Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Miki on so 02.07.2016 at 23:00:31,01.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Miki\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
2.7.2016 23:02:47 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\Program Files\Adobe deleted successfully
C:\PROGRA~3\Corel Painter 13 deleted successfully
C:\PROGRA~3\CorelDRAW Graphics Suite X7 deleted successfully
C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) deleted successfully
C:\PROGRA~3\Turbine deleted successfully
C:\Users\Miki\AppData\Local\calibre-cache deleted successfully
C:\Users\Miki\AppData\Local\EmieSiteList deleted successfully
C:\Users\Miki\AppData\Local\EmieUserList deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10976AE3-73E-4D29-BB72-3940FE4D504A} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10A37920-E7B9-4E5A-A912-B95A53B8143B} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{280DF1E8-3337-48CE-AA33-58AEF45371} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DEFF021-F6A1-48E4-8B5A-CE9A12C3314} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F8C4765-2F88-4510-962-7FA6F2D92966} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3821D67-99D6-4CEF-B22-D1E5221DEF4C} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D1FC083-E488-4926-BD93-D23B97BC4E28} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55EF59E1-BF0-44E6-88B7-119B39C2F9B6} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B23277D-8BAF-40AF-89E1-25C99533935} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F8C2BCE-8120-4D98-9EA8-31CB7CBB880} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72AAF933-6AB7-449E-B0AB-C3CD58D9DED} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B972AF0-8C70-4107-A531-96B45F1344CF} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F9830FB-5791-4082-BA63-3C2046987C3C} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD9794D-57E6-4683-BB97-B9AE14566F7B} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B8CC9D9B-EE84-4771-8877-DE734D45AE5C} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BF8C957D-7DF9-49FB-9C28-5AB8BB465CB4} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D26C290C-390F-4B27-89F5-488C8E9FFA14} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DA54E3F2-3381-4EB3-9418-62DD49D799A0} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCFCC2EC-3F33-45A8-8ADF-A6C81F11232F} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC700EF1-C0ED-4C8E-BA5-8B52D62245C2} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EF55B0C-7797-481E-9437-E2FCE6F67652} deleted successfully
HKEY_USERS\S-1-5-21-1852295899-1415938364-632717117-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F62419E-17B5-4CD9-9522-8C436F1BB2B5} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) not found
C:\Users\Miki\AppData\Roaming\calibre deleted
C:\Users\Miki\AppData\Roaming\GiftBag.db deleted
C:\Users\Miki\AppData\Roaming\xldl.dll deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Miki\AppData\Local\ViberUpdater.log deleted
C:\windows\SysNative\GroupPolicy\Adm deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Users\Miki\AppData\Roaming\yeaplayer_51495.exe deleted
"C:\PROGRA~2\Bonjour\mdnsNSP.dll" deleted
"C:\PROGRA~2\Bonjour\mDNSResponder.exe" deleted
"C:\PROGRA~2\Bonjour" not deleted
==== Chromium Look ======================
Google Chrome Version: 46.0.2490.86
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
dhdgffkkebhmkfjojejmpbldmpobfkfo - No path found[]
JLPT Study Assistant - Miki\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe
Anime Chat\nLearn Japanese - Miki\AppData\Local\Google\Chrome\User Data\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm
==== Chromium Fix ======================
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pan.baidu.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pan.baidu.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pos.baidu.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pos.baidu.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vocaloidlyrics.wikia.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vocaloidlyrics.wikia.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_budofinder.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_budofinder.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.acronymfinder.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.acronymfinder.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.savefrom.net_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.savefrom.net_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adf.ly_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adf.ly_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_admin.blog.cz_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_admin.blog.cz_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.blobla.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.blobla.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.gogoanime.io_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.gogoanime.io_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.nicovideo.jp_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.nicovideo.jp_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_dsms0mj1bbhn4.cloudfront.net_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_dsms0mj1bbhn4.cloudfront.net_0.localstorage-journal deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.activedeals.in_0.localstorage deleted successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.activedeals.in_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
==== All HKLM and HKCU SearchScopes ======================
HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
==== Reset Google Chrome ======================
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Miki\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Miki\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
No Flash Cache Found
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=118 folders=80 9699757 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Miki\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Miki\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\PROGRA~2\Bonjour" not found
==== EOF on so 02.07.2016 at 23:32:50,65 ======================
Prosím o kontrolu HJT Vyřešeno
Re: Prosím o kontrolu HJT
ComboFix 16-06-30.01 - Miki 02.07.2016 23:41:32.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3998.1899 [GMT 2:00]
Spuštěný z: c:\users\Miki\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
SP: Microsoft Security Essentials *Disabled/Updated* {CDE0C533-D3CD-62A1-E772-AFADDF863628}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\programdata\Windows Update
c:\users\Miki\Documents\~WRL0003.tmp
c:\users\Miki\Documents\~WRL0005.tmp
c:\windows\PFRO.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-06-02 do 2016-07-02 )))))))))))))))))))))))))))))))
.
.
2016-07-02 21:50 . 2016-07-02 21:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-07-02 21:23 . 2016-07-02 21:00 24064 ----a-w- c:\windows\zoek-delete.exe
2016-07-02 21:23 . 2016-07-02 21:50 -------- d-----w- c:\users\Miki\AppData\Local\Temp
2016-07-02 21:00 . 2016-07-02 21:20 -------- d-----w- C:\zoek_backup
2016-07-02 09:23 . 2016-07-02 09:23 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-07-02 09:23 . 2016-07-02 09:23 -------- d-----w- c:\programdata\RogueKiller
2016-07-02 09:20 . 2016-06-21 22:04 12007136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5CCB3059-5D14-47FB-8D55-DD0E592E21DA}\mpengine.dll
2016-07-01 22:14 . 2016-07-01 22:14 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-07-01 22:14 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-07-01 22:14 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-07-01 19:06 . 2016-07-01 19:06 -------- d-----w- c:\users\Miki\AppData\Local\fjientfagetherdrimo
2016-07-01 19:05 . 2016-07-02 08:56 -------- d-----w- c:\program files (x86)\Atubotckipi
2016-07-01 10:54 . 2016-07-01 10:55 -------- d-----w- c:\users\Miki\AppData\Local\Viber
2016-06-29 20:15 . 2016-02-05 18:56 20480 ----a-w- c:\windows\system32\tbs.dll
2016-06-29 20:15 . 2016-02-05 18:54 109568 ----a-w- c:\windows\system32\fveapibase.dll
2016-06-29 20:15 . 2016-02-05 17:33 15360 ----a-w- c:\windows\SysWow64\tbs.dll
2016-06-29 20:15 . 2016-02-05 20:22 8192 ----a-w- c:\windows\system32\drivers\cs-CZ\tpm.sys.mui
2016-06-29 20:15 . 2015-06-03 20:21 451080 ----a-w- c:\windows\system32\fveapi.dll
2016-06-29 20:15 . 2015-06-03 20:21 312600 ----a-w- c:\windows\system32\wbem\Win32_Tpm.dll
2016-06-29 20:15 . 2015-06-03 20:22 257864 ----a-w- c:\windows\SysWow64\wbem\Win32_Tpm.dll
2016-06-26 19:30 . 2016-05-26 20:28 11895896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2016-06-19 21:41 . 2016-05-13 10:41 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DB445FD0-B78D-44A3-9A47-A1CC49D5541B}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-07-02 08:40 . 2016-05-08 13:27 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-06-15 20:40 . 2014-10-15 14:47 484008 ------w- c:\windows\system32\MpSigStub.exe
2016-05-13 10:41 . 2016-03-17 20:58 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2016-05-02 19:30 . 2014-10-15 17:53 135176864 ----a-w- c:\windows\system32\MRT.exe
2016-04-12 15:23 . 2015-12-18 21:16 642336 ----a-w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2016-04-04 18:14 . 2016-05-02 19:25 38120 ----a-w- c:\windows\system32\CompatTelRunner.exe
2016-04-04 18:02 . 2016-05-02 19:25 1169408 ----a-w- c:\windows\system32\aeinv.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"Viber"="c:\users\Miki\AppData\Local\Viber\Viber.exe" [2016-06-24 71876176]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-12-20 507744]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-11-24 548864]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-05-21 291648]
.
