PC-HELP.CZ

Asi už 3 dny mi Eset stále opakuje tyto hrozby a infiltrace -> horní je z karantény a dolní z protokolů. Jednu infiltraci mi opakoval 100x.
Nevím si s tím vůbec rady jak se toho zbavit. Budu moc rád za každou radu.

Děkuji

Vítej na fóru!

Vlož sem log z HJT

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Zde posílám log z každého toho programu.


# AdwCleaner v4.207 - Log vytvořen 22/06/2015 v 13:30:06
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-21.2 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Lenovo - IDEA-PC
# Spuštěno z : C:\Users\Lenovo\Desktop\AdwCleaner.exe
# Nastavení : Sken

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{9B7B034B-944A-4261-B487-862F642F7615}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v38.0.1 (x86 cs)


-\\ Google Chrome v43.0.2357.124


-\\ Opera v30.0.1835.59


*************************

AdwCleaner[R0].txt - [751 bytů] - [22/06/2015 13:30:06]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [808 bytů] ##########






Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 22. 6. 2015
Čas skenování: 13:33:28
Protokol: Malwarebytes Anti-Malware log.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.22.01
Databáze rootkitů: v2015.06.15.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Lenovo

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 434509
Uplynulý čas: 14 min, 52 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
Trojan.Sathurbot, HKLM\SOFTWARE\CLASSES\CLSID\{3B5B973C-92A4-4855-9D3F-0F3D23332208}, , [dfda7b4264264cea926a6c457093c43c],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 31
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp, , [7e3bcdf00e7c0135355d6c87c83bad53],

Soubory: 169
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\PerformanceMonitor.dll, , [dfda7b4264264cea926a6c457093c43c],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\31638e7c368ed8fe588ee98852621b94, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\5e75f71a9582a18eb95abf5b0d3401ba, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\6df28ba66161ee6c0352c43eca6c22a5, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\a6067fb5b9f79ffe3462e8490458020c, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\b087cbbf130e1103e41e9ea3a0c58db5, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\dbadf687331785c824ea9f609eee1831, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\zepplauncher.mif, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\0734d39cfb8b071990d4886f2d949a3b, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\1796e7d6e66fced6b67278be55ac8792, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\25c3c77067e1c76ae25ec7e469130747, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\3243f2e2dd6dcbdf1d5a864320a81d97, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\388259f596ebc79086bef6b622fa89ea, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\40a980d07864cb2d3bc536509ceb2fbf, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\53300681bf06d8cd4a29a4eef8256979, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\5796bcc07cbb2cda2efb9eee3798e749, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\6380b49e0020bec1affc1c2ffbc79660, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\70b67386f19eeb69314be61c09dfe702, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\70dc66296b2d1ef53d5ff050e08cb527, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\72e85f85f59c90941e6e08f54a3bd4ca, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\8519dc14775b5d802da81b4c850992fa, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\a65324063d01973e672b725fab36bb6e, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\b9de4a4371d5e2eb97637e942fdfd4b9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\bc3ed0279228b37bf52f0d8e8dcf81b2, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\be196a8ea5dc148896d79dd6b9fed868, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\cc9539033650fa2e4e0fa565ed296de4, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\d7f43d377ecd245f2e40e1e4d8018158, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\e816d0bbcebc18f1837aad16171798a6, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\ea38836ea45a37832eab79355c0bc2d9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\f693d20f01d58120a1a6101701c0e23c, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\fece1eee3c6733bff5e297f082e304d5, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\0734d39cfb8b071990d4886f2d949a3b, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\1796e7d6e66fced6b67278be55ac8792, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\25c3c77067e1c76ae25ec7e469130747, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\3243f2e2dd6dcbdf1d5a864320a81d97, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\388259f596ebc79086bef6b622fa89ea, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\40a980d07864cb2d3bc536509ceb2fbf, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\53300681bf06d8cd4a29a4eef8256979, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\5796bcc07cbb2cda2efb9eee3798e749, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\6380b49e0020bec1affc1c2ffbc79660, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\70b67386f19eeb69314be61c09dfe702, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\70dc66296b2d1ef53d5ff050e08cb527, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\72e85f85f59c90941e6e08f54a3bd4ca, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\8519dc14775b5d802da81b4c850992fa, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\a65324063d01973e672b725fab36bb6e, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\b9de4a4371d5e2eb97637e942fdfd4b9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\bc3ed0279228b37bf52f0d8e8dcf81b2, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\be196a8ea5dc148896d79dd6b9fed868, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\cc9539033650fa2e4e0fa565ed296de4, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\d7f43d377ecd245f2e40e1e4d8018158, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\e816d0bbcebc18f1837aad16171798a6, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\ea38836ea45a37832eab79355c0bc2d9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\f693d20f01d58120a1a6101701c0e23c, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\fece1eee3c6733bff5e297f082e304d5, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\0734d39cfb8b071990d4886f2d949a3b, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\1796e7d6e66fced6b67278be55ac8792, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\25c3c77067e1c76ae25ec7e469130747, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\3243f2e2dd6dcbdf1d5a864320a81d97, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\388259f596ebc79086bef6b622fa89ea, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\40a980d07864cb2d3bc536509ceb2fbf, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\53300681bf06d8cd4a29a4eef8256979, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\5796bcc07cbb2cda2efb9eee3798e749, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\6380b49e0020bec1affc1c2ffbc79660, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\70b67386f19eeb69314be61c09dfe702, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\70dc66296b2d1ef53d5ff050e08cb527, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\72e85f85f59c90941e6e08f54a3bd4ca, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\8519dc14775b5d802da81b4c850992fa, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\a65324063d01973e672b725fab36bb6e, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\b9de4a4371d5e2eb97637e942fdfd4b9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\bc3ed0279228b37bf52f0d8e8dcf81b2, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\be196a8ea5dc148896d79dd6b9fed868, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\cc9539033650fa2e4e0fa565ed296de4, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\d7f43d377ecd245f2e40e1e4d8018158, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\e816d0bbcebc18f1837aad16171798a6, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\ea38836ea45a37832eab79355c0bc2d9, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\f693d20f01d58120a1a6101701c0e23c, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\fece1eee3c6733bff5e297f082e304d5, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Tusk 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Tusk 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792\Satellite TV For PC 2011 Elite Edition.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792\Satellite TV For PC 2011 Elite Edition.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\While Were Young 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\While Were Young 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97\Yahoo! Toolbar.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97\Yahoo! Toolbar.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea\Professional Bartender.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea\Professional Bartender.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf\Silver Efex Pro.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf\Silver Efex Pro.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Wild Card 2015.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Wild Card 2015.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Whiplash 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Whiplash 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Pitch Perfect 2 2015.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Pitch Perfect 2 2015.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\The Signal 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\The Signal 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527\JProfiler.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527\JProfiler.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Still Alice 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Still Alice 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa\Mobile Master.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa\Mobile Master.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\The Good Dinosaur 2015.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\The Good Dinosaur 2015.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9\PhotoScore Ultimate.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9\PhotoScore Ultimate.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Unfriended 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Unfriended 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868\Ultra Video Splitter.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868\Ultra Video Splitter.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70\Macro Scheduler Automation Tool.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70\Macro Scheduler Automation Tool.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Home 2015.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Home 2015.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\The Age of Adaline 2015.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\The Age of Adaline 2015.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\The Fault in Our Stars 2014.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\The Fault in Our Stars 2014.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Kaspersky Anti-Virus.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Kaspersky Anti-Virus.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Setup.dat, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Don Jon 2013.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Don Jon 2013.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Iron Man 3 2013.avi, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Iron Man 3 2013.nfo, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Lite x264 Codec Pack.exe, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp1B56.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp1B82.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp22F5.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp26E0.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp294A.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp2B22.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp418C.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp51C9.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp5647.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp59F6.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6874.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp7451.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp8605.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp887.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp99AB.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpB8E9.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpBD0D.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpD2A1.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpD9B0.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE49E.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE87B.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE87C.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE88.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpEB8F.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpF001.tmp, , [7e3bcdf00e7c0135355d6c87c83bad53],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\{FEE85F15-DBE4-5A31-E0EC-0ED0930FDBB5}, , [7e3bcdf00e7c0135355d6c87c83bad53],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

PŘESOUVÁM DO SEKCE HJT !!

Vlož sem prosím ještě log z HJT podle následujícího návodu: http://www.pc-help.cz/viewtopic.php?t=5119

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Vkládám log od každého uvedeného programu. Měl jsem, ale problém s Malwarebytes anti-malware. Protože jak jsem chtěl dát "Vymazat-Clean" tak program přestal pracovat, zkoušel jsem to i v nouzovém režimu a také mi psal, že neodpovídá.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:14:37, on 25. 6. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\UMonit64.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Users\Lenovo\Desktop\Další dokumenty\Software\Hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [GalaxyClient] C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe /launchViaAutoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [IWsoft] C:\Windows\SysWOW64\regsvr32.exe C:\Users\Lenovo\AppData\Local\UQSmedia\3gfs31.dll
O4 - HKCU\..\Run: [Eztion] regsvr32.exe C:\Users\Lenovo\AppData\Local\Eztion\3gfs31.dll
O4 - Global Startup: iSCTsysTray.lnk = C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: BrcmSetSecurity - Intel - C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyClientService - Unknown owner - C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: SplitCamService (SpliCamService) - SplitCam Co. - C:\Program Files (x86)\SplitCam\SplitCamService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VeriFaceSrv - Unknown owner - C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11102 bytes



# AdwCleaner v4.207 - Log vytvořen 25/06/2015 v 11:17:07
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-23.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Lenovo - IDEA-PC
# Spuštěno z : C:\Users\Lenovo\Desktop\AdwCleaner.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{9B7B034B-944A-4261-B487-862F642F7615}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v38.0.1 (x86 cs)


-\\ Google Chrome v43.0.2357.130


-\\ Opera v30.0.1835.88


*************************

AdwCleaner[R0].txt - [885 bytů] - [22/06/2015 13:30:06]
AdwCleaner[R1].txt - [942 bytů] - [25/06/2015 11:15:22]
AdwCleaner[S0].txt - [867 bytů] - [25/06/2015 11:17:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [924 bytů] ##########


Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 25. 6. 2015
Čas skenování: 12:53:39
Protokol: MbAM.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.25.02
Databáze rootkitů: v2015.06.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Lenovo

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 433908
Uplynulý čas: 15 min, 58 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
Trojan.Sathurbot, HKLM\SOFTWARE\CLASSES\CLSID\{3B5B973C-92A4-4855-9D3F-0F3D23332208}, , [f0f65f5ffe8c15212cd671403fc438c8],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 31
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp, , [1bcbba04f09af73fe774737f1ae9837d],

