﻿Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
Ran by User (administrator) on NT (11-12-2016 15:41:09)
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User & PC-Download & Administrator)
Platform: Windows 8 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-10-19] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2786768 2016-11-29] (Malwarebytes)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2012-11-19] (Dritek System Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Programy\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1929903500-702496554-4106183244-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKU\S-1-5-21-1929903500-702496554-4106183244-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1929903500-702496554-4106183244-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)
HKU\S-1-5-21-1929903500-702496554-4106183244-1001\...\MountPoints2: {7bc20164-6f64-11e3-be76-689423bcd818} - "F:\setup.exe" 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-26] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-27] (Microsoft Corporation)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk [2015-06-07]
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{4F6C52B0-930D-4DC0-B493-04963249C7E5}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{85DA10E3-55C3-43EB-B27C-C9BEDA53AB6F}: [DhcpNameServer] 10.61.56.1

Internet Explorer:
==================
HKU\S-1-5-21-1929903500-702496554-4106183244-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com
HKU\S-1-5-21-1929903500-702496554-4106183244-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKU\S-1-5-21-1929903500-702496554-4106183244-1001 -> DefaultScope {72E8FF3F-6D64-4D62-84BB-251D6FCBEABC} URL = 
SearchScopes: HKU\S-1-5-21-1929903500-702496554-4106183244-1001 -> {72E8FF3F-6D64-4D62-84BB-251D6FCBEABC} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-10-11] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-17] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-17] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-07-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-23] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-09-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-23] (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKU\S-1-5-21-1929903500-702496554-4106183244-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9brwi1fm.default-1476825301290 [2016-12-11]
FF Homepage: Mozilla\Firefox\Profiles\9brwi1fm.default-1476825301290 -> hxxps://www.seznam.cz/
FF Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9brwi1fm.default-1476825301290\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-28]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-17] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-23] (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox -> C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [2016-08-24] (Reto-Moto ApS)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-01-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Plugin HKU\S-1-5-21-1929903500-702496554-4106183244-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-26] (Unity Technologies ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2016-11-22]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-13]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-09]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-01]
CHR Extension: (Vyhledávání Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-15]
CHR Extension: (Avast SafePrice) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-09-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-28]
CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-09-13]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-28]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-13]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-26] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1860616 2016-04-28] ()
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3040496 2016-10-04] (Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [658576 2012-08-23] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-10-19] (ELAN Microelectronics Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
S3 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [177344 2014-08-26] ()
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2012-11-19] (Dritek System INC.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-26] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-26] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-26] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [6822984 2012-11-19] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-12-28] (DT Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77408 2016-11-29] ()
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-11-12] (LogMeIn Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176064 2016-12-11] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [102856 2016-12-11] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2016-12-11] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [250816 2016-12-11] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [91584 2016-12-11] (Malwarebytes)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-11-19] (Dritek System Inc.)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-08-26] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129856 2014-09-02] (Razer, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35320 2014-09-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270024 2014-08-26] (Microsoft Corporation)
S3 athr; \SystemRoot\system32\DRIVERS\athrx.sys [X]
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-11 15:41 - 2016-12-11 15:41 - 00019931 _____ C:\Users\User\Downloads\FRST.txt