c:\users\Miki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2015-3-24 36544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTSUVSTOR.sys;c:\windows\SYSNATIVE\Drivers\RTSUVSTOR.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 ClickToRunSvc;Služba Microsoft Office ClickToRun;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 UCManSvc;UCManSvc;c:\program files (x86)\SoftDenchi\UCManSvc.exe;c:\program files (x86)\SoftDenchi\UCManSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys;c:\windows\SYSNATIVE\DRIVERS\wcmvcam64.sys [x]
S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 bpenum;Intel(R) Centrino(R) WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys;c:\windows\SYSNATIVE\DRIVERS\bpenum.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-07-01 19:17 1248072 ----a-w- c:\program files (x86)\Google\Chrome\Application\51.0.2704.106\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-10-08 22:03]
.
2016-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-10-08 22:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-12-15 564352]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2011-12-06 1654400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-07 440128]
"IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2011-12-01 1626112]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-01-29 1340192]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.114.2 192.168.115.1 192.168.141.2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-Akamai NetSession Interface - c:\users\Miki\AppData\Local\Akamai\netsession_win.exe
Wow6432Node-HKCU-Run-OfficeSyncProcess - c:\program files\Microsoft Office\Office14\MSOSYNC.EXE
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
BHO-{0083d14d-8305-47f6-8967-cb9e69c99c65} - c:\program files (x86)\WWhITEDeaLs\9gLs6dSzDOEdxD.x64.dll
BHO-{693C45FD-E80E-4DD9-AF85-322C7C4ECDFB} - c:\program files (x86)\SpACeOffeRRss\SQWf9I7rj5X7Ch.x64.dll
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynLenovoGestureMgr - c:\program files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe
HKLM-Run-SBRegRebootCleaner - c:\program files (x86)\STOPzilla\SBRC.exe
AddRemove-{89ca2a32-2b52-4595-8dfd-6fe4757958d0} - c:\programdata\Package Cache\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}\vsta_setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-07-02 23:54:21
ComboFix-quarantined-files.txt 2016-07-02 21:54
.
Před spuštěním: Volných bajtů: 131 720 785 920
Po spuštění: Volných bajtů: 131 090 784 256
.
- - End Of File - - 0FC494226F60F2E9756DAB2173051E74
Ten je poslední, moc děkuji.
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3998.1899 [GMT 2:00]
Spuštěný z: c:\users\Miki\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
SP: Microsoft Security Essentials *Disabled/Updated* {CDE0C533-D3CD-62A1-E772-AFADDF863628}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\programdata\Windows Update
c:\users\Miki\Documents\~WRL0003.tmp
c:\users\Miki\Documents\~WRL0005.tmp
c:\windows\PFRO.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-06-02 do 2016-07-02 )))))))))))))))))))))))))))))))
.
.
2016-07-02 21:50 . 2016-07-02 21:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-07-02 21:23 . 2016-07-02 21:00 24064 ----a-w- c:\windows\zoek-delete.exe
2016-07-02 21:23 . 2016-07-02 21:50 -------- d-----w- c:\users\Miki\AppData\Local\Temp
2016-07-02 21:00 . 2016-07-02 21:20 -------- d-----w- C:\zoek_backup
2016-07-02 09:23 . 2016-07-02 09:23 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-07-02 09:23 . 2016-07-02 09:23 -------- d-----w- c:\programdata\RogueKiller
2016-07-02 09:20 . 2016-06-21 22:04 12007136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5CCB3059-5D14-47FB-8D55-DD0E592E21DA}\mpengine.dll
2016-07-01 22:14 . 2016-07-01 22:14 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-07-01 22:14 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-07-01 22:14 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-07-01 19:06 . 2016-07-01 19:06 -------- d-----w- c:\users\Miki\AppData\Local\fjientfagetherdrimo
2016-07-01 19:05 . 2016-07-02 08:56 -------- d-----w- c:\program files (x86)\Atubotckipi
2016-07-01 10:54 . 2016-07-01 10:55 -------- d-----w- c:\users\Miki\AppData\Local\Viber
2016-06-29 20:15 . 2016-02-05 18:56 20480 ----a-w- c:\windows\system32\tbs.dll
2016-06-29 20:15 . 2016-02-05 18:54 109568 ----a-w- c:\windows\system32\fveapibase.dll
2016-06-29 20:15 . 2016-02-05 17:33 15360 ----a-w- c:\windows\SysWow64\tbs.dll
2016-06-29 20:15 . 2016-02-05 20:22 8192 ----a-w- c:\windows\system32\drivers\cs-CZ\tpm.sys.mui
2016-06-29 20:15 . 2015-06-03 20:21 451080 ----a-w- c:\windows\system32\fveapi.dll
2016-06-29 20:15 . 2015-06-03 20:21 312600 ----a-w- c:\windows\system32\wbem\Win32_Tpm.dll
2016-06-29 20:15 . 2015-06-03 20:22 257864 ----a-w- c:\windows\SysWow64\wbem\Win32_Tpm.dll
2016-06-26 19:30 . 2016-05-26 20:28 11895896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2016-06-19 21:41 . 2016-05-13 10:41 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DB445FD0-B78D-44A3-9A47-A1CC49D5541B}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-07-02 08:40 . 2016-05-08 13:27 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-06-15 20:40 . 2014-10-15 14:47 484008 ------w- c:\windows\system32\MpSigStub.exe
2016-05-13 10:41 . 2016-03-17 20:58 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2016-05-02 19:30 . 2014-10-15 17:53 135176864 ----a-w- c:\windows\system32\MRT.exe
2016-04-12 15:23 . 2015-12-18 21:16 642336 ----a-w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2016-04-04 18:14 . 2016-05-02 19:25 38120 ----a-w- c:\windows\system32\CompatTelRunner.exe
2016-04-04 18:02 . 2016-05-02 19:25 1169408 ----a-w- c:\windows\system32\aeinv.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"Viber"="c:\users\Miki\AppData\Local\Viber\Viber.exe" [2016-06-24 71876176]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-12-20 507744]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-11-24 548864]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-05-21 291648]
.
c:\users\Miki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2015-3-24 36544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTSUVSTOR.sys;c:\windows\SYSNATIVE\Drivers\RTSUVSTOR.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 ClickToRunSvc;Služba Microsoft Office ClickToRun;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 UCManSvc;UCManSvc;c:\program files (x86)\SoftDenchi\UCManSvc.exe;c:\program files (x86)\SoftDenchi\UCManSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys;c:\windows\SYSNATIVE\DRIVERS\wcmvcam64.sys [x]
S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 bpenum;Intel(R) Centrino(R) WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys;c:\windows\SYSNATIVE\DRIVERS\bpenum.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-07-01 19:17 1248072 ----a-w- c:\program files (x86)\Google\Chrome\Application\51.0.2704.106\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-10-08 22:03]
.