Soubory: 171
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\31638e7c368ed8fe588ee98852621b94, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\5e75f71a9582a18eb95abf5b0d3401ba, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\6df28ba66161ee6c0352c43eca6c22a5, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\a6067fb5b9f79ffe3462e8490458020c, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\b087cbbf130e1103e41e9ea3a0c58db5, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\dbadf687331785c824ea9f609eee1831, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\zepplauncher.mif, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\0734d39cfb8b071990d4886f2d949a3b, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\1796e7d6e66fced6b67278be55ac8792, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\25c3c77067e1c76ae25ec7e469130747, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\3243f2e2dd6dcbdf1d5a864320a81d97, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\388259f596ebc79086bef6b622fa89ea, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\40a980d07864cb2d3bc536509ceb2fbf, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\53300681bf06d8cd4a29a4eef8256979, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\5796bcc07cbb2cda2efb9eee3798e749, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\6380b49e0020bec1affc1c2ffbc79660, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\70b67386f19eeb69314be61c09dfe702, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\70dc66296b2d1ef53d5ff050e08cb527, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\72e85f85f59c90941e6e08f54a3bd4ca, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\8519dc14775b5d802da81b4c850992fa, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\a65324063d01973e672b725fab36bb6e, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\b9de4a4371d5e2eb97637e942fdfd4b9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\bc3ed0279228b37bf52f0d8e8dcf81b2, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\be196a8ea5dc148896d79dd6b9fed868, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\cc9539033650fa2e4e0fa565ed296de4, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\d7f43d377ecd245f2e40e1e4d8018158, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\e816d0bbcebc18f1837aad16171798a6, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\ea38836ea45a37832eab79355c0bc2d9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\f693d20f01d58120a1a6101701c0e23c, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\fece1eee3c6733bff5e297f082e304d5, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\0734d39cfb8b071990d4886f2d949a3b, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\1796e7d6e66fced6b67278be55ac8792, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\25c3c77067e1c76ae25ec7e469130747, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\3243f2e2dd6dcbdf1d5a864320a81d97, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\388259f596ebc79086bef6b622fa89ea, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\40a980d07864cb2d3bc536509ceb2fbf, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\53300681bf06d8cd4a29a4eef8256979, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\5796bcc07cbb2cda2efb9eee3798e749, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\6380b49e0020bec1affc1c2ffbc79660, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\70b67386f19eeb69314be61c09dfe702, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\70dc66296b2d1ef53d5ff050e08cb527, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\72e85f85f59c90941e6e08f54a3bd4ca, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\8519dc14775b5d802da81b4c850992fa, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\a65324063d01973e672b725fab36bb6e, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\b9de4a4371d5e2eb97637e942fdfd4b9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\bc3ed0279228b37bf52f0d8e8dcf81b2, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\be196a8ea5dc148896d79dd6b9fed868, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\cc9539033650fa2e4e0fa565ed296de4, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\d7f43d377ecd245f2e40e1e4d8018158, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\e816d0bbcebc18f1837aad16171798a6, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\ea38836ea45a37832eab79355c0bc2d9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\f693d20f01d58120a1a6101701c0e23c, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\fece1eee3c6733bff5e297f082e304d5, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\0734d39cfb8b071990d4886f2d949a3b, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\1796e7d6e66fced6b67278be55ac8792, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\25c3c77067e1c76ae25ec7e469130747, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\3243f2e2dd6dcbdf1d5a864320a81d97, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\388259f596ebc79086bef6b622fa89ea, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\40a980d07864cb2d3bc536509ceb2fbf, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\53300681bf06d8cd4a29a4eef8256979, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\5796bcc07cbb2cda2efb9eee3798e749, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\6380b49e0020bec1affc1c2ffbc79660, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\70b67386f19eeb69314be61c09dfe702, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\70dc66296b2d1ef53d5ff050e08cb527, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\72e85f85f59c90941e6e08f54a3bd4ca, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\8519dc14775b5d802da81b4c850992fa, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\a65324063d01973e672b725fab36bb6e, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\b9de4a4371d5e2eb97637e942fdfd4b9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\bc3ed0279228b37bf52f0d8e8dcf81b2, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\be196a8ea5dc148896d79dd6b9fed868, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\cc9539033650fa2e4e0fa565ed296de4, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\d7f43d377ecd245f2e40e1e4d8018158, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\e816d0bbcebc18f1837aad16171798a6, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\ea38836ea45a37832eab79355c0bc2d9, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\f693d20f01d58120a1a6101701c0e23c, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\fece1eee3c6733bff5e297f082e304d5, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Tusk 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Tusk 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792\Satellite TV For PC 2011 Elite Edition.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792\Satellite TV For PC 2011 Elite Edition.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\While Were Young 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\While Were Young 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97\Yahoo! Toolbar.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97\Yahoo! Toolbar.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea\Professional Bartender.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea\Professional Bartender.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf\Silver Efex Pro.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf\Silver Efex Pro.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Wild Card 2015.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Wild Card 2015.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Whiplash 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Whiplash 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Pitch Perfect 2 2015.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Pitch Perfect 2 2015.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\The Signal 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\The Signal 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527\JProfiler.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527\JProfiler.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Still Alice 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Still Alice 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa\Mobile Master.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa\Mobile Master.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\The Good Dinosaur 2015.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\The Good Dinosaur 2015.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9\PhotoScore Ultimate.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9\PhotoScore Ultimate.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Unfriended 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Unfriended 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868\Ultra Video Splitter.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868\Ultra Video Splitter.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70\Macro Scheduler Automation Tool.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70\Macro Scheduler Automation Tool.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Home 2015.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Home 2015.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\The Age of Adaline 2015.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\The Age of Adaline 2015.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\The Fault in Our Stars 2014.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\The Fault in Our Stars 2014.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Kaspersky Anti-Virus.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Kaspersky Anti-Virus.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Setup.dat, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Don Jon 2013.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Don Jon 2013.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Iron Man 3 2013.avi, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Iron Man 3 2013.nfo, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Lite x264 Codec Pack.exe, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp1B56.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp1B82.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp22F5.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp26E0.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp294A.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp2B22.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp3A3A.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp418C.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp51C9.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp5647.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp59F6.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6874.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6D8.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6EC4.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp7451.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp8605.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp887.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp99AB.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpB8E9.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpBD0D.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpD2A1.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpD9B0.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE49E.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE87B.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE87C.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE88.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpEB8F.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpF001.tmp, , [1bcbba04f09af73fe774737f1ae9837d],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\{FEE85F15-DBE4-5A31-E0EC-0ED0930FDBB5}, , [1bcbba04f09af73fe774737f1ae9837d],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.1.4 (06.25.2015:1)
OS: Windows 8.1 x64
Ran by Lenovo on źt 25. 06. 2015 at 12:39:30,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Chrome


[C:\Users\Lenovo\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Lenovo\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Lenovo\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Lenovo\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 25. 06. 2015 at 12:42:58,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



RogueKiller V10.8.6.0 (x64) [Jun 22 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno : Normální režim
Uživatel : Lenovo [Práva správce]
Started from : C:\Users\Lenovo\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 06/25/2015 12:52:10

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 5 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0PerformanceMonitor | (default) : {3B5B973C-92A4-4855-9D3F-0F3D23332208} [x] -> Nalezeno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/ -> Nalezeno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/ -> Nalezeno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://lenovo13.msn.com -> Nalezeno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://lenovo13.msn.com -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST500LM000-1EJ162 +++++
--- User ---
[MBR] e696d1d08dc6596f904e7ef3c0d644fc
[BSP] a7a8b3bb2d6fd21fa62ebb0775734bff : Empty|VT.Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 1000 MB
1 - [SYSTEM][MAN-MOUNT] EFI system partition | Offset (sectors): 2050048 | Size: 260 MB
2 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2582528 | Size: 1000 MB
3 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 4630528 | Size: 128 MB
4 - Basic data partition | Offset (sectors): 4892672 | Size: 432706 MB
5 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 891074560 | Size: 452 MB
6 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 892000256 | Size: 350 MB
7 - Basic data partition | Offset (sectors): 892717056 | Size: 25600 MB
8 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 945145856 | Size: 15443 MB
User = LL1 ... OK
User = LL2 ... OK

Přesně stejný problém, že MBAM nechce mazat tuhle složku, jsme tu již měli, takže to vymažeme ručně.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:
- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)
- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Udělen nový sken MBAM a log sem vlož.

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit Farbar Recovery Scan Tool (FRST)
32bit.:
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
64bit.:
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
a ulož jej na plochu. ,pak spusť FRST jako správce
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

RogueKiller V10.8.6.0 (x64) [Jun 22 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno : Normální režim
Uživatel : Lenovo [Práva správce]
Started from : C:\Users\Lenovo\Desktop\RogueKillerX64.exe
Mód : Smazat -- Datum : 06/28/2015 13:11:21

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 5 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0PerformanceMonitor | (default) : {3B5B973C-92A4-4855-9D3F-0F3D23332208} [x] -> Smazáno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://lenovo13.msn.com -> Nahrazeno (http://www.microsoft.com/isapi/redir.dl ... ar=msnhome)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://lenovo13.msn.com -> Nahrazeno (http://www.microsoft.com/isapi/redir.dl ... ar=msnhome)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 3 ¤¤¤
[FIREFX:Addon] rnmc1a8t.default : Adblock Plus [{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] -> Smazáno
[FIREFX:Addon] rnmc1a8t.default : [{370B1449-3254-10C9-FBF1-78BA0D41B433}] -> Smazáno
[FIREFX:Addon] rnmc1a8t.default : Skype Click to Call [{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}] -> Smazáno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST500LM000-1EJ162 +++++
--- User ---
[MBR] e696d1d08dc6596f904e7ef3c0d644fc
[BSP] a7a8b3bb2d6fd21fa62ebb0775734bff : Empty|VT.Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 1000 MB
1 - [SYSTEM][MAN-MOUNT] EFI system partition | Offset (sectors): 2050048 | Size: 260 MB
2 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2582528 | Size: 1000 MB
3 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 4630528 | Size: 128 MB
4 - Basic data partition | Offset (sectors): 4892672 | Size: 432706 MB
5 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 891074560 | Size: 452 MB
6 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 892000256 | Size: 350 MB
7 - Basic data partition | Offset (sectors): 892717056 | Size: 25600 MB
8 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 945145856 | Size: 15443 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_06252015_125210.log - RKreport_SCN_06282015_131027.log



Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Lenovo on ne 28. 06. 2015 at 13:13:54,03.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Lenovo\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

28. 6. 2015 13:16:46 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\New Folder deleted successfully
C:\PROGRA~2\COMMON~1\SWF Studio deleted successfully
C:\Users\Lenovo\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Lenovo\AppData\Local\EmieSiteList deleted successfully
C:\Users\Lenovo\AppData\Local\EmieUserList deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\rnmc1a8t.default\prefs.js:

Added to C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\rnmc1a8t.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\New Folder not found
C:\windows\SysNative\Tasks\OFFICE2013ACT deleted
C:\PROGRA~2\Warner Bros. Interactive Entertainment deleted
C:\PROGRA~2\Universal Interactive deleted
C:\extensions.ini deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
"C:\WINDOWS\Installer\2370040.msi" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\rnmc1a8t.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================


