppData\Roaming\IDM\idmmzcc5 [2015-12-16] [not signed]
FF HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-31]
CHR Extension: (Docs) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-31]
CHR Extension: (Disk Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-31]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2015-10-13]
CHR Extension: (YouTube) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-31]
CHR Extension: (IDM Integration Module) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2015-03-31]
CHR Extension: (Peněženka Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-31]
CHR Extension: (Gmail) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-11-09]
CHR HKLM-x32\...\Chrome\Extension: [amofhgcalenomeclpnchhlebcaidoinn] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8187\ch\WebexpEnhancedV1alpha8187.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [ddhfljgmjifmmddjibnaokklegljfbeb] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ch\VideoPlayerV3beta732.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-25]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-11-09]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [827680 2015-11-04] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-04] (AVAST Software)
R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [87336 2012-01-12] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [75048 2012-01-12] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [296232 2012-01-12] (CyberLink)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-11-10] (IObit)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-07] (Electronic Arts)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
S3 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [307456 2015-11-02] (Realtek Semiconductor)
S3 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [2715824 2013-11-14] (Protection Technology)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-04] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [60928 2015-09-28] (GenesysLogic)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-09-28] (REALiX(tm))
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [82928 2011-10-27] (Cyberlink Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 Pcouffin64; C:\Windows\System32\Drivers\pcouffin64a.sys [80640 2013-01-12] (VSO Software) [File not signed]
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys [19952 2015-06-01] ()
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [404184 2015-12-02] (Realsil Semiconductor Corporation)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32936 2015-12-02] (Synaptics Incorporated)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [146928 2012-01-11] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-16 19:39 - 2015-12-16 19:39 - 00000000 ____D C:\FRST
2015-12-14 16:17 - 2015-12-14 16:17 - 00055168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\oamwxkwm.sys
2015-12-14 16:03 - 2015-12-14 16:21 - 00000000 ____D C:\UsbFix
2015-12-14 16:03 - 2015-12-14 16:03 - 00001459 _____ C:\Users\Cynik\Desktop\UsbFix.lnk
2015-12-12 22:20 - 2015-12-12 22:20 - 00000000 ____D C:\Windows\system32\log
2015-12-12 22:17 - 2015-12-12 22:17 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\Elex-tech
2015-12-11 15:58 - 2015-12-11 15:58 - 00003330 _____ C:\Windows\System32\Tasks\WindowsUpda2ta
2015-12-09 01:38 - 2015-12-09 01:38 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-12-09 01:38 - 2015-12-09 01:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-12-08 19:53 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-08 19:53 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-08 19:53 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-08 19:53 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-08 19:53 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-08 19:53 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-08 19:53 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-08 19:53 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-08 19:53 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-08 19:53 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-08 19:53 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-08 19:53 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-08 19:53 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-08 19:53 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-08 19:53 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-08 19:53 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-08 19:53 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-08 19:53 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-08 19:53 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-08 19:53 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-08 19:53 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-08 19:53 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-08 19:53 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-08 19:53 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-08 19:53 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-08 19:53 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-08 19:53 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-08 19:53 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-08 19:53 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-08 19:53 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-08 19:53 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-08 19:53 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-08 19:53 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-08 19:53 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-08 19:53 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-08 19:53 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-08 19:53 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-08 19:53 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-08 19:53 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-08 19:53 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-08 19:53 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-08 19:53 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-08 19:53 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-08 19:53 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-08 19:53 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-08 19:53 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-08 19:53 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-08 19:53 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-08 19:53 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-08 19:53 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-08 19:53 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-08 19:53 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-08 19:53 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-08 19:53 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-08 19:53 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-08 19:53 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-08 19:53 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-08 19:53 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-08 19:53 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-08 19:53 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-08 19:52 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-08 19:52 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-08 19:52 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-08 19:52 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-08 19:50 - 2015-12-08 19:51 - 01430554 _____ C:\Users\Cynik\Downloads\Eliška 12-2015.pdf
2015-12-08 19:49 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-08 19:49 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-08 19:49 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-08 19:49 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-08 19:49 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-08 19:49 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-08 19:48 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-08 19:48 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-08 19:48 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-08 19:48 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-08 19:48 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-08 19:48 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-08 19:48 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-08 19:48 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-08 19:48 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-08 19:48 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-08 19:48 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-08 19:48 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-08 19:48 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-08 19:43 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-08 19:43 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-12-04 18:33 - 2015-12-04 18:33 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-12-04 18:33 - 2015-12-04 18:33 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2015-12-04 18:33 - 2015-12-04 18:33 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 17:14 - 2015-12-02 17:14 - 00001269 _____ C:\Users\Cynik\Desktop\Medal Of Honor 4.lnk
2015-12-02 14:31 - 2015-12-02 14:31 - 00404184 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys
2015-12-02 14:30 - 2015-12-02 14:30 - 00032936 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2015-11-28 01:25 - 2015-11-28 01:25 - 00003348 _____ C:\Windows\System32\Tasks\{0750A236-8D3E-4571-96F7-A0D19AA858A4}
2015-11-28 01:20 - 2015-12-02 17:15 - 00000000 ____D C:\Users\Cynik\Documents\EA Games
2015-11-28 01:18 - 2015-11-28 01:18 - 00003552 _____ C:\Windows\System32\Tasks\{D78EBE3C-B179-4C14-A601-80B98FBF36F4}
2015-11-26 15:33 - 2015-11-26 17:41 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\Microsoft Games
2015-11-26 15:06 - 2015-11-26 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears of War
2015-11-23 20:02 - 2015-12-16 00:34 - 00002271 _____ C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
2015-11-23 20:02 - 2015-11-23 20:02 - 00003180 _____ C:\Windows\System32\Tasks\ASC9_PerformanceMonitor
2015-11-23 20:02 - 2015-11-23 20:02 - 00002868 _____ C:\Windows\System32\Tasks\ASC9_SkipUac_Cynik
2015-11-23 20:02 - 2015-11-23 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2015-11-23 20:02 - 2015-11-23 20:02 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-16 19:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-16 19:31 - 2012-12-31 11:02 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-16 19:04 - 2013-01-04 16:03 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-16 15:27 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-16 15:27 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-16 15:22 - 2015-09-28 12:49 - 00003242 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2015-12-16 15:22 - 2015-09-28 12:49 - 00002874 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Cynik)
2015-12-16 15:19 - 2013-01-04 16:03 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-16 15:19 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-16 13:07 - 2012-12-31 00:53 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\DMCache
2015-12-14 18:32 - 2012-12-31 08:52 - 00677576 _____ C:\Windows\system32\perfh005.dat
2015-12-14 18:32 - 2012-12-31 08:52 - 00146494 _____ C:\Windows\system32\perfc005.dat
2015-12-14 18:32 - 2009-07-14 06:13 - 01611912 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-14 18:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-14 17:11 - 2015-08-04 13:24 - 00002904 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Cynik
2015-12-14 13:28 - 2015-08-04 13:24 - 00000000 ____D C:\ProgramData\ProductData
2015-12-13 18:57 - 2012-12-31 00:23 - 00000000 ____D C:\Users\Cynik
2015-12-13 13:07 - 2015-02-20 12:52 - 00000000 ____D C:\Users\Cynik\Documents\EMDB
2015-12-13 13:06 - 2015-02-20 12:52 - 00000000 ____D C:\Program Files (x86)\EMDB
2015-12-12 22:34 - 2014-01-19 01:32 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-12-12 20:17 - 2014-01-19 01:06 - 00000000 ____D C:\ProgramData\IObit
2015-12-12 20:16 - 2015-08-04 13:24 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\IObit
2015-12-12 20:16 - 2014-01-19 01:06 - 00000000 ____D C:\Program Files (x86)\IObit
2015-12-12 19:54 - 2013-10-21 11:10 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-09 09:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-12-09 08:37 - 2009-07-14 05:45 - 00349424 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 04:39 - 2012-12-31 00:40 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-09 01:41 - 2012-12-31 00:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 01:40 - 2012-12-31 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 01:39 - 2012-12-31 21:43 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 01:39 - 2012-12-31 21:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 01:36 - 2013-07-11 23:38 - 00000000 ____D C:\Windows\system32\MRT
2015-12-09 00:32 - 2012-12-31 11:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-09 00:32 - 2012-12-31 11:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-09 00:32 - 2012-12-31 11:02 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-07 18:11 - 2012-12-31 09:50 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\uTorrent
2015-12-07 14:30 - 2014-03-29 22:23 - 00000000 ____D C:\ProgramData\Origin
2015-12-07 12:38 - 2014-08-13 19:55 - 00000000 ____D C:\Users\Cynik\AppData\Local\CAPCOM
2015-12-05 13:07 - 2015-06-24 12:37 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2015-12-04 23:46 - 2015-06-24 12:37 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\IDM
2015-12-04 18:33 - 2014-04-28 10:31 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00450504 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-12-02 20:02 - 2014-12-09 19:57 - 00000000 ____D C:\Users\Cynik\Documents\Street Racing Syndicate
2015-12-02 17:42 - 2012-12-31 00:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-02 14:58 - 2013-01-04 16:03 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 14:58 - 2013-01-04 16:03 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 14:32 - 2015-09-28 12:49 - 00002165 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2015-11-28 12:53 - 2015-07-01 14:12 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-28 01:20 - 2013-01-01 19:17 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-11-26 22:09 - 2013-01-11 16:45 - 00017920 _____ C:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-26 15:33 - 2010-02-28 20:05 - 00000000 ____D C:\Users\Cynik\Documents\My Games
2015-11-25 22:35 - 2013-10-09 21:34 - 00047104 _____ C:\Windows\SysWOW64\KMVIDC32.DLL
2015-11-25 12:16 - 2015-11-12 21:19 - 00001381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2015-11-25 12:16 - 2015-11-12 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2015-11-25 12:16 - 2015-08-04 13:24 - 00001369 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-11-25 12:14 - 2015-09-28 12:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-11-23 20:02 - 2015-08-04 13:24 - 00000000 ____D C:\Users\Cynik\AppData\LocalLow\IObit
2015-11-23 19:10 - 2012-12-31 21:13 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-23 09:41 - 2015-10-27 09:32 - 86179840 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 86179840 _____ C:\Windows\system32\config\SOFTWARE.iodefrag
2015-11-23 09:41 - 2015-10-27 09:32 - 01052672 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 01052672 _____ C:\Windows\system32\config\DEFAULT.iodefrag
2015-11-23 09:41 - 2015-10-27 09:32 - 00065536 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 00065536 _____ C:\Windows\system32\config\SAM.iodefrag
2015-11-23 09:41 - 2015-10-27 09:32 - 00028672 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 00028672 _____ C:\Windows\system32\config\SECURITY.iodefrag
2015-11-19 21:54 - 2015-07-07 18:25 - 00000000 ____D C:\Program Files\Rockstar Games
2015-11-16 01:17 - 2009-07-14 06:08 - 00032576 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======

2013-01-11 16:45 - 2015-11-26 22:09 - 0017920 _____ () C:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-01-03 16:02 - 2013-01-03 16:02 - 0000093 _____ () C:\Users\Cynik\AppData\Local\fusioncache.dat
2014-10-06 14:42 - 2014-10-06 14:42 - 0002662 _____ () C:\Users\Cynik\AppData\Local\recently-used.xbel