2016-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-10-08 22:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-12-15 564352]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2011-12-06 1654400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-07 440128]
"IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2011-12-01 1626112]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-01-29 1340192]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.114.2 192.168.115.1 192.168.141.2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-Akamai NetSession Interface - c:\users\Miki\AppData\Local\Akamai\netsession_win.exe
Wow6432Node-HKCU-Run-OfficeSyncProcess - c:\program files\Microsoft Office\Office14\MSOSYNC.EXE
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
BHO-{0083d14d-8305-47f6-8967-cb9e69c99c65} - c:\program files (x86)\WWhITEDeaLs\9gLs6dSzDOEdxD.x64.dll
BHO-{693C45FD-E80E-4DD9-AF85-322C7C4ECDFB} - c:\program files (x86)\SpACeOffeRRss\SQWf9I7rj5X7Ch.x64.dll
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynLenovoGestureMgr - c:\program files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe
HKLM-Run-SBRegRebootCleaner - c:\program files (x86)\STOPzilla\SBRC.exe
AddRemove-{89ca2a32-2b52-4595-8dfd-6fe4757958d0} - c:\programdata\Package Cache\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}\vsta_setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-07-02 23:54:21
ComboFix-quarantined-files.txt 2016-07-02 21:54
.
Před spuštěním: Volných bajtů: 131 720 785 920
Po spuštění: Volných bajtů: 131 090 784 256
.
- - End Of File - - 0FC494226F60F2E9756DAB2173051E74
Ten je poslední, moc děkuji.
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu HJT
Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT
Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Kód: Vybrat vše
ClearJavaCache::
KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
Folder::
c:\users\Miki\AppData\Local\fjientfagetherdrimo
c:\program files (x86)\Atubotckipi
c:\program files (x86)\Google\Update
RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT
Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu HJT
ComboFix 16-06-30.01 - Miki 04.07.2016 18:35:36.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3998.2591 [GMT 2:00]
Spuštěný z: c:\users\Miki\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Miki\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
SP: Microsoft Security Essentials *Disabled/Updated* {CDE0C533-D3CD-62A1-E772-AFADDF863628}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Atubotckipi
c:\program files (x86)\Atubotckipi\5.txt
c:\program files (x86)\Atubotckipi\ckanert
c:\program files (x86)\Atubotckipi\DeElevator.dll
c:\program files (x86)\Atubotckipi\parugh.exe
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateWebPlugin.exe
c:\program files (x86)\Google\Update\1.3.30.3\goopdate.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.30.3\psmachine.dll
c:\program files (x86)\Google\Update\1.3.30.3\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.30.3\psuser.dll
c:\program files (x86)\Google\Update\1.3.30.3\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.30.3\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\51.0.2704.106\51.0.2704.106_51.0.2704.103_chrome_updater.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\programdata\ntuser.pol
c:\users\Miki\AppData\Local\fjientfagetherdrimo
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Certificate Revocation Lists
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\5614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\68f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\7461b4a09cfb3d41d75159575b2e7649a445a8d27709b0cc564a6482b7eb41a3.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\a577ac9ced7548dd8f025b67a241089df86e0f476ec203c2ecbedb185f282638.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\ac3b9aed7fa9674757159e6d7d575672f9d98100941e9bdeffeca1313b75782d.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a5.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\cdb5179b7fc1c046feea31136a3f8f002e6182faf8896fecc8b2f5b5ab604900.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\manifest.fingerprint
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Crashpad\metadata
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Crashpad\reports\37c4a355-a4c4-47a4-9d64-3c4a8bf233ee.dmp
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Crashpad\settings.dat
c:\users\Miki\AppData\Local\fjientfagetherdrimo\cs-CZ-3-0.bdic
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Application Cache\Index-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Application Cache\Index
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Bookmarks
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Bookmarks.bak
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Cookies-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Cookies
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Current Session
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Current Tabs
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\000003.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\MANIFEST-000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\Databases.db-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\Databases.db
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_admin.blog.cz_0\68
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_adserver.adtech.de_0\130
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_advert.uloz.to_0\43
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_ahena.blog.cz_0\65
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_b.topkontakt.cz_0\47
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_baccano.blog.cz_0\87
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_blog.cz_0\67
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_bonusweb.idnes.cz_0\76
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_camp-of-half-blood.blog.cz_0\131
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_campofhalfblood-campjupiter.blog.cz_0\121
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_cdn.cavixoapp.com_0\135
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_cestovani.lidovky.cz_0\108
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_dark-souls.blog.cz_0\94
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_diskuse.doktorka.cz_0\124
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_dolcevita.blog.cz_0\103
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_elderscrolls-online.tiscali.cz_0\61
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_en.aion.gameforge.com_0\48
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_en.tera.gameforge.com_0\62
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_fenichan.blog.cz_0\75
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_forum.zive.cz_0\56
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_foto.games.tiscali.cz_0\78
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_foto.tiscali.cz_0\140
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_games.tiscali.cz_0\60
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_gensouteki.blog.cz_0\85
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_go.cz.bbelements.com_0\42
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_go.eu.bbelements.com_0\143
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_gpf1.cz_0\90
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_hledej.tiscali.cz_0\77
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_hokage.cz_0\136
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_img5.uloz.to_0\126
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_japaneserock.blog.cz_0\133
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_japanologie.blog.cz_0\69
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_jihlava.idnes.cz_0\114
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_jizdnirady.idnes.cz_0\46
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_k2s.cc_0\142
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_kairakeseri.blog.cz_0\81
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_kuchyne.bydleniprokazdeho.cz_0\96
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_levne-paruky.eu_0\88
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_linda1997.blog.cz_0\99
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_malfoy-manor.blog.cz_0\84
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_mangarden.blog.cz_0\80
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_maya-mysteria.blog.cz_0\147
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_merci-darci.blog.cz_0\82
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_mp.pianomedia.eu_0\137
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_nescio.blog.cz_0\120
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_next-fuck.com_0\139
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_nikolka-diary.blog.cz_0\132
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_olomoucky.denik.cz_0\104
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_ona.idnes.cz_0\39
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_pc.hrej.cz_0\59
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_play.iprima.cz_0\52
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_pll-fanc.blog.cz_0\134
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_prozeny.blesk.cz_0\128
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_raketka.cz_0\92
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_recepty.chytrazena.cz_0\45
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_shizue.blog.cz_0\112
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_sledujufilmy.cz_0\127
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_slovnik.cz_0\38
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_speak-to-you-fantasy.blog.cz_0\101
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_spracheland.blog.cz_0\93
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_stars-of-dc.blog.cz_0\100
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_suki-hane.blog.cz_0\123
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_svitavsky.denik.cz_0\105
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_technet.idnes.cz_0\66
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_uloz.to_0\49
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_ulozto.cz_0\44
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_verca-hp.blog.cz_0\122
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.akcie.cz_0\115
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.akcniceny.cz_0\138
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.blesk.cz_0\129
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.csfd.cz_0\53
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.databazeknih.cz_0\54
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.elle.cz_0\111
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.emimino.cz_0\146
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.expres.cz_0\113
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.finance.cz_0\118
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.fotimelevne.cz_0\98
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.grafika.cz_0\91
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.jenzeny.cz_0\109
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.karaoketexty.cz_0\57
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.loupak.cz_0\71
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.mesec.cz_0\72
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.navratdoreality.com_0\125
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.omlazeni.cz_0\40
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.openoffice.cz_0\70
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.playtvak.cz_0\110
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.poslirecept.cz_0\95
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.ranker.com_0\97
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.recepty.cz_0\145
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.receptyonline.cz_0\144
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.remintrex.com_0\83
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.rybarenistomem.estranky.cz_0\55
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.serialzone.cz_0\73
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.slunecnice.cz_0\64
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.sovickapacov.estranky.cz_0\106
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.studentpoint.cz_0\116
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.twobrokegirls.estranky.cz_0\107
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.uloz.to_0\63
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.ulozto.cz_0\41
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.ulozto.sk_0\86
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.vinted.cz_0\79
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.zive.cz_0\58
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.zkouknito.cz_0\74
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_yaoi-forever.blog.cz_0\89
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_yoshiko.blog.cz_0\119
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_zoom.iprima.cz_0\51
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_zpravy.idnes.cz_0\117
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\https_cz.expekt.com_0\102
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\https_en.aion.gameforge.com_0\50
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\https_rapidgator.net_0\141
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\DownloadMetadata
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Cookies-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Cookies
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\000003.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\MANIFEST-000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002162.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002165.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002167.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002168.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002169.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\MANIFEST-000761
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\id\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\th\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\uk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\vi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en_GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en_US\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\es_419\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\et\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\16.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\32.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\en-GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\en_US\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\128app.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\38.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\58.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\cs\messages.json
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3998.2591 [GMT 2:00]