==== Chromium Look ======================

Google Chrome Version: 43.0.2357.130

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[01. 05. 2015 11:17]

AdBlock - Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

==== Chromium Startpages ======================

C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Preferences
_id\":\"59\",\"width_microns\":215900},{\"custom_display_name\":\"A4 Plus\",\"height_microns\":330000,\"name\":\"OM_FOLIO\",\"vendor_id\":\"60\",\"width_microns\":210000},{\"custom_display_name\":\"A3 Extra\",\"height_microns\":445000,\"name\":\"ISO_A3_EXTRA\",\"vendor_id\":\"63\",\"width_microns\":322000},{\"custom_display_name\":\"A5 Extra\",\"height_microns\":235000,\"name\":\"ISO_A5_EXTRA\",\"vendor_id\":\"64\",\"width_microns\":174000},{\"custom_display_name\":\"B5 (ISO) Extra\",\"height_microns\":276000,\"name\":\"ISO_B5_EXTRA\",\"vendor_id\":\"65\",\"width_microns\":201000},{\"custom_display_name\":\"A2\",\"height_microns\":594000,\"name\":\"ISO_A2\",\"vendor_id\":\"66\",\"width_microns\":420000},{\"custom_display_name\":\"Japonská dvojitá pohlednice\",\"height_microns\":200000,\"name\":\"JPN_OUFUKU\",\"vendor_id\":\"69\",\"width_microns\":148000},{\"custom_display_name\":\"A6\",\"height_microns\":148000,\"name\":\"ISO_A6\",\"vendor_id\":\"70\",\"width_microns\":105000},{\"custom_display_name\":\"Japonská obálka Kaku č. 2\",\"height_microns\":332000,\"name\":\"JPN_KAKU2\",\"vendor_id\":\"71\",\"width_microns\":240000},{\"custom_display_name\":\"Japonská obálka Kaku č. 3\",\"height_microns\":277000,\"vendor_id\":\"72\",\"width_microns\":216000},{\"custom_display_name\":\"Japonská obálka Chou č. 3\",\"height_microns\":235000,\"name\":\"JPN_CHOU3\",\"vendor_id\":\"73\",\"width_microns\":120000},{\"custom_display_name\":\"Japonská obálka Chou č. 4\",\"height_microns\":205000,\"name\":\"JPN_CHOU4\",\"vendor_id\":\"74\",\"width_microns\":90000},{\"custom_display_name\":\"B6 (JIS)\",\"height_microns\":182000,\"name\":\"JIS_B6\",\"vendor_id\":\"88\",\"width_microns\":128000},{\"custom_display_name\":\"12×11\",\"height_microns\":304900,\"name\":\"NA_11X12\",\"vendor_id\":\"90\",\"width_microns\":279500},{\"custom_display_name\":\"Japonská obálka You 4\",\"height_microns\":235000,\"name\":\"JPN_YOU4\",\"vendor_id\":\"91\",\"width_microns\":105000},{\"custom_display_name\":\"Obálka PRC č. 1\",\"height_microns\":165000,\"name\":\"PRC_1\",\"vendor_id\":\"96\",\"width_microns\":102000},{\"custom_display_name\":\"Obálka PRC č. 4\",\"height_microns\":208000,\"name\":\"PRC_4\",\"vendor_id\":\"99\",\"width_microns\":110000},{\"custom_display_name\":\"Obálka PRC č. 6\",\"height_microns\":230000,\"name\":\"PRC_6\",\"vendor_id\":\"101\",\"width_microns\":120000},{\"custom_display_name\":\"Obálka PRC č. 7\",\"height_microns\":230000,\"name\":\"PRC_7\",\"vendor_id\":\"102\",\"width_microns\":160000},{\"custom_display_name\":\"Obálka PRC č. 8\",\"height_microns\":309000,\"name\":\"PRC_8\",\"vendor_id\":\"103\",\"width_microns\":120000}]},\"page_orientation\":{\"option\":[{\"is_default\":true,\"type\":\"PORTRAIT\"},{\"type\":\"LANDSCAPE\"},{\"type\":\"AUTO\"}]},\"supported_content_type\":[{\"content_type\":\"application/pdf\"}]},\"version\":\"1.0\"},\"selectedDestinationName\":\"Microsoft XPS Document Writer\",\"selectedDestinationExtensionId\":\"\",\"selectedDestinationExtensionName\":\"\",\"mediaSize\":{\"custom_display_name\":\"A4\",\"height_microns\":297000,\"is_default\":true,\"name\":\"ISO_A4\",\"vendor_id\":\"9\",\"width_microns\":210000}}"}},"profile":{"avatar_index":26,"content_settings":{"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"[*.]simpsonovi.nikee.net,*":{"setting":1},"http://free.zoznam.sk:80,http://free.zoznam.sk:80":{"setting":1},"http://nahnoji.cz:80,http://simpsonovi.nikee.net:80":{"setting":1},"https://[*.]www.youtube.com:443,*":{"setting":1},"https://koukni.cz:443,https://koukni.cz:443":{"setting":1},"https://r6---sn-2gb7ln7l.googlevideo.com:443,http://iwatchthis.net:80":{"setting":1}},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{"http://webcamtoy.com:80,*":{"last_used":1434197000},"http://www.amateri.cz:80,*":{"last_used":1433292000,"setting":1}},"media_stream_mic":{"http://www.amateri.cz:80,*":{"last_used":1433292000,"setting":1},"https://translate.google.cz:443,*":{"setting":2}},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"[*.]simpsonovi.nikee.net,*":{"fullscreen":1},"http://free.zoznam.sk:80,http://free.zoznam.sk:80":{"fullscreen":1},"http://nahnoji.cz:80,http://simpsonovi.nikee.net:80":{"fullscreen":1},"http://webcamtoy.com:80,*":{"last_used":{"media-stream-camera":1431967000}},"http://www.amateri.cz:80,*":{"last_used":{"media-stream-camera":1432207000,"media-stream-mic":1432207000},"media-stream-camera":1,"media-stream-mic":1},"https://[*.]www.youtube.com:443,*":{"fullscreen":1},"https://koukni.cz:443,https://koukni.cz:443":{"fullscreen":1},"https://r6---sn-2gb7ln7l.googlevideo.com:443,http://iwatchthis.net:80":{"fullscreen":1},"https://translate.google.cz:443,*":{"media-stream-mic":2}},"pref_version":1},"created_by_version":"41.0.2272.89","exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"První uživatel","per_host_zoom_levels":{}},"protection":{"macs":{}},"safebrowsing":{"enabled":false},"savefile":{"default_directory":"C:\\Users\\Lenovo\\Downloads"},"selectfile":{"last_directory":"C:\\Users\\Lenovo\\Desktop"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13070815114490870"},"sync_promo":{"startup_count":2,"user_skipped":true},"translate_accepted_count":{"en":0},"translate_blocked_languages":["cs"],"translate_denied_count":{"en":2},"translate_last_denied_time":1.426349e+12,"translate_too_often_denied":true,"translate_whitelists":{},"zerosuggest":{"cachedresults":""}}
99C6A1748AB75B5089A1B4461E5D7D980848BB1B"}},"homepage":"3F768D3961E61143D09604505257F435A1F8148D0C0AECB53A1A64ECBF635238","homepage_is_newtabpage":"CD1DB88F2105C60FD11DA0F23328479C9F7062589259D8904B7859EF8367A681","pinned_tabs":"020664AF3319A34900C0571FF30374FAFA52C9090A70B90334B17F943E166A27","prefs":{"preference_reset_time":"FE9EA511687D8C050E0ECFEFE43B25BA505A46522FA105F0D7F33067C15B9BB8"},"profile":{"reset_prompt_memento":"90F59491239FE92AF8ECCC5007DC9335AB9A102D417F1D9687788A88D647466D"},"safebrowsing":{"incidents_sent":"810746F5B4C06FCED732187188815CDF933895AC2895B0800D4401137C78C040"},"search_provider_overrides":"1B8FCD8F88F04F36B339FB3756DA007CA3943E4330239729A69A8507D58AA5FF","session":{"restore_on_startup":"21632323904C4551BF62B8D9045EA13E17F5DE477B4ECB2CBEC87FABC2CCB637","startup_urls":"7E31CB6C1FC2507A2C660FDC0D8D0BFFDE78F0129F9F0A17FE022EE82DDB40FB"},"software_reporter":{"prompt_reason":"D9D75FB3BA960AB9FB9C05B0DE2BB7345A3C18BBA3F140895647B52C3CF3F286","prompt_seed":"37C3DB3D41381C8315B5C46CFB56838BEB1456AEF3B5068BD11151FBC922973C","prompt_version":"1108860CCBBA384DD5539A14AA366CB554B13299885BF0ED2BCF48938BBDA729"},"sync":{"remaining_rollback_tries":"B9DC1273EBC4F46DCF476C51515FEB709C62F5ED7F93E77D23A5B34158C1858C"}},"super_mac":"9C945058CA3FF16DA8C3185441B8C798C62CAADA524D93BA72DA6ED3E1D5303D"},"session":{"restore_on_startup":4,"startup_urls":["https://www.google.cz/webhp?ei=FmQEVau1EsLyapuvgIAP&ved=0CAYQqS4oBA"]}}

C:\Users\Lenovo\AppData\Roaming\Opera Software\Opera Stable\Preferences
"startup_urls": [ "https://www.google.cz/?gws_rd=ssl" ],


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
"Old Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
"Old Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{350F77E2-B5DD-4305-AC63-73FF73274EF4} Unknown Url="Not_Found"

==== Reset Google Chrome ======================

C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Lenovo\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\Lenovo\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\SearchScopes\{350F77E2-B5DD-4305-AC63-73FF73274EF4} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{350F77E2-B5DD-4305-AC63-73FF73274EF4} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{350F77E2-B5DD-4305-AC63-73FF73274EF4} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\275C743A4B7F3A34DB15FF9C19487FD0 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A347C572-F7B4-43A3-BD51-FFC99184F70D} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{A347C572-F7B4-43A3-BD51-FFC99184F70D} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\275C743A4B7F3A34DB15FF9C19487FD0 deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Lenovo\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Lenovo\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Lenovo\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=2468 folders=154 6785224966 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Lenovo\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Lenovo\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on ne 28. 06. 2015 at 13:40:57,00 ======================


Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 28. 6. 2015
Čas skenování: 13:46:41
Protokol: MBAM.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.28.01
Databáze rootkitů: v2015.06.26.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Lenovo

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 434932
Uplynulý čas: 17 min, 33 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
Trojan.Sathurbot, HKLM\SOFTWARE\CLASSES\CLSID\{3B5B973C-92A4-4855-9D3F-0F3D23332208}, , [bc554f71a6e487afe0ec743e26ddda26],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 31
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp, , [62afcdf32565b97d36ee52a219ea32ce],