2016-12-11 15:41 - 2016-12-11 15:41 - 00000000 ____D C:\FRST
2016-12-11 15:39 - 2016-12-11 15:39 - 02420224 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2016-12-11 15:08 - 2016-12-11 15:08 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2016-12-11 15:07 - 2016-12-11 15:31 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-11 15:07 - 2016-12-11 15:31 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2016-12-11 15:07 - 2016-12-11 15:31 - 00091584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2016-12-11 15:07 - 2016-12-11 15:31 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-11 15:07 - 2016-12-11 15:07 - 00001839 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-11 15:07 - 2016-12-11 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-11 15:07 - 2016-12-11 15:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-11 15:07 - 2016-12-11 15:07 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-11 15:07 - 2016-11-29 06:27 - 00077408 _____ C:\Windows\system32\Drivers\mbae64.sys
2016-12-11 15:06 - 2016-12-11 15:06 - 51969976 _____ (Malwarebytes ) C:\Users\User\Downloads\mb3-setup-consumer-3.0.4.1269.exe
2016-12-03 23:38 - 2016-12-04 00:18 - 733284352 _____ C:\Users\User\Downloads\Budiž-světlo-CZ.avi
2016-11-29 16:11 - 2016-11-29 16:44 - 580420146 _____ C:\Users\User\Downloads\The.Walking.Dead.S07E06.Cztitulky.avi
2016-11-28 22:42 - 2016-11-28 23:03 - 366987264 _____ C:\Users\User\Downloads\The.Walking.Dead.S07E05.cz-tit.avi
2016-11-27 20:16 - 2016-11-27 20:17 - 00000015 _____ C:\Users\User\Desktop\Nový textový dokument.txt
2016-11-26 11:22 - 2016-11-26 12:34 - 1285697550 _____ C:\Users\User\Downloads\Harry-Potter-a-Princ-dvoji-krve-(2009)-fantasy,D.Radcliffe,R.Grint,E.Watson,CZ-dab,DTVMir,138'.avi
2016-11-20 23:09 - 2015-12-04 17:12 - 00793312 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-11-20 23:09 - 2015-12-04 17:12 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-11-20 23:09 - 2015-12-04 17:12 - 00446872 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-11-20 23:09 - 2015-12-04 17:12 - 00253624 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-11-20 23:09 - 2015-12-04 15:55 - 00463880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-11-20 23:09 - 2015-12-04 15:52 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-11-20 23:09 - 2015-12-04 15:52 - 01376256 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-11-20 23:09 - 2015-12-04 15:52 - 01150464 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-11-20 23:09 - 2015-12-04 15:52 - 01100800 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-11-20 23:09 - 2015-12-04 15:52 - 01073664 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-11-20 23:09 - 2015-12-04 15:52 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-11-20 23:09 - 2015-12-04 15:51 - 02893824 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 01527808 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 01208832 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-11-20 23:09 - 2015-12-04 15:51 - 01174016 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 01138688 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-11-20 23:09 - 2015-12-04 15:51 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-11-20 23:09 - 2015-12-04 15:46 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-11-20 23:09 - 2015-12-04 15:46 - 01374208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-11-20 23:09 - 2015-12-04 15:46 - 00904192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-11-20 23:09 - 2015-12-04 15:46 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-11-20 23:09 - 2015-12-04 15:46 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-11-20 23:09 - 2015-12-04 15:45 - 02400256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-11-20 23:09 - 2015-12-04 15:45 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-11-20 23:09 - 2015-12-04 15:45 - 00946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-11-20 23:09 - 2015-12-04 15:45 - 00929792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-11-20 23:09 - 2015-12-04 15:45 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-11-20 23:09 - 2015-12-04 15:45 - 00571392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-11-20 23:09 - 2015-12-04 15:45 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-11-20 23:09 - 2015-12-04 15:45 - 00546304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-11-20 23:09 - 2015-11-05 10:55 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-11-20 23:08 - 2015-12-04 15:55 - 00612528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-11-20 23:08 - 2015-12-04 15:55 - 00324456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-11-20 23:08 - 2015-12-04 15:52 - 02615808 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-11-20 23:08 - 2015-12-04 15:52 - 01770496 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-11-20 23:08 - 2015-12-04 15:52 - 01350656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-11-20 23:08 - 2015-12-04 15:52 - 00625152 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-11-20 23:08 - 2015-12-04 15:52 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 01593344 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-11-20 23:08 - 2015-12-04 15:51 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-11-20 23:08 - 2015-12-04 15:51 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-11-20 23:08 - 2015-12-04 15:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-11-20 23:08 - 2015-12-04 15:46 - 02312704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-11-20 23:08 - 2015-12-04 15:46 - 01468928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-11-20 23:08 - 2015-12-04 15:46 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-11-20 23:08 - 2015-12-04 15:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-11-20 