﻿Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-01-2015
Ran by Asus (administrator) on ASUSPC (10-01-2016 10:29:28)
Running from C:\Users\Asus\Downloads
Loaded Profiles: Asus (Available Profiles: Asus)
Platform: Windows 8.1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 5520 series\Bin\ScanToPCActivationApp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Slovak Telekom a.s.) C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 5520 series\Bin\HPNetworkCommunicator.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Farbar) C:\Users\Asus\Downloads\FRST64 (1).exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-06] (AVAST Software)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-10-16] ()
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-09-28] (Atheros Communications)
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\Run: [HP Deskjet 5520 series (NET)] => C:\Program Files\HP\HP Deskjet 5520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48145024 2015-10-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\Run: [TMCC] => C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe [843776 2012-05-03] (Slovak Telekom a.s.)
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\Run: [Advanced SystemCare 9] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2010912 2015-11-30] (IObit)
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\MountPoints2: {8a92b1ec-b3a3-11e5-8275-28c2dd2ab9de} - "F:\RunSetup.exe" 
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\MountPoints2: {8a92b268-b3a3-11e5-8275-28c2dd2ab9de} - "F:\RunSetup.exe" 
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\MountPoints2: {8a92b42c-b3a3-11e5-8275-28c2dd2ab9de} - "F:\RunSetup.exe" 
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\MountPoints2: {8a92c0dd-b3a3-11e5-8275-28c2dd2ab9de} - "F:\RunSetup.exe" 
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\...\MountPoints2: {9f7de001-b636-11e5-8276-28c2dd2ab9de} - "F:\RunSetup.exe" 
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-30] (AVAST Software)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{496440EC-D878-46FF-B2B7-DF9C01A4C6D7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{BAA53536-70D4-4981-98C6-8EE256B8F32D}: [DhcpNameServer] 192.168.32.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-3353223092-3672510501-1402833693-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-30] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-30] (AVAST Software)
BHO-x32: No Name -> {d47f39c7-2f7f-43e5-ba53-faffe2da42af} -> No File

FireFox:
========
FF ProfilePath: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\e5m3nlr4.default
FF SelectedSearchEngine: 
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF user.js: detected! => C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\e5m3nlr4.default\user.js [2016-01-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-10]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.sk/
CHR StartupUrls: Default -> "hxxp://www.google.sk/"
CHR Profile: C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-30]
CHR Extension: (Dokumenty Google) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-30]
CHR Extension: (Disk Google) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-30]
CHR Extension: (YouTube) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-30]
CHR Extension: (Google Search) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Avast SafePrice) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-04]
CHR Extension: (Tabuľky Google) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-30]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (AdBlock) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-01-08]
CHR Extension: (Avast Online Security) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-30]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2015-12-28]
CHR Extension: (Gmail) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-10-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-30]