Soubory: 171
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\31638e7c368ed8fe588ee98852621b94, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\5e75f71a9582a18eb95abf5b0d3401ba, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\6df28ba66161ee6c0352c43eca6c22a5, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\a6067fb5b9f79ffe3462e8490458020c, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\b087cbbf130e1103e41e9ea3a0c58db5, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\dbadf687331785c824ea9f609eee1831, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\zepplauncher.mif, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\0734d39cfb8b071990d4886f2d949a3b, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\1796e7d6e66fced6b67278be55ac8792, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\25c3c77067e1c76ae25ec7e469130747, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\3243f2e2dd6dcbdf1d5a864320a81d97, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\388259f596ebc79086bef6b622fa89ea, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\40a980d07864cb2d3bc536509ceb2fbf, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\53300681bf06d8cd4a29a4eef8256979, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\5796bcc07cbb2cda2efb9eee3798e749, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\6380b49e0020bec1affc1c2ffbc79660, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\70b67386f19eeb69314be61c09dfe702, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\70dc66296b2d1ef53d5ff050e08cb527, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\72e85f85f59c90941e6e08f54a3bd4ca, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\8519dc14775b5d802da81b4c850992fa, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\a65324063d01973e672b725fab36bb6e, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\b9de4a4371d5e2eb97637e942fdfd4b9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\bc3ed0279228b37bf52f0d8e8dcf81b2, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\be196a8ea5dc148896d79dd6b9fed868, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\cc9539033650fa2e4e0fa565ed296de4, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\d7f43d377ecd245f2e40e1e4d8018158, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\e816d0bbcebc18f1837aad16171798a6, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\ea38836ea45a37832eab79355c0bc2d9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\f693d20f01d58120a1a6101701c0e23c, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\fece1eee3c6733bff5e297f082e304d5, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\0734d39cfb8b071990d4886f2d949a3b, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\1796e7d6e66fced6b67278be55ac8792, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\25c3c77067e1c76ae25ec7e469130747, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\3243f2e2dd6dcbdf1d5a864320a81d97, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\388259f596ebc79086bef6b622fa89ea, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\40a980d07864cb2d3bc536509ceb2fbf, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\53300681bf06d8cd4a29a4eef8256979, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\5796bcc07cbb2cda2efb9eee3798e749, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\6380b49e0020bec1affc1c2ffbc79660, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\70b67386f19eeb69314be61c09dfe702, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\70dc66296b2d1ef53d5ff050e08cb527, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\72e85f85f59c90941e6e08f54a3bd4ca, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\8519dc14775b5d802da81b4c850992fa, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\a65324063d01973e672b725fab36bb6e, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\b9de4a4371d5e2eb97637e942fdfd4b9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\bc3ed0279228b37bf52f0d8e8dcf81b2, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\be196a8ea5dc148896d79dd6b9fed868, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\cc9539033650fa2e4e0fa565ed296de4, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\d7f43d377ecd245f2e40e1e4d8018158, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\e816d0bbcebc18f1837aad16171798a6, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\ea38836ea45a37832eab79355c0bc2d9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\f693d20f01d58120a1a6101701c0e23c, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\resume\fece1eee3c6733bff5e297f082e304d5, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\0734d39cfb8b071990d4886f2d949a3b, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\1796e7d6e66fced6b67278be55ac8792, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\25c3c77067e1c76ae25ec7e469130747, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\3243f2e2dd6dcbdf1d5a864320a81d97, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\388259f596ebc79086bef6b622fa89ea, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\40a980d07864cb2d3bc536509ceb2fbf, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\53300681bf06d8cd4a29a4eef8256979, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\5796bcc07cbb2cda2efb9eee3798e749, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\6380b49e0020bec1affc1c2ffbc79660, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\70b67386f19eeb69314be61c09dfe702, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\70dc66296b2d1ef53d5ff050e08cb527, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\72e85f85f59c90941e6e08f54a3bd4ca, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\8519dc14775b5d802da81b4c850992fa, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\a65324063d01973e672b725fab36bb6e, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\b9de4a4371d5e2eb97637e942fdfd4b9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\bc3ed0279228b37bf52f0d8e8dcf81b2, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\be196a8ea5dc148896d79dd6b9fed868, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\c40d98b79bac0c7b0ea3c0cc9a1bfc70, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\cc9539033650fa2e4e0fa565ed296de4, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\d7f43d377ecd245f2e40e1e4d8018158, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\e816d0bbcebc18f1837aad16171798a6, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\ea38836ea45a37832eab79355c0bc2d9, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\f693d20f01d58120a1a6101701c0e23c, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\cache\rules\fece1eee3c6733bff5e297f082e304d5, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Tusk 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\0734d39cfb8b071990d4886f2d949a3b\Tusk 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792\Satellite TV For PC 2011 Elite Edition.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\1796e7d6e66fced6b67278be55ac8792\Satellite TV For PC 2011 Elite Edition.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\While Were Young 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\25c3c77067e1c76ae25ec7e469130747\While Were Young 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97\Yahoo! Toolbar.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\3243f2e2dd6dcbdf1d5a864320a81d97\Yahoo! Toolbar.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea\Professional Bartender.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\388259f596ebc79086bef6b622fa89ea\Professional Bartender.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf\Silver Efex Pro.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\40a980d07864cb2d3bc536509ceb2fbf\Silver Efex Pro.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Wild Card 2015.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\53300681bf06d8cd4a29a4eef8256979\Wild Card 2015.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Whiplash 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\5796bcc07cbb2cda2efb9eee3798e749\Whiplash 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Pitch Perfect 2 2015.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\6380b49e0020bec1affc1c2ffbc79660\Pitch Perfect 2 2015.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\The Signal 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70b67386f19eeb69314be61c09dfe702\The Signal 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527\JProfiler.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\70dc66296b2d1ef53d5ff050e08cb527\JProfiler.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Still Alice 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\72e85f85f59c90941e6e08f54a3bd4ca\Still Alice 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa\Mobile Master.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\8519dc14775b5d802da81b4c850992fa\Mobile Master.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\The Good Dinosaur 2015.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\a65324063d01973e672b725fab36bb6e\The Good Dinosaur 2015.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9\PhotoScore Ultimate.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\b9de4a4371d5e2eb97637e942fdfd4b9\PhotoScore Ultimate.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Unfriended 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\bc3ed0279228b37bf52f0d8e8dcf81b2\Unfriended 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868\Ultra Video Splitter.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\be196a8ea5dc148896d79dd6b9fed868\Ultra Video Splitter.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70\Macro Scheduler Automation Tool.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\c40d98b79bac0c7b0ea3c0cc9a1bfc70\Macro Scheduler Automation Tool.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Home 2015.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Home 2015.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\cc9539033650fa2e4e0fa565ed296de4\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\The Age of Adaline 2015.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\d7f43d377ecd245f2e40e1e4d8018158\The Age of Adaline 2015.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\The Fault in Our Stars 2014.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\e816d0bbcebc18f1837aad16171798a6\The Fault in Our Stars 2014.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Kaspersky Anti-Virus.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Kaspersky Anti-Virus.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\ea38836ea45a37832eab79355c0bc2d9\Setup.dat, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Don Jon 2013.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Don Jon 2013.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\f693d20f01d58120a1a6101701c0e23c\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Iron Man 3 2013.avi, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Iron Man 3 2013.nfo, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\SecurityCache\data\fece1eee3c6733bff5e297f082e304d5\Lite x264 Codec Pack.exe, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp1B56.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp1B82.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp22F5.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp26E0.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp294A.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp2B22.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp3A3A.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp418C.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp51C9.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp5647.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp59F6.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6874.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6D8.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp6EC4.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp7451.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp8605.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp887.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmp99AB.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpB8E9.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpBD0D.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpD2A1.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpD9B0.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE49E.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE87B.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE87C.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpE88.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpEB8F.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\tmpF001.tmp, , [62afcdf32565b97d36ee52a219ea32ce],
Trojan.Sathurbot, C:\ProgramData\Microsoft\Performance\Monitor\temp\{FEE85F15-DBE4-5A31-E0EC-0ED0930FDBB5}, , [62afcdf32565b97d36ee52a219ea32ce],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Lenovo (administrator) on IDEA-PC on 28-06-2015 14:06:21
Running from C:\Users\Lenovo\Desktop
Loaded Profiles: Lenovo (Available Profiles: Lenovo & Administrator)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(SplitCam Co.) C:\Program Files (x86)\SplitCam\SplitCamService.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13626072 2013-06-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1311304 2013-06-05] (Realtek Semiconductor)
HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [457616 2014-10-03] ()
HKLM\...\Run: [HotKeysCmds] => "C:\windows\system32\hkcmd.exe"
HKLM\...\Run: [Persistence] => "C:\windows\system32\igfxpers.exe"
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [UMonit64] => C:\windows\SysWOW64\UMonit64.exe [40960 2013-02-28] ()
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15792112 2013-08-24] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [101360 2013-08-24] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2986224 2013-06-20] (Synaptics Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595848 2015-01-28] (ESET)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe /launchViaAutoStart
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [IWsoft] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Lenovo\AppData\Local\UQSmedia\3gfs31.dll
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [Eztion] => regsvr32.exe C:\Users\Lenovo\AppData\Local\Eztion\3gfs31.dll <===== ATTENTION
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {5aef9333-d63d-11e4-be86-0c8bfd48d068} - "E:\autorun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {addf5ba6-ef5d-11e4-be89-0c8bfd48d068} - "E:\AutoRun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {af91ebb1-e9f0-11e4-be89-0c8bfd48d068} - "E:\AutoRun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {af91ec1a-e9f0-11e4-be89-0c8bfd48d068} - "E:\AutoRun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {fb0ad94b-ff95-11e4-be8e-0c8bfd48d068} - "F:\autorun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {fb0ad94d-ff95-11e4-be8e-0c8bfd48d068} - "G:\autorun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {fb0ad94f-ff95-11e4-be8e-0c8bfd48d068} - "H:\autorun.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk [2013-08-24]
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1320642483-3030571100-942361551-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-22] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-22] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\rnmc1a8t.default
FF NewTab: about:newtab
FF Homepage: about:home
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-09] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-09] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-22] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-20] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-28]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome:
=======
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-14]
CHR Extension: (Google Docs) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-14]
CHR Extension: (Google Drive) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-14]
CHR Extension: (YouTube) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-14]
CHR Extension: (Google Search) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-14]
CHR Extension: (Google Sheets) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-14]
CHR Extension: (AdBlock) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-03-24]
CHR Extension: (Google Wallet) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-14]
CHR Extension: (Gmail) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