Spuštěný z: c:\users\Miki\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Miki\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
SP: Microsoft Security Essentials *Disabled/Updated* {CDE0C533-D3CD-62A1-E772-AFADDF863628}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Atubotckipi
c:\program files (x86)\Atubotckipi\5.txt
c:\program files (x86)\Atubotckipi\ckanert
c:\program files (x86)\Atubotckipi\DeElevator.dll
c:\program files (x86)\Atubotckipi\parugh.exe
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.30.3\GoogleUpdateWebPlugin.exe
c:\program files (x86)\Google\Update\1.3.30.3\goopdate.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.30.3\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.30.3\psmachine.dll
c:\program files (x86)\Google\Update\1.3.30.3\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.30.3\psuser.dll
c:\program files (x86)\Google\Update\1.3.30.3\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.30.3\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\51.0.2704.106\51.0.2704.106_51.0.2704.103_chrome_updater.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\programdata\ntuser.pol
c:\users\Miki\AppData\Local\fjientfagetherdrimo
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Certificate Revocation Lists
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\5614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\68f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\7461b4a09cfb3d41d75159575b2e7649a445a8d27709b0cc564a6482b7eb41a3.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\a577ac9ced7548dd8f025b67a241089df86e0f476ec203c2ecbedb185f282638.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\ac3b9aed7fa9674757159e6d7d575672f9d98100941e9bdeffeca1313b75782d.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a5.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\cdb5179b7fc1c046feea31136a3f8f002e6182faf8896fecc8b2f5b5ab604900.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\_platform_specific\all\sths\ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb.sth
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\manifest.fingerprint
c:\users\Miki\AppData\Local\fjientfagetherdrimo\CertificateTransparency\75\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Crashpad\metadata
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Crashpad\reports\37c4a355-a4c4-47a4-9d64-3c4a8bf233ee.dmp
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Crashpad\settings.dat
c:\users\Miki\AppData\Local\fjientfagetherdrimo\cs-CZ-3-0.bdic
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Application Cache\Index-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Application Cache\Index
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Bookmarks
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Bookmarks.bak
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Cookies-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Cookies
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Current Session
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Current Tabs
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\000003.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\data_reduction_proxy_leveldb\MANIFEST-000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\Databases.db-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\Databases.db
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_admin.blog.cz_0\68
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_adserver.adtech.de_0\130
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_advert.uloz.to_0\43
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_ahena.blog.cz_0\65
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_b.topkontakt.cz_0\47
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_baccano.blog.cz_0\87
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_blog.cz_0\67
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_bonusweb.idnes.cz_0\76
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_camp-of-half-blood.blog.cz_0\131
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_campofhalfblood-campjupiter.blog.cz_0\121
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_cdn.cavixoapp.com_0\135
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_cestovani.lidovky.cz_0\108
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_dark-souls.blog.cz_0\94
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_diskuse.doktorka.cz_0\124
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_dolcevita.blog.cz_0\103
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_elderscrolls-online.tiscali.cz_0\61
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_en.aion.gameforge.com_0\48
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_en.tera.gameforge.com_0\62
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_fenichan.blog.cz_0\75
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_forum.zive.cz_0\56
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_foto.games.tiscali.cz_0\78
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_foto.tiscali.cz_0\140
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_games.tiscali.cz_0\60
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_gensouteki.blog.cz_0\85
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_go.cz.bbelements.com_0\42
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_go.eu.bbelements.com_0\143
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_gpf1.cz_0\90
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_hledej.tiscali.cz_0\77
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_hokage.cz_0\136
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_img5.uloz.to_0\126
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_japaneserock.blog.cz_0\133
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_japanologie.blog.cz_0\69
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_jihlava.idnes.cz_0\114
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_jizdnirady.idnes.cz_0\46
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_k2s.cc_0\142
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_kairakeseri.blog.cz_0\81
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_kuchyne.bydleniprokazdeho.cz_0\96
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_levne-paruky.eu_0\88
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_linda1997.blog.cz_0\99
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_malfoy-manor.blog.cz_0\84
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_mangarden.blog.cz_0\80
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_maya-mysteria.blog.cz_0\147
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_merci-darci.blog.cz_0\82
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_mp.pianomedia.eu_0\137
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_nescio.blog.cz_0\120
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_next-fuck.com_0\139
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_nikolka-diary.blog.cz_0\132
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_olomoucky.denik.cz_0\104
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_ona.idnes.cz_0\39
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_pc.hrej.cz_0\59
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_play.iprima.cz_0\52
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_pll-fanc.blog.cz_0\134
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_prozeny.blesk.cz_0\128
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_raketka.cz_0\92
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_recepty.chytrazena.cz_0\45
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_shizue.blog.cz_0\112
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_sledujufilmy.cz_0\127
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_slovnik.cz_0\38
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_speak-to-you-fantasy.blog.cz_0\101
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_spracheland.blog.cz_0\93
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_stars-of-dc.blog.cz_0\100
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_suki-hane.blog.cz_0\123
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_svitavsky.denik.cz_0\105
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_technet.idnes.cz_0\66
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_uloz.to_0\49
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_ulozto.cz_0\44
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_verca-hp.blog.cz_0\122
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.akcie.cz_0\115
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.akcniceny.cz_0\138
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.blesk.cz_0\129
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.csfd.cz_0\53
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.databazeknih.cz_0\54
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.elle.cz_0\111
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.emimino.cz_0\146
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.expres.cz_0\113
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.finance.cz_0\118
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.fotimelevne.cz_0\98
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.grafika.cz_0\91
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.jenzeny.cz_0\109
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.karaoketexty.cz_0\57
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.loupak.cz_0\71
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.mesec.cz_0\72
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.navratdoreality.com_0\125
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.omlazeni.cz_0\40
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.openoffice.cz_0\70
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.playtvak.cz_0\110
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.poslirecept.cz_0\95
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.ranker.com_0\97
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.recepty.cz_0\145
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.receptyonline.cz_0\144
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.remintrex.com_0\83
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.rybarenistomem.estranky.cz_0\55
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.serialzone.cz_0\73
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.slunecnice.cz_0\64
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.sovickapacov.estranky.cz_0\106
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.studentpoint.cz_0\116
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.twobrokegirls.estranky.cz_0\107
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.uloz.to_0\63
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.ulozto.cz_0\41
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.ulozto.sk_0\86
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.vinted.cz_0\79
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.zive.cz_0\58
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_www.zkouknito.cz_0\74
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_yaoi-forever.blog.cz_0\89
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_yoshiko.blog.cz_0\119
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_zoom.iprima.cz_0\51
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\http_zpravy.idnes.cz_0\117
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\https_cz.expekt.com_0\102
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\https_en.aion.gameforge.com_0\50
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\databases\https_rapidgator.net_0\141
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\DownloadMetadata
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Cookies-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Cookies
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\000003.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension Rules\MANIFEST-000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002162.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002165.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002167.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002168.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\002169.ldb
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extension State\MANIFEST-000761
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\id\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\th\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\uk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\vi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en_GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en_US\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\es_419\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\et\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\16.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\32.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\en-GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\en_US\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\128app.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\38.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\icons\58.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble\1.21_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\cs\messages.json
Re: Prosím o kontrolu HJT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\fr\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ja\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\pl\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\pt-br\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ru\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_CN\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_TW\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_metadata\computed_hashes.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\action.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\action.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\ask.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\ask.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\asker.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\background.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\cache.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\compat.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\content.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\convert.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\COPYING
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\crcrc.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\curtain.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\downloads.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\environment.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\helper.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\hinter.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\i18n.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\icon.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_blocker.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_forbidden.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_grey.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_paused.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\large-loading.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\txt.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\user_agent.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\action.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\ask.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\fonts\Apache License.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\fonts\Roboto-Light-webfont.woff