Opera: 
=======
OPR Extension: (AdBlock) - C:\Users\Asus\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2015-12-04]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [827680 2015-11-04] (IObit)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-09-28] (Windows (R) Win 7 DDK provider) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-30] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-30] (Avast Software)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2014-12-15] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-10-09] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-09-28] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-30] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-30] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4221952 2014-09-09] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2015-03-18] (ASUS Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-09-28] (Qualcomm Atheros)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [212992 2016-01-08] (Huawei Technologies Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2016-01-08] (REALiX(tm))
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80160 2015-02-13] (McAfee, Inc.)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-30] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-30] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-10 10:29 - 2016-01-10 10:30 - 00017307 _____ C:\Users\Asus\Downloads\FRST.txt
2016-01-10 10:26 - 2016-01-10 10:29 - 00000000 ____D C:\FRST
2016-01-10 10:26 - 2016-01-10 10:26 - 02370560 _____ (Farbar) C:\Users\Asus\Desktop\FRST64 (1).exe
2016-01-10 10:25 - 2016-01-10 10:25 - 02370560 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe
2016-01-10 10:23 - 2016-01-10 10:23 - 01222144 _____ C:\Users\Asus\Desktop\RSITx64.exe
2016-01-09 23:49 - 2016-01-10 00:10 - 365938688 _____ C:\Users\Asus\Downloads\Scream-Queens-S01E05-CZ-tit.-v-OBRAZE.avi
2016-01-09 22:28 - 2016-01-09 22:55 - 476817308 _____ C:\Users\Asus\Downloads\Scream-Queens-S01E04---CZ-tit-v-obraze.avi
2016-01-09 21:54 - 2016-01-09 22:20 - 461358114 _____ C:\Users\Asus\Downloads\Scream-Queens-S01E03---CZ-tit-v-obraze.avi
2016-01-09 12:00 - 2016-01-09 12:00 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2016-01-09 12:00 - 2016-01-09 12:00 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2016-01-08 23:47 - 2016-01-08 23:47 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2016-01-08 23:47 - 2016-01-08 23:47 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2016-01-08 23:47 - 2016-01-08 23:47 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-01-08 23:47 - 2016-01-08 23:47 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-01-08 23:44 - 2016-01-08 23:44 - 00335872 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2016-01-08 23:44 - 2016-01-08 23:44 - 00028672 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2016-01-08 23:44 - 2016-01-08 23:44 - 00028672 _____ C:\WINDOWS\system32\config\SAM.iobit
2016-01-08 23:43 - 2016-01-08 23:44 - 100990976 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2016-01-08 23:32 - 2016-01-10 10:22 - 00003236 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2016-01-08 23:32 - 2016-01-10 10:21 - 00002868 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (Asus)
2016-01-08 23:32 - 2016-01-08 23:32 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2016-01-08 23:32 - 2016-01-08 23:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-01-08 23:31 - 2016-01-08 23:32 - 00000000 ____D C:\Users\Asus\AppData\Roaming\ProductData
2016-01-08 23:31 - 2016-01-08 23:32 - 00000000 ____D C:\Users\Asus\AppData\Roaming\IObit
2016-01-08 23:31 - 2016-01-08 23:32 - 00000000 ____D C:\ProgramData\ProductData
2016-01-08 23:31 - 2016-01-08 23:32 - 00000000 ____D C:\ProgramData\IObit
2016-01-08 23:31 - 2016-01-08 23:32 - 00000000 ____D C:\Program Files (x86)\IObit
2016-01-08 23:31 - 2016-01-08 23:31 - 00003174 _____ C:\WINDOWS\System32\Tasks\ASC9_PerformanceMonitor
2016-01-08 23:31 - 2016-01-08 23:31 - 00002388 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Asus
2016-01-08 23:31 - 2016-01-08 23:31 - 00002348 _____ C:\WINDOWS\System32\Tasks\ASC9_SkipUac_Asus
2016-01-08 23:31 - 2016-01-08 23:31 - 00001388 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2016-01-08 23:31 - 2016-01-08 23:31 - 00000290 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Asus.job
2016-01-08 23:31 - 2016-01-08 23:31 - 00000250 _____ C:\WINDOWS\Tasks\ASC9_SkipUac_Asus.job
2016-01-08 23:31 - 2016-01-08 23:31 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2016-01-08 23:31 - 2016-01-08 23:31 - 00000000 ____D C:\Users\Asus\AppData\LocalLow\IObit
2016-01-08 23:31 - 2016-01-08 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-01-08 23:31 - 2016-01-08 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-01-08 23:31 - 2016-01-08 23:31 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-01-08 23:25 - 2016-01-08 23:25 - 00000000 ____D C:\Users\Asus\AppData\Roaming\BlueSprig
2016-01-08 23:25 - 2016-01-08 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetClean
2016-01-08 23:25 - 2016-01-08 23:25 - 00000000 ____D C:\Program Files (x86)\BlueSprig
2016-01-08 19:44 - 2016-01-08 19:44 - 00001148 _____ C:\Users\Public\Desktop\T-Mobile Communication Center.lnk
2016-01-08 19:44 - 2016-01-08 19:44 - 00000000 ____D C:\ProgramData\Paradoxx
2016-01-08 19:44 - 2016-01-08 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T-Mobile Communication Center
2016-01-08 19:44 - 2016-01-08 19:44 - 00000000 ____D C:\Program Files (x86)\T-Mobile Communication Center
2016-01-08 19:44 - 2011-02-16 15:15 - 00880640 _____ (DMSoft Technologies) C:\WINDOWS\SysWOW64\SkinCrafter3_vs2005.dll
2016-01-08 19:35 - 2016-01-08 19:35 - 00000000 ____D C:\Users\Asus\AppData\Local\ElevatedDiagnostics
2016-01-07 11:52 - 2016-01-07 11:52 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Paradoxx
2016-01-07 11:51 - 2016-01-07 11:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2016-01-07 11:50 - 2016-01-08 19:44 - 01490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01007.dll
2016-01-07 11:50 - 2016-01-08 19:44 - 01490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01007.dll
