dobrý den,Mám problém při kliknutí na jakíkoliv odkaz na webu se mi otevře požadovaná stránka ,ale zároveň nechtěná reklama v novém okně zde je můj log:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by User (administrator) on USER-PC on 11-03-2014 18:45:03
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Cerberus, LLC) C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
() C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\User\AppData\Local\PirritSuggestor\PirritService.exe
() C:\Program Files (x86)\Pirrit\AutoUpdater.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\LemurLeap\updateLemurLeap.exe
() C:\Program Files (x86)\LemurLeap\bin\utilLemurLeap.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
() C:\Users\User\AppData\Local\PirritSuggestor\PirritDesktop.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SDP] - C:\Users\User\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
AppInit_DLLs-x32: c:\progra~2\sshelp~1\psupport.dll => C:\Program Files (x86)\ss helper\psupport.dll [857600 2013-10-06] ()
AppInit_DLLs-x32: c:\progra~2\skhelp~1\psupport.dll => C:\Program Files (x86)\SK Helper\psupport.dll [857600 2013-10-06] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=http://127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
URLSearchHook: HKCU - UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08} URL = http://search.seznam.cz/?q={searchTerms ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (Search Results LLC.)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: IEExtension.Extension - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [xz123@ya456.com] - C:\Program Files (x86)\BetterSurf\ff
FF HKLM-x32\...\Firefox\Extensions: [12x3q@3244516.com] - C:\Program Files (x86)\Better-Surf\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@bettersurfplus.com] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF Extension: Webexp Enhanced - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff [2013-12-20]
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF Extension: No Name - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF Extension: Media Player - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff [2014-01-29]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
R2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
R2 DefaultTabUpdate; C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2014-02-23] ()
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
U2 PirritDesktop; C:\Users\User\AppData\Local\PirritSuggestor\PirritService.exe [52568 2014-02-20] ()
R2 PirritUpdater; C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904 2014-02-20] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 Update LemurLeap; C:\Program Files (x86)\LemurLeap\updateLemurLeap.exe [112416 2014-03-11] ()
R2 Util LemurLeap; C:\Program Files (x86)\LemurLeap\bin\utilLemurLeap.exe [112416 2014-03-11] ()
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 18:45 - 2014-03-11 18:45 - 00025622 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:53 - 2014-03-10 18:53 - 00073945 _____ () C:\Users\User\Desktop\FRST2.txt
2014-03-10 18:52 - 2014-03-11 18:45 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 18:28 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\newnext.me
2014-03-07 14:21 - 2014-03-07 14:25 - 00000000 ____D () C:\Users\User\AppData\Local\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\Documents\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-07 14:17 - 2014-03-07 14:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenCandy
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:23 - 2014-02-23 16:23 - 00000000 ____D () C:\Users\User\AppData\Local\WebPlayer
2014-02-23 16:20 - 2014-02-23 16:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\systweak
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:20 - 00000000 ____D () C:\Users\User\AppData\Local\PirritSuggestor
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Pirrit
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\Pirrit
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DefaultTab
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 18:45 - 2014-03-11 18:45 - 00025622 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 18:45 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 18:40 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 18:37 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 18:37 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 18:28 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 18:02 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 17:58 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 17:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 17:56 - 2013-10-12 22:15 - 00000352 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-03-11 17:56 - 2013-09-20 15:19 - 01061361 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 13:37 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:37 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 13:30 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 13:30 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 13:28 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 13:24 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 13:24 - 2009-07-14 05:51 - 00059627 _____ () C:\Windows\setupact.log
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 20:20 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-10 18:53 - 2014-03-10 18:53 - 00073945 _____ () C:\Users\User\Desktop\FRST2.txt
2014-03-10 18:51 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-10 07:38 - 2010-11-21 04:47 - 00025980 _____ () C:\Windows\PFRO.log
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:53 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:28 - 2013-12-07 13:22 - 00000000 ____D () C:\ProgramData\surrf AAnd keeePP
2014-03-08 14:28 - 2013-11-23 10:03 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-03-08 14:28 - 2013-11-23 10:02 - 00000000 ____D () C:\ProgramData\surf anndd akeep
2014-03-08 14:24 - 2013-11-23 10:03 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 14:16 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\surrf AAnd keeePP
2014-03-08 14:16 - 2013-11-23 10:02 - 00000000 ____D () C:\Program Files (x86)\surf anndd akeep
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 11:23 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\newnext.me
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2014-01-10 19:39 - 00000000 ____D () C:\Program Files (x86)\VideoPlayerV3
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-10-12 22:15 - 00000000 ____D () C:\Users\User\AppData\Local\SwvUpdater
2014-03-07 15:15 - 2013-10-12 22:15 - 00000000 ____D () C:\Program Files (x86)\LemurLeap
2014-03-07 15:15 - 2013-10-12 10:30 - 00000000 ____D () C:\Program Files (x86)\ss helper
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:25 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\Mobogenie
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\Documents\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-07 14:17 - 2014-03-07 14:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenCandy
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:24 - 2014-02-23 16:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\systweak
2014-02-23 16:23 - 2014-02-23 16:23 - 00000000 ____D () C:\Users\User\AppData\Local\WebPlayer
2014-02-23 16:20 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\PirritSuggestor
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Pirrit
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\Pirrit
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DefaultTab
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-10 18:04 - 2014-01-03 07:59 - 00430080 _____ (Farbar) C:\Windows\mod_frst.exe
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstall.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.52 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5988.62 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 26%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\User\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2937 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Nežádoucí reklamy
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Nežádoucí reklamy
Naposledy upravil(a) cernohous13 dne 11 bře 2014 18:39, celkem upraveno 1 x.
Důvod: Nedávej logy do [code]
Důvod: Nedávej logy do [code]
Re: Nežádoucí reklamy
Zdravim a pekny den preji 
Kdyz si krmite PC crackama a podobnyma dobrotama, tak neni divu ze tam mate tolik bordelu 
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Kdyz si krmite PC crackama a podobnyma dobrotama, tak neni divu ze tam mate tolik bordelu Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
- Ulozte nejlepe na plochu
- Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
- Probehne vytvoreni zalohy a nasledne prohledavani
- Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Nežádoucí reklamy
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by User on Łt 11.03.2014 at 18:57:03,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\somoto
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\default tab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\qvo6software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\filesfrog update checker
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sp global
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
~~~ Files
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\splashtop"
Successfully deleted: [Folder] "C:\ProgramData\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\appshat mobile apps"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\filesfrog update checker"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\minibar"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\splashtop"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Users\User\appdata\locallow\minibar"
Failed to delete: [Folder] "C:\Program Files (x86)\lemurleap"
Successfully deleted: [Folder] "C:\Program Files (x86)\minibar"
Successfully deleted: [Folder] "C:\Program Files (x86)\splashtop"
Successfully deleted: [Folder] "C:\Program Files (x86)\videoplayerv3"
Successfully deleted: [Folder] "C:\Program Files (x86)\webexpenhancedv1"
Successfully deleted: [Folder] "C:\Program Files (x86)\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\microsoft\windows\start menu\programs\filesfrog update checker"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 11.03.2014 at 19:13:19,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by User on Łt 11.03.2014 at 18:57:03,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\somoto
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\default tab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\qvo6software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\filesfrog update checker
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sp global
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
~~~ Files
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\splashtop"
Successfully deleted: [Folder] "C:\ProgramData\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\appshat mobile apps"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\filesfrog update checker"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\minibar"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\splashtop"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Users\User\appdata\locallow\minibar"
Failed to delete: [Folder] "C:\Program Files (x86)\lemurleap"
Successfully deleted: [Folder] "C:\Program Files (x86)\minibar"
Successfully deleted: [Folder] "C:\Program Files (x86)\splashtop"
Successfully deleted: [Folder] "C:\Program Files (x86)\videoplayerv3"
Successfully deleted: [Folder] "C:\Program Files (x86)\webexpenhancedv1"
Successfully deleted: [Folder] "C:\Program Files (x86)\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\microsoft\windows\start menu\programs\filesfrog update checker"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 11.03.2014 at 19:13:19,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Re: Nežádoucí reklamy
Poprosim o AdwCleaner, dal jste bohuzel dva logy z JRT
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nežádoucí reklamy
ok počkejte chvilku.
Re: Nežádoucí reklamy
Jasny, v pohode
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nežádoucí reklamy
Zde je log:
# AdwCleaner v3.021 - Report created 11/03/2014 at 19:38:59
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : User - USER-PC
# Running from : C:\Users\User\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : PirritDesktop
[#] Service Deleted : PirritUpdater
[#] Service Deleted : splashtopremoteservice
[#] Service Deleted : SSUService
[#] Service Deleted : Update LemurLeap
[#] Service Deleted : Util LemurLeap
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\ProgramData\DownloAd KKeeper
Folder Deleted : C:\ProgramData\surf anndd akeep
Folder Deleted : C:\ProgramData\surrf AAnd keeePP
Folder Deleted : C:\ProgramData\Weekappo
Folder Deleted : C:\Program Files (x86)\LemurLeap
Folder Deleted : C:\Program Files (x86)\MediaPlayerV1
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\ss helper
Folder Deleted : C:\Program Files (x86)\surf anndd akeep
Folder Deleted : C:\Program Files (x86)\surrf AAnd keeePP
Folder Deleted : C:\Users\User\AppData\Local\Mobogenie
Folder Deleted : C:\Users\User\AppData\Local\PirritSuggestor
Folder Deleted : C:\Users\User\AppData\Local\Temp\eIntaller
Folder Deleted : C:\Users\User\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\User\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\User\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\User\Documents\Mobogenie
File Deleted : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\Extensions\suggestor@suggestor.pirrit.com.xpi
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\User\AppData\Local\Temp\Uninstall.exe
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ext@bettersurfplus.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_ba96f9e6
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_eea72b4f
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\caphyon
Key Deleted : HKCU\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\caphyon
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKLM\Software\OptimizerPro
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7C5EA94-B96A-41F5-BE95-25D78B486678}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Splashtop Software Updater
Key Deleted : [x64] HKLM\SOFTWARE\Pirrit
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sshelp~1\psupport.dll
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\skhelp~1\psupport.dll
Key Deleted : HKLM\Software\Classes\Installer\Features\49AE5C7BA69B5F14EB59527DB8846687
Key Deleted : HKLM\Software\Classes\Installer\Products\49AE5C7BA69B5F14EB59527DB8846687
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16518
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v
*************************
AdwCleaner[R0].txt - [8544 octets] - [11/03/2014 19:38:31]
AdwCleaner[S0].txt - [8201 octets] - [11/03/2014 19:38:59]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8261 octets] ##########
Ale mám problém nefunguje mi prohlížení stránek jinak jsem připojen do sítě ,ale nejde to pomozte.
# AdwCleaner v3.021 - Report created 11/03/2014 at 19:38:59
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : User - USER-PC
# Running from : C:\Users\User\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : PirritDesktop
[#] Service Deleted : PirritUpdater
[#] Service Deleted : splashtopremoteservice
[#] Service Deleted : SSUService
[#] Service Deleted : Update LemurLeap
[#] Service Deleted : Util LemurLeap
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\ProgramData\DownloAd KKeeper
Folder Deleted : C:\ProgramData\surf anndd akeep
Folder Deleted : C:\ProgramData\surrf AAnd keeePP
Folder Deleted : C:\ProgramData\Weekappo
Folder Deleted : C:\Program Files (x86)\LemurLeap
Folder Deleted : C:\Program Files (x86)\MediaPlayerV1
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\ss helper
Folder Deleted : C:\Program Files (x86)\surf anndd akeep
Folder Deleted : C:\Program Files (x86)\surrf AAnd keeePP
Folder Deleted : C:\Users\User\AppData\Local\Mobogenie
Folder Deleted : C:\Users\User\AppData\Local\PirritSuggestor
Folder Deleted : C:\Users\User\AppData\Local\Temp\eIntaller
Folder Deleted : C:\Users\User\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\User\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\User\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\User\Documents\Mobogenie
File Deleted : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\Extensions\suggestor@suggestor.pirrit.com.xpi
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\User\AppData\Local\Temp\Uninstall.exe
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ext@bettersurfplus.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_ba96f9e6
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_eea72b4f
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\caphyon
Key Deleted : HKCU\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\caphyon
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKLM\Software\OptimizerPro
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7C5EA94-B96A-41F5-BE95-25D78B486678}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Splashtop Software Updater
Key Deleted : [x64] HKLM\SOFTWARE\Pirrit
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sshelp~1\psupport.dll
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\skhelp~1\psupport.dll
Key Deleted : HKLM\Software\Classes\Installer\Features\49AE5C7BA69B5F14EB59527DB8846687
Key Deleted : HKLM\Software\Classes\Installer\Products\49AE5C7BA69B5F14EB59527DB8846687
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16518
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v
*************************
AdwCleaner[R0].txt - [8544 octets] - [11/03/2014 19:38:31]
AdwCleaner[S0].txt - [8201 octets] - [11/03/2014 19:38:59]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8261 octets] ##########
Ale mám problém nefunguje mi prohlížení stránek jinak jsem připojen do sítě ,ale nejde to pomozte.
Re: Nežádoucí reklamy
V jakem prohlizeci pise tu chybu proxy??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nežádoucí reklamy
v prohlizeci explorer a maxthon a také safari
Re: Nežádoucí reklamy
Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100 a mrknem na to
Vetsinou ale nekde v nastaveni prohlizece (Safari a i urcite Maxthon) bude neco jako nastaveni pripojeni\site a tam bude at se pouziva proxy - to zruste..V IE to odstrelim pres skript nasledne pro FRST
Vetsinou ale nekde v nastaveni prohlizece (Safari a i urcite Maxthon) bude neco jako nastaveni pripojeni\site a tam bude at se pouziva proxy - to zruste..V IE to odstrelim pres skript nasledne pro FRST
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nežádoucí reklamy
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by User (administrator) on USER-PC on 11-03-2014 20:48:43
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\RazerCore.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\rstrui.exe
(Microsoft Corporation) C:\Windows\system32\wbengine.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:39 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:52 - 2014-03-11 20:48 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 19:38 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 20:48 - 2014-03-11 18:45 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 20:48 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 20:47 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 20:13 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 19:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 19:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:49 - 2013-09-20 15:19 - 01075129 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 19:47 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 19:46 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 19:46 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 19:44 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 19:44 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 19:42 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 19:40 - 2010-11-21 04:47 - 00026508 _____ () C:\Windows\PFRO.log
2014-03-11 19:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 19:40 - 2009-07-14 05:51 - 00059683 _____ () C:\Windows\setupact.log
2014-03-11 19:39 - 2014-03-11 20:01 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:39 - 2014-03-11 19:38 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:39 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:38 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 19:38 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-11 19:38 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:29 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 19:13 - 2013-09-20 15:17 - 00001397 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.18 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5210.35 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 36%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2940 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by User (administrator) on USER-PC on 11-03-2014 20:48:43
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\RazerCore.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\rstrui.exe
(Microsoft Corporation) C:\Windows\system32\wbengine.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:39 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:52 - 2014-03-11 20:48 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 19:38 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 20:48 - 2014-03-11 18:45 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 20:48 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 20:47 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 20:13 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 19:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 19:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:49 - 2013-09-20 15:19 - 01075129 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 19:47 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 19:46 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 19:46 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 19:44 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 19:44 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 19:42 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 19:40 - 2010-11-21 04:47 - 00026508 _____ () C:\Windows\PFRO.log
2014-03-11 19:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 19:40 - 2009-07-14 05:51 - 00059683 _____ () C:\Windows\setupact.log
2014-03-11 19:39 - 2014-03-11 20:01 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:39 - 2014-03-11 19:38 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:39 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:38 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 19:38 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-11 19:38 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:29 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 19:13 - 2013-09-20 15:17 - 00001397 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.18 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5210.35 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 36%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2940 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Re: Nežádoucí reklamy
Odinstalujte AVG - jednak je to parodie na antivir a jednak predevsim dochazi ke kolizi s MSE. A tez AVG PC TuneUp - zcela neucinna vec Tvorba fixlistu pro FRST
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.) HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] () HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] () HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] () HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: 127.0.0.1:9880 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia) FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23] FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23] FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24] FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27] DisableService: c2cautoupdatesvc S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X C:\Program Files (x86)\MediaViewV1 C:\Program Files (x86)\WebexpEnhancedV1 C:\Program Files (x86)\VideoPlayerV3 C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat C:\Users\User\AppData\Roaming\Standart C:\Users\User\LOCALS~1\Temp\msoavy.cmd 2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt 2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log 2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log 2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe 2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt 2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe 2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt 2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe C:\Users\User\Network_Meter_Data.js C:\Users\User\AppData\Local\Temp\.dud.exe C:\Users\User\AppData\Local\Temp\00036bcc.exe C:\Users\User\AppData\Local\Temp\011853a0.exe C:\Users\User\AppData\Local\Temp\014c1f87.exe C:\Users\User\AppData\Local\Temp\17131017.exe C:\Users\User\AppData\Local\Temp\6_Offer_4.exe C:\Users\User\AppData\Local\Temp\7za.exe C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll C:\Users\User\AppData\Local\Temp\aa2.exe C:\Users\User\AppData\Local\Temp\ampn.exe C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe C:\Users\User\AppData\Local\Temp\appshat-distribution.exe C:\Users\User\AppData\Local\Temp\AutoRun.exe C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll C:\Users\User\AppData\Local\Temp\bdfilters.dll C:\Users\User\AppData\Local\Temp\binkw32.dll C:\Users\User\AppData\Local\Temp\ChangeIcon.exe C:\Users\User\AppData\Local\Temp\clicky22.exe C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe C:\Users\User\AppData\Local\Temp\d2l_Install.exe C:\Users\User\AppData\Local\Temp\DownloadManager.exe C:\Users\User\AppData\Local\Temp\DSETUP.dll C:\Users\User\AppData\Local\Temp\dsetup32.dll C:\Users\User\AppData\Local\Temp\DXSETUP.exe C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll C:\Users\User\AppData\Local\Temp\i4jdel0.exe C:\Users\User\AppData\Local\Temp\installerdll.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll C:\Users\User\AppData\Local\Temp\jdlr.exe C:\Users\User\AppData\Local\Temp\jv3.exe C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe C:\Users\User\AppData\Local\Temp\nsisos.dll C:\Users\User\AppData\Local\Temp\ose00000.exe C:\Users\User\AppData\Local\Temp\Quarantine.exe C:\Users\User\AppData\Local\Temp\sonarinst.exe C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe C:\Users\User\AppData\Local\Temp\xmlUpdater.exe C:\Users\User\AppData\Local\Temp\_is334E.exe C:\Users\User\AppData\Local\Temp\_is4FB8.exe C:\Users\User\AppData\Local\Temp\_is672A.exe C:\Users\User\AppData\Local\Temp\_is8B7B.exe C:\Users\User\AppData\Local\Temp\_is8BED.exe C:\Users\User\AppData\Local\Temp\_is94AD.exe C:\Users\User\AppData\Local\Temp\_isD52.exe C:\Users\User\AppData\Local\Temp\_isD94C.exe C:\Users\User\AppData\Local\Temp\_isEB28.exe C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe AlternateDataStreams: C:\ProgramData\TEMP:373E1720 Hosts: CMD: shutdown /r /f /t 2 End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nežádoucí reklamy
Mockrát děkuji,Podařilo se při kliknutí se neotevírá reklama a web už jde pro jisotu zde je ten log:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-03-2014 02
Ran by User at 2014-03-11 21:09:28 Run:2
Running from C:\Users\User\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
DisableService: c2cautoupdatesvc
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X
C:\Program Files (x86)\MediaViewV1
C:\Program Files (x86)\WebexpEnhancedV1
C:\Program Files (x86)\VideoPlayerV3
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat
C:\Users\User\AppData\Roaming\Standart
C:\Users\User\LOCALS~1\Temp\msoavy.cmd
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
C:\Users\User\Network_Meter_Data.js
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
Hosts:
CMD: shutdown /r /f /t 2
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Razer Synapse => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam Postak => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BitTorrent => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key not found.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key not found.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions => Moved successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@WebexpEnhancedV1alpha184.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta660.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaPlayerV1alpha739.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewerV1alpha220.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewV1alpha2874.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff => Moved successfully.
c2cautoupdatesvc service was disabled
EagleX64 => Service deleted successfully.
GGSAFERDriver => Service deleted successfully.
xhunter1 => Service deleted successfully.
C:\Program Files (x86)\MediaViewV1 => Moved successfully.
"C:\Program Files (x86)\WebexpEnhancedV1" => File/Directory not found.
"C:\Program Files (x86)\VideoPlayerV3" => File/Directory not found.
"C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat" => File/Directory not found.
C:\Users\User\AppData\Roaming\Standart => Moved successfully.
"C:\Users\User\LOCALS~1\Temp\msoavy.cmd" => File/Directory not found.
C:\Users\User\Documents\AdwCleaner[S0].txt => Moved successfully.
C:\Users\User\Desktop\17127421420654988065.log => Moved successfully.
C:\Users\User\Desktop\12009461836511986565.log => Moved successfully.
C:\Users\User\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\User\Desktop\JRT.txt => Moved successfully.
C:\Users\User\Desktop\JRT.exe => Moved successfully.
"C:\Users\User\Desktop\FRST.txt" => File/Directory not found.
C:\Users\User\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\User\Network_Meter_Data.js => Moved successfully.
C:\Users\User\AppData\Local\Temp\.dud.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\00036bcc.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\011853a0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\014c1f87.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\17131017.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\7za.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\aa2.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\ampn.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRun.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\bdfilters.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\binkw32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\clicky22.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\d2l_Install.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DownloadManager.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DSETUP.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\dsetup32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\DXSETUP.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\i4jdel0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\installerdll.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jdlr.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\jv3.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\nsisos.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sonarinst.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is334E.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is4FB8.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is672A.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8B7B.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8BED.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is94AD.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD52.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD94C.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isEB28.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
========= shutdown /r /f /t 2 =========
========= End of CMD: =========
The system needed a reboot.
==== End of Fixlog ====
Kdyby to zase dělalo později se ozvu
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-03-2014 02
Ran by User at 2014-03-11 21:09:28 Run:2
Running from C:\Users\User\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
DisableService: c2cautoupdatesvc
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X
C:\Program Files (x86)\MediaViewV1
C:\Program Files (x86)\WebexpEnhancedV1
C:\Program Files (x86)\VideoPlayerV3
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat
C:\Users\User\AppData\Roaming\Standart
C:\Users\User\LOCALS~1\Temp\msoavy.cmd
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
C:\Users\User\Network_Meter_Data.js
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
Hosts:
CMD: shutdown /r /f /t 2
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Razer Synapse => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam Postak => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BitTorrent => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key not found.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key not found.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions => Moved successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@WebexpEnhancedV1alpha184.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta660.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaPlayerV1alpha739.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewerV1alpha220.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewV1alpha2874.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff => Moved successfully.
c2cautoupdatesvc service was disabled
EagleX64 => Service deleted successfully.
GGSAFERDriver => Service deleted successfully.
xhunter1 => Service deleted successfully.
C:\Program Files (x86)\MediaViewV1 => Moved successfully.
"C:\Program Files (x86)\WebexpEnhancedV1" => File/Directory not found.
"C:\Program Files (x86)\VideoPlayerV3" => File/Directory not found.
"C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat" => File/Directory not found.
C:\Users\User\AppData\Roaming\Standart => Moved successfully.
"C:\Users\User\LOCALS~1\Temp\msoavy.cmd" => File/Directory not found.
C:\Users\User\Documents\AdwCleaner[S0].txt => Moved successfully.
C:\Users\User\Desktop\17127421420654988065.log => Moved successfully.
C:\Users\User\Desktop\12009461836511986565.log => Moved successfully.
C:\Users\User\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\User\Desktop\JRT.txt => Moved successfully.
C:\Users\User\Desktop\JRT.exe => Moved successfully.
"C:\Users\User\Desktop\FRST.txt" => File/Directory not found.
C:\Users\User\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\User\Network_Meter_Data.js => Moved successfully.
C:\Users\User\AppData\Local\Temp\.dud.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\00036bcc.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\011853a0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\014c1f87.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\17131017.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\7za.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\aa2.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\ampn.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRun.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\bdfilters.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\binkw32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\clicky22.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\d2l_Install.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DownloadManager.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DSETUP.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\dsetup32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\DXSETUP.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\i4jdel0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\installerdll.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jdlr.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\jv3.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\nsisos.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sonarinst.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is334E.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is4FB8.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is672A.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8B7B.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8BED.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is94AD.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD52.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD94C.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isEB28.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
========= shutdown /r /f /t 2 =========
========= End of CMD: =========
The system needed a reboot.
==== End of Fixlog ====
Kdyby to zase dělalo později se ozvu
Re: Nežádoucí reklamy
Tak jeste uklidime 
T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
OTC http://oldtimer.geekstogo.com/OTC.exe
TFC http://oldtimer.geekstogo.com/TFC.exe
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 
T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
A pokud nejsou problemy ci dotazy, je to z me strany vse "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?