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\htmlutil.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\agt_utilities.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\amor.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\bug.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\button_ok.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\cancel.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\critical.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\db.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\delete.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\download.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\edit_add.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\editor_cancel.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\error.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\exit.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\favicon_userscripts.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\filesave.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\fire.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\flag.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\halfencrypted.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\harddrive2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\help.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\home.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\check.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\import.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\info.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\lock.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\no.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\package_utilities.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\resources.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\script_add.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\script_cancel.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\script_download.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\update.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\web.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\windowlist.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\layout_helper.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\options.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\style.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\tabview.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\native.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\notify.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\options.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\options.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\parser.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\permission.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\pingpong.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\porter.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\promise.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\rea\action.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\rea\background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\rea\common.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\README
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\registry.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\statistics.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\storage.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\style.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\syncinfo.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\test.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\uri.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\codemirror.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\codemirror.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\continuecomment.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\javascript.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\emacs.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\extra.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\multiselect.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\vim.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\windows.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\LICENSE
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\matchbrackets.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\mirrorframe.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\search.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\searchcursor.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\jquery.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\jshint.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\saveas\filesaver.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\saveas\LICENSE.md
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\zip_js\deflate.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\zip_js\inflate.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\zip_js\zip.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\xmlhttprequest.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\et\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\nb\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\app_icon.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe\0.0.2_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe\0.0.2_0\icon_128.PNG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe\0.0.2_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm\1.2_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm\1.2_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm\1.2_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\en-GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\en_US\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_metadata\computed_hashes.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\block-element.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\core.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\chrome.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\init.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\lists.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\mystats.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\notifications.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\start.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\stndz.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\user.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\utils.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\common\common-background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\common\common-content.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\common\common.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\doc-end.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\doc-start.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\funcs.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\chrome.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\messaging.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19_gray.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19_gray_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38_gray.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38_gray_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\58.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\close.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\facebook.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\choose-cause.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\rate-star.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\refresh.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\turn-on.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\twitter.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\loading.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\placeholder.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\window.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\window.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\block-element\view.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\animate.min.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\common.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\font.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\jquery-2.1.1.min.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\fonts\Roboto-Light.woff2
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\fonts\Roboto-Medium.woff2
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\bug.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\close.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\forward.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\help.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\icon.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\logo.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\programmer.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\tiny-v.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\trashcan.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\report\report-issue.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\report\report.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_window.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css\craw_window.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html\craw_window.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\flapper.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_16.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_close.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_hover.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_maximize.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_pressed.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\fr\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ja\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\pl\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\pt-br\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ru\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_CN\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_TW\about.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_metadata\computed_hashes.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\action.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\action.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\ask.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\ask.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\asker.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\background.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\cache.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\compat.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\content.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\convert.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\COPYING
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\crcrc.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\curtain.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\downloads.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\environment.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\helper.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\hinter.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\i18n.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\icon.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_blocker.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_forbidden.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_grey.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon_paused.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\icon48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\large-loading.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\txt.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\images\user_agent.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\action.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\ask.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\fonts\Apache License.txt
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\fonts\Roboto-Light-webfont.woff
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\htmlutil.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\agt_utilities.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\amor.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\bug.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\button_ok.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\cancel.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\critical.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\db.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\delete.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\download.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\edit_add.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\editor_cancel.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\error.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\exit.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\favicon_userscripts.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\filesave.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\fire.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\flag.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\halfencrypted.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\harddrive2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\help.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\home.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\check.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\import.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\info.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\lock.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\no.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\package_utilities.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\resources.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\script_add.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\script_cancel.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\script_download.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\update.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\web.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\images\windowlist.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\layout_helper.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\options.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\style.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\layout\default\tabview.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\native.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\notify.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\options.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\options.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\parser.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\permission.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\pingpong.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\porter.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\promise.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\rea\action.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\rea\background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\rea\common.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\README