2016-01-07 11:50 - 2016-01-08 19:44 - 01001472 _____ (DiBcom SA) C:\WINDOWS\system32\Drivers\mod7700.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00415744 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbwwan.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00222464 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbmdm.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_juwwanecm.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_hwusbdev.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jucdcacm.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jubusenum.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jucdcecm.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\WINDOWS\system32\Drivers\ewdcsc.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_juextctrl.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_hwupgrade.sys
2016-01-07 11:50 - 2016-01-08 19:44 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbenumfilter.sys
2016-01-01 15:09 - 2016-01-08 12:17 - 00003584 _____ C:\Users\Asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-12-30 13:27 - 2015-12-30 13:27 - 00002729 _____ C:\Users\Public\Desktop\Skype.lnk
2015-12-30 13:27 - 2015-12-30 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-30 13:05 - 2015-12-30 13:05 - 00000000 ____D C:\Users\Asus\AppData\Local\ESET
2015-12-27 23:51 - 2015-12-30 00:42 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2015-12-27 23:51 - 2015-12-27 23:51 - 00002293 _____ C:\Users\Default\Desktop\Google Chrome.lnk
2015-12-27 23:51 - 2015-12-27 23:51 - 00002293 _____ C:\Users\Default User\Desktop\Google Chrome.lnk
2015-12-27 23:50 - 2015-12-30 00:42 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Seznam.cz
2015-12-26 17:32 - 2015-12-26 17:32 - 00122480 _____ C:\Users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-25 20:06 - 2015-12-25 20:09 - 00000000 ____D C:\ProgramData\EL
2015-12-25 20:02 - 2015-12-25 20:03 - 00000000 ____D C:\ProgramData\TEMP
2015-12-25 20:02 - 2015-12-25 20:02 - 00000000 ____D C:\Users\Asus\AppData\Roaming\langmaster.cz
2015-12-25 20:02 - 2015-12-25 20:02 - 00000000 ____D C:\Users\Asus\AppData\Roaming\LANGMaster
2015-12-25 20:00 - 2015-12-25 20:00 - 00000000 ____D C:\Program Files (x86)\LANGMaster
2015-12-25 19:52 - 2015-12-25 19:52 - 00000000 ____D C:\ProgramData\1st EasySoft
2015-12-25 11:30 - 2015-12-30 15:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-10 10:27 - 2015-10-30 00:03 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Skype
2016-01-10 10:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2016-01-10 10:21 - 2015-10-30 00:10 - 00000958 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-10 10:21 - 2015-10-30 00:09 - 00003958 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3465BAB7-AA28-4F4B-B982-D85CCA3CACC6}
2016-01-10 10:20 - 2015-10-30 00:10 - 00000954 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-10 10:18 - 2015-10-30 00:00 - 00000000 ___RD C:\Users\Asus\OneDrive
2016-01-10 10:18 - 2015-10-29 23:56 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-01-10 00:09 - 2015-10-30 01:53 - 00000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-01-09 22:11 - 2015-10-30 01:28 - 00000400 _____ C:\WINDOWS\Tasks\update-sys.job
2016-01-09 21:14 - 2015-10-30 01:28 - 00000400 _____ C:\WINDOWS\Tasks\update-S-1-5-21-3353223092-3672510501-1402833693-1001.job
2016-01-09 17:17 - 2015-10-30 01:29 - 00000000 ____D C:\Users\Asus\AppData\Roaming\TS3Client
2016-01-09 16:31 - 2015-10-30 01:59 - 00000000 ___RD C:\Users\Asus\Desktop\ 
2016-01-09 12:25 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2016-01-09 12:14 - 2015-10-30 00:01 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3353223092-3672510501-1402833693-1001
2016-01-08 23:51 - 2013-08-22 16:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-08 23:41 - 2014-10-21 13:09 - 00000000 ____D C:\WINDOWS\Panther
2016-01-08 23:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ModemLogs
2016-01-08 23:41 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-01-08 23:30 - 2015-10-30 01:03 - 00000000 ___RD C:\Users\Asus\Desktop\Programy, Inštalačky
2016-01-08 19:49 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-08 19:48 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-08 19:47 - 2014-03-18 16:26 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-08 19:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-08 12:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\tracing
2016-01-08 12:45 - 2015-10-30 02:20 - 00000000 ____D C:\Users\Asus\Desktop\PC
2016-01-05 15:51 - 2015-10-30 03:07 - 00000000 ____D C:\Users\Asus\AppData\Roaming\BSplayer
2016-01-03 16:26 - 2015-11-14 11:46 - 00000000 ____D C:\Users\Asus\AppData\Local\CrashDumps
2016-01-02 09:23 - 2015-10-30 01:53 - 00003850 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-12-30 15:17 - 2015-10-30 01:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-30 15:12 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-12-30 13:27 - 2015-10-30 00:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-30 13:27 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Skype
2015-12-30 12:36 - 2015-10-30 00:03 - 00000000 ____D C:\Users\Asus\AppData\Local\Skype
2015-12-30 00:46 - 2015-11-25 16:30 - 00000000 ____D C:\ProgramData\Nero
2015-12-27 18:50 - 2015-10-30 02:50 - 00000000 ____D C:\Users\Asus\AppData\Roaming\uTorrent
2015-12-26 09:48 - 2013-08-22 16:38 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-26 09:48 - 2013-08-22 16:38 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-25 20:09 - 2015-10-29 23:56 - 00000000 ____D C:\Users\Asus\AppData\Local\VirtualStore
2015-12-18 06:36 - 2015-10-29 23:52 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-12-18 06:36 - 2015-10-29 23:52 - 00000000 ___SD C:\WINDOWS\system32\GWX

==================== Files in the root of some directories =======

2016-01-01 15:09 - 2016-01-08 12:17 - 0003584 _____ () C:\Users\Asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-30 01:28 - 2015-10-30 01:28 - 0000003 _____ () C:\Users\Asus\AppData\Local\updater.log
2015-10-30 01:28 - 2015-10-30 01:28 - 0000424 _____ () C:\Users\Asus\AppData\Local\UserProducts.xml
2015-10-30 11:35 - 2015-10-30 11:35 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-05-26 15:25 - 2015-05-26 15:25 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-21 05:28 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-21 05:28 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-21 05:28 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Some files in TEMP:
====================
C:\Users\Asus\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-01-04 20:06

==================== End of FRST.txt ============================