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

a ADDITION

Additional scan result of Farbar Recovery Scan Tool (x64) Version:16-12-2015 03
Ran by Cynik (2015-12-16 19:41:14)
Running from D:\Downloads\Programs
Windows 7 Professional Service Pack 1 (X64) (2012-12-30 23:23:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4073195468-1047248204-2128101136-500 - Administrator - Disabled)
ASPNET (S-1-5-21-4073195468-1047248204-2128101136-1004 - Limited - Enabled)
Cynik (S-1-5-21-4073195468-1047248204-2128101136-1000 - Administrator - Enabled) => C:\Users\Cynik
Guest (S-1-5-21-4073195468-1047248204-2128101136-501 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\uTorrent) (Version: 3.4.1.31139 - BitTorrent Inc.)
ACDSee Pro 5 (HKLM-x32\...\{35E0BA9D-3AFE-402A-99CA-D94FE1E73D18}) (Version: 5.3.168 - ACD Systems International Inc.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.241 - Adobe Systems Incorporated)
Adobe Audition CS5.5 (HKLM-x32\...\{D5B1535A-FDFC-4B40-B2E2-21DA83D9CB57}) (Version: 4.0 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Advanced SystemCare 9 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 9.0.3 - IObit)
Age of Conan: Unchained (HKLM-x32\...\Age of Conan_is1) (Version: - Funcom)
Age of Empires II HD (c) Microsoft Studios version 1 (HKLM-x32\...\QWdlIG9mIEVtcGlyZXMgSUkgSEQgKGMpIE1pY3Jvc29mdCBTdHVkaW9z_is1) (Version: 1 - )
Aiseesoft Total Video Converter Platinum 6.3.22 (HKLM-x32\...\{3661F243-518C-4d05-8BDF-7B10CC22689F}_is1) (Version: - )
Aktualizace NVIDIA 2.5.15.54 (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Alone In The Dark (HKLM-x32\...\Alone In The Dark_is1) (Version: - )
ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version: - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9045 - )
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: - Online Media Technologies Ltd.)
BioShock 2 1.5.0.0.19 (HKLM-x32\...\BioShock 2_is1) (Version: - )
Black Mesa (CZ Dabing) (HKLM-x32\...\FPD_BM_is1) (Version: 1.0 - Fénix ProDabing)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.53.1034 - Webteh, d.o.o.)
CanoScan Toolbox Ver4.9 (HKLM-x32\...\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}) (Version: - )
CCleaner (HKLM-x32\...\CCleaner) (Version: - Piriform)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1312.54 - CyberLink Corp.)
Driver Booster 3.1 (HKLM-x32\...\Driver Booster_is1) (Version: 3.1 - IObit)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Easy CD-DA Extractor 12 (HKLM-x32\...\Easy CD-DA Extractor 12) (Version: 12.0.4 - Poikosoft)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EMDB 2.26 (HKLM-x32\...\EMDB_is1) (Version: - Wicked & Wild Inc.)
Emperor: Battle For Dune (HKLM-x32\...\Emperor) (Version: - )
Fallout New Vegas - Ultimate Edition (HKLM-x32\...\Fallout New Vegas - Ultimate Edition_is1) (Version: - )
Far Cry (Patch 1.4) (x32 Version: 1.00.0000 - Název společnosti:) Hidden
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
High-Definition Video Playback (x32 Version: 7.3.10800.5.0 - Nero AG) Hidden
Hitman Sniper Challenge (HKLM-x32\...\Hitman Sniper Challenge_is1) (Version: - )
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.1.0.7 - IObit)
Jade Empire (HKLM-x32\...\{DD401D5B-35E2-4EA4-8585-4A44CB2DCC78}) (Version: - BioWare Corp.)
LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe)
Majesty 2: The Fantasy Kingdom Sim (HKLM-x32\...\{CDCA3C32-FCE7-40E8-8CB5-7B0E87ADDFC9}_is1) (Version: 1.0.0.0 - Paradox Interactive)
MediaInfo 0.7.68 (HKLM\...\MediaInfo) (Version: 0.7.68 - MediaArea.net)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft)
Mozilla Firefox 42.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 cs)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
MPEG Video Wizard DVD 5.0.0.110 (10/2010) (HKLM-x32\...\{9FD45917-95E6-449D-ACC9-01E634A34CBD}_is1) (Version: 5.0.0.110 - Womble Multimedia, Inc.)
MPEG Video Wizard DVD 5.0.0.110 (10/2010) (HKLM-x32\...\Mpeg Video Wizard DVD 5.0) (Version: 5.0.0.110 (10/2010) - Womble Multimedia, Inc.)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG)
Nero 10 Kwik Themes 3 (HKLM-x32\...\{DD238642-14C7-4D54-8BD7-FAD6DEA9999B}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Kwik Themes 4 (HKLM-x32\...\{A70B0C7B-3527-4D53-A694-E9492ECE9EE1}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 PiP EffectPack 1 (HKLM-x32\...\{EF3A4DAE-F16F-4AC1-87BB-FE00A784084F}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Video TransitionPack 1 (HKLM-x32\...\{85BEC8F6-9AA3-43FF-B56B-8276277137B3}) (Version: 10.6.10000.0.0 - Nero AG)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10600.4.100 - Nero AG)
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10500.3.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10400.0.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10200.0.100 - Nero AG)
Nero Multimedia Suite 10 Platinum HD (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.6.11800 - Nero AG)
NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.92 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.92 - NVIDIA Corporation)
NVIDIA PhysX (Legacy) (HKLM-x32\...\{6F9D5A0B-202C-4161-BC7F-0664EA39E7E7}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 341.92 (Version: 341.92 - NVIDIA Corporation) Hidden
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 3.5.109 - PDF Complete, Inc)
Plants vs. Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: - )
PowerISO 1.00 (HKLM-x32\...\PowerISO 1.00) (Version: - )
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.1.59.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7628 - Realtek Semiconductor Corp.)
Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version: - Capcom)
RivaTuner v2.23 (HKLM-x32\...\RivaTuner) (Version: v2.23 - Alexey Nicolaychuk)
S.T.A.L.K.E.R. - Shadow of Chernobyl (HKLM-x32\...\{17D7E5F0-19E0-4D25-9AE9-96855FF16E04}) (Version: 1.0006 - THQ)
ScanSoft OmniPage SE 4.0 (HKLM-x32\...\{C1E693A4-B1D5-4DCD-B68D-2087835B7184}) (Version: 15.00.0020 - Nuance Communications, Inc.)
Shadow Warrior Classic (1997) (HKLM-x32\...\Steam App 238070) (Version: - 3D Realms)
SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
Sleeping Dogs™ (HKLM-x32\...\Steam App 202170) (Version: - United Front Games)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.3 - IObit)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
Street Racing Syndicate (TM) (HKLM-x32\...\{1CC535A8-BD37-4AD5-BF85-1C366873BA47}) (Version: 1.00.0000 - )
Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - )
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.3 - IObit)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.56 - Ghisler Software GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
UsbFix (HKLM-x32\...\Usbfix) (Version: 7.181 - El Desaparecido - www.usbfix.net - www.sosvirus.net)
Web Translator (HKLM-x32\...\Web Translator) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.621 - Nullsoft, Inc)
Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Worms2 (HKLM-x32\...\InstallShield_{69403657-0D76-41F9-97B3-BF243F023A4E}) (Version: 1.00.0000 - Team17 Ltd)
Worms2 (x32 Version: 1.00.0000 - Team17 Ltd) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2012-12-31 10:28 - 00002037 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1 www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
127.0.0.1 www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net# Any other entries you had go here (new line no # no space);

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02F98434-5C61-486D-B8C3-5CB2C87D7E85} - System32\Tasks\{2C104403-BC61-487F-A75E-C38D2586AB43} => pcalua.exe -a "D:\Program Files (x86)\Far Cry\setup32.exe" -d "D:\Program Files (x86)\Far Cry"
Task: {1974B4CE-FEE7-49E4-BF4D-AA90936A6359} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-11-18] (IObit)
Task: {20A0D82D-9764-44B0-A857-088B7578F629} - System32\Tasks\{5ADDD74F-8B63-4835-A719-2E553DF23827} => pcalua.exe -a "N:\Downloads\Games\Lego Batman\Lego-Batman\Lego Batman\setup.exe" -d "N:\Downloads\Games\Lego Batman\Lego-Batman\Lego Batman"
Task: {353CC068-CEE3-4997-A434-CBD6CE917762} - System32\Tasks\{9BA2D3C9-C980-4321-BEA0-4CAB21BF5D52} => pcalua.exe -a "D:\Program Files (x86)\Bioshock_CZ.exe" -d "D:\Program Files (x86)"
Task: {3C998F6B-5914-4379-ACEC-ECD89CA5DDFE} - System32\Tasks\{6B90DC13-AEDC-4977-A4EA-0AF4990AFE88} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{0FFC48C5-C74B-498E-B908-74CB44D30E32}\setup.exe" -c -runfromtemp -l0x0405
Task: {5DB955C7-D20F-4604-93FE-313065A16965} - System32\Tasks\SmartDefrag4_Startup => C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe [2015-10-27] (IObit)
Task: {5F763D94-9F57-41AB-94F7-0CA6520DC09B} - System32\Tasks\{1880876C-FD3C-466C-8508-7FFE0E41A5EE} => pcalua.exe -a G:\SETUP.EXE -d G:\
Task: {646BFBE3-77DA-494A-BAE4-4DEFF95E9D2D} - System32\Tasks\AdobeAAMUpdater-1.0-Cynik-HP-Cynik => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {67850DCC-3E06-497E-8F97-DEAAABF6656A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {7014693D-9D78-49EE-9B6B-80DF815BCD59} - System32\Tasks\{D6BF5033-46F4-4628-A0CC-1A42206FE156} => pcalua.exe -a G:\SETUP.EXE -d G:\
Task: {747D3809-F0A8-4531-9B48-5F94FBE2AD0A} - System32\Tasks\{0153BE0D-63FF-40ED-A121-A48C335BEB58} => pcalua.exe -a "G:\Downloads\Games\Mortal Kombat - Komplete Edition [cracked]\setup.exe" -d "G:\Downloads\Games\Mortal Kombat - Komplete Edition [cracked]"
Task: {750DC189-FCB2-46F7-92E3-AB5374AC0062} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-04] (AVAST Software)
Task: {90224076-AB22-4E53-9A4F-3F80FBCAFC7B} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-08-21] (IObit)
Task: {913338B8-4A7F-41E0-9967-08F9DEF016DB} - System32\Tasks\ASC9_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [2015-12-03] (IObit)
Task: {9B22F2AC-FFA1-4ACF-9F25-4B99F73C3E5F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-16] (AVAST Software)
Task: {9D628366-FB88-4F0C-B22A-B7766C792378} - System32\Tasks\WindowsUpda2ta => C:\Users\Cynik\AppData\Roaming\MICROSOFT\easy cd-da extractor -Crack Activator 2015.vbs <==== ATTENTION
Task: {A4EA8660-BE0E-4138-B434-6CA6D8CDA1DE} - System32\Tasks\{49D5C927-2CEF-43AD-949D-B81A305C5584} => pcalua.exe -a G:\Setup.exe -d G:\
Task: {B61431AF-6275-4033-A7BB-D2014DBE47AD} - System32\Tasks\Driver Booster SkipUAC (Cynik) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-11-18] (IObit)
Task: {CB995AD3-CC2F-47EE-82D8-4491F92A0C08} - System32\Tasks\Uninstaller_SkipUac_Cynik => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-10-20] (IObit)
Task: {D2D781C5-993B-4BD1-8E7C-781235C297AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {D345D679-6CBD-40F3-8566-602155F82E92} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {DB963C40-06E5-4132-9E33-CF2A30CC9EF8} - System32\Tasks\{0750A236-8D3E-4571-96F7-A0D19AA858A4} => pcalua.exe -a "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\CZ Preklad\mohpacificassault_cz.exe" -d "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\CZ Preklad"
Task: {DDA3CC5A-D5E3-4E82-AF8F-2A63A8654B19} - System32\Tasks\ASC9_SkipUac_Cynik => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2015-11-18] (IObit)
Task: {EC10C28E-E843-437D-B4FD-5044837F8797} - System32\Tasks\{D78EBE3C-B179-4C14-A601-80B98FBF36F4} => pcalua.exe -a "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\Medal of Honor - Pacific Assault CZ (FULL PC GAME)\CZ Preklad\mohpacificassault_cz.exe" -d "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\Medal of Honor - Pacific Assault CZ (FULL PC GAME)\CZ Preklad"
Task: {F3F47684-EDDA-4591-B6B6-5A14911A0FF0} - System32\Tasks\{76EEFD1A-F139-44E0-A9F0-C0A40EE4F577} => pcalua.exe -a "D:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\setup-bp.exe" -d "D:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl"
Task: {F9D46DBD-8F49-4F3E-9F23-707F041204CB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2013-10-21 11:10 - 2015-10-13 18:26 - 00125616 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-15 14:50 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\System32\zlhp1020.dll
2015-01-15 14:50 - 2012-09-18 15:27 - 00065024 _____ () C:\Windows\system32\spool\PRTPROCS\x64\pphp1020.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-15 16:26 - 2015-12-15 16:26 - 02803712 _____ () C:\Program Files\AVAST Software\Avast\defs\15121500\algo.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00241896 _____ () C:\Program Files\AVAST Software\Avast\browser_pass.dll
2013-01-06 02:49 - 2012-01-09 04:48 - 00541683 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\sqlite3.dll
2015-08-02 10:46 - 2015-10-12 04:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2015-11-12 21:17 - 2015-10-27 14:05 - 00618784 _____ () C:\Program Files (x86)\IObit\Smart Defrag 4\ProductStatistics.dll
2015-11-12 21:17 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Smart Defrag 4\webres.dll
2015-11-23 20:02 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare\madExcept_.bpl
2015-11-23 20:02 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare\madBasic_.bpl
2015-11-23 20:02 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare\madDisAsm_.bpl
2015-12-04 18:33 - 2015-12-04 18:33 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-11-12 21:19 - 2015-09-21 10:49 - 00348960 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2015-11-12 21:19 - 2015-09-21 10:49 - 00183584 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2015-11-12 21:19 - 2015-09-21 10:49 - 00050976 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows\system32\Drivers\oamwxkwm.sys:changelist
AlternateDataStreams: C:\ProgramData\TEMP:92409937