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\registry.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\statistics.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\storage.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\style.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\syncinfo.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\test.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\uri.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\codemirror.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\codemirror.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\continuecomment.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\javascript.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\emacs.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\extra.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\multiselect.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\vim.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\keymap\windows.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\LICENSE
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\matchbrackets.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\mirrorframe.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\search.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\cm\searchcursor.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\jquery.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\jshint.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\saveas\filesaver.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\saveas\LICENSE.md
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\zip_js\deflate.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\zip_js\inflate.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\vendor\zip_js\zip.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.84_1\xmlhttprequest.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\et\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\nb\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\app_icon.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\fffhkcjfldmhhchoefbcgbhkibaioikg\1.5.1_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe\0.0.2_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe\0.0.2_0\icon_128.PNG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\gcjndldbhkeablpmemfadkcaahbfpahe\0.0.2_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm\1.2_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm\1.2_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\jajgpbodihjkiljoiplbminlmnlmbanm\1.2_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\en-GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\en_US\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\he\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_metadata\computed_hashes.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\block-element.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\core.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\chrome.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\init.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\lists.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\mystats.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\notifications.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\start.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\stndz.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\user.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\background\utils.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\common\common-background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\common\common-content.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\common\common.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\doc-end.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\doc-start.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\funcs.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\chrome.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\content\messaging.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19_gray.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19_gray_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\19_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38_gray.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38_gray_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\38_notification.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\48.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\58.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_gray_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\19_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_gray_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_0.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_1.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_2.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_3.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_4.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_5.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_6.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_7.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\animations\38_notification_8.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\close.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\facebook.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\choose-cause.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\rate-star.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\refresh.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\turn-on.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\icons\twitter.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\loading.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\placeholder.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\window.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\browser_action_window\window.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\block-element\view.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\animate.min.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\common.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\font.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\common\jquery-2.1.1.min.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\fonts\Roboto-Light.woff2
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\fonts\Roboto-Medium.woff2
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\bug.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\close.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\forward.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\help.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\icon.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\logo.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\programmer.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\tiny-v.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\images\trashcan.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\report\report-issue.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh\1.311_0\views\web_accessible\report\report.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_background.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_window.js
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css\craw_window.css
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html\craw_window.html
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\flapper.gif
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_16.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_close.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_hover.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_maximize.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_pressed.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ar\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\bg\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ca\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\cs\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\da\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\de\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\el\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\en\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\es\messages.json
Re: Prosím o kontrolu HJT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\id\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\lv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\se\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\th\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\uk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\vi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Favicons-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Favicons
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\.usage
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\000003.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\MANIFEST-000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\.usage
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000002
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000003
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000004
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000005
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000006
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000007
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000008
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000009
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000010
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000011
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000012
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\ChromeDWriteFontCache
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-06-04 do 2016-07-04 )))))))))))))))))))))))))))))))
.
.
2016-07-04 16:44 . 2016-07-04 16:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-07-04 16:37 . 2016-07-04 16:37 -------- d-----w- c:\users\Miki\AppData\Local\CrashDumps
2016-07-02 21:56 . 2016-06-21 22:04 12007136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{331B3AF1-56EC-48E9-835B-597B10543285}\mpengine.dll
2016-07-02 21:23 . 2016-07-02 21:00 24064 ----a-w- c:\windows\zoek-delete.exe
2016-07-02 21:23 . 2016-07-04 16:46 -------- d-----w- c:\users\Miki\AppData\Local\Temp
2016-07-02 21:00 . 2016-07-02 21:20 -------- d-----w- C:\zoek_backup
2016-07-02 09:23 . 2016-07-02 09:23 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-07-02 09:23 . 2016-07-02 09:23 -------- d-----w- c:\programdata\RogueKiller
2016-07-01 22:14 . 2016-07-01 22:14 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-07-01 22:14 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-07-01 22:14 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-07-01 10:54 . 2016-07-01 10:55 -------- d-----w- c:\users\Miki\AppData\Local\Viber
2016-06-29 20:15 . 2016-02-05 18:56 20480 ----a-w- c:\windows\system32\tbs.dll
2016-06-29 20:15 . 2016-02-05 18:54 109568 ----a-w- c:\windows\system32\fveapibase.dll
2016-06-29 20:15 . 2016-02-05 17:33 15360 ----a-w- c:\windows\SysWow64\tbs.dll
2016-06-29 20:15 . 2016-02-05 20:22 8192 ----a-w- c:\windows\system32\drivers\cs-CZ\tpm.sys.mui
2016-06-29 20:15 . 2015-06-03 20:21 451080 ----a-w- c:\windows\system32\fveapi.dll
2016-06-29 20:15 . 2015-06-03 20:21 312600 ----a-w- c:\windows\system32\wbem\Win32_Tpm.dll
2016-06-29 20:15 . 2015-06-03 20:22 257864 ----a-w- c:\windows\SysWow64\wbem\Win32_Tpm.dll
2016-06-26 19:30 . 2016-05-26 20:28 11895896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2016-06-19 21:41 . 2016-05-13 10:41 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DB445FD0-B78D-44A3-9A47-A1CC49D5541B}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-07-02 08:40 . 2016-05-08 13:27 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-06-15 20:40 . 2014-10-15 14:47 484008 ------w- c:\windows\system32\MpSigStub.exe
2016-05-13 10:41 . 2016-03-17 20:58 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2016-05-02 19:30 . 2014-10-15 17:53 135176864 ----a-w- c:\windows\system32\MRT.exe
2016-04-12 15:23 . 2015-12-18 21:16 642336 ----a-w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"Viber"="c:\users\Miki\AppData\Local\Viber\Viber.exe" [2016-06-24 71876176]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-12-20 507744]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-11-24 548864]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-05-21 291648]
.
c:\users\Miki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2015-3-24 36544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTSUVSTOR.sys;c:\windows\SYSNATIVE\Drivers\RTSUVSTOR.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 ClickToRunSvc;Služba Microsoft Office ClickToRun;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 UCManSvc;UCManSvc;c:\program files (x86)\SoftDenchi\UCManSvc.exe;c:\program files (x86)\SoftDenchi\UCManSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys;c:\windows\SYSNATIVE\DRIVERS\wcmvcam64.sys [x]
S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 bpenum;Intel(R) Centrino(R) WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys;c:\windows\SYSNATIVE\DRIVERS\bpenum.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-07-01 19:17 1248072 ----a-w- c:\program files (x86)\Google\Chrome\Application\51.0.2704.106\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0083d14d-8305-47f6-8967-cb9e69c99c65}]
c:\program files (x86)\WWhITEDeaLs\9gLs6dSzDOEdxD.x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{693C45FD-E80E-4DD9-AF85-322C7C4ECDFB}]
c:\program files (x86)\SpACeOffeRRss\SQWf9I7rj5X7Ch.x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-12-15 564352]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2011-12-06 1654400]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-07 440128]
"IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2011-12-01 1626112]
"SynLenovoGestureMgr"="c:\program files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe" [BU]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
"SBRegRebootCleaner"="c:\program files (x86)\STOPzilla\SBRC.exe" [BU]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-01-29 1340192]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 158.194.128.3 158.194.128.123
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{89ca2a32-2b52-4595-8dfd-6fe4757958d0} - c:\programdata\Package Cache\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}\vsta_setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2016-07-04 18:51:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2016-07-04 16:51
ComboFix2.txt 2016-07-02 21:54
.