23:08 - 2015-12-04 15:46 - 00722944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-11-20 23:08 - 2015-12-04 15:46 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-11-20 23:08 - 2015-12-04 15:46 - 00382464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-11-20 23:08 - 2015-12-04 15:46 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-11-20 23:08 - 2015-12-04 15:46 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-11-20 23:08 - 2015-12-04 15:46 - 00189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-11-20 23:08 - 2015-12-04 15:46 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-11-20 23:08 - 2015-12-04 15:45 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00190464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-11-20 23:08 - 2015-12-04 15:45 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-11-20 23:08 - 2015-12-04 15:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-11-20 23:08 - 2015-12-04 15:45 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-11-20 23:08 - 2015-12-04 15:45 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-11-20 23:08 - 2015-12-03 20:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-11-20 23:00 - 2015-12-08 16:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-11-20 23:00 - 2015-12-08 16:16 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-11-20 22:48 - 2015-12-04 01:55 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-11-20 22:48 - 2015-12-03 22:47 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-11-20 20:30 - 2016-11-20 20:30 - 00001980 _____ C:\Users\User\Desktop\Drakensang Online.lnk
2016-11-20 20:30 - 2016-11-20 20:30 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2016-11-20 18:50 - 2014-04-16 19:20 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-11-20 18:50 - 2014-04-16 19:20 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-11-20 18:49 - 2015-12-15 01:01 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-11-20 18:49 - 2015-12-15 01:01 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-11-20 18:49 - 2015-12-15 01:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-11-20 18:49 - 2015-12-08 16:16 - 01303040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-11-20 18:49 - 2015-12-05 19:48 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-11-20 18:49 - 2015-11-07 13:46 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2016-11-20 18:49 - 2015-11-07 13:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2016-11-20 18:49 - 2015-11-07 10:34 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2016-11-20 18:49 - 2015-05-28 03:04 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-11-20 18:49 - 2015-05-28 03:02 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-11-20 18:49 - 2015-05-28 01:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-11-20 18:49 - 2015-05-28 01:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-11-20 18:48 - 2015-12-15 01:01 - 14269440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-11-20 18:48 - 2015-12-15 01:01 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-11-20 18:48 - 2015-12-15 01:01 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-11-20 18:48 - 2015-12-15 01:01 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-11-20 18:48 - 2015-12-15 01:01 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 19349504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 15422976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 13723648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 03805696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 02793984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 02658304 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00857600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00715776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-11-20 18:48 - 2015-12-15 01:00 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-11-20 18:48 - 2015-12-15 00:59 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-11-20 18:48 - 2015-11-07 06:29 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2016-11-20 18:48 - 2015-09-18 14:32 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-11-20 18:48 - 2015-08-13 11:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-11-20 18:48 - 2015-08-13 11:44 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-11-20 18:48 - 2015-05-28 03:01 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-11-20 18:48 - 2015-05-28 03:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-11-20 18:48 - 2015-05-28 03:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-11-20 18:48 - 2015-05-28 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-11-20 18:48 - 2015-05-28 03:01 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-11-20 18:48 - 2015-05-28 01:43 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-11-20 18:48 - 2015-05-28 01:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2016-11-20 18:48 - 2015-05-28 01:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-11-20 18:48 - 2015-05-28 01:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-11-20 18:48 - 2015-05-28 01:22 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-11-20 18:48 - 2015-05-28 01:20 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-11-20 18:48 - 2015-05-28 01:00 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-11-20 18:48 - 2015-05-28 00:55 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-11-20 17:25 - 2016-11-20 17:31 - 00000000 ____D C:\Users\User\Desktop\flashka
2016-11-20 17:23 - 2016-11-20 17:23 - 00116384 _____ C:\Users\User\Desktop\cc_20161120_172313.reg
2016-11-20 16:46 - 2016-11-20 16:49 - 00000000 ____D C:\Users\User\Downloads\Hudba
2016-11-20 16:26 - 2016-11-20 16:36 - 00000000 ___RD C:\Users\User\Desktop\Programy