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Cynik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.40.68.2 - 195.129.12.83
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{3453BEA8-EF57-45FD-8EBF-C43071D22E03}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{76BC279C-5ACE-442D-84DE-73CE0347E540}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{F3CAA5FF-0B19-4E63-B3A3-B40B0D20CC46}D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => (Block) D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [UDP Query User{4C3F40DC-AD70-40B4-BCCB-853696C32F9A}D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => (Block) D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [{D29D4227-33E1-49FA-981E-8872B74491B2}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{59EDE5BD-390A-43DE-8663-28A4753B66F5}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{22D0C45F-BC8C-49E0-B52F-70229E371BE2}D:\program files (x86)\funcom\age of conan\conanpatcher.exe] => (Allow) D:\program files (x86)\funcom\age of conan\conanpatcher.exe
FirewallRules: [UDP Query User{C0A27E8E-AE5A-4980-87CB-9FCFFEEEA3CA}D:\program files (x86)\funcom\age of conan\conanpatcher.exe] => (Allow) D:\program files (x86)\funcom\age of conan\conanpatcher.exe
FirewallRules: [TCP Query User{39F7F183-9282-423E-984F-6F2F586AECE4}D:\program files (x86)\funcom\age of conan\ageofconan.exe] => (Block) D:\program files (x86)\funcom\age of conan\ageofconan.exe
FirewallRules: [UDP Query User{5F037C53-D1DE-40FC-AAA4-3AE602FE3BCC}D:\program files (x86)\funcom\age of conan\ageofconan.exe] => (Block) D:\program files (x86)\funcom\age of conan\ageofconan.exe
FirewallRules: [TCP Query User{A732E51A-4781-458A-BE28-13A5CBDF8215}D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll] => (Allow) D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll
FirewallRules: [UDP Query User{F897E243-ECE8-4404-B80A-CC0049ED3886}D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll] => (Allow) D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll
FirewallRules: [{6BB37FA2-DCD2-4CEE-ABDF-A85D48C9EF9D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\DOSBox.exe
FirewallRules: [{F7533E0B-059B-47EB-8E5E-37F507C695EA}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\DOSBox.exe
FirewallRules: [TCP Query User{1BDDFAAA-9F52-4CDC-ABFD-33D2516A5510}D:\program files (x86)\resident evil 6\bh6.exe] => (Block) D:\program files (x86)\resident evil 6\bh6.exe
FirewallRules: [UDP Query User{182EEBAE-9091-4D60-A8F1-F051C59C74E9}D:\program files (x86)\resident evil 6\bh6.exe] => (Block) D:\program files (x86)\resident evil 6\bh6.exe
FirewallRules: [{7A5777DF-228F-4EE2-8DB6-E9683A281522}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\launcher.exe
FirewallRules: [{48BF6776-7E6C-4651-997C-CADF51E22ACA}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\launcher.exe
FirewallRules: [TCP Query User{D4C4ACEB-F5EA-44F4-8217-C6DD842F1F0F}D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe] => (Block) D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe
FirewallRules: [UDP Query User{011A4928-D85E-471A-9AE4-7C833A340BDB}D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe] => (Block) D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe
FirewallRules: [TCP Query User{5DD15233-C287-4045-881F-F4F584F20072}D:\program files (x86)\team17\worms2\frontend.exe] => (Block) D:\program files (x86)\team17\worms2\frontend.exe
FirewallRules: [UDP Query User{2A0206DA-506B-4FFA-9E5B-693DBB739E09}D:\program files (x86)\team17\worms2\frontend.exe] => (Block) D:\program files (x86)\team17\worms2\frontend.exe
FirewallRules: [TCP Query User{C6769F55-973D-4C7F-A7B4-12735705F286}C:\program files (x86)\internet download manager\idman.exe] => (Block) C:\program files (x86)\internet download manager\idman.exe
FirewallRules: [UDP Query User{5DEAA5F2-8E9A-4C8A-8588-BDD6299B62CF}C:\program files (x86)\internet download manager\idman.exe] => (Block) C:\program files (x86)\internet download manager\idman.exe
FirewallRules: [{EFFB6041-4BBE-41C7-912E-365BAE22DD04}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{0D7E6960-86FB-492D-B489-3B24AD50A3E1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{45845EDC-5DAE-41AE-A0BC-03E98F50AFA6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{4A3FE64D-ED00-4AEC-A0FA-F709A4564443}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{1A05E161-D6C7-495C-83FA-84CCC72F4B03}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{643030BF-30D3-49CD-9860-E9176CB57FDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{76A7D289-5ECB-4B85-B643-1536251F13B7}D:\program files (x86)\steam\steam.exe] => (Allow) D:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{12DFFE6B-05BF-4316-9F70-766ED64FB5DE}D:\program files (x86)\steam\steam.exe] => (Allow) D:\program files (x86)\steam\steam.exe
FirewallRules: [{029F6014-4EF8-41AD-9280-8ECF004F2FF4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{20178541-CFA7-4737-A83D-2B1B6553FD04}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{6248BC26-3394-4D57-BBD8-562D8A7C61D5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{CD707AF7-EE4E-4CCE-B89D-DF523C8E8119}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{66E08889-5FD1-436F-A5DB-70EFAF39A7A6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{838E7202-13DE-461D-8A1A-9CCB337BDB8F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{374879A8-19F1-4100-88BE-F9624FBA90FD}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{436F0B9E-D38A-47A6-90FC-E05CEB7D5804}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe
FirewallRules: [{9B08C4FA-D811-42FA-B07E-7B690137E406}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{9B0C145B-3A20-48D6-9374-8B784CE87DCE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{3D7E40FB-CEDC-472E-A012-5059C99C4D60}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{712119B0-6F6C-4DD1-BF70-E57BF84EAA04}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{64D043CC-415C-4F34-B544-F39FA10BB958}D:\program files (x86)\dune-2000-cz\dune2000.dat] => (Block) D:\program files (x86)\dune-2000-cz\dune2000.dat
FirewallRules: [UDP Query User{DCE5E499-709F-4292-9E79-6F31CA77F525}D:\program files (x86)\dune-2000-cz\dune2000.dat] => (Block) D:\program files (x86)\dune-2000-cz\dune2000.dat
FirewallRules: [{8F58A696-F38C-4CEA-982A-2EDC68D6C945}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CD387191-00F1-4627-8F00-7EC9155C34DD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{28A2BB7C-3632-412B-811D-D13BE5EECEEA}] => (Allow) C:\Users\Cynik\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0679413B-C1B5-4EC6-83B8-408CC2B49615}] => (Allow) C:\Users\Cynik\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C9923599-2239-45C8-95CC-88DA67CDD455}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{EDD65F4D-72E0-490B-ABF2-0F906554C140}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{BD76CE4C-8638-4142-948E-E08220918AA2}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B9D5CDC4-8DB4-4A1D-AE72-E126AEFEB37F}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E2E0006-686C-43BE-B7CA-7E9A7B3002F6}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{371A7804-DB0B-431D-94AD-1A01AD7266F7}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{34592C2A-3E2C-436E-8194-F656C53133B1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BDFC1A48-3A5B-4C62-A388-217C3A1120D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{393740EA-488A-4FEB-BBAD-DA9DE3639B46}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{264B8A72-57AE-4424-BFDE-424AF3C2F87F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{892A6D7A-4493-4B63-A121-4B90AC2F150A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{68DD0846-DE68-459A-B04D-DC214AB08118}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{43577501-F912-4466-9656-174BA8D78055}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EC345A0B-D158-48D3-8384-DFF706CB5319}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EC4FFD01-A6BD-4651-9F85-0D7DDDCD9341}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{EF6C6146-7ACD-4CD8-B7E5-8D8063CF2520}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{48407298-E1B7-4324-9228-6956C95E7187}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{308F807B-E4A5-4198-A50D-0FA8FE8FE47C}] => (Allow) D:\Program Files (x86)\CAPCOM\Resident Evil 5\Launcher.exe
FirewallRules: [{B4895D15-4EC2-45C4-B64B-49CE873CFCDC}] => (Allow) D:\Program Files (x86)\CAPCOM\Resident Evil 5\Launcher.exe
FirewallRules: [TCP Query User{AD202C73-5C78-41A7-82C9-37CD315E1FA1}D:\program files (x86)\capcom\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\capcom\resident evil 5\re5dx9.exe
FirewallRules: [UDP Query User{A0C7A0D8-A5EA-453A-9953-2BE5DDE81B93}D:\program files (x86)\capcom\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\capcom\resident evil 5\re5dx9.exe
FirewallRules: [{C5AD7C8D-7D1F-4874-A290-64816FD0E02D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{E06A4706-F8DA-4341-93EA-4F1E644F939F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 5\Launcher.exe
FirewallRules: [TCP Query User{F1A868D5-7C19-426B-BC9F-9DDF1F956CC8}D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe
FirewallRules: [UDP Query User{D1FA4D7A-8DFD-4E15-85EA-C8982F6B4BEF}D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe
FirewallRules: [TCP Query User{5F526BE3-66F5-4A62-9D37-4037B697E536}D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe] => (Block) D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe
FirewallRules: [UDP Query User{BC6EB6E1-552E-40B7-BD1B-018E666D99D2}D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe] => (Block) D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe
FirewallRules: [{F9B91A2A-2C2C-4C3A-BB03-F250425D4BC3}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{D322ABF2-2708-499E-BCFC-C7E59CA3D44E}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{F3FAF8AC-BDA1-4296-A0B0-6F943CD6C2B3}] => (Allow) D:\Program Files (x86)\Paradox Interactive\Majesty 2\Majesty2.exe
FirewallRules: [{8D93ECD2-8684-4739-AD81-A17B85A93761}] => (Allow) D:\Program Files (x86)\Paradox Interactive\Majesty 2\Majesty2.exe
FirewallRules: [{C27FCF46-330F-4864-898D-9B53529DF4D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0C002507-BF37-48E5-9F5E-852D00B446C8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{071674E7-D4CD-487E-B93F-EDE2D13E3A42}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{28E5079E-5C15-485D-B2EC-223B64DA6695}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{3C052F52-2470-4AD5-ACE4-69BA02119ADD}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{DEF0CF20-A227-48B0-930A-C975E3150F92}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{7EBEF34F-B8A5-4648-8237-7FF5F8D4995B}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{056A5168-69EA-419D-8EA8-A8689FFDB698}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Adaptér tunelového režimu Microsoft Teredo
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/16/2015 07:36:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AVSVideoConverter.exe, verze: 8.0.2.493, časové razítko: 0x00000000
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0xffffffff
ID chybujícího procesu: 0x18bc
Čas spuštění chybující aplikace: 0xAVSVideoConverter.exe0
Cesta k chybující aplikaci: AVSVideoConverter.exe1
Cesta k chybujícímu modulu: AVSVideoConverter.exe2
ID zprávy: AVSVideoConverter.exe3