Před spuštěním: Volných bajtů: 131 085 983 744
Po spuštění: Volných bajtů: 133 115 793 408
.
- - End Of File - - 210A30424B269A3B54808A123DC38566
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fil\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hu\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\id\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\it\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ja\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ko\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\lt\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\lv\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\nl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\no\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pt_BR\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pt_PT\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ro\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ru\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\se\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sl\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\th\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\tr\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\uk\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\vi\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_CN\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_TW\messages.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata\verified_contents.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\manifest.json
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Favicons-journal
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\Favicons
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\.usage
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\000003.log
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\CURRENT
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\LOCK
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\LOG
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\LOG.old
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\004\t\Paths\MANIFEST-000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\.usage
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000001
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000002
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000003
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000004
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000005
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000006
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000007
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000008
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000009
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000010
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000011
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\File System\005\t\00\00000012
c:\users\Miki\AppData\Local\fjientfagetherdrimo\Default\ChromeDWriteFontCache
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-06-04 do 2016-07-04 )))))))))))))))))))))))))))))))
.
.
2016-07-04 16:44 . 2016-07-04 16:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-07-04 16:37 . 2016-07-04 16:37 -------- d-----w- c:\users\Miki\AppData\Local\CrashDumps
2016-07-02 21:56 . 2016-06-21 22:04 12007136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{331B3AF1-56EC-48E9-835B-597B10543285}\mpengine.dll
2016-07-02 21:23 . 2016-07-02 21:00 24064 ----a-w- c:\windows\zoek-delete.exe
2016-07-02 21:23 . 2016-07-04 16:46 -------- d-----w- c:\users\Miki\AppData\Local\Temp
2016-07-02 21:00 . 2016-07-02 21:20 -------- d-----w- C:\zoek_backup
2016-07-02 09:23 . 2016-07-02 09:23 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-07-02 09:23 . 2016-07-02 09:23 -------- d-----w- c:\programdata\RogueKiller
2016-07-01 22:14 . 2016-07-01 22:14 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-07-01 22:14 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-07-01 22:14 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-07-01 10:54 . 2016-07-01 10:55 -------- d-----w- c:\users\Miki\AppData\Local\Viber
2016-06-29 20:15 . 2016-02-05 18:56 20480 ----a-w- c:\windows\system32\tbs.dll
2016-06-29 20:15 . 2016-02-05 18:54 109568 ----a-w- c:\windows\system32\fveapibase.dll
2016-06-29 20:15 . 2016-02-05 17:33 15360 ----a-w- c:\windows\SysWow64\tbs.dll
2016-06-29 20:15 . 2016-02-05 20:22 8192 ----a-w- c:\windows\system32\drivers\cs-CZ\tpm.sys.mui
2016-06-29 20:15 . 2015-06-03 20:21 451080 ----a-w- c:\windows\system32\fveapi.dll
2016-06-29 20:15 . 2015-06-03 20:21 312600 ----a-w- c:\windows\system32\wbem\Win32_Tpm.dll
2016-06-29 20:15 . 2015-06-03 20:22 257864 ----a-w- c:\windows\SysWow64\wbem\Win32_Tpm.dll
2016-06-26 19:30 . 2016-05-26 20:28 11895896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2016-06-19 21:41 . 2016-05-13 10:41 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DB445FD0-B78D-44A3-9A47-A1CC49D5541B}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-07-02 08:40 . 2016-05-08 13:27 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-06-15 20:40 . 2014-10-15 14:47 484008 ------w- c:\windows\system32\MpSigStub.exe
2016-05-13 10:41 . 2016-03-17 20:58 1167568 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2016-05-02 19:30 . 2014-10-15 17:53 135176864 ----a-w- c:\windows\system32\MRT.exe
2016-04-12 15:23 . 2015-12-18 21:16 642336 ----a-w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 08:56 1741096 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"Viber"="c:\users\Miki\AppData\Local\Viber\Viber.exe" [2016-06-24 71876176]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-12-20 507744]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-11-24 548864]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-05-21 291648]
.
c:\users\Miki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2015-3-24 36544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
R3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTSUVSTOR.sys;c:\windows\SYSNATIVE\Drivers\RTSUVSTOR.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 ClickToRunSvc;Služba Microsoft Office ClickToRun;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 UCManSvc;UCManSvc;c:\program files (x86)\SoftDenchi\UCManSvc.exe;c:\program files (x86)\SoftDenchi\UCManSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys;c:\windows\SYSNATIVE\DRIVERS\wcmvcam64.sys [x]
S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 bpenum;Intel(R) Centrino(R) WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys;c:\windows\SYSNATIVE\DRIVERS\bpenum.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 SmbDrvIntel;SmbDrvIntel;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-07-01 19:17 1248072 ----a-w- c:\program files (x86)\Google\Chrome\Application\51.0.2704.106\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0083d14d-8305-47f6-8967-cb9e69c99c65}]
c:\program files (x86)\WWhITEDeaLs\9gLs6dSzDOEdxD.x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{693C45FD-E80E-4DD9-AF85-322C7C4ECDFB}]
c:\program files (x86)\SpACeOffeRRss\SQWf9I7rj5X7Ch.x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-05-17 11:23 2348848 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-12-15 564352]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2011-12-06 1654400]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-07 440128]
"IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2011-12-01 1626112]
"SynLenovoGestureMgr"="c:\program files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe" [BU]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
"SBRegRebootCleaner"="c:\program files (x86)\STOPzilla\SBRC.exe" [BU]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-01-29 1340192]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 158.194.128.3 158.194.128.123
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{89ca2a32-2b52-4595-8dfd-6fe4757958d0} - c:\programdata\Package Cache\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}\vsta_setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2016-07-04 18:51:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2016-07-04 16:51
ComboFix2.txt 2016-07-02 21:54
.
Před spuštěním: Volných bajtů: 131 085 983 744
Po spuštění: Volných bajtů: 133 115 793 408
.