Opera:
=======
OPR Extension: (Adblock Plus) - C:\Users\Lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-03-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-05-29] (Intel)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-26] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1349576 2015-01-28] (ESET)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6516280 2015-05-28] (GOG.com)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-09] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156616 2013-06-26] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-09] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 SpliCamService; C:\Program Files (x86)\SplitCam\SplitCamService.exe [311424 2014-09-15] (SplitCam Co.)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2013-08-24] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-03-15] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-03-15] (Microsoft Corporation)
S3 GalaxyClientService; "C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-24] (Motorola Solutions, Inc.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-03-17] (Disc Soft Ltd)
U3 dtlitescsidrv; C:\Windows\System32\Drivers\dtlitescsidrv.sys [316072 2015-03-17] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-03-10] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241880 2015-03-10] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169792 2015-03-10] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [159480 2015-03-10] (ESET)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-03] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-04-16] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-04-16] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-04-16] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-28] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-09] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew02.sys [3648480 2013-10-08] (Intel Corporation)
R3 scvad_simple; C:\Windows\system32\drivers\SplitCamAudio.sys [23552 2014-06-30] (Windows (R) Win 7 DDK provider)
R3 SensorsAlsDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-20] (Synaptics Incorporated)
R3 splitcam_hd_driver; C:\Windows\system32\DRIVERS\splitcam_hd_driver.sys [37496 2014-06-30] (Windows (R) Win 7 DDK provider)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-03-17] (Duplex Secure Ltd.)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [206744 2013-05-29] (Windows (R) Win 7 DDK provider)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1064704 2013-05-31] (Vimicro Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-03-15] (Microsoft Corporation)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2015-06-28] ()
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
S3 hwusb_cdcacm; \SystemRoot\system32\DRIVERS\ew_cdcacm.sys [X]
S3 hwusb_wwanecm; \SystemRoot\system32\DRIVERS\ew_wwanecm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-28 14:06 - 2015-06-28 14:07 - 00020551 _____ C:\Users\Lenovo\Desktop\FRST.txt
2015-06-28 14:06 - 2015-06-28 14:06 - 00000000 ____D C:\FRST
2015-06-28 14:04 - 2015-06-28 14:04 - 00033226 _____ C:\Users\Lenovo\Desktop\MBAM.txt
2015-06-28 13:41 - 2015-06-28 13:41 - 00015991 _____ C:\Users\Lenovo\Desktop\zoek-results.txt
2015-06-28 13:40 - 2015-06-28 13:40 - 00094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp
2015-06-28 13:39 - 2015-06-28 13:13 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-06-28 13:15 - 2015-06-28 13:40 - 00015988 _____ C:\zoek-results.log
2015-06-28 13:13 - 2015-06-28 13:39 - 00000000 ____D C:\zoek_backup
2015-06-28 13:12 - 2015-06-28 13:12 - 00003280 _____ C:\Users\Lenovo\Desktop\RogueKiller.txt
2015-06-28 11:19 - 2015-06-28 11:19 - 02112512 _____ (Farbar) C:\Users\Lenovo\Desktop\FRST64.exe
2015-06-28 11:17 - 2015-06-28 11:18 - 01308672 _____ C:\Users\Lenovo\Desktop\zoek.exe
2015-06-26 01:31 - 2015-06-26 01:31 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-06-25 22:45 - 2015-06-25 22:45 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Universal Interactive
2015-06-25 22:45 - 2015-06-25 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Interactive
2015-06-25 13:19 - 2015-06-25 13:19 - 00000000 ____D C:\Users\Lenovo\Desktop\Logy z 25.6.2015
2015-06-25 13:11 - 2015-06-28 14:05 - 00000000 ____D C:\Users\Lenovo\AppData\Local\CrashDumps
2015-06-25 12:44 - 2015-06-28 13:02 - 00037624 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-06-25 12:44 - 2015-06-25 12:53 - 00000000 ____D C:\ProgramData\RogueKiller
2015-06-25 12:39 - 2015-06-25 12:39 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-IDEA-PC-Windows-8.1-(64-bit).dat
2015-06-25 12:39 - 2015-06-25 12:39 - 00000000 ____D C:\RegBackup
2015-06-25 11:05 - 2015-06-25 11:05 - 21471480 _____ C:\Users\Lenovo\Desktop\RogueKillerX64.exe
2015-06-25 11:04 - 2015-06-25 11:04 - 02952250 _____ (Malwarebytes Corporation) C:\Users\Lenovo\Desktop\Junkware Removal Tool.exe
2015-06-24 22:42 - 2015-06-24 22:42 - 00000000 ____D C:\Users\Lenovo\Desktop\Minulé logy
2015-06-22 13:33 - 2015-06-28 13:46 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-06-22 13:32 - 2015-06-22 13:32 - 00001085 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-22 13:32 - 2015-06-22 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-22 13:32 - 2015-06-22 13:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-22 13:32 - 2015-06-22 13:32 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-22 13:32 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-06-22 13:32 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-06-22 13:32 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-06-22 13:28 - 2015-06-28 13:40 - 00001232 _____ C:\WINDOWS\setupact.log
2015-06-22 13:28 - 2015-06-28 13:39 - 00007408 _____ C:\WINDOWS\PFRO.log
2015-06-22 13:28 - 2015-06-22 13:28 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-06-22 13:23 - 2015-06-25 11:17 - 00000000 ____D C:\AdwCleaner
2015-06-22 13:23 - 2015-06-22 13:23 - 02244096 _____ C:\Users\Lenovo\Desktop\AdwCleaner.exe
2015-06-22 13:22 - 2015-06-22 13:22 - 00448512 _____ (OldTimer Tools) C:\Users\Lenovo\Desktop\TFC.exe
2015-06-22 13:07 - 2015-06-28 13:53 - 01813404 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-19 21:58 - 2015-06-21 11:35 - 00000000 ____D C:\Users\Lenovo\AppData\Local\UQSmedia
2015-06-19 21:58 - 2015-06-21 10:35 - 00000000 ____D C:\Users\Lenovo\AppData\Local\Eztion
2015-06-19 17:33 - 2015-06-19 17:33 - 00000000 ____D C:\SUPERDelete
2015-06-18 18:37 - 2015-06-18 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-06-18 18:37 - 2015-06-18 18:37 - 00000000 ____D C:\ProgramData\ESET
2015-06-18 18:37 - 2015-06-18 18:37 - 00000000 ____D C:\Program Files\ESET
2015-06-18 15:56 - 2015-06-18 15:56 - 00000000 ____D C:\Program Files (x86)\ESET
2015-06-18 13:41 - 2015-06-18 13:41 - 00000000 ____D C:\Program Files\Speccy
2015-06-18 13:22 - 2015-06-22 00:24 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\WinKun
2015-06-14 11:31 - 2015-06-14 11:31 - 00002790 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-06-14 11:31 - 2015-06-14 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-06-14 11:31 - 2015-06-14 11:31 - 00000000 ____D C:\Program Files\CCleaner
2015-06-12 10:46 - 2015-06-12 10:46 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\MPC-HC
2015-06-12 10:39 - 2015-06-12 10:39 - 00003796 _____ C:\WINDOWS\System32\Tasks\klcp_update
2015-06-12 10:38 - 2015-06-12 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-06-12 10:38 - 2015-06-12 10:38 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2015-06-12 10:38 - 2015-02-28 17:22 - 03571200 _____ (x264vfw project) C:\WINDOWS\system32\x264vfw64.dll
2015-06-12 10:38 - 2015-02-28 17:21 - 03591680 _____ (x264vfw project) C:\WINDOWS\SysWOW64\x264vfw.dll
2015-06-12 10:38 - 2012-07-21 12:55 - 00180736 _____ (fccHandler) C:\WINDOWS\system32\ac3acm.acm
2015-06-12 10:38 - 2012-07-21 12:54 - 00122880 _____ (fccHandler) C:\WINDOWS\SysWOW64\ac3acm.acm
2015-06-12 10:38 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\WINDOWS\system32\lagarith.dll
2015-06-12 10:38 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\WINDOWS\SysWOW64\lagarith.dll
2015-06-10 09:45 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-06-10 09:45 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-06-10 09:45 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-06-10 09:45 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-06-10 09:45 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-06-10 09:45 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-06-10 09:45 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-06-10 09:45 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-06-10 09:45 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-06-10 09:45 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-06-10 09:45 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-06-10 09:45 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-06-10 09:45 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-06-10 09:45 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-06-10 09:45 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-06-10 09:45 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-06-10 09:45 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-06-10 09:45 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-06-10 09:45 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-06-10 09:45 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-06-10 09:45 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-06-10 09:45 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-06-10 09:45 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-06-10 09:45 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-06-10 09:45 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-06-10 09:45 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-06-10 09:45 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-06-10 09:45 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-06-10 09:45 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-06-10 09:45 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-06-10 09:45 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-06-10 09:45 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-06-10 09:45 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-06-10 09:45 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-06-10 09:45 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-06-10 09:45 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-06-10 09:45 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-06-10 09:45 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-06-10 09:45 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-06-10 09:45 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-06-10 09:45 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-06-10 09:45 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-06-10 09:45 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-06-10 09:45 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-06-10 09:45 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-06-10 09:45 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-06-10 09:45 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-06-10 09:45 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-06-10 09:45 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-06-10 09:45 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-06-10 09:45 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-06-10 09:45 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-06-10 09:45 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-06-10 09:45 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-06-10 09:45 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-06-10 09:45 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-10 09:45 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-06-10 09:45 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-06-10 09:45 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-06-10 09:45 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-06-10 09:45 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-06-10 09:45 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-10 09:45 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-06-10 09:45 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-06-10 09:45 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-06-10 09:45 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-06-10 09:45 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-06-10 09:45 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-06-10 09:45 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-06-10 09:45 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-06-10 09:45 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-06-10 09:45 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-06-10 09:45 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-06-10 09:45 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-06-10 09:45 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-06-10 09:45 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-06-10 09:45 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-06-10 09:45 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-06-10 09:45 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-06-10 09:45 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-06-10 09:44 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-06-02 17:55 - 2015-06-02 17:55 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\Warner Bros. Interactive Entertainment
2015-06-01 12:26 - 2015-06-01 12:26 - 00000000 ____D C:\Users\Lenovo\AppData\Local\GWX
2015-05-29 21:27 - 2015-05-29 21:27 - 00000000 ____D C:\Warner Bros. Interactive Entertainment
2015-05-29 21:27 - 2015-05-29 21:27 - 00000000 ____D C:\ProgramData\Steam
2015-05-29 21:21 - 2015-05-29 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO - The Hobbit
2015-05-29 21:00 - 2015-06-19 22:52 - 00000000 ____D C:\Program Files (x86)\LEGO - The Hobbit

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-28 14:07 - 2015-03-14 15:56 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-28 14:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-28 13:41 - 2015-05-15 22:28 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\Skype
2015-06-28 13:40 - 2015-03-14 15:56 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-28 13:40 - 2013-08-24 08:36 - 00034752 _____ C:\WINDOWS\system32\Drivers\WPRO_41_2001.sys
2015-06-28 13:40 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-28 13:39 - 2013-08-24 08:49 - 00006656 _____ C:\WINDOWS\system32\VfService.trf
2015-06-28 11:14 - 2015-03-15 16:00 - 00003970 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0647B977-4CAE-42A8-B4FF-5691359EE889}
2015-06-28 01:08 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-06-27 19:52 - 2015-03-17 11:03 - 00000000 ___RD C:\Users\Lenovo\Desktop\Hry
2015-06-27 13:21 - 2015-03-15 15:29 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1320642483-3030571100-942361551-1001
2015-06-27 11:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-25 22:45 - 2013-08-24 08:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-25 22:42 - 2015-03-14 20:05 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\DAEMON Tools Lite
2015-06-25 21:10 - 2014-01-01 17:32 - 07957504 ___SH C:\Users\Lenovo\Downloads\Thumbs.db
2015-06-25 11:01 - 2015-03-14 16:40 - 00003828 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1426343992
2015-06-25 11:01 - 2015-03-14 16:39 - 00001034 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-06-25 11:01 - 2015-03-14 16:39 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-25 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-06-24 18:11 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-22 08:51 - 2015-04-28 20:42 - 00000000 ____D C:\Program Files\Recuva
2015-06-21 23:31 - 2013-11-23 22:38 - 07117312 ___SH C:\Users\Lenovo\Desktop\Thumbs.db
2015-06-20 05:02 - 2014-11-21 14:21 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-06-20 05:02 - 2014-11-21 14:21 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-19 12:40 - 2014-11-21 06:53 - 01749406 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-19 12:40 - 2014-11-21 06:10 - 00740962 _____ C:\WINDOWS\system32\perfh005.dat
2015-06-19 12:40 - 2014-11-21 06:10 - 00152146 _____ C:\WINDOWS\system32\perfc005.dat
2015-06-18 22:55 - 2015-03-15 14:55 - 00000000 ____D C:\Users\Lenovo
2015-06-18 11:48 - 2015-04-03 14:52 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\BitTorrent
2015-06-17 23:05 - 2014-08-15 18:06 - 00000000 ____D C:\Users\Lenovo\Documents\Dočasné soubory
2015-06-14 11:34 - 2015-03-15 14:35 - 00000000 ___DC C:\WINDOWS\Panther
2015-06-13 10:05 - 2013-08-24 08:56 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-06-13 10:05 - 2013-08-24 08:52 - 00000000 ____D C:\Program Files\Lenovo
2015-06-13 10:05 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\tracing
2015-06-12 12:05 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-06-11 10:43 - 2013-08-22 16:44 - 00485016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-10 21:43 - 2015-03-14 23:18 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-06-10 21:43 - 2014-11-21 14:14 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-06-10 21:43 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-06-10 21:43 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-06-10 20:18 - 2015-03-14 15:41 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-06-10 20:15 - 2015-03-14 15:41 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-08 21:52 - 2015-03-26 20:29 - 00000584 _____ C:\Users\Lenovo\Documents\grstyles.stl
2015-05-31 20:00 - 2015-04-11 11:12 - 00112128 _____ C:\WINDOWS\SysWOW64\ff_vfw.dll
2015-05-30 19:09 - 2015-04-04 20:09 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-05-30 19:09 - 2015-04-04 20:09 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-05-30 14:27 - 2015-03-14 16:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-29 21:22 - 2015-04-04 15:48 - 00000000 ____D C:\WINDOWS\SysWOW64\directx

==================== Files in the root of some directories =======

2015-03-14 15:05 - 2015-03-19 20:01 - 0011093 _____ () C:\Users\Lenovo\AppData\Roaming\AbsoluteReminder.xml
2013-08-24 08:31 - 2013-08-24 08:31 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-03-19 20:32 - 2013-03-19 20:32 - 0010011 _____ () C:\ProgramData\regid.2012-01.com.intel.discover-at_512FCF1B-3685-45F2-A1E9-63AEF7F79B35.swidtag

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-26 17:45

==================== End of log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Lenovo at 2015-06-28 14:07:41
Running from C:\Users\Lenovo\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1320642483-3030571100-942361551-500 - Administrator - Disabled) => C:\Users\Administrator
Guest (S-1-5-21-1320642483-3030571100-942361551-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1320642483-3030571100-942361551-1007 - Limited - Enabled)
Lenovo (S-1-5-21-1320642483-3030571100-942361551-1001 - Administrator - Enabled) => C:\Users\Lenovo

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 8.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

"Mass Effect 3" (HKLM-x32\...\{46E776B9-37DE-4B71-8DF2-F4C75112CA27}_is1) (Version: - )
Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.3.0.0 - Absolute Software)
ACD/Labs Software in C:\ACDFREE12\ (HKLM-x32\...\ACDLabs in C__ACDFREE12_) (Version: v12.00, FREE - ACD/Labs)
Adobe Reader XI (11.0.11) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)
BitTorrent (HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.06 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.24 - Lenovo)
Energy Manager (x32 Version: 1.0.0.24 - Lenovo) Hidden
ESET NOD32 Antivirus (HKLM\...\{D56E0F0E-CC77-4BED-B63A-95432AFDC114}) (Version: 8.0.312.3 - ESET, spol s r. o.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.0.0 - Genesys Logic)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Graph 3.1.5 (HKLM-x32\...\Graph_is1) (Version: - Jiri Plachy)
Intel Anti-Theft Discovery App (HKLM-x32\...\{707248B9-2D34-4D77-A5C6-2A8A54848E5A}) (Version: 1.1.0.7 - Intel Corporation)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel Experience Center - Configuration (x32 Version: 1.5.0.0 - Intel) Hidden
Intel(R) Experience Center Desktop Software (HKLM-x32\...\{e4fefc02-cd6c-45e3-8974-e7357e71da40}) (Version: 1.5.0.0 - Intel)
Intel(R) Experience Center Driver (HKLM-x32\...\{16660b76-bdc5-47cf-b28d-846120a1ee76}) (Version: 1.0.90.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1306-148929CC1385}) (Version: 3.1.1306.0354 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Smart Connect Technology 4.1 x64 (HKLM\...\{DBECAE94-4C04-40AC-9AFB-FA9953258EAF}) (Version: 4.1.41.2234 - Intel)
Intel(R) Update Manager (x32 Version: 1.6.0.56 - Intel Corporation) Hidden
Intel(R) WiDi (HKLM\...\{90621A56-901E-417D-A8CB-E8E3A6793C29}) (Version: 4.1.19.0 - Intel Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
K-Lite Mega Codec Pack 11.2.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.2.0 - )
LEGO - The Hobbit, âĺđńč˙ 1.0.0.0 (HKLM-x32\...\LEGO - The Hobbit_is1) (Version: 1.0.0.0 - RePack by SEYTER)
LEGO® Star Wars™: The Complete Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)
LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden
LEGO® The Lord of the Rings™ (HKLM-x32\...\{C6F20FA7-342A-47A9-A3C8-EB36CABE6419}) (Version: 1.0.0.0 - Warner Bros. Interactive Entertainment)
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.13.531.1 - Vimicro)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo VeriFace (HKLM\...\Lenovo VeriFace) (Version: 5.0.13.4241 - Lenovo)
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mass Effect (HKLM-x32\...\{D5FED686-AF59-454C-91A9-DC357E4AED11}_is1) (Version: - )
Mass Effect 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.00 - Electronic Arts, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 cs)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.6 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}) (Version: 9.12.0213 - NVIDIA Corporation)
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.15.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6954 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
SplitCam (HKLM-x32\...\SplitCam) (Version: 6.9.4.1 - SplitCam Co)
Star Wars Jedi Knight Jedi Academy (HKLM-x32\...\{0D994CC5-819F-4657-84DD-397B8FE1EA80}) (Version: - )
Star Wars JK II Jedi Outcast (HKLM-x32\...\{576E71DA-3000-48F6-9B21-B9A70D47DFCF}) (Version: - )
STAR WARS® - Knights of the Old Republic™ II - The Sith Lords (HKLM-x32\...\1421404581_is1) (Version: 2.0.0.2 - GOG.com)
Star Wars®: Knights of the Old Republic (TM) (HKLM-x32\...\{2A9A40C7-6670-4D5F-8F41-D12E2E08B48B}) (Version: - )
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.19 - Synaptics Incorporated)
The Witcher 2 Assassins of Kings - Enhanced Edition (HKLM-x32\...\The Witcher 2 Assassins of Kings - Enhanced Edition_is1) (Version: - )
TSEV Skyrim LE (HKLM-x32\...\TSEV Skyrim LE_is1) (Version: 2.0.0.0 - )
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)
UserGuide (x32 Version: 1.0.0.9 - Lenovo) Hidden
Wildlife Park Gold Edition (HKLM-x32\...\{C3159144-B4F4-420F-9266-9CAF4498D88A}_is1) (Version: 1.17 - US - ACTION, s.r.o.)
Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
WinRAR 5.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Zoo Tycoon 2 - Extinct Animals (HKLM-x32\...\InstallShield_{15292416-A464-4FBA-BB96-7298EAACFC07}) (Version: 1.00.0000 - Microsoft Game Studios)
Zoo Tycoon 2 - Extinct Animals (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
Zoo Tycoon: Complete Collection (HKLM-x32\...\Zoo Tycoon 1.0) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1320642483-3030571100-942361551-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

10-06-2015 13:32:28 Windows Update
18-06-2015 18:35:09 Nainstalováno: ESET NOD32 Antivirus
24-06-2015 18:10:16 Windows Update
25-06-2015 22:43:46 Installed Jurassic Park Operation Genesis
28-06-2015 13:15:46 zoek.exe restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2015-06-28 13:16 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0D0BF7FE-46B6-4255-997A-7541523479A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-14] (Google Inc.)
Task: {1FDCD108-01F4-4B7C-8433-FFF63CD62CFD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-14] (Google Inc.)
Task: {228333CF-D280-41A4-B316-902F10EC93DD} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-06-20] (Synaptics Incorporated)
Task: {4AAD6802-6985-4265-A965-F332E5172932} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-06-10] (Microsoft Corporation)
Task: {4DA57CEB-AE4E-4F8B-8905-D0168BCA58CE} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {63927978-6203-45B3-BEEB-8D67E7F01248} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {7A0D541C-1200-4902-BF2C-91A77C6CC228} - \OFFICE2013ACT No Task File <==== ATTENTION
Task: {7CA09559-F820-4E52-96A0-AFFE4A41BBFB} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.)
Task: {83645D2C-7EF2-469B-8EB0-A8B12E056EB1} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-03-08] (Intel Corporation)
Task: {8A2A102E-2084-402B-A003-F53EA286E19D} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-03-08] (Intel Corporation)
Task: {8C61C717-9E3E-4D00-98D7-C8BC585E64AF} - System32\Tasks\GoogleUpdateTaskMachineUA1d0931656372a86 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-14] (Google Inc.)
Task: {9BB435C0-2783-4D01-BFA5-9116A7B557B7} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-05-31] ()
Task: {9C6DB646-265E-4245-A487-538AE5733F39} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-05-08] (Piriform Ltd)
Task: {AF7AAB32-7DB9-4F87-B5CD-708545F940A1} - System32\Tasks\Opera scheduled Autoupdate 1426343992 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0931656372a86.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (Whitelisted) ==============

2013-04-16 00:45 - 2013-04-16 00:45 - 00182760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-04-16 00:45 - 2013-04-16 00:45 - 00060392 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-08-24 08:49 - 2013-08-24 08:49 - 00068368 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
2013-08-24 08:49 - 2013-08-24 08:49 - 00672016 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfDataStorageInterface.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-10-03 18:36 - 2014-10-03 18:36 - 00457616 _____ () C:\WINDOWS\system32\igfxTray.exe
2013-08-24 08:28 - 2013-02-28 01:26 - 00040960 _____ () C:\Windows\SysWOW64\UMonit64.exe
2015-05-08 20:50 - 2015-05-08 20:50 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2014-09-15 07:17 - 2014-09-15 07:17 - 00114304 _____ () C:\Program Files (x86)\SplitCam\splitcam_hd_driver_ProxyPlugin.ax
2013-08-24 08:11 - 2013-05-09 14:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1320642483-3030571100-942361551-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Prohlížeč fotografií.jpg
DNS Servers: 192.168.0.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{6729F846-4C9F-4645-A617-F77CD66A313F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{162555EE-BFE7-487D-A681-2F16AAB2852B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3D3312DF-0513-4B56-904B-8BD36BF9FC1A}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{9BDA9906-2F22-4418-AA85-0916E54052D1}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{2C1E4B0C-9A19-4870-A3DA-F222413CDB53}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [TCP Query User{66C1C0F8-4D85-4448-8930-CBA1A4CC7380}C:\program files (x86)\cd projekt red\the witcher 2 assassins of kings - enhanced edition\bin\witcher2.exe] => (Allow) C:\program files (x86)\cd projekt red\the witcher 2 assassins of kings - enhanced edition\bin\witcher2.exe
FirewallRules: [UDP Query User{6B5EA119-9B75-4618-9BFC-8D6A918101E7}C:\program files (x86)\cd projekt red\the witcher 2 assassins of kings - enhanced edition\bin\witcher2.exe] => (Allow) C:\program files (x86)\cd projekt red\the witcher 2 assassins of kings - enhanced edition\bin\witcher2.exe
FirewallRules: [TCP Query User{38864D17-22C9-4559-8D3F-B20EB426FD75}C:\users\lenovo\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) C:\users\lenovo\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [UDP Query User{5E228544-4C05-4AC8-8BF1-4087BC567E75}C:\users\lenovo\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) C:\users\lenovo\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [{47B849E1-D29B-437B-B9E7-462FB6F35BF1}] => (Allow) C:\Program Files (x86)\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{A6C919FF-223F-49E1-A985-ED79EA415436}] => (Allow) C:\Program Files (x86)\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{0981DD24-6012-46A0-B4CC-F3A8F21D3F56}] => (Allow) C:\Program Files (x86)\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{6451D47F-265E-407E-BB78-626E4BDDBD79}] => (Allow) C:\Program Files (x86)\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [TCP Query User{AAC46531-A549-467F-BD03-E61899272EC1}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{024390FC-466E-49E8-AE43-83BCE0742B1E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{7316EFE1-9099-474D-8123-C25189972E04}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{3566D11B-F5F8-4BC3-89E3-CE8B4962F494}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{FAA145D1-1425-4272-B94F-7AA881C99061}] => (Allow) C:\Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{DAD290B6-5343-4AE1-9E03-0F0097E09D4D}] => (Allow) C:\Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{54063B9D-8364-4D8B-9F58-56205D0A5693}] => (Allow) C:\Program Files (x86)\Microsoft Games\Zoo Tycoon 2\zt.exe
FirewallRules: [{C772D9A5-8F79-47F2-BD47-E26A36EB3C1F}] => (Allow) C:\Program Files (x86)\Microsoft Games\Zoo Tycoon 2\zt.exe
FirewallRules: [{AC5C638B-C0DD-49B5-8BF6-91A8C5EBC206}] => (Allow) C:\WINDOWS\explorer.exe
FirewallRules: [{7D29BD5F-1212-4F49-91DF-D92CB44A30F9}] => (Allow) C:\WINDOWS\system32\rundll32.exe
FirewallRules: [{02351527-5F17-48D2-AFCF-D49F2D7E318C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: IWD Bus Enumerator
Description: IWD Bus Enumerator
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard system devices)
Service: iwdbus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (06/28/2015 02:04:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mbam.exe, verze: 1.0.2.929, časové razítko: 0x552d3ec4
Název chybujícího modulu: MSVCR100.dll, verze: 10.0.40219.325, časové razítko: 0x4df2be1e
Kód výjimky: 0x40000015
Posun chyby: 0x0008d6fd
ID chybujícího procesu: 0xbbc
Čas spuštění chybující aplikace: 0xmbam.exe0
Cesta k chybující aplikaci: mbam.exe1
Cesta k chybujícímu modulu: mbam.exe2
ID zprávy: mbam.exe3
Úplný název chybujícího balíčku: mbam.exe4
ID aplikace související s chybujícím balíčkem: mbam.exe5

Error: (06/28/2015 01:40:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=43, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 01:40:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=25, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 01:40:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=17, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 00:30:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=43, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 00:30:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=25, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 00:30:42 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=17, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 11:11:05 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=43, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 11:11:05 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=25, ID autora=9, ID dodavatele=0, typ dodavatele=0

Error: (06/28/2015 11:11:05 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=17, ID autora=9, ID dodavatele=0, typ dodavatele=0


System errors:
=============
Error: (06/28/2015 01:31:17 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (06/28/2015 01:31:17 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (06/28/2015 01:31:16 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (06/28/2015 01:31:16 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (06/28/2015 01:31:16 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (06/27/2015 08:06:03 PM) (Source: DCOM) (EventID: 10010) (User: Idea-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/27/2015 06:28:58 PM) (Source: DCOM) (EventID: 10010) (User: Idea-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/27/2015 11:38:26 AM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (06/26/2015 05:46:37 PM) (Source: DCOM) (EventID: 10010) (User: Idea-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/26/2015 05:46:10 PM) (Source: DCOM) (EventID: 10010) (User: Idea-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office:
=========================

CodeIntegrity Errors:
===================================
Date: 2015-06-13 14:10:12.093
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-13 14:10:10.390
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-12 22:45:27.256
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-12 22:45:25.909
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-03 02:32:32.109
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-03 02:32:30.903
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-03 01:40:32.106
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-03 01:40:30.666
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-05-28 13:21:19.390
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-05-28 13:21:17.899
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
Percentage of memory in use: 37%
Total physical RAM: 3816.27 MB
Available physical RAM: 2386.89 MB
Total Pagefile: 4712.27 MB
Available Pagefile: 3178.58 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:422.56 GB) (Free:268.61 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:20.92 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 9C05E21D)

Partition: GPT Partition Type.

==================== End of log ============================

torrenty bys neměl používat..

Odinstaluj:
McAfee

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.


(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt


Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

Zkus znovu MbAM.

Stáhni si OTL by OldTimer
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.

MbAM našel hrozby, ale zase je nedokázal vymazat...



Fix result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Lenovo at 2015-06-28 18:20:25 Run:1
Running from C:\Users\Lenovo\Desktop
Loaded Profiles: Lenovo (Available Profiles: Lenovo & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\Run: [Eztion] => regsvr32.exe C:\Users\Lenovo\AppData\Local\Eztion\3gfs31.dll <===== ATTENTION
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {5aef9333-d63d-11e4-be86-0c8bfd48d068} - "E:\autorun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {addf5ba6-ef5d-11e4-be89-0c8bfd48d068} - "E:\AutoRun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {af91ebb1-e9f0-11e4-be89-0c8bfd48d068} - "E:\AutoRun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {af91ec1a-e9f0-11e4-be89-0c8bfd48d068} - "E:\AutoRun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {fb0ad94b-ff95-11e4-be8e-0c8bfd48d068} - "F:\autorun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {fb0ad94d-ff95-11e4-be8e-0c8bfd48d068} - "G:\autorun.exe"
HKU\S-1-5-21-1320642483-3030571100-942361551-1001\...\MountPoints2: {fb0ad94f-ff95-11e4-be8e-0c8bfd48d068} - "H:\autorun.exe"
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1320642483-3030571100-942361551-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
FF NewTab: about:newtab
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
Task: {7A0D541C-1200-4902-BF2C-91A77C6CC228} - \OFFICE2013ACT No Task File <==== ATTENTION
Task: {8C61C717-9E3E-4D00-98D7-C8BC585E64AF} - System32\Tasks\GoogleUpdateTaskMachineUA1d0931656372a86 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-14] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0931656372a86.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
FirewallRules: [{3D3312DF-0513-4B56-904B-8BD36BF9FC1A}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{9BDA9906-2F22-4418-AA85-0916E54052D1}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
*****************

HKU\S-1-5-21-1320642483-3030571100-942361551-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Eztion => value removed successfully
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5aef9333-d63d-11e4-be86-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{5aef9333-d63d-11e4-be86-0c8bfd48d068} => key not found.
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{addf5ba6-ef5d-11e4-be89-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{addf5ba6-ef5d-11e4-be89-0c8bfd48d068} => key not found.
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{af91ebb1-e9f0-11e4-be89-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{af91ebb1-e9f0-11e4-be89-0c8bfd48d068} => key not found.
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{af91ec1a-e9f0-11e4-be89-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{af91ec1a-e9f0-11e4-be89-0c8bfd48d068} => key not found.
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb0ad94b-ff95-11e4-be8e-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{fb0ad94b-ff95-11e4-be8e-0c8bfd48d068} => key not found.
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb0ad94d-ff95-11e4-be8e-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{fb0ad94d-ff95-11e4-be8e-0c8bfd48d068} => key not found.
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb0ad94f-ff95-11e4-be8e-0c8bfd48d068}" => key removed successfully
HKCR\CLSID\{fb0ad94f-ff95-11e4-be8e-0c8bfd48d068} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-1320642483-3030571100-942361551-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => key removed successfully
HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => key not found.
Firefox newtab removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully.
Could not move "C:\ProgramData\DP45977C.lfl" => Scheduled to move on reboot.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7A0D541C-1200-4902-BF2C-91A77C6CC228}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A0D541C-1200-4902-BF2C-91A77C6CC228}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OFFICE2013ACT" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C61C717-9E3E-4D00-98D7-C8BC585E64AF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C61C717-9E3E-4D00-98D7-C8BC585E64AF}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d0931656372a86 => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA1d0931656372a86" => key removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0931656372a86.job => moved successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3D3312DF-0513-4B56-904B-8BD36BF9FC1A} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9BDA9906-2F22-4418-AA85-0916E54052D1} => value removed successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-28 18:22:23)<=

C:\ProgramData\DP45977C.lfl => Is moved successfully

==== End of Fixlog 18:22:23 ====

OTL logfile created on: 28. 6. 2015 18:45:53 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lenovo\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17842)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d. M. yyyy

3,73 Gb Total Physical Memory | 2,35 Gb Available Physical Memory | 63,11% Memory free
4,60 Gb Paging File | 3,12 Gb Available in Paging File | 67,71% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 422,56 Gb Total Space | 268,75 Gb Free Space | 63,60% Space Free | Partition Type: NTFS
Drive D: | 25,00 Gb Total Space | 21,34 Gb Free Space | 85,34% Space Free | Partition Type: NTFS

Computer Name: IDEA-PC | User Name: Lenovo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Lenovo\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Oracle Corporation)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (ESET)
PRC - C:\Program Files (x86)\SplitCam\SplitCamService.exe (SplitCam Co.)
PRC - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.)
PRC - C:\Program Files (x86)\USB Camera\VM331STI.EXE (Vimicro)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.)
PRC - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Windows\SysWOW64\UMonit64.exe ()
PRC - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)


========== Modules (No Company Name) ==========

MOD - C:\Windows\SysWOW64\UMonit64.exe ()


========== Services (SafeList) ==========

SRV:64bit: - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)
SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:64bit: - (WdNisSvc) -- C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (Disc Soft Lite Bus Service) -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe (Disc Soft Ltd)
SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SRV:64bit: - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (ESET)
SRV:64bit: - (IEEtwCollectorService) -- C:\WINDOWS\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation)
SRV:64bit: - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation)
SRV:64bit: - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation)
SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SRV:64bit: - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation)
SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:64bit: - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation)
SRV:64bit: - (lfsvc) -- C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation)
SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)
SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:64bit: - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation)
SRV:64bit: - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)
SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:64bit: - (BthHFSrv) -- C:\Windows\SysNative\BthHFSrv.dll (Microsoft Corporation)
SRV:64bit: - (igfxCUIService1.0.0.0) -- C:\Windows\SysNative\igfxCUIService.exe (Intel Corporation)
SRV:64bit: - (BrcmSetSecurity) -- C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe (Intel)
SRV:64bit: - (ISCTAgent) -- C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe ()
SRV:64bit: - (IAStorDataMgrSvc) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV:64bit: - (Intel(R) -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe (Intel(R) Corporation)
SRV:64bit: - (Intel(R) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (GalaxyCommunication) -- C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe (GOG.com)
SRV - (c2cpnrsvc) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation)
SRV - (c2cautoupdatesvc) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation)
SRV - (lfsvc) -- C:\Windows\SysWOW64\GeofenceMonitorService.dll (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
SRV - (PrintNotify) -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (SpliCamService) -- C:\Program Files (x86)\SplitCam\SplitCamService.exe (SplitCam Co.)
SRV - (VeriFaceSrv) -- C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe ()
SRV - (Intel(R) -- C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Intel Corporation)
SRV - (Bluetooth Device Monitor) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (Bluetooth OBEX Service) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (MBAMSwissArmy) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys (Malwarebytes Corporation)
DRV:64bit: - (WPRO_41_2001) -- C:\Windows\SysNative\drivers\WPRO_41_2001.sys ()
DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:64bit: - (MBAMWebAccessControl) -- C:\Windows\SysNative\drivers\mwac.sys (Malwarebytes Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:64bit: - (dtlitescsidrv) -- C:\WINDOWS\SysNative\drivers\dtlitescsidrv.sys (Disc Soft Ltd)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (dtlitescsibus) -- C:\Windows\SysNative\drivers\dtlitescsibus.sys (Disc Soft Ltd)
DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\drivers\WdFilter.sys (Microsoft Corporation)
DRV:64bit: - (WdNisDrv) -- C:\Windows\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation)
DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\drivers\WdBoot.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (eamonm) -- C:\Windows\SysNative\drivers\eamonm.sys (ESET)
DRV:64bit: - (edevmon) -- C:\Windows\SysNative\drivers\edevmon.sys (ESET)
DRV:64bit: - (ehdrv) -- C:\Windows\SysNative\drivers\ehdrv.sys (ESET)
DRV:64bit: - (epfwwfpr) -- C:\Windows\SysNative\drivers\epfwwfpr.sys (ESET)
DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\drivers\bthhfenum.sys (Microsoft Corporation)
DRV:64bit: - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation)
DRV:64bit: - (Wof) -- C:\WINDOWS\SysNative\drivers\wof.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\drivers\wpcfltr.sys (Microsoft Corporation)
DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)
DRV:64bit: - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation)
DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation)
DRV:64bit: - (ReFS) -- C:\WINDOWS\SysNative\drivers\refs.sys (Microsoft Corporation)
DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)
DRV:64bit: - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (acpials) -- C:\Windows\SysNative\drivers\acpials.sys (Microsoft Corporation)
DRV:64bit: - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation)
DRV:64bit: - (UCX01000) -- C:\Windows\SysNative\drivers\UCX01000.SYS (Microsoft Corporation)
DRV:64bit: - (netvsc) -- C:\Windows\SysNative\drivers\netvsc63.sys (Microsoft Corporation)
DRV:64bit: - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation)
DRV:64bit: - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation)
DRV:64bit: - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)
DRV:64bit: - (BthLEEnum) -- C:\Windows\SysNative\drivers\BthLEEnum.sys (Microsoft Corporation)
DRV:64bit: - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation)
DRV:64bit: - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation)
DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (intaud_WaveExtensible) -- C:\Windows\SysNative\drivers\intelaud.sys (Intel Corporation)
DRV:64bit: - (iwdbus) -- C:\Windows\SysNative\drivers\iwdbus.sys (Intel Corporation)
DRV:64bit: - (scvad_simple) -- C:\Windows\SysNative\drivers\SplitCamAudio.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (splitcam_hd_driver) -- C:\Windows\SysNative\drivers\splitcam_hd_driver.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (NETwNe64) -- C:\Windows\SysNative\drivers\NETwew02.sys (Intel Corporation)
DRV:64bit: - (NETwNb64) -- C:\Windows\SysNative\drivers\NETwbw02.sys (Intel Corporation)
DRV:64bit: - (ACPIVPC) -- C:\Windows\SysNative\drivers\AcpiVpc.sys (Lenovo Corporation)
DRV:64bit: - (LHDmgr) -- C:\Windows\SysNative\drivers\LhdX64.sys (Lenovo.)
DRV:64bit: - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation)
DRV:64bit: - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation)
DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)
DRV:64bit: - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (LSI_SAS3) -- C:\Windows\SysNative\drivers\lsi_sas3.sys (LSI Corporation)
DRV:64bit: - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)
DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)
DRV:64bit: - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation)
DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
DRV:64bit: - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation)
DRV:64bit: - (UEFI) -- C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)
DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)
DRV:64bit: - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation)
DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation)
DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:64bit: - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation)
DRV:64bit: - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)
DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)
DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\drivers\BthhfHid.sys (Microsoft Corporation)
DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)
DRV:64bit: - (FxPPM) -- C:\Windows\SysNative\drivers\fxppm.sys (Microsoft Corporation)
DRV:64bit: - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (iaStorAV) -- C:\Windows\SysNative\drivers\iaStorAV.sys (Intel Corporation)
DRV:64bit: - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)
DRV:64bit: - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (SmbDrvI) -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys (Synaptics Incorporated)
DRV:64bit: - (ibtusb) -- C:\Windows\SysNative\drivers\ibtusb.sys (Intel Corporation)
DRV:64bit: - (vm331avs) -- C:\Windows\SysNative\drivers\vm331avs.sys (Vimicro Corporation)
DRV:64bit: - (usb3Hub) -- C:\Windows\SysNative\drivers\usb3Hub.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\TeeDriverx64.sys (Intel Corporation)
DRV:64bit: - (btmhsf) -- C:\Windows\SysNative\drivers\btmhsf.sys (Motorola Solutions, Inc.)
DRV:64bit: - (ISCT) -- C:\Windows\SysNative\drivers\ISCTD64.sys ()
DRV:64bit: - (imsevent) -- C:\Windows\SysNative\drivers\imsevent.sys ()
DRV:64bit: - (ikbevent) -- C:\Windows\SysNative\drivers\ikbevent.sys ()
DRV:64bit: - (RTL8168) -- C:\Windows\SysNative\drivers\Rt630x64.sys (Realtek )
DRV:64bit: - (iaStorA) -- C:\Windows\SysNative\drivers\iaStorA.sys (Intel Corporation)
DRV:64bit: - (wsvd) -- C:\Windows\SysNative\drivers\wsvd.sys ("CyberLink)

========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Old Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "CZ"
FF - prefs.js..browser.search.region: "CZ"
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0.1
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2015/03/14 16:37:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lenovo\AppData\Roaming\Mozilla\Extensions
[2015/06/28 13:11:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\rnmc1a8t.default\extensions
[2015/05/28 21:15:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/05/28 21:15:58 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.35_0\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_1\
CHR - Extension: No name found = C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_1\

O1 HOSTS File: ([2015/06/28 13:16:59 | 000,000,753 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll (Motorola Solutions, Inc.)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [Energy Manager] C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited)
O4:64bit: - HKLM..\Run: [HotKeysCmds] "C:\windows\system32\hkcmd.exe" File not found
O4:64bit: - HKLM..\Run: [IgfxTray] C:\WINDOWS\SysNative\igfxtray.exe ()
O4:64bit: - HKLM..\Run: [Lenovo Utility] C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (Lenovo(beijing) Limited)
O4:64bit: - HKLM..\Run: [Persistence] "C:\windows\system32\igfxpers.exe" File not found
O4:64bit: - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
O4:64bit: - HKLM..\Run: [UMonit64] C:\Windows\SysWOW64\UMonit64.exe ()
O4 - HKLM..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE (Vimicro)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Intel Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKCU..\Run: [GalaxyClient] C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe /launchViaAutoStart File not found
O4 - HKCU..\Run: [IWsoft] C:\Windows\SysWOW64\regsvr32.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Skype] C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O8:64bit: - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9:64bit: - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{148648DC-A229-4475-BBCC-41DE676EFCC4}: DhcpNameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{26F1A065-46A0-47E0-8279-65E9528B9A45}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\WINDOWS\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\WINDOWS\SysWow64\credssp.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\WINDOWS\SysNative\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\WINDOWS\SysNative\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\WINDOWS\SysNative\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\WINDOWS\SysNative\wdigest.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (tspkg) - C:\WINDOWS\SysNative\tspkg.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\WINDOWS\SysNative\pku2u.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (livessp) - C:\WINDOWS\SysNative\livessp.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\WINDOWS\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\WINDOWS\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - File not found
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========