Error: (12/15/2015 02:05:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Název chybujícího modulu: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Kód výjimky: 0xc0000005
Posun chyby: 0x00661a74
ID chybujícího procesu: 0x1ba0
Čas spuštění chybující aplikace: 0xFalloutNV.exe0
Cesta k chybující aplikaci: FalloutNV.exe1
Cesta k chybujícímu modulu: FalloutNV.exe2
ID zprávy: FalloutNV.exe3

Error: (12/14/2015 05:51:21 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (2392) WebCacheLocal: Pokus o otevření souboru C:\Users\Cynik\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (12/14/2015 01:26:54 PM) (Source: IMFservice) (EventID: 0) (User: )
Description: Neplatný popisovač

Error: (12/14/2015 01:26:54 PM) (Source: IMFservice) (EventID: 0) (User: )
Description: Neplatný popisovač

Error: (12/13/2015 12:33:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Název chybujícího modulu: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Kód výjimky: 0xc0000005
Posun chyby: 0x00661a74
ID chybujícího procesu: 0x1088
Čas spuštění chybující aplikace: 0xFalloutNV.exe0
Cesta k chybující aplikaci: FalloutNV.exe1
Cesta k chybujícímu modulu: FalloutNV.exe2
ID zprávy: FalloutNV.exe3

Error: (12/12/2015 10:08:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddWin32ServiceFiles: Unable to back up image of service Protect Monitor since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor.
.

Error: (12/11/2015 03:08:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 6.1.7601.17567, časové razítko: 0x4d672ee4
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000003540fd8
ID chybujícího procesu: 0x784
Čas spuštění chybující aplikace: 0xExplorer.EXE0
Cesta k chybující aplikaci: Explorer.EXE1
Cesta k chybujícímu modulu: Explorer.EXE2
ID zprávy: Explorer.EXE3

Error: (12/10/2015 06:09:19 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program AVSVideoConverter.exe verze 8.0.2.493 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1284

Čas spuštění: 01d1336d79e80a72

Čas ukončení: 31

Cesta k aplikaci: C:\Program Files (x86)\AVS4YOU\AVSVideoConverter\AVSVideoConverter.exe

ID hlášení: bd69141f-9f60-11e5-b9c5-40618632f5b2

Error: (12/09/2015 09:02:30 AM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: Microsoft.PowerShell.Editor, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020


System errors:
=============
Error: (12/15/2015 04:57:28 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/15/2015 04:57:27 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/15/2015 04:57:27 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/15/2015 04:57:26 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/15/2015 04:57:26 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/14/2015 06:31:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk3\DR3.

Error: (12/14/2015 06:31:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk3\DR3.

Error: (12/14/2015 06:31:37 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk3\DR3.

Error: (12/14/2015 06:31:37 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk3\DR3.

Error: (12/14/2015 06:31:36 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk3\DR3.


CodeIntegrity:
===================================
Date: 2015-06-02 00:34:42.835
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:42.804
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:41.681
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:41.650
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:40.573
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:40.527
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:39.450
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:39.403
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:07.188
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:07.148
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
Percentage of memory in use: 67%
Total physical RAM: 2039.11 MB
Available physical RAM: 659.54 MB
Total Virtual: 4078.23 MB
Available Virtual: 2094.57 MB

==================== Drives ================================

Drive c: (Místní disk) (Fixed) (Total:60 GB) (Free:5.88 GB) NTFS
Drive d: () (Fixed) (Total:400.55 GB) (Free:50.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 65CDBF15)
Partition 1: (Active) - (Size=1023 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=400.5 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=4.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================
LastRegBack: 2015-12-10 15:24

==================== End of FRST.txt ============================

Re: worm vbs jenxcus

Napsal: 17 pro 2015 17:44
od Rudy
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: worm vbs jenxcus

Napsal: 19 pro 2015 02:15
od radek.ctibor
Zdravím, posílám ten log z adwcleaneru.

# AdwCleaner v5.025 - Logfile created 19/12/2015 at 02:07:55
# Updated 13/12/2015 by Xplode
# Database : 2015-12-13.2 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Cynik - CYNIK-HP
# Running from : D:\Downloads\Programs\adwcleaner_5.025.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Cynik\AppData\Local\28050
[-] Folder Deleted : C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd
[-] Folder Deleted : C:\Users\Cynik\AppData\Roaming\Elex-tech
[-] Folder Deleted : C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\Extensions\ascsurfingprotection@iobit.com

***** [ Files ] *****

[-] File Deleted : C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\user.js
[-] File Deleted : C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\searchplugins\yahoo.xml
[-] File Deleted : C:\Windows\SysNative\log\iSafeKrnlCall.log
[-] File Deleted : C:\Windows\SysNative\drivers\wStLib64.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\pokki
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
[-] Key Deleted : HKLM\System\CurrentControlSet\Services\Eventlog\Application\Update SecretSauce
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DBB02F63-2284-42AA-B1BC-F2912BC5B32B}

***** [ Web browsers ] *****

[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.default.homepage.check", false);
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.default.search.check", false);
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "14311a8b6d4fcf82c81a2189ed042a9e");
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.privitize.hmpgUrl", "hxxp://searchou.com/?id=20db4ca700000000000040618632f5b2");
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.privitize.kw_url", "hxxp://searchou.com/?q={searchTerms}&id=20db4ca700000000000040618632f5b2");
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.privitize.newTabUrl", "hxxp://searchou.com/?id=20db4ca700000000000040618632f5b2");
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.privitize.srchPrvdr", "Search The Web (privitize)");
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("extensions.privitize.tlbrSrchUrl", "hxxp://searchou.com/?id=20db4ca700000000000040618632f5b2&q=");
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("network.hxxp.request.max-start-delay", 0);
[-] [C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default\prefs.js] [Preference] Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 0);

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4039 bytes] ##########

Re: worm vbs jenxcus

Napsal: 19 pro 2015 11:19
od Rudy
Dejte nový log FRST.

Re: worm vbs jenxcus

Napsal: 22 pro 2015 14:15
od radek.ctibor
Dobrý den, omlouvám se, že reaguji až takhle pozdě, ale byl jsem dva dny mimo domov. Posílám nové výsledky FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-12-2015
Ran by Cynik (administrator) on CYNIK-HP (22-12-2015 14:10:27)
Running from D:\Downloads\Programs
Loaded Profiles: Cynik (Available Profiles: Cynik)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ACD Systems) C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(Wicked & Wild Inc.) C:\Program Files (x86)\EMDB\EMDB.exe
(Wicked & Wild Inc.) C:\Program Files (x86)\EMDB\AutoUpdater.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16407296 2015-11-02] (Realtek Semiconductor)
HKLM-x32\...\Run: [ACPW05EN] => C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe [822384 2011-11-17] (ACD Systems)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [200704 2007-08-07] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-04] (AVAST Software)
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2741616 2011-03-04] (Hewlett-Packard Company)
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3911248 2015-12-04] (Tonec Inc.)
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Winlogon: [Shell] C:\Windows\Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-04] (AVAST Software)
Startup: C:\Users\Cynik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk [2013-03-09]
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sasnative64SmartDefragBootTime.exe
CHR HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.40.68.2 195.129.12.83
Tcpip\..\Interfaces\{F2738CA7-B2BB-4F49-BA38-EAFC8FBC7461}: [DhcpNameServer] 62.40.68.2 195.129.12.83

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> {AA05920B-91DF-4DB1-9151-63AE892C4CF4} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10809
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-09-28] (Internet Download Manager, Tonec Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-25] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-09-28] (Internet Download Manager, Tonec Inc.)
BHO-x32: No Name -> {1bb173b0-6833-417b-bdcf-df277f01407e} -> No File
BHO-x32: No Name -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
BHO-x32: No Name -> {741CDDFF-4C8B-2B84-5E08-58AA8A3D4D24} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-25] (AVAST Software)
BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No File
Toolbar: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> No Name - {8721248B-7D30-4CFD-9674-A52BCC829178} - No File

FireFox:
========
FF ProfilePath: C:\Users\Cynik\AppData\Roaming\Mozilla\Firefox\Profiles\ctqrht0v.default
FF DefaultSearchEngine,S:
FF DefaultSearchUrl: hxxps://www.google.com/search
FF SearchEngineOrder.1: Google
FF SearchEngineOrder.1,S:
FF SelectedSearchEngine,S:
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxps://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-11-09]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha8187.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8187\ff => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta732.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ff => not found
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-05]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-05]
FF HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Cynik\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Cynik\AppData\Roaming\IDM\idmmzcc5 [2015-12-22] [not signed]
FF HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-31]
CHR Extension: (Docs) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-31]
CHR Extension: (Disk Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-31]
CHR Extension: (YouTube) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-31]
CHR Extension: (IDM Integration Module) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2015-03-31]
CHR Extension: (Peněženka Google) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-31]
CHR Extension: (Gmail) - C:\Users\Cynik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-11-09]
CHR HKLM-x32\...\Chrome\Extension: [amofhgcalenomeclpnchhlebcaidoinn] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8187\ch\WebexpEnhancedV1alpha8187.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [ddhfljgmjifmmddjibnaokklegljfbeb] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ch\VideoPlayerV3beta732.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-25]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-11-09]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [827680 2015-11-04] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-04] (AVAST Software)
R2 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [87336 2012-01-12] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [75048 2012-01-12] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [296232 2012-01-12] (CyberLink)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-11-10] (IObit)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-07] (Electronic Arts)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
S3 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [307456 2015-11-02] (Realtek Semiconductor)
S3 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [2715824 2013-11-14] (Protection Technology)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [451040 2015-12-18] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-04] (AVAST Software)
S3 cpuz138; C:\Users\Cynik\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [27320 2015-12-21] (CPUID)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [60928 2015-09-28] (GenesysLogic)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-09-28] (REALiX(tm))
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [82928 2011-10-27] (Cyberlink Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 Pcouffin64; C:\Windows\System32\Drivers\pcouffin64a.sys [80640 2013-01-12] (VSO Software) [File not signed]
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys [19952 2015-06-01] ()
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [404184 2015-12-02] (Realsil Semiconductor Corporation)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32936 2015-12-02] (Synaptics Incorporated)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [146928 2012-01-11] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.
NETSVC: SearchIndexer -> no filepath.