2016-11-20 16:21 - 2016-11-20 16:31 - 00000000 ____D C:\Users\User\Desktop\Martin
2016-11-19 18:48 - 2016-11-19 18:48 - 00000000 ____D C:\Users\User\AppData\Local\SlimWare Utilities Inc
2016-11-19 18:47 - 2016-11-19 18:47 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2016-11-19 18:15 - 2016-11-19 18:17 - 00000000 ____D C:\Users\User\Documents\Overwatch
2016-11-19 18:15 - 2016-11-19 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch
2016-11-18 13:10 - 2016-12-11 15:31 - 00000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2016-11-18 03:04 - 2016-12-02 14:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-13 19:33 - 2016-11-13 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BioShock Infinite

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-11 15:37 - 2014-01-21 15:09 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-1929903500-702496554-4106183244-1001.job
2016-12-11 15:33 - 2014-02-09 20:36 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-11 15:30 - 2014-02-09 20:36 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-11 15:30 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-11 15:28 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\Inf
2016-12-11 15:18 - 2014-01-03 14:03 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-11 15:13 - 2013-12-28 13:37 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2016-12-11 13:36 - 2014-01-21 15:09 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2016-12-11 02:00 - 2014-01-03 14:02 - 00000000 ____D C:\Users\User\AppData\Local\Adobe
2016-12-08 02:23 - 2012-07-26 06:26 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-12-04 17:30 - 2014-05-31 19:51 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2016-12-03 23:02 - 2013-12-11 16:06 - 00000000 ____D C:\Users\User\AppData\Local\Packages
2016-12-02 14:04 - 2014-01-03 13:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-27 18:49 - 2012-11-19 04:03 - 00727488 _____ C:\Windows\system32\perfh005.dat
2016-11-27 18:49 - 2012-11-19 04:03 - 00148006 _____ C:\Windows\system32\perfc005.dat
2016-11-27 18:49 - 2012-07-26 08:28 - 01714430 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-23 22:49 - 2016-01-01 17:32 - 00000162 _____ C:\Users\User\Documents\ClownfishForTeamspeak.ini
2016-11-23 00:37 - 2014-01-07 17:12 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2016-11-23 00:33 - 2016-06-14 15:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-22 00:18 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2016-11-21 00:39 - 2012-07-26 08:59 - 00000000 ____D C:\Windows\CbsTemp
2016-11-20 23:37 - 2012-07-26 09:12 - 00000000 ___HD C:\Program Files\WindowsApps
2016-11-20 23:31 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2016-11-20 22:24 - 2014-02-09 20:37 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-11-20 22:04 - 2014-02-21 16:43 - 00000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2016-11-20 20:30 - 2014-01-04 17:27 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2016-11-20 19:45 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-11-20 19:26 - 2013-12-16 11:01 - 00000000 ____D C:\Windows\system32\MRT
2016-11-20 19:00 - 2013-12-16 11:01 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-20 18:59 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-20 18:09 - 2013-12-11 16:04 - 00000000 ____D C:\Windows\softwaredistribution.bak
2016-11-20 17:52 - 2015-01-05 15:14 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-20 17:11 - 2015-01-13 00:40 - 00000000 ____D C:\Users\User\AppData\Roaming\TeamViewer
2016-11-20 17:11 - 2013-12-28 03:19 - 00000000 ____D C:\Users\User\AppData\Roaming\DAEMON Tools Lite
2016-11-20 17:11 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\ModemLogs
2016-11-20 16:50 - 2014-01-13 22:12 - 00000000 ____D C:\Users\User\Desktop\David
2016-11-20 16:33 - 2014-05-30 16:19 - 00000000 ____D C:\Programy
2016-11-20 16:29 - 2015-01-08 14:23 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-11-20 16:22 - 2013-12-27 17:32 - 00000000 ____D C:\Users\User\Desktop\Hry
2016-11-20 16:21 - 2013-12-27 20:22 - 00000000 ____D C:\Hry
2016-11-20 14:52 - 2016-01-02 19:06 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2016-11-20 14:51 - 2016-01-02 19:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-11-19 18:21 - 2016-01-02 19:28 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-11-15 21:18 - 2012-07-26 09:12 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-15 21:15 - 2014-01-06 17:15 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-11-15 01:37 - 2014-02-09 20:37 - 00002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-15 01:37 - 2014-02-09 20:37 - 00002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-13 19:46 - 2015-02-06 18:40 - 00000000 ____D C:\Users\User\Documents\My Games
2016-11-13 18:26 - 2016-10-28 14:03 - 00000000 ____D C:\Users\User\Downloads\BioShock.Infinite.Complete.Edition.EN-RU.Repack.by.z10yded
2016-11-13 18:26 - 2016-09-16 14:30 - 00000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher

==================== Files in the root of some directories =======

2014-11-20 21:42 - 2014-12-08 14:41 - 0126976 _____ () C:\Users\User\AppData\Roaming\RZR_0060612040aabf3936690d8e239d.db
2014-11-30 19:16 - 2015-11-23 17:31 - 0007601 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
2014-01-21 15:09 - 2014-01-21 15:09 - 0000003 _____ () C:\Users\User\AppData\Local\updater.log
2014-01-21 15:09 - 2016-09-03 14:28 - 0000424 _____ () C:\Users\User\AppData\Local\UserProducts.xml

Some files in TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\COMAP.EXE
C:\Users\PC-Download\AppData\Local\Temp\vlc-2.1.5-win32.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-07 15:48

==================== End of FRST.txt ============================