- - End Of File - - 210A30424B269A3B54808A123DC38566
Re: Prosím o kontrolu HJT
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:40:49, on 4.7.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Miki\Downloads\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Viber] "C:\Users\Miki\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\bonjour\mdnsnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files (x86)\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Red Bend Device Management Service (DMAgent) - Red Bend Ltd. - C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: UCManSvc - Paltiosoft Inc. - C:\Program Files (x86)\SoftDenchi\UCManSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Service (WiMAXAppSrv) - Intel(R) Corporation - C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 10022 bytes
Scan saved at 19:40:49, on 4.7.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Miki\Downloads\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Viber] "C:\Users\Miki\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\bonjour\mdnsnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files (x86)\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Red Bend Device Management Service (DMAgent) - Red Bend Ltd. - C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: UCManSvc - Paltiosoft Inc. - C:\Program Files (x86)\SoftDenchi\UCManSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Service (WiMAXAppSrv) - Intel(R) Corporation - C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 10022 bytes
Re: Prosím o kontrolu HJT
aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-07-04 19:48:19
-----------------------------
19:48:19.834 OS Version: Windows x64 6.1.7601 Service Pack 1
19:48:19.834 Number of processors: 2 586 0x3A09
19:48:19.835 ComputerName: MIKI-PC UserName: Miki
19:48:21.290 Initialize success
19:48:22.289 VM: initialized successfully
19:48:22.289 VM: Intel CPU BiosDisabled
19:48:41.806 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
19:48:41.806 Disk 0 Vendor: ST500LT0 0001 Size: 476940MB BusType: 3
19:48:41.962 Disk 0 MBR read successfully
19:48:41.962 Disk 0 MBR scan
19:48:41.962 Disk 0 Windows 7 default MBR code
19:48:41.978 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
19:48:41.978 Disk 0 Boot: NTFS code=2
19:48:41.993 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
19:48:42.024 Disk 0 scanning C:\Windows\system32\drivers
19:48:53.988 Service scanning
19:49:17.825 Modules scanning
19:49:17.825 Disk 0 trace - called modules:
19:49:18.324 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
19:49:18.324 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006bb84e0]
19:49:18.324 3 CLASSPNP.SYS[fffff88001ce043f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004471050]
19:49:18.340 Disk 0 statistics 102793/0/0 @ 4,92 MB/s
19:49:18.340 Scan finished successfully
19:50:17.152 Disk 0 MBR has been saved successfully to "C:\Users\Miki\Desktop\MBR.dat"
19:50:17.183 The log file has been saved successfully to "C:\Users\Miki\Desktop\aswMBR.txt"
Tenhle je poslední, děkuji za kontrolu i za rady.
Run date: 2016-07-04 19:48:19
-----------------------------
19:48:19.834 OS Version: Windows x64 6.1.7601 Service Pack 1
19:48:19.834 Number of processors: 2 586 0x3A09
19:48:19.835 ComputerName: MIKI-PC UserName: Miki
19:48:21.290 Initialize success
19:48:22.289 VM: initialized successfully
19:48:22.289 VM: Intel CPU BiosDisabled
19:48:41.806 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
19:48:41.806 Disk 0 Vendor: ST500LT0 0001 Size: 476940MB BusType: 3
19:48:41.962 Disk 0 MBR read successfully
19:48:41.962 Disk 0 MBR scan
19:48:41.962 Disk 0 Windows 7 default MBR code
19:48:41.978 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
19:48:41.978 Disk 0 Boot: NTFS code=2
19:48:41.993 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
19:48:42.024 Disk 0 scanning C:\Windows\system32\drivers
19:48:53.988 Service scanning
19:49:17.825 Modules scanning
19:49:17.825 Disk 0 trace - called modules:
19:49:18.324 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
19:49:18.324 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006bb84e0]
19:49:18.324 3 CLASSPNP.SYS[fffff88001ce043f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004471050]
19:49:18.340 Disk 0 statistics 102793/0/0 @ 4,92 MB/s
19:49:18.340 Scan finished successfully
19:50:17.152 Disk 0 MBR has been saved successfully to "C:\Users\Miki\Desktop\MBR.dat"
19:50:17.183 The log file has been saved successfully to "C:\Users\Miki\Desktop\aswMBR.txt"
Tenhle je poslední, děkuji za kontrolu i za rady.
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu HJT
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall
Vyčisti systém CCleanerem
Stáhni si OTC
na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.
Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/
ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci
Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt
Co problémy?
Start-Spustit a zadej ComboFix /Uninstall
Vyčisti systém CCleanerem
Stáhni si OTC
na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.
Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/
ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci
Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt
Co problémy?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu HJT
# DelFix v1.013 - Logfile created 05/07/2016 at 16:09:38
# Updated 17/04/2016 by Xplode
# Username : Miki - MIKI-PC
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
~ Removing disinfection tools ...
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\Miki\Desktop\adwcleaner_5.201.exe
Deleted : C:\Users\Miki\Desktop\MBR.dat
Deleted : C:\Users\Miki\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Miki\Desktop\zoek.exe
Deleted : C:\Users\Miki\Downloads\aswmbr.exe
Deleted : C:\Users\Miki\Downloads\JRT.exe
Deleted : C:\Users\Miki\Downloads\HijackThis.exe
Deleted : C:\Users\Miki\Downloads\hijackthis.log
Deleted : C:\Users\Miki\Downloads\Sinon.(ALO).full.1675370.jpg
Deleted : C:\Users\Miki\Downloads\TFC.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR
~ Cleaning system restore ...
Deleted : RP #215 [ComboFix created restore point | 07/05/2016 14:01:04]
New restore point created !
########## - EOF - ##########
Problémy zmizely, počítač je rychlejší a dokonce už ani tolik nehučí. Strašně moc děkuju.
# Updated 17/04/2016 by Xplode
# Username : Miki - MIKI-PC
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
~ Removing disinfection tools ...
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\Miki\Desktop\adwcleaner_5.201.exe
Deleted : C:\Users\Miki\Desktop\MBR.dat
Deleted : C:\Users\Miki\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Miki\Desktop\zoek.exe
Deleted : C:\Users\Miki\Downloads\aswmbr.exe
Deleted : C:\Users\Miki\Downloads\JRT.exe
Deleted : C:\Users\Miki\Downloads\HijackThis.exe
Deleted : C:\Users\Miki\Downloads\hijackthis.log
Deleted : C:\Users\Miki\Downloads\Sinon.(ALO).full.1675370.jpg
Deleted : C:\Users\Miki\Downloads\TFC.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR
~ Cleaning system restore ...
Deleted : RP #215 [ComboFix created restore point | 07/05/2016 14:01:04]
New restore point created !
########## - EOF - ##########
Problémy zmizely, počítač je rychlejší a dokonce už ani tolik nehučí. Strašně moc děkuju.
-
Orcus
- člen Security týmu
-
Elite Level 10.5
- Příspěvky: 10645
- Registrován: duben 10
- Bydliště: Okolo rostou 3 růže =o)
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu HJT
OK, pokud to je vše, můžeš téma označit jako vyřešené.
Láska hřeje, ale uhlí je uhlí. 
Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.
Pár rad k bezpečnosti PC.
Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix
Pokud budete spokojeni , můžete podpořit naše fórum.
Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.
Pár rad k bezpečnosti PC.
Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix
Pokud budete spokojeni , můžete podpořit naše fórum.
Re: Prosím o kontrolu HJT
Dobře a ještě jednou všem moc děkuju.
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 106 hostů