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-20 21:55 - 2015-12-20 21:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-19 02:06 - 2015-12-19 02:07 - 00000000 ____D C:\AdwCleaner
2015-12-16 19:39 - 2015-12-22 14:10 - 00000000 ____D C:\FRST
2015-12-14 16:17 - 2015-12-14 16:17 - 00055168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\oamwxkwm.sys
2015-12-14 16:03 - 2015-12-14 16:21 - 00000000 ____D C:\UsbFix
2015-12-14 16:03 - 2015-12-14 16:03 - 00001459 _____ C:\Users\Cynik\Desktop\UsbFix.lnk
2015-12-12 22:20 - 2015-12-19 02:08 - 00000000 ____D C:\Windows\system32\log
2015-12-11 15:58 - 2015-12-11 15:58 - 00003330 _____ C:\Windows\System32\Tasks\WindowsUpda2ta
2015-12-09 01:38 - 2015-12-09 01:38 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-12-09 01:38 - 2015-12-09 01:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-12-08 19:53 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-08 19:53 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-08 19:53 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-08 19:53 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-08 19:53 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-08 19:53 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-08 19:53 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-08 19:53 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-08 19:53 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-08 19:53 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-08 19:53 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-08 19:53 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-08 19:53 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-08 19:53 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-08 19:53 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-08 19:53 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-08 19:53 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-08 19:53 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-08 19:53 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-08 19:53 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-08 19:53 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-08 19:53 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-08 19:53 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-08 19:53 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-08 19:53 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-08 19:53 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-08 19:53 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-08 19:53 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-08 19:53 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-08 19:53 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-08 19:53 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-08 19:53 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-08 19:53 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-08 19:53 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-08 19:53 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-08 19:53 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-08 19:53 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-08 19:53 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-08 19:53 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-08 19:53 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-08 19:53 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-08 19:53 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-08 19:53 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-08 19:53 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-08 19:53 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-08 19:53 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-08 19:53 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-08 19:53 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-08 19:53 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-08 19:53 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-08 19:53 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-08 19:53 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-08 19:53 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-08 19:53 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-08 19:53 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-08 19:53 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-08 19:53 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-08 19:53 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-08 19:53 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-08 19:53 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-08 19:52 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-08 19:52 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-08 19:52 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-08 19:52 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-08 19:50 - 2015-12-08 19:51 - 01430554 _____ C:\Users\Cynik\Downloads\Eliška 12-2015.pdf
2015-12-08 19:49 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-08 19:49 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-08 19:49 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-08 19:49 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-08 19:49 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-08 19:49 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-08 19:49 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-08 19:49 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-08 19:48 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-08 19:48 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-08 19:48 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-08 19:48 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-08 19:48 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-08 19:48 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-08 19:48 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-08 19:48 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-08 19:48 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-08 19:48 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-08 19:48 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-08 19:48 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-08 19:48 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-08 19:43 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-08 19:43 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-12-04 18:33 - 2015-12-04 18:33 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-12-04 18:33 - 2015-12-04 18:33 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2015-12-04 18:33 - 2015-12-04 18:33 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 17:14 - 2015-12-02 17:14 - 00001269 _____ C:\Users\Cynik\Desktop\Medal Of Honor 4.lnk
2015-12-02 14:31 - 2015-12-02 14:31 - 00404184 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys
2015-12-02 14:30 - 2015-12-02 14:30 - 00032936 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2015-11-28 01:25 - 2015-11-28 01:25 - 00003348 _____ C:\Windows\System32\Tasks\{0750A236-8D3E-4571-96F7-A0D19AA858A4}
2015-11-28 01:20 - 2015-12-02 17:15 - 00000000 ____D C:\Users\Cynik\Documents\EA Games
2015-11-28 01:18 - 2015-11-28 01:18 - 00003552 _____ C:\Windows\System32\Tasks\{D78EBE3C-B179-4C14-A601-80B98FBF36F4}
2015-11-26 15:33 - 2015-11-26 17:41 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\Microsoft Games
2015-11-26 15:06 - 2015-11-26 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears of War
2015-11-23 20:02 - 2015-12-21 11:46 - 00002271 _____ C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
2015-11-23 20:02 - 2015-11-23 20:02 - 00003180 _____ C:\Windows\System32\Tasks\ASC9_PerformanceMonitor
2015-11-23 20:02 - 2015-11-23 20:02 - 00002868 _____ C:\Windows\System32\Tasks\ASC9_SkipUac_Cynik
2015-11-23 20:02 - 2015-11-23 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2015-11-23 20:02 - 2015-11-23 20:02 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-22 14:03 - 2013-01-04 16:03 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-22 13:49 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-22 13:49 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-22 13:31 - 2012-12-31 11:02 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-22 12:54 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-22 12:49 - 2015-09-28 12:49 - 00003242 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2015-12-22 12:49 - 2015-09-28 12:49 - 00002874 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Cynik)
2015-12-22 12:46 - 2015-08-04 13:24 - 00000000 ____D C:\ProgramData\ProductData
2015-12-22 12:46 - 2014-01-19 01:32 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-12-22 12:46 - 2013-01-04 16:03 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-22 12:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-22 12:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-22 02:33 - 2012-12-31 00:53 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\DMCache
2015-12-21 11:39 - 2012-12-31 01:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-21 00:51 - 2012-12-31 08:52 - 00677576 _____ C:\Windows\system32\perfh005.dat
2015-12-21 00:51 - 2012-12-31 08:52 - 00146494 _____ C:\Windows\system32\perfc005.dat
2015-12-21 00:51 - 2009-07-14 06:13 - 01611912 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-19 21:28 - 2015-02-20 12:52 - 00000000 ____D C:\Users\Cynik\Documents\EMDB
2015-12-19 21:28 - 2015-02-20 12:52 - 00000000 ____D C:\Program Files (x86)\EMDB
2015-12-18 19:18 - 2014-01-19 01:30 - 00451040 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-12-18 19:18 - 2014-01-19 01:30 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-12-17 20:12 - 2012-12-31 00:23 - 00000000 ____D C:\Users\Cynik
2015-12-14 17:11 - 2015-08-04 13:24 - 00002904 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Cynik
2015-12-12 20:17 - 2014-01-19 01:06 - 00000000 ____D C:\ProgramData\IObit
2015-12-12 20:16 - 2015-08-04 13:24 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\IObit
2015-12-12 20:16 - 2014-01-19 01:06 - 00000000 ____D C:\Program Files (x86)\IObit
2015-12-12 19:54 - 2013-10-21 11:10 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-09 09:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-12-09 08:37 - 2009-07-14 05:45 - 00349424 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 04:39 - 2012-12-31 00:40 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-09 01:41 - 2012-12-31 00:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 01:40 - 2012-12-31 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 01:39 - 2012-12-31 21:43 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 01:39 - 2012-12-31 21:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 01:36 - 2013-07-11 23:38 - 00000000 ____D C:\Windows\system32\MRT
2015-12-09 00:32 - 2012-12-31 11:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-09 00:32 - 2012-12-31 11:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-09 00:32 - 2012-12-31 11:02 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-07 18:11 - 2012-12-31 09:50 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\uTorrent
2015-12-07 14:30 - 2014-03-29 22:23 - 00000000 ____D C:\ProgramData\Origin
2015-12-07 12:38 - 2014-08-13 19:55 - 00000000 ____D C:\Users\Cynik\AppData\Local\CAPCOM
2015-12-05 13:07 - 2015-06-24 12:37 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2015-12-04 23:46 - 2015-06-24 12:37 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\IDM
2015-12-04 18:33 - 2014-04-28 10:31 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-12-04 18:33 - 2014-01-19 01:30 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-12-02 20:02 - 2014-12-09 19:57 - 00000000 ____D C:\Users\Cynik\Documents\Street Racing Syndicate
2015-12-02 17:42 - 2012-12-31 00:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-02 14:58 - 2013-01-04 16:03 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 14:58 - 2013-01-04 16:03 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 14:32 - 2015-09-28 12:49 - 00002165 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2015-11-28 12:53 - 2015-07-01 14:12 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-28 01:20 - 2013-01-01 19:17 - 00000000 ____D C:\Users\Cynik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-11-26 22:09 - 2013-01-11 16:45 - 00017920 _____ C:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-26 15:33 - 2010-02-28 20:05 - 00000000 ____D C:\Users\Cynik\Documents\My Games
2015-11-25 22:35 - 2013-10-09 21:34 - 00047104 _____ C:\Windows\SysWOW64\KMVIDC32.DLL
2015-11-25 12:16 - 2015-11-12 21:19 - 00001381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2015-11-25 12:16 - 2015-11-12 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2015-11-25 12:16 - 2015-08-04 13:24 - 00001369 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-11-25 12:14 - 2015-09-28 12:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-11-23 20:02 - 2015-08-04 13:24 - 00000000 ____D C:\Users\Cynik\AppData\LocalLow\IObit
2015-11-23 19:10 - 2012-12-31 21:13 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-23 09:41 - 2015-10-27 09:32 - 86179840 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 86179840 _____ C:\Windows\system32\config\SOFTWARE.iodefrag
2015-11-23 09:41 - 2015-10-27 09:32 - 01052672 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 01052672 _____ C:\Windows\system32\config\DEFAULT.iodefrag
2015-11-23 09:41 - 2015-10-27 09:32 - 00065536 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 00065536 _____ C:\Windows\system32\config\SAM.iodefrag
2015-11-23 09:41 - 2015-10-27 09:32 - 00028672 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-11-23 09:41 - 2015-10-27 09:32 - 00028672 _____ C:\Windows\system32\config\SECURITY.iodefrag

==================== Files in the root of some directories =======

2013-01-11 16:45 - 2015-11-26 22:09 - 0017920 _____ () C:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-01-03 16:02 - 2013-01-03 16:02 - 0000093 _____ () C:\Users\Cynik\AppData\Local\fusioncache.dat
2014-10-06 14:42 - 2014-10-06 14:42 - 0002662 _____ () C:\Users\Cynik\AppData\Local\recently-used.xbel

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-21 12:05

==================== End of FRST.txt ============================

a Additon

Additional scan result of Farbar Recovery Scan Tool (x64) Version:20-12-2015
Ran by Cynik (2015-12-22 14:11:39)
Running from D:\Downloads\Programs
Windows 7 Professional Service Pack 1 (X64) (2012-12-30 23:23:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4073195468-1047248204-2128101136-500 - Administrator - Disabled)
ASPNET (S-1-5-21-4073195468-1047248204-2128101136-1004 - Limited - Enabled)
Cynik (S-1-5-21-4073195468-1047248204-2128101136-1000 - Administrator - Enabled) => C:\Users\Cynik
Guest (S-1-5-21-4073195468-1047248204-2128101136-501 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\uTorrent) (Version: 3.4.1.31139 - BitTorrent Inc.)
ACDSee Pro 5 (HKLM-x32\...\{35E0BA9D-3AFE-402A-99CA-D94FE1E73D18}) (Version: 5.3.168 - ACD Systems International Inc.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.241 - Adobe Systems Incorporated)
Adobe Audition CS5.5 (HKLM-x32\...\{D5B1535A-FDFC-4B40-B2E2-21DA83D9CB57}) (Version: 4.0 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Advanced SystemCare 9 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 9.0.3 - IObit)
Age of Conan: Unchained (HKLM-x32\...\Age of Conan_is1) (Version: - Funcom)
Age of Empires II HD (c) Microsoft Studios version 1 (HKLM-x32\...\QWdlIG9mIEVtcGlyZXMgSUkgSEQgKGMpIE1pY3Jvc29mdCBTdHVkaW9z_is1) (Version: 1 - )
Aiseesoft Total Video Converter Platinum 6.3.22 (HKLM-x32\...\{3661F243-518C-4d05-8BDF-7B10CC22689F}_is1) (Version: - )
Aktualizace NVIDIA 2.5.15.54 (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Alone In The Dark (HKLM-x32\...\Alone In The Dark_is1) (Version: - )
ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version: - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9045 - )
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: - Online Media Technologies Ltd.)
BioShock 2 1.5.0.0.19 (HKLM-x32\...\BioShock 2_is1) (Version: - )
Black Mesa (CZ Dabing) (HKLM-x32\...\FPD_BM_is1) (Version: 1.0 - Fénix ProDabing)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.53.1034 - Webteh, d.o.o.)
CanoScan Toolbox Ver4.9 (HKLM-x32\...\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}) (Version: - )
CCleaner (HKLM-x32\...\CCleaner) (Version: - Piriform)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1312.54 - CyberLink Corp.)
Driver Booster 3.1 (HKLM-x32\...\Driver Booster_is1) (Version: 3.1 - IObit)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Easy CD-DA Extractor 12 (HKLM-x32\...\Easy CD-DA Extractor 12) (Version: 12.0.4 - Poikosoft)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EMDB 2.26 (HKLM-x32\...\EMDB_is1) (Version: - Wicked & Wild Inc.)
Emperor: Battle For Dune (HKLM-x32\...\Emperor) (Version: - )
Fallout New Vegas - Ultimate Edition (HKLM-x32\...\Fallout New Vegas - Ultimate Edition_is1) (Version: - )
Far Cry (Patch 1.4) (x32 Version: 1.00.0000 - Název společnosti:) Hidden
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
High-Definition Video Playback (x32 Version: 7.3.10800.5.0 - Nero AG) Hidden
Hitman Sniper Challenge (HKLM-x32\...\Hitman Sniper Challenge_is1) (Version: - )
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.1.0.7 - IObit)
Jade Empire (HKLM-x32\...\{DD401D5B-35E2-4EA4-8585-4A44CB2DCC78}) (Version: - BioWare Corp.)
LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe)
Majesty 2: The Fantasy Kingdom Sim (HKLM-x32\...\{CDCA3C32-FCE7-40E8-8CB5-7B0E87ADDFC9}_is1) (Version: 1.0.0.0 - Paradox Interactive)
MediaInfo 0.7.68 (HKLM\...\MediaInfo) (Version: 0.7.68 - MediaArea.net)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft)
Mozilla Firefox 43.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 cs)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
MPEG Video Wizard DVD 5.0.0.110 (10/2010) (HKLM-x32\...\{9FD45917-95E6-449D-ACC9-01E634A34CBD}_is1) (Version: 5.0.0.110 - Womble Multimedia, Inc.)
MPEG Video Wizard DVD 5.0.0.110 (10/2010) (HKLM-x32\...\Mpeg Video Wizard DVD 5.0) (Version: 5.0.0.110 (10/2010) - Womble Multimedia, Inc.)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG)
Nero 10 Kwik Themes 3 (HKLM-x32\...\{DD238642-14C7-4D54-8BD7-FAD6DEA9999B}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Kwik Themes 4 (HKLM-x32\...\{A70B0C7B-3527-4D53-A694-E9492ECE9EE1}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 PiP EffectPack 1 (HKLM-x32\...\{EF3A4DAE-F16F-4AC1-87BB-FE00A784084F}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Video TransitionPack 1 (HKLM-x32\...\{85BEC8F6-9AA3-43FF-B56B-8276277137B3}) (Version: 10.6.10000.0.0 - Nero AG)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10600.4.100 - Nero AG)
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10500.3.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10400.0.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10200.0.100 - Nero AG)
Nero Multimedia Suite 10 Platinum HD (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.6.11800 - Nero AG)
NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.92 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.92 - NVIDIA Corporation)
NVIDIA PhysX (Legacy) (HKLM-x32\...\{6F9D5A0B-202C-4161-BC7F-0664EA39E7E7}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 341.92 (Version: 341.92 - NVIDIA Corporation) Hidden
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 3.5.109 - PDF Complete, Inc)
Plants vs. Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: - )
PowerISO 1.00 (HKLM-x32\...\PowerISO 1.00) (Version: - )
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.1.59.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7628 - Realtek Semiconductor Corp.)
Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version: - Capcom)
RivaTuner v2.23 (HKLM-x32\...\RivaTuner) (Version: v2.23 - Alexey Nicolaychuk)
S.T.A.L.K.E.R. - Shadow of Chernobyl (HKLM-x32\...\{17D7E5F0-19E0-4D25-9AE9-96855FF16E04}) (Version: 1.0006 - THQ)
ScanSoft OmniPage SE 4.0 (HKLM-x32\...\{C1E693A4-B1D5-4DCD-B68D-2087835B7184}) (Version: 15.00.0020 - Nuance Communications, Inc.)
Shadow Warrior Classic (1997) (HKLM-x32\...\Steam App 238070) (Version: - 3D Realms)
SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
Sleeping Dogs™ (HKLM-x32\...\Steam App 202170) (Version: - United Front Games)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.3 - IObit)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
Street Racing Syndicate (TM) (HKLM-x32\...\{1CC535A8-BD37-4AD5-BF85-1C366873BA47}) (Version: 1.00.0000 - )
Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - )
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.3 - IObit)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.56 - Ghisler Software GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
UsbFix (HKLM-x32\...\Usbfix) (Version: 7.181 - El Desaparecido - www.usbfix.net - www.sosvirus.net)
Web Translator (HKLM-x32\...\Web Translator) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.621 - Nullsoft, Inc)
Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Worms2 (HKLM-x32\...\InstallShield_{69403657-0D76-41F9-97B3-BF243F023A4E}) (Version: 1.00.0000 - Team17 Ltd)
Worms2 (x32 Version: 1.00.0000 - Team17 Ltd) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

22-12-2015 13:01:48 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2012-12-31 10:28 - 00002037 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1 www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
127.0.0.1 www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net# Any other entries you had go here (new line no # no space);

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02F98434-5C61-486D-B8C3-5CB2C87D7E85} - System32\Tasks\{2C104403-BC61-487F-A75E-C38D2586AB43} => pcalua.exe -a "D:\Program Files (x86)\Far Cry\setup32.exe" -d "D:\Program Files (x86)\Far Cry"
Task: {1974B4CE-FEE7-49E4-BF4D-AA90936A6359} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-11-18] (IObit)
Task: {20A0D82D-9764-44B0-A857-088B7578F629} - System32\Tasks\{5ADDD74F-8B63-4835-A719-2E553DF23827} => pcalua.exe -a "N:\Downloads\Games\Lego Batman\Lego-Batman\Lego Batman\setup.exe" -d "N:\Downloads\Games\Lego Batman\Lego-Batman\Lego Batman"
Task: {353CC068-CEE3-4997-A434-CBD6CE917762} - System32\Tasks\{9BA2D3C9-C980-4321-BEA0-4CAB21BF5D52} => pcalua.exe -a "D:\Program Files (x86)\Bioshock_CZ.exe" -d "D:\Program Files (x86)"
Task: {3C998F6B-5914-4379-ACEC-ECD89CA5DDFE} - System32\Tasks\{6B90DC13-AEDC-4977-A4EA-0AF4990AFE88} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{0FFC48C5-C74B-498E-B908-74CB44D30E32}\setup.exe" -c -runfromtemp -l0x0405
Task: {5DB955C7-D20F-4604-93FE-313065A16965} - System32\Tasks\SmartDefrag4_Startup => C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe [2015-10-27] (IObit)
Task: {5F763D94-9F57-41AB-94F7-0CA6520DC09B} - System32\Tasks\{1880876C-FD3C-466C-8508-7FFE0E41A5EE} => pcalua.exe -a G:\SETUP.EXE -d G:\
Task: {646BFBE3-77DA-494A-BAE4-4DEFF95E9D2D} - System32\Tasks\AdobeAAMUpdater-1.0-Cynik-HP-Cynik => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {67850DCC-3E06-497E-8F97-DEAAABF6656A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {7014693D-9D78-49EE-9B6B-80DF815BCD59} - System32\Tasks\{D6BF5033-46F4-4628-A0CC-1A42206FE156} => pcalua.exe -a G:\SETUP.EXE -d G:\
Task: {747D3809-F0A8-4531-9B48-5F94FBE2AD0A} - System32\Tasks\{0153BE0D-63FF-40ED-A121-A48C335BEB58} => pcalua.exe -a "G:\Downloads\Games\Mortal Kombat - Komplete Edition [cracked]\setup.exe" -d "G:\Downloads\Games\Mortal Kombat - Komplete Edition [cracked]"
Task: {750DC189-FCB2-46F7-92E3-AB5374AC0062} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-04] (AVAST Software)
Task: {90224076-AB22-4E53-9A4F-3F80FBCAFC7B} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-08-21] (IObit)
Task: {913338B8-4A7F-41E0-9967-08F9DEF016DB} - System32\Tasks\ASC9_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [2015-12-03] (IObit)
Task: {9B22F2AC-FFA1-4ACF-9F25-4B99F73C3E5F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-16] (AVAST Software)
Task: {9D628366-FB88-4F0C-B22A-B7766C792378} - System32\Tasks\WindowsUpda2ta => C:\Users\Cynik\AppData\Roaming\MICROSOFT\easy cd-da extractor -Crack Activator 2015.vbs <==== ATTENTION
Task: {A4EA8660-BE0E-4138-B434-6CA6D8CDA1DE} - System32\Tasks\{49D5C927-2CEF-43AD-949D-B81A305C5584} => pcalua.exe -a G:\Setup.exe -d G:\
Task: {B61431AF-6275-4033-A7BB-D2014DBE47AD} - System32\Tasks\Driver Booster SkipUAC (Cynik) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-11-18] (IObit)
Task: {CB995AD3-CC2F-47EE-82D8-4491F92A0C08} - System32\Tasks\Uninstaller_SkipUac_Cynik => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-10-20] (IObit)
Task: {D2D781C5-993B-4BD1-8E7C-781235C297AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {D345D679-6CBD-40F3-8566-602155F82E92} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {DB963C40-06E5-4132-9E33-CF2A30CC9EF8} - System32\Tasks\{0750A236-8D3E-4571-96F7-A0D19AA858A4} => pcalua.exe -a "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\CZ Preklad\mohpacificassault_cz.exe" -d "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\CZ Preklad"
Task: {DDA3CC5A-D5E3-4E82-AF8F-2A63A8654B19} - System32\Tasks\ASC9_SkipUac_Cynik => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2015-11-18] (IObit)
Task: {EC10C28E-E843-437D-B4FD-5044837F8797} - System32\Tasks\{D78EBE3C-B179-4C14-A601-80B98FBF36F4} => pcalua.exe -a "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\Medal of Honor - Pacific Assault CZ (FULL PC GAME)\CZ Preklad\mohpacificassault_cz.exe" -d "D:\Games\Medal Of Honor 2 - Pacific Assault-CZ-(FULL-PC-GAME)\Medal of Honor - Pacific Assault CZ (FULL PC GAME)\CZ Preklad"
Task: {F3F47684-EDDA-4591-B6B6-5A14911A0FF0} - System32\Tasks\{76EEFD1A-F139-44E0-A9F0-C0A40EE4F577} => pcalua.exe -a "D:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\setup-bp.exe" -d "D:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl"
Task: {F9D46DBD-8F49-4F3E-9F23-707F041204CB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2013-10-21 11:10 - 2015-10-13 18:26 - 00125616 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2008-10-15 15:09 - 2008-10-15 15:10 - 00122368 _____ () C:\Program Files\Easy CD-DA Extractor 12\ezcddax64.dll
2015-01-15 14:50 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\System32\zlhp1020.dll
2015-01-15 14:50 - 2012-09-18 15:27 - 00065024 _____ () C:\Windows\system32\spool\PRTPROCS\x64\pphp1020.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-21 19:45 - 2015-12-21 19:45 - 02805760 _____ () C:\Program Files\AVAST Software\Avast\defs\15122102\algo.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-08-02 10:46 - 2015-10-12 04:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2011-03-04 12:02 - 2011-03-04 12:02 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2015-12-04 18:33 - 2015-12-04 18:33 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-11-23 20:02 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare\madExcept_.bpl
2015-11-23 20:02 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare\madBasic_.bpl
2015-11-23 20:02 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare\madDisAsm_.bpl
2015-11-12 21:17 - 2015-10-27 14:05 - 00618784 _____ () C:\Program Files (x86)\IObit\Smart Defrag 4\ProductStatistics.dll
2015-11-12 21:17 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Smart Defrag 4\webres.dll
2013-01-06 02:49 - 2012-01-09 04:48 - 00541683 _____ () C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\sqlite3.dll
2015-11-12 21:19 - 2015-09-21 10:49 - 00348960 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2015-11-12 21:19 - 2015-09-21 10:49 - 00183584 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2015-11-12 21:19 - 2015-09-21 10:49 - 00050976 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows\system32\Drivers\oamwxkwm.sys:changelist
AlternateDataStreams: C:\ProgramData\TEMP:92409937

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Cynik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.40.68.2 - 195.129.12.83
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{3453BEA8-EF57-45FD-8EBF-C43071D22E03}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{76BC279C-5ACE-442D-84DE-73CE0347E540}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{F3CAA5FF-0B19-4E63-B3A3-B40B0D20CC46}D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => (Block) D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [UDP Query User{4C3F40DC-AD70-40B4-BCCB-853696C32F9A}D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => (Block) D:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [{D29D4227-33E1-49FA-981E-8872B74491B2}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{59EDE5BD-390A-43DE-8663-28A4753B66F5}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{22D0C45F-BC8C-49E0-B52F-70229E371BE2}D:\program files (x86)\funcom\age of conan\conanpatcher.exe] => (Allow) D:\program files (x86)\funcom\age of conan\conanpatcher.exe
FirewallRules: [UDP Query User{C0A27E8E-AE5A-4980-87CB-9FCFFEEEA3CA}D:\program files (x86)\funcom\age of conan\conanpatcher.exe] => (Allow) D:\program files (x86)\funcom\age of conan\conanpatcher.exe
FirewallRules: [TCP Query User{39F7F183-9282-423E-984F-6F2F586AECE4}D:\program files (x86)\funcom\age of conan\ageofconan.exe] => (Block) D:\program files (x86)\funcom\age of conan\ageofconan.exe
FirewallRules: [UDP Query User{5F037C53-D1DE-40FC-AAA4-3AE602FE3BCC}D:\program files (x86)\funcom\age of conan\ageofconan.exe] => (Block) D:\program files (x86)\funcom\age of conan\ageofconan.exe
FirewallRules: [TCP Query User{A732E51A-4781-458A-BE28-13A5CBDF8215}D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll] => (Allow) D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll
FirewallRules: [UDP Query User{F897E243-ECE8-4404-B80A-CC0049ED3886}D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll] => (Allow) D:\program files (x86)\activision\call of duty black ops ii\t6sp.dll
FirewallRules: [{6BB37FA2-DCD2-4CEE-ABDF-A85D48C9EF9D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\DOSBox.exe
FirewallRules: [{F7533E0B-059B-47EB-8E5E-37F507C695EA}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\DOSBox.exe
FirewallRules: [TCP Query User{1BDDFAAA-9F52-4CDC-ABFD-33D2516A5510}D:\program files (x86)\resident evil 6\bh6.exe] => (Block) D:\program files (x86)\resident evil 6\bh6.exe
FirewallRules: [UDP Query User{182EEBAE-9091-4D60-A8F1-F051C59C74E9}D:\program files (x86)\resident evil 6\bh6.exe] => (Block) D:\program files (x86)\resident evil 6\bh6.exe
FirewallRules: [{7A5777DF-228F-4EE2-8DB6-E9683A281522}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\launcher.exe
FirewallRules: [{48BF6776-7E6C-4651-997C-CADF51E22ACA}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Shadow Warrior Original\bin\launcher.exe
FirewallRules: [TCP Query User{D4C4ACEB-F5EA-44F4-8217-C6DD842F1F0F}D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe] => (Block) D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe
FirewallRules: [UDP Query User{011A4928-D85E-471A-9AE4-7C833A340BDB}D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe] => (Block) D:\program files (x86)\ubisoft\gearbox software\brothers in arms - hell's highway\binaries\biahh.exe
FirewallRules: [TCP Query User{5DD15233-C287-4045-881F-F4F584F20072}D:\program files (x86)\team17\worms2\frontend.exe] => (Block) D:\program files (x86)\team17\worms2\frontend.exe
FirewallRules: [UDP Query User{2A0206DA-506B-4FFA-9E5B-693DBB739E09}D:\program files (x86)\team17\worms2\frontend.exe] => (Block) D:\program files (x86)\team17\worms2\frontend.exe
FirewallRules: [TCP Query User{C6769F55-973D-4C7F-A7B4-12735705F286}C:\program files (x86)\internet download manager\idman.exe] => (Block) C:\program files (x86)\internet download manager\idman.exe
FirewallRules: [UDP Query User{5DEAA5F2-8E9A-4C8A-8588-BDD6299B62CF}C:\program files (x86)\internet download manager\idman.exe] => (Block) C:\program files (x86)\internet download manager\idman.exe
FirewallRules: [{EFFB6041-4BBE-41C7-912E-365BAE22DD04}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{0D7E6960-86FB-492D-B489-3B24AD50A3E1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{45845EDC-5DAE-41AE-A0BC-03E98F50AFA6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{4A3FE64D-ED00-4AEC-A0FA-F709A4564443}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{1A05E161-D6C7-495C-83FA-84CCC72F4B03}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{643030BF-30D3-49CD-9860-E9176CB57FDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{76A7D289-5ECB-4B85-B643-1536251F13B7}D:\program files (x86)\steam\steam.exe] => (Allow) D:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{12DFFE6B-05BF-4316-9F70-766ED64FB5DE}D:\program files (x86)\steam\steam.exe] => (Allow) D:\program files (x86)\steam\steam.exe
FirewallRules: [{029F6014-4EF8-41AD-9280-8ECF004F2FF4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{20178541-CFA7-4737-A83D-2B1B6553FD04}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{6248BC26-3394-4D57-BBD8-562D8A7C61D5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{CD707AF7-EE4E-4CCE-B89D-DF523C8E8119}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{66E08889-5FD1-436F-A5DB-70EFAF39A7A6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{838E7202-13DE-461D-8A1A-9CCB337BDB8F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{374879A8-19F1-4100-88BE-F9624FBA90FD}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{436F0B9E-D38A-47A6-90FC-E05CEB7D5804}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe
FirewallRules: [{9B08C4FA-D811-42FA-B07E-7B690137E406}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{9B0C145B-3A20-48D6-9374-8B784CE87DCE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{3D7E40FB-CEDC-472E-A012-5059C99C4D60}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{712119B0-6F6C-4DD1-BF70-E57BF84EAA04}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{64D043CC-415C-4F34-B544-F39FA10BB958}D:\program files (x86)\dune-2000-cz\dune2000.dat] => (Block) D:\program files (x86)\dune-2000-cz\dune2000.dat
FirewallRules: [UDP Query User{DCE5E499-709F-4292-9E79-6F31CA77F525}D:\program files (x86)\dune-2000-cz\dune2000.dat] => (Block) D:\program files (x86)\dune-2000-cz\dune2000.dat
FirewallRules: [{8F58A696-F38C-4CEA-982A-2EDC68D6C945}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CD387191-00F1-4627-8F00-7EC9155C34DD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{28A2BB7C-3632-412B-811D-D13BE5EECEEA}] => (Allow) C:\Users\Cynik\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0679413B-C1B5-4EC6-83B8-408CC2B49615}] => (Allow) C:\Users\Cynik\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C9923599-2239-45C8-95CC-88DA67CDD455}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{EDD65F4D-72E0-490B-ABF2-0F906554C140}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{BD76CE4C-8638-4142-948E-E08220918AA2}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B9D5CDC4-8DB4-4A1D-AE72-E126AEFEB37F}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E2E0006-686C-43BE-B7CA-7E9A7B3002F6}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{371A7804-DB0B-431D-94AD-1A01AD7266F7}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{34592C2A-3E2C-436E-8194-F656C53133B1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BDFC1A48-3A5B-4C62-A388-217C3A1120D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{393740EA-488A-4FEB-BBAD-DA9DE3639B46}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{264B8A72-57AE-4424-BFDE-424AF3C2F87F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{892A6D7A-4493-4B63-A121-4B90AC2F150A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{68DD0846-DE68-459A-B04D-DC214AB08118}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{43577501-F912-4466-9656-174BA8D78055}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EC345A0B-D158-48D3-8384-DFF706CB5319}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EC4FFD01-A6BD-4651-9F85-0D7DDDCD9341}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{EF6C6146-7ACD-4CD8-B7E5-8D8063CF2520}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{48407298-E1B7-4324-9228-6956C95E7187}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{308F807B-E4A5-4198-A50D-0FA8FE8FE47C}] => (Allow) D:\Program Files (x86)\CAPCOM\Resident Evil 5\Launcher.exe
FirewallRules: [{B4895D15-4EC2-45C4-B64B-49CE873CFCDC}] => (Allow) D:\Program Files (x86)\CAPCOM\Resident Evil 5\Launcher.exe
FirewallRules: [TCP Query User{AD202C73-5C78-41A7-82C9-37CD315E1FA1}D:\program files (x86)\capcom\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\capcom\resident evil 5\re5dx9.exe
FirewallRules: [UDP Query User{A0C7A0D8-A5EA-453A-9953-2BE5DDE81B93}D:\program files (x86)\capcom\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\capcom\resident evil 5\re5dx9.exe
FirewallRules: [{C5AD7C8D-7D1F-4874-A290-64816FD0E02D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 5\Launcher.exe
FirewallRules: [{E06A4706-F8DA-4341-93EA-4F1E644F939F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 5\Launcher.exe
FirewallRules: [TCP Query User{F1A868D5-7C19-426B-BC9F-9DDF1F956CC8}D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe
FirewallRules: [UDP Query User{D1FA4D7A-8DFD-4E15-85EA-C8982F6B4BEF}D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe
FirewallRules: [TCP Query User{5F526BE3-66F5-4A62-9D37-4037B697E536}D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe] => (Block) D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe
FirewallRules: [UDP Query User{BC6EB6E1-552E-40B7-BD1B-018E666D99D2}D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe] => (Block) D:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe
FirewallRules: [{F9B91A2A-2C2C-4C3A-BB03-F250425D4BC3}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{D322ABF2-2708-499E-BCFC-C7E59CA3D44E}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{F3FAF8AC-BDA1-4296-A0B0-6F943CD6C2B3}] => (Allow) D:\Program Files (x86)\Paradox Interactive\Majesty 2\Majesty2.exe
FirewallRules: [{8D93ECD2-8684-4739-AD81-A17B85A93761}] => (Allow) D:\Program Files (x86)\Paradox Interactive\Majesty 2\Majesty2.exe
FirewallRules: [{C27FCF46-330F-4864-898D-9B53529DF4D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0C002507-BF37-48E5-9F5E-852D00B446C8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{071674E7-D4CD-487E-B93F-EDE2D13E3A42}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{28E5079E-5C15-485D-B2EC-223B64DA6695}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{3C052F52-2470-4AD5-ACE4-69BA02119ADD}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{DEF0CF20-A227-48B0-930A-C975E3150F92}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{7EBEF34F-B8A5-4648-8237-7FF5F8D4995B}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{056A5168-69EA-419D-8EA8-A8689FFDB698}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Adaptér tunelového režimu Microsoft Teredo
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/19/2015 09:11:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CLMSMonitorServicePDVD12.exe, verze: 2.2.0.9709, časové razítko: 0x4f0a6361
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.19045, časové razítko: 0x56258e62
Kód výjimky: 0xc0000005
Posun chyby: 0x00033aa8
ID chybujícího procesu: 0x994
Čas spuštění chybující aplikace: 0xCLMSMonitorServicePDVD12.exe0
Cesta k chybující aplikaci: CLMSMonitorServicePDVD12.exe1
Cesta k chybujícímu modulu: CLMSMonitorServicePDVD12.exe2
ID zprávy: CLMSMonitorServicePDVD12.exe3

Error: (12/19/2015 02:11:28 AM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (2104) WebCacheLocal: Pokus o otevření souboru C:\Users\Cynik\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (12/17/2015 01:41:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Název chybujícího modulu: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Kód výjimky: 0xc0000005
Posun chyby: 0x00661a74
ID chybujícího procesu: 0x77c
Čas spuštění chybující aplikace: 0xFalloutNV.exe0
Cesta k chybující aplikaci: FalloutNV.exe1
Cesta k chybujícímu modulu: FalloutNV.exe2
ID zprávy: FalloutNV.exe3

Error: (12/17/2015 01:16:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Název chybujícího modulu: d3d9.dll, verze: 6.1.7601.17514, časové razítko: 0x4ce7b7b3
Kód výjimky: 0xc0000005
Posun chyby: 0x00034d4e
ID chybujícího procesu: 0x698
Čas spuštění chybující aplikace: 0xFalloutNV.exe0
Cesta k chybující aplikaci: FalloutNV.exe1
Cesta k chybujícímu modulu: FalloutNV.exe2
ID zprávy: FalloutNV.exe3

Error: (12/16/2015 07:36:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AVSVideoConverter.exe, verze: 8.0.2.493, časové razítko: 0x00000000
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0xffffffff
ID chybujícího procesu: 0x18bc
Čas spuštění chybující aplikace: 0xAVSVideoConverter.exe0
Cesta k chybující aplikaci: AVSVideoConverter.exe1
Cesta k chybujícímu modulu: AVSVideoConverter.exe2
ID zprávy: AVSVideoConverter.exe3

Error: (12/15/2015 02:05:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Název chybujícího modulu: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Kód výjimky: 0xc0000005
Posun chyby: 0x00661a74
ID chybujícího procesu: 0x1ba0
Čas spuštění chybující aplikace: 0xFalloutNV.exe0
Cesta k chybující aplikaci: FalloutNV.exe1
Cesta k chybujícímu modulu: FalloutNV.exe2
ID zprávy: FalloutNV.exe3

Error: (12/14/2015 05:51:21 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (2392) WebCacheLocal: Pokus o otevření souboru C:\Users\Cynik\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (12/14/2015 01:26:54 PM) (Source: IMFservice) (EventID: 0) (User: )
Description: Neplatný popisovač

Error: (12/14/2015 01:26:54 PM) (Source: IMFservice) (EventID: 0) (User: )
Description: Neplatný popisovač

Error: (12/13/2015 12:33:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Název chybujícího modulu: FalloutNV.exe, verze: 1.4.0.525, časové razítko: 0x4e0d50ed
Kód výjimky: 0xc0000005
Posun chyby: 0x00661a74
ID chybujícího procesu: 0x1088
Čas spuštění chybující aplikace: 0xFalloutNV.exe0
Cesta k chybující aplikaci: FalloutNV.exe1
Cesta k chybujícímu modulu: FalloutNV.exe2
ID zprávy: FalloutNV.exe3


System errors:
=============
Error: (12/22/2015 02:33:31 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/19/2015 09:15:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/19/2015 09:15:42 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/19/2015 09:15:42 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/19/2015 09:15:41 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/19/2015 09:15:41 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (12/19/2015 09:13:01 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CyberLink PowerDVD 12 Media Server Monitor Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (12/19/2015 03:09:44 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/19/2015 02:08:25 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056

Error: (12/19/2015 02:07:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Instalační služba modulů systému Windows byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.


CodeIntegrity:
===================================
Date: 2015-06-02 00:34:42.835
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:42.804
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:41.681
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:41.650
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:40.573
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:40.527
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:39.450
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:39.403
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:07.188
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-06-02 00:34:07.148
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\RivaTuner v2.23\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
Percentage of memory in use: 69%
Total physical RAM: 2039.11 MB
Available physical RAM: 630.1 MB
Total Virtual: 4078.23 MB
Available Virtual: 2025.1 MB

==================== Drives ================================

Drive c: (Místní disk) (Fixed) (Total:60 GB) (Free:5.81 GB) NTFS
Drive d: () (Fixed) (Total:400.55 GB) (Free:42.15 GB) NTFS
Drive n: (VERBATIM HD) (Fixed) (Total:931.51 GB) (Free:35.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 65CDBF15)
Partition 1: (Active) - (Size=1023 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=400.5 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=4.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 4EF27132)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Re: worm vbs jenxcus

Napsal: 22 pro 2015 19:37
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
CHR HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO-x32: No Name -> {1bb173b0-6833-417b-bdcf-df277f01407e} -> No File
BHO-x32: No Name -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
BHO-x32: No Name -> {741CDDFF-4C8B-2B84-5E08-58AA8A3D4D24} -> No File
BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No File
Toolbar: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> No Name - {8721248B-7D30-4CFD-9674-A52BCC829178} - No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta732.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ff => not found
C:\Program Files (x86)\VideoPlayerV3
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
c:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Task: {9D628366-FB88-4F0C-B22A-B7766C792378} - System32\Tasks\WindowsUpda2ta => C:\Users\Cynik\AppData\Roaming\MICROSOFT\easy cd-da extractor -Crack Activator 2015.vbs <==== ATTENTION
AlternateDataStreams: C:\Windows\system32\Drivers\oamwxkwm.sys:changelist
AlternateDataStreams: C:\ProgramData\TEMP:92409937
End
Uložte do D:\Downloads\Programs plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: worm vbs jenxcus

Napsal: 22 pro 2015 21:07
od radek.ctibor
Tady to je :-)

Fix result of Farbar Recovery Scan Tool (x64) Version:20-12-2015
Ran by Cynik (2015-12-22 21:06:07) Run:1
Running from D:\Downloads\Programs
Loaded Profiles: Cynik (Available Profiles: Cynik)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
CHR HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO-x32: No Name -> {1bb173b0-6833-417b-bdcf-df277f01407e} -> No File
BHO-x32: No Name -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
BHO-x32: No Name -> {741CDDFF-4C8B-2B84-5E08-58AA8A3D4D24} -> No File
BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No File
Toolbar: HKU\S-1-5-21-4073195468-1047248204-2128101136-1000 -> No Name - {8721248B-7D30-4CFD-9674-A52BCC829178} - No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta732.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta732\ff => not found
C:\Program Files (x86)\VideoPlayerV3
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
c:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Task: {9D628366-FB88-4F0C-B22A-B7766C792378} - System32\Tasks\WindowsUpda2ta => C:\Users\Cynik\AppData\Roaming\MICROSOFT\easy cd-da extractor -Crack Activator 2015.vbs <==== ATTENTION
AlternateDataStreams: C:\Windows\system32\Drivers\oamwxkwm.sys:changelist
AlternateDataStreams: C:\ProgramData\TEMP:92409937
End
*****************

HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NolowDiskSpaceChecks => value removed successfully
"HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}" => key removed successfully
HKCR\Wow6432Node\CLSID\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => key not found.
"HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}" => key removed successfully
HKCR\CLSID\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1bb173b0-6833-417b-bdcf-df277f01407e}" => key removed successfully
HKCR\Wow6432Node\CLSID\{1bb173b0-6833-417b-bdcf-df277f01407e} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}" => key removed successfully
HKCR\Wow6432Node\CLSID\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{741CDDFF-4C8B-2B84-5E08-58AA8A3D4D24}" => key removed successfully
HKCR\Wow6432Node\CLSID\{741CDDFF-4C8B-2B84-5E08-58AA8A3D4D24} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}" => key removed successfully
HKCR\Wow6432Node\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{BFC32E1D-EE75-4A48-BC60-104E11EE2431} => value removed successfully
HKCR\Wow6432Node\CLSID\{BFC32E1D-EE75-4A48-BC60-104E11EE2431} => key not found.
HKU\S-1-5-21-4073195468-1047248204-2128101136-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{8721248B-7D30-4CFD-9674-A52BCC829178} => value removed successfully
HKCR\CLSID\{8721248B-7D30-4CFD-9674-A52BCC829178} => key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta732.net => value removed successfully
"C:\Program Files (x86)\VideoPlayerV3" => not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
c:\Users\Cynik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9D628366-FB88-4F0C-B22A-B7766C792378}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D628366-FB88-4F0C-B22A-B7766C792378}" => key removed successfully
C:\Windows\System32\Tasks\WindowsUpda2ta => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WindowsUpda2ta" => key removed successfully
C:\Windows\system32\Drivers\oamwxkwm.sys => ":changelist" ADS removed successfully.
C:\ProgramData\TEMP => ":92409937" ADS removed successfully.

==== End of Fixlog 21:06:08 ====

Re: worm vbs jenxcus

Napsal: 22 pro 2015 22:10
od Rudy
Smazáno. Nastala nějaká změna?

Re: worm vbs jenxcus

Napsal: 23 pro 2015 13:54
od radek.ctibor
PC běží o něco rychleji. Jinak jsem žádnou změnu nezaznamenal.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz