Zdravím, mám problém s háčky nad písmeny n, d, t. Několikrát mi napíše bez háčků a pak dá i s háčkem. Je to nepravidelný - párkrát bez, jednou to dá. Projeto Avastem - Test po restartu, MBAM v nouzovém režimu i normálně, použit Adw clean se standartním nastavením a nic. Dělá to i v nouzovém režimu a všude. Vygooglil jsem o tom vše a už opravdu nevím. Používám funkci Klávesnice na obrazovce vzhledem ke svému tělesnému postižení. Prosím o pomoc.
HP Elitebook 8460p, Windows 7 Pro.
Výpis z First:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09.09.2018
Ran by Bape (administrator) on BAPE-HP (09-09-2018 21:30:23)
Running from C:\Users\Bape\Desktop
Loaded Profiles: Bape (Available Profiles: Bape & moni)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Cybereason) C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFreeServiceHost.exe
() C:\Windows\System32\SCPwrSetSvr.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(ALCPU) C:\Program Files\Core Temp\Core Temp.exe
(Cybereason) C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFree.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2208448 2018-03-13] (COMODO)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2816240 2016-09-02] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-09-08] (AVAST Software)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\Policies\Explorer: [NoDrives] 1
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: G - G:\AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {6d02c475-70e8-11e6-908f-100ba928b780} - G:\setup.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {7457a9ae-5f29-11e8-acc5-101f74fbe7cb} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {94ac21a8-67cf-11e8-b9a1-101f74fbe7cb} - F:\LG_PC_Programs.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {9e086d2c-3b43-11e8-9670-101f74fbe7cb} - I:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{0E4E7E32-73C8-42AD-B9B6-844207BC4FE1}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{B2547369-A0AA-4C1D-8D3A-78AEEB2B6282}: [NameServer] 83.240.0.135,83.240.0.215
Internet Explorer:
==================
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_181\bin\ssv.dll [2018-07-30] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-07-30] (Oracle Corporation)
BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
IE Session Restore: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000 -> is enabled.
FireFox:
========
FF DefaultProfile:
FF DefaultProfile: 5r46ctii.default
FF ProfilePath: C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default [2018-09-09]
FF Homepage: Mozilla\Firefox\Profiles\5r46ctii.default -> hxxps://www.seznam.cz/
FF NetworkProxy: Mozilla\Firefox\Profiles\5r46ctii.default -> type", 0
FF Session Restore: Mozilla\Firefox\Profiles\5r46ctii.default -> is enabled.
FF Extension: (Test Pilot) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\@testpilot-addon.xpi [2018-08-29]
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\cs@dictionaries.addons.mozilla.org [2016-12-06] [Legacy]
FF Extension: (S3.Translator) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\s3google@translator.xpi [2018-09-08]
FF Extension: (snoozetabs) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\snoozetabs@mozilla.com.xpi [2018-01-20]
FF Extension: (Tab Groups) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\tabgroups@quicksaver.xpi [2017-01-28] [Legacy]
FF Extension: (Avast Online Security) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\wrc@avast.com.xpi [2018-05-25]
FF Extension: (Malwarebytes Browser Extension) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2018-08-13]
FF Extension: (Adblock Plus) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-08-31]
FF Extension: (Always on Top) - C:\Users\Bape\AppData\Roaming\Mozilla\Firefox\Profiles\5r46ctii.default\Extensions\{E6C93316-271E-4b3d-8D7E-FE11B4350AEB}.xpi [2018-05-10]
FF Plugin: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-07-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-07-30] (Oracle Corporation)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7994520 2018-09-08] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-09-08] (AVAST Software)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11395096 2018-03-13] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2018-03-13] (COMODO)
R2 CybereasonRansomFree; C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFreeServiceHost.exe [13824 2017-11-20] (Cybereason) [File not signed]
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-09-01] (HP)
S4 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-09-13] (HP Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-03] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
R2 SCPwrSetSvr; C:\Windows\system32\SCPwrSetSvr.exe [99096 2013-07-19] ()
S4 STacSV; C:\Program Files\IDT\WDM\stacsv64.exe [327680 2012-10-24] (IDT, Inc.) [File not signed]
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11644656 2018-08-13] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [199712 2018-09-08] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229384 2018-09-08] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201320 2018-09-08] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-09-08] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59568 2018-09-08] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-09-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [163272 2018-09-08] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111864 2018-09-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87904 2018-09-08] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-09-08] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467320 2018-09-08] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215728 2018-09-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381560 2018-09-08] (AVAST Software)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [34280 2018-02-01] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [846624 2018-02-01] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [59096 2018-02-01] (COMODO)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-09-01] (REALiX(tm))
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [123544 2018-02-01] (COMODO)
R3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2012-07-16] (JMicron Technology Corp.)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-09-09] (Malwarebytes)
R1 SpyEmrg; C:\Windows\System32\Drivers\spyemrg.sys [17240 2011-04-21] (NETGATE Technologies s.r.o.)
S3 SpyEmrgAccess; C:\Windows\System32\Drivers\spyemrg_access.sys [24408 2011-04-21] (NETGATE Technologies s.r.o.)
S3 SpyEmrgGuard; C:\Windows\System32\Drivers\spyemrg_guard.sys [19768 2015-03-09] (NETGATE Technologies s.r.o.)
R3 SzCCID; C:\Windows\System32\DRIVERS\SzCCID.sys [39936 2013-09-24] (Generic)
R3 ALSysIO; \??\C:\Users\Bape\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 SPUVCbv; System32\Drivers\SPUVCbv_x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-09-09 21:30 - 2018-09-09 21:31 - 000013769 _____ C:\Users\Bape\Desktop\FRST.txt
2018-09-09 21:29 - 2018-09-09 21:29 - 000000000 ____D C:\Users\Bape\Desktop\FRST-OlderVersion
2018-09-09 19:06 - 2018-09-09 19:06 - 000000000 __SHD C:\Users\Bape\Desktop\0K, this directory is for Ransomware detection (just leave it here)
2018-09-09 19:05 - 2018-09-09 19:06 - 000000000 ___HD C:\Users\Bape\Documents\Eversions7
2018-09-09 19:05 - 2018-09-09 19:05 - 000524957 ____N C:\Users\Akb1abtt\violatecoarseprovides.xlsx
2018-09-09 19:05 - 2018-09-09 19:05 - 000504230 ____N C:\Users\Qmbphau\wars.testament.cholesterol.xlsx
2018-09-09 19:05 - 2018-09-09 19:05 - 000220596 ____N C:\Users\Qmbphau\decisions unite office until.mdb
2018-09-09 19:05 - 2018-09-09 19:05 - 000216273 ____N C:\Users\Akb1abtt\loosen_hired_larger.mdb
2018-09-09 19:05 - 2018-09-09 19:05 - 000070188 ____N C:\Users\Akb1abtt\wounded.ultimate.able.controversy.xls
2018-09-09 19:05 - 2018-09-09 19:05 - 000062867 ____N C:\Users\Qmbphau\cycle_violate_literature_manager.xls
2018-09-09 19:05 - 2018-09-09 19:05 - 000057439 ____N C:\Users\Akb1abtt\academy night.pem
2018-09-09 19:05 - 2018-09-09 19:05 - 000052126 ____N C:\Users\Qmbphau\handed-tremendous-practical-studied.pem
2018-09-09 19:05 - 2018-09-09 19:05 - 000036502 ____N C:\Users\Akb1abtt\subdivide-remaining-allowing-placed.txt
2018-09-09 19:05 - 2018-09-09 19:05 - 000021818 ____N C:\Users\Akb1abtt\front.found.formula.sql
2018-09-09 19:05 - 2018-09-09 19:05 - 000020281 ____N C:\Users\Qmbphau\jealousconfidentialbeautystumbled.txt
2018-09-09 19:05 - 2018-09-09 19:05 - 000012552 ____N C:\Users\Qmbphau\platform-elsewhere-cotton-die.sql
2018-09-09 19:05 - 2018-09-09 19:05 - 000000000 ___HD C:\Users\Qmbphau
2018-09-09 19:05 - 2018-09-09 19:05 - 000000000 ___HD C:\Users\Bape\Documents\Ardates39
2018-09-09 19:05 - 2018-09-09 19:05 - 000000000 ___HD C:\Users\Akb1abtt
2018-09-09 19:05 - 2018-09-09 19:05 - 000000000 ____D C:\xstore144
2018-09-09 19:05 - 2018-09-09 19:05 - 000000000 ____D C:\Acdate160
2018-09-09 18:28 - 2018-09-09 18:28 - 002940488 _____ (KRyLack Software) C:\Users\Bape\Downloads\hashtool.exe
2018-09-09 17:52 - 2018-09-09 17:52 - 003596264 _____ () C:\Users\Bape\Downloads\Windows ISO Downloader.exe
2018-09-09 13:45 - 2018-09-09 16:43 - 000288708 _____ C:\Windows\ntbtlog.txt
2018-09-09 02:42 - 2018-09-09 21:30 - 000000000 ____D C:\FRST
2018-09-09 02:42 - 2018-09-09 21:29 - 002413568 _____ (Farbar) C:\Users\Bape\Desktop\FRST64.exe
2018-09-09 02:16 - 2018-09-09 13:48 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-09-09 01:52 - 2018-09-09 01:54 - 000000000 ____D C:\AdwCleaner
2018-09-09 01:52 - 2018-09-09 01:52 - 007571152 _____ (Malwarebytes) C:\Users\Bape\Downloads\adwcleaner_7.2.3.1.exe
2018-09-09 00:46 - 2018-09-09 00:46 - 000388608 _____ (Trend Micro Inc.) C:\Users\Bape\Downloads\hijackthis.exe
2018-09-08 23:29 - 2018-09-08 23:29 - 000379608 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-09-08 18:57 - 2018-09-08 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2018-09-08 18:57 - 2018-09-08 18:57 - 000000000 ____D C:\Program Files (x86)\LAV Filters
2018-08-31 17:16 - 2018-08-22 00:15 - 000396992 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-08-31 17:16 - 2018-08-21 21:57 - 000350232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-08-31 17:16 - 2018-08-21 13:29 - 025745920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-08-31 17:16 - 2018-08-21 13:20 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-08-31 17:16 - 2018-08-21 13:20 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-08-31 17:16 - 2018-08-21 13:09 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-08-31 17:16 - 2018-08-21 13:08 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-08-31 17:16 - 2018-08-21 13:07 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-08-31 17:16 - 2018-08-21 13:07 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-08-31 17:16 - 2018-08-21 13:07 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-08-31 17:16 - 2018-08-21 13:07 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-08-31 17:16 - 2018-08-21 13:01 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-08-31 17:16 - 2018-08-21 13:00 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-08-31 17:16 - 2018-08-21 12:58 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-08-31 17:16 - 2018-08-21 12:57 - 005777408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-08-31 17:16 - 2018-08-21 12:57 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-08-31 17:16 - 2018-08-21 12:57 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-08-31 17:16 - 2018-08-21 12:57 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-08-31 17:16 - 2018-08-21 12:57 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-08-31 17:16 - 2018-08-21 12:52 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-08-31 17:16 - 2018-08-21 12:49 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-08-31 17:16 - 2018-08-21 12:44 - 020286976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-08-31 17:16 - 2018-08-21 12:43 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-08-31 17:16 - 2018-08-21 12:42 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-08-31 17:16 - 2018-08-21 12:42 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-08-31 17:16 - 2018-08-21 12:39 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-08-31 17:16 - 2018-08-21 12:39 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-08-31 17:16 - 2018-08-21 12:38 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-08-31 17:16 - 2018-08-21 12:37 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-08-31 17:16 - 2018-08-21 12:36 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-08-31 17:16 - 2018-08-21 12:28 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-08-31 17:16 - 2018-08-21 12:28 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-08-31 17:16 - 2018-08-21 12:28 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-08-31 17:16 - 2018-08-21 12:27 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-08-31 17:16 - 2018-08-21 12:27 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-08-31 17:16 - 2018-08-21 12:27 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-08-31 17:16 - 2018-08-21 12:25 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-08-31 17:16 - 2018-08-21 12:25 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-08-31 17:16 - 2018-08-21 12:24 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-08-31 17:16 - 2018-08-21 12:23 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-08-31 17:16 - 2018-08-21 12:23 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-08-31 17:16 - 2018-08-21 12:23 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-08-31 17:16 - 2018-08-21 12:22 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-08-31 17:16 - 2018-08-21 12:21 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-08-31 17:16 - 2018-08-21 12:20 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-08-31 17:16 - 2018-08-21 12:20 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-08-31 17:16 - 2018-08-21 12:20 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-08-31 17:16 - 2018-08-21 12:20 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-08-31 17:16 - 2018-08-21 12:16 - 004510720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-08-31 17:16 - 2018-08-21 12:13 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-08-31 17:16 - 2018-08-21 12:10 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-08-31 17:16 - 2018-08-21 12:09 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-08-31 17:16 - 2018-08-21 12:09 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-08-31 17:16 - 2018-08-21 12:07 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-08-31 17:16 - 2018-08-21 12:06 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-08-31 17:16 - 2018-08-21 12:06 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-08-31 17:16 - 2018-08-21 12:05 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-08-31 17:16 - 2018-08-21 12:05 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-08-31 17:16 - 2018-08-21 12:04 - 001554944 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-08-31 17:16 - 2018-08-21 12:03 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-08-31 17:16 - 2018-08-21 12:00 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-08-31 17:16 - 2018-08-21 11:58 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-08-31 17:16 - 2018-08-21 11:58 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-08-31 17:16 - 2018-08-21 11:58 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-08-31 17:16 - 2018-08-21 11:52 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-08-31 17:16 - 2018-08-21 11:45 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-08-31 17:16 - 2018-08-21 11:41 - 001329152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-08-31 17:16 - 2018-08-21 11:39 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-08-31 17:16 - 2018-06-27 15:20 - 000419648 _____ C:\Windows\SysWOW64\locale.nls
2018-08-31 17:16 - 2018-06-27 15:19 - 000419648 _____ C:\Windows\system32\locale.nls
2018-08-24 01:32 - 2018-08-24 01:32 - 113983488 _____ (Oracle Corporation) C:\Users\Bape\Downloads\VirtualBox-5.2.18-124319-Win.exe
2018-08-21 20:46 - 2018-08-21 20:46 - 000000000 ____D C:\Users\Bape\Documents\Ashampoo Burning Studio FREE
2018-08-16 11:50 - 2018-09-06 20:56 - 000000000 ___RD C:\Users\Bape\Documents\DŮLEŽITÉ
2018-08-15 12:10 - 2018-08-02 05:05 - 005553760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-08-15 12:10 - 2018-08-02 04:45 - 004054192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-08-15 12:10 - 2018-08-02 04:16 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2018-08-15 12:10 - 2018-08-02 04:16 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2018-08-15 12:10 - 2018-08-02 04:16 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2018-08-15 12:10 - 2018-08-02 04:16 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2018-08-15 12:10 - 2018-07-13 21:19 - 001894080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-08-15 12:10 - 2018-06-29 17:55 - 000695808 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2018-08-15 12:10 - 2018-06-29 17:55 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2018-08-15 12:10 - 2018-06-29 17:55 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2018-08-15 12:10 - 2018-06-29 17:14 - 000516096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2018-08-15 12:09 - 2018-08-03 17:55 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2018-08-15 12:09 - 2018-08-03 17:39 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2018-08-15 12:09 - 2018-08-02 05:20 - 000708272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-08-15 12:09 - 2018-08-02 05:18 - 000096864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-08-15 12:09 - 2018-08-02 05:07 - 000263776 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-08-15 12:09 - 2018-08-02 05:06 - 000156256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-08-15 12:09 - 2018-08-02 05:02 - 001665320 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-08-15 12:09 - 2018-08-02 05:00 - 000633080 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-08-15 12:09 - 2018-08-02 04:59 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-08-15 12:09 - 2018-08-02 04:59 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 001461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-08-15 12:09 - 2018-08-02 04:58 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:45 - 003959984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-08-15 12:09 - 2018-08-02 04:43 - 001315512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-08-15 12:09 - 2018-08-02 04:42 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-08-15 12:09 - 2018-08-02 04:42 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-08-15 12:09 - 2018-08-02 04:42 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-08-15 12:09 - 2018-08-02 04:42 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-08-15 12:09 - 2018-08-02 04:42 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-08-15 12:09 - 2018-08-02 04:42 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-08-15 12:09 - 2018-08-02 04:41 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:26 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-08-15 12:09 - 2018-08-02 04:26 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-08-15 12:09 - 2018-08-02 04:26 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-08-15 12:09 - 2018-08-02 04:25 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-08-15 12:09 - 2018-08-02 04:22 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-08-15 12:09 - 2018-08-02 04:21 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-08-15 12:09 - 2018-08-02 04:21 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-08-15 12:09 - 2018-08-02 04:17 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-08-15 12:09 - 2018-08-02 04:17 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-08-15 12:09 - 2018-08-02 04:17 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-08-15 12:09 - 2018-08-02 04:16 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-08-15 12:09 - 2018-08-02 04:16 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-08-15 12:09 - 2018-08-02 04:16 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-08-15 12:09 - 2018-08-02 04:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-08-15 12:09 - 2018-08-02 04:11 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-08-15 12:09 - 2018-08-02 04:11 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-08-15 12:09 - 2018-08-02 04:11 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-08-15 12:09 - 2018-08-02 04:10 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-08-15 12:09 - 2018-08-02 04:10 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:10 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-08-15 12:09 - 2018-08-02 04:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-08-15 12:09 - 2018-07-13 21:19 - 000377024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-08-15 12:09 - 2018-07-13 21:19 - 000287936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-08-15 12:09 - 2018-07-08 18:08 - 000383680 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-08-15 12:09 - 2018-07-08 18:02 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-08-15 12:09 - 2018-07-08 18:02 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-08-15 12:09 - 2018-07-08 18:02 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-08-15 12:09 - 2018-07-08 18:01 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-08-15 12:09 - 2018-07-08 18:01 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-08-15 12:09 - 2018-07-08 17:47 - 000309440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-08-15 12:09 - 2018-07-08 17:42 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-08-15 12:09 - 2018-07-08 17:42 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-08-15 12:09 - 2018-07-08 17:41 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-08-15 12:09 - 2018-07-08 17:41 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-08-15 12:09 - 2018-07-08 17:13 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-08-15 12:09 - 2018-07-07 17:24 - 003226112 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-08-15 12:09 - 2018-07-06 18:09 - 000947904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-08-15 12:09 - 2018-07-06 18:03 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2018-08-15 12:09 - 2018-07-06 18:03 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2018-08-15 12:09 - 2018-07-06 17:48 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2018-08-15 12:09 - 2018-07-06 17:48 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2018-08-15 12:09 - 2018-06-29 17:55 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2018-08-15 12:09 - 2018-06-29 17:40 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
2018-08-15 12:09 - 2018-06-29 17:09 - 000034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
2018-08-15 12:09 - 2018-06-27 18:01 - 000114368 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2018-08-15 12:09 - 2018-06-27 17:55 - 003246592 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-08-15 12:09 - 2018-06-27 17:55 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2018-08-15 12:09 - 2018-06-27 17:55 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-08-15 12:09 - 2018-06-27 17:55 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2018-08-15 12:09 - 2018-06-27 17:54 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-08-15 12:09 - 2018-06-27 17:54 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-08-15 12:09 - 2018-06-27 17:43 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-08-15 12:09 - 2018-06-27 17:42 - 002366464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-08-15 12:09 - 2018-06-27 17:42 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2018-08-15 12:09 - 2018-06-27 17:42 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2018-08-15 12:09 - 2018-06-27 17:41 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-08-15 12:09 - 2018-06-27 17:21 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2018-08-15 12:09 - 2018-06-27 17:16 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-08-15 12:09 - 2018-06-21 05:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-08-15 12:09 - 2018-06-21 05:09 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-08-12 00:30 - 2018-08-12 00:30 - 000001038 _____ C:\Users\Bape\Desktop\GREEN BUTTON.lnk
2018-08-12 00:30 - 2018-08-12 00:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbatim GREEN BUTTON
2018-08-12 00:30 - 2018-08-12 00:30 - 000000000 ____D C:\Program Files (x86)\Verbatim GREEN BUTTON
2018-08-12 00:26 - 2018-08-12 00:26 - 000853231 _____ C:\Users\Bape\Downloads\Verbatim Green Button 1.49.zip
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-09-09 19:13 - 2009-07-14 06:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-09-09 19:13 - 2009-07-14 06:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-09-09 19:07 - 2016-11-18 15:18 - 000000000 ____D C:\Users\Bape\AppData\LocalLow\Mozilla
2018-09-09 19:04 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-09 18:59 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-09-09 17:58 - 2016-02-03 20:25 - 000001905 _____ C:\Users\Bape\Desktop\poznámky.txt
2018-09-09 17:26 - 2016-09-01 12:50 - 000000000 ____D C:\Users\Bape\AppData\Roaming\Hewlett-Packard
2018-09-09 17:20 - 2016-08-26 22:33 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2018-09-09 17:13 - 2016-09-01 12:44 - 000000000 ____D C:\swsetup
2018-09-09 01:15 - 2009-07-14 06:45 - 000300136 _____ C:\Windows\system32\FNTCACHE.DAT
2018-09-09 01:14 - 2016-08-31 12:24 - 000000000 ____D C:\Users\Bape\AppData\Roaming\uTorrent
2018-09-09 01:06 - 2016-08-26 21:58 - 000065152 _____ C:\Users\Bape\AppData\Local\GDIPFONTCACHEV1.DAT
2018-09-08 23:53 - 2016-08-27 19:30 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-09-08 23:29 - 2018-02-01 18:21 - 000467320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000381560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000215728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000199712 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000163272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000111864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000087904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-09-08 23:29 - 2018-02-01 18:21 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-09-08 23:29 - 2017-02-21 15:04 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-09-08 23:28 - 2018-02-01 18:21 - 001027720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-09-08 23:28 - 2018-02-01 18:21 - 000346664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbloga.sys
2018-09-08 23:28 - 2018-02-01 18:21 - 000229384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2018-09-08 23:28 - 2018-02-01 18:21 - 000201320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsha.sys
2018-09-08 23:28 - 2018-02-01 18:21 - 000059568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniva.sys
2018-09-08 23:28 - 2016-08-27 04:01 - 000000000 ____D C:\Users\Bape\AppData\Roaming\KeePass
2018-09-08 20:09 - 2016-09-01 13:55 - 000003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForBape
2018-09-08 20:09 - 2016-09-01 13:55 - 000000328 _____ C:\Windows\Tasks\HPCeeScheduleForBape.job
2018-09-08 19:20 - 2018-03-24 16:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVToolNix
2018-09-08 19:20 - 2018-03-24 16:22 - 000000000 ____D C:\Program Files\MKVToolNix
2018-09-07 12:14 - 2018-08-09 16:04 - 000001310 _____ C:\Users\Public\Desktop\Skype.lnk
2018-09-07 12:14 - 2018-06-12 17:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-09-07 10:41 - 2011-04-12 10:34 - 000754786 _____ C:\Windows\system32\perfh005.dat
2018-09-07 10:41 - 2011-04-12 10:34 - 000194622 _____ C:\Windows\system32\perfc005.dat
2018-09-07 10:41 - 2009-07-14 07:13 - 001724512 _____ C:\Windows\system32\PerfStringBackup.INI
2018-09-07 10:11 - 2017-06-30 14:33 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-09-07 10:11 - 2016-08-27 03:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-09-06 23:38 - 2016-12-31 16:00 - 000000000 ____D C:\Users\Bape\AppData\Roaming\avidemux
2018-09-06 19:25 - 2016-08-27 21:53 - 000000000 ____D C:\Users\Bape\AppData\Roaming\vlc
2018-09-06 18:07 - 2018-07-10 13:02 - 000000000 ____D C:\Users\Bape\Documents\Bandicam
2018-09-06 17:35 - 2017-11-17 19:03 - 000000000 ____D C:\Users\Bape\Downloads\Piráti
2018-09-03 22:33 - 2018-06-11 10:50 - 000000000 ____D C:\Users\Bape\temp
2018-09-02 15:24 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-09-01 20:06 - 2016-09-22 12:49 - 000000000 ____D C:\Users\Bape\AppData\Roaming\Kuki
2018-08-31 17:20 - 2016-08-27 02:32 - 001700162 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-08-25 14:57 - 2009-07-14 07:08 - 000032568 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-08-22 20:05 - 2017-12-01 19:48 - 000001047 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-08-22 20:05 - 2017-12-01 19:48 - 000001035 _____ C:\Users\Public\Desktop\TeamViewer 13.lnk
2018-08-15 22:31 - 2016-08-27 18:06 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-08-12 20:59 - 2017-07-27 10:18 - 000003168 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1050733673-4065207461-4260594767-1000
2018-08-12 20:59 - 2016-08-27 21:25 - 000002143 _____ C:\Users\Bape\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2018-08-12 00:28 - 2018-08-07 19:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verbatim
2018-08-12 00:28 - 2018-08-07 19:36 - 000000000 ____D C:\Program Files (x86)\Verbatim
==================== Files in the root of some directories =======
2017-07-10 13:12 - 2017-07-10 13:12 - 000000836 _____ () C:\Users\Bape\AppData\Local\recently-used.xbel
2016-11-04 23:19 - 2016-11-04 23:26 - 000007605 _____ () C:\Users\Bape\AppData\Local\resmon.resmoncfg
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-09-09 07:02
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09.09.2018
Ran by Bape (09-09-2018 21:31:50)
Running from C:\Users\Bape\Desktop
Windows 7 Professional Service Pack 1 (X64) (2016-08-26 19:45:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1050733673-4065207461-4260594767-500 - Administrator - Disabled)
Bape (S-1-5-21-1050733673-4065207461-4260594767-1000 - Administrator - Enabled) => C:\Users\Bape
Guest (S-1-5-21-1050733673-4065207461-4260594767-501 - Limited - Disabled)
moni (S-1-5-21-1050733673-4065207461-4260594767-1001 - Limited - Enabled) => C:\Users\moni
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Advanced Protection (Enabled - Up to date) {B3D9AA4C-EA4D-5505-9BB0-0420509C2BBB}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: COMODO Firewall (Enabled) {3083CA8D-8618-5BD3-8A5F-9667D5C8267D}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (HKLM\...\{55D55008-E5F6-47D6-B16F-B2A40D4D145F}) (Version: 6.2.1 - Hewlett-Packard) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
7-Zip 18.05 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1805-000001000000}) (Version: 18.05.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 18.011.20058 - Adobe Systems Incorporated)
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\{F24F876B-7D71-4BD6-88E9-614D3BB84238}) (Version: 1.7.38.0 - Alcor Micro Corp.) Hidden
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.38.0 - Alcor Micro Corp.)
AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.6.2349 - AVAST Software)
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.16.161230 - )
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.6 - GPL Public release.)
Backup and Sync from Google (HKLM\...\{AEFBDB5B-899F-4AE6-B789-BA56A652A476}) (Version: 3.42.9858.3671 - Google, Inc.)
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.1.1.1073 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.00.1.51 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon TS3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3100_series) (Version: 1.00 - Canon Inc.)
COMODO Firewall (HKLM\...\{EC925096-5689-4BE3-B675-D16D0394B4A0}) (Version: 10.2.0.6526 - COMODO Security Solutions Inc.)
Core Temp 1.2 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.2 - Alcpu)
Cybereason RansomFree 2.4.2.0 (HKLM-x32\...\{2A15E1FB-A1F5-4F11-B033-D8DB1E37C1E9}) (Version: 2.4.2.0 - Cybereason Inc.)
GENERAL V 8.1.3.1 (HKLM-x32\...\GENERAL V 8.1.3.1) (Version: - )
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HandBrake 1.0.7 (HKLM-x32\...\HandBrake) (Version: 1.0.7 - )
HAPPYneuron Brain Jogging (HKLM-x32\...\CD_EntrainementCerebral_CZ) (Version: - )
HP 3D DriveGuard (HKLM\...\{95518B59-44D9-430A-B12C-A582F18F5752}) (Version: 4.1.16.1 - Hewlett-Packard Company)
HP System Default Settings (HKLM-x32\...\{EE5F1911-EA95-4F1A-AF97-495972F5032D}) (Version: 2.4.3.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6433.0 - IDT)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 19.2 - Intel)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{BEE86606-EFB5-4353-9F34-29E0C59CDCFA}) (Version: 15.2.0.0284 - Intel Corporation)
Java 8 Update 171 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Java 8 Update 172 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180172F0}) (Version: 8.0.1720.11 - Oracle Corporation)
Java 8 Update 181 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180181F0}) (Version: 8.0.1810.13 - Oracle Corporation)
JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.72.4 - JMicron Technology Corp.)
KeePass Password Safe 2.35 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.35 - Dominik Reichl)
Kuki (HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\Kuki) (Version: 20160616.000 - SMART Comp. a.s.)
LAV Filters 0.72 (HKLM-x32\...\lavfilters_is1) (Version: 0.72 - Hendrik Leppkes)
Malwarebytes verze 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
Microsoft .NET Framework 4.7.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\OneDriveSetup.exe) (Version: 18.131.0701.0007 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MKVToolNix 26.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 26.0.0 - Moritz Bunkus)
Mozilla Firefox 62.0 (x64 cs) (HKLM\...\Mozilla Firefox 62.0 (x64 cs)) (Version: 62.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 62.0.0.6816 - Mozilla)
MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)
Mumble 1.2.19 (HKLM-x32\...\{97B3A307-D592-4888-9439-7FB9FBF8F1C3}) (Version: 1.2.19 - Thorvald Natvig)
OpenOffice 4.1.2 (HKLM-x32\...\{69D27D4C-36CE-4CB2-A290-C38B0A990955}) (Version: 4.12.9782 - Apache Software Foundation)
OpenShot Video Editor verze 2.4.0 (HKLM\...\{4BB0DCDC-BC24-49EC-8937-72956C33A470}_is1) (Version: 2.4.0 - OpenShot Studios, LLC)
PhotoFiltre 7 (HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\PhotoFiltre 7) (Version: - )
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.1.0 - Canon Inc.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Shotcut (HKLM-x32\...\Shotcut) (Version: - )
Skype verze 8.29 (HKLM-x32\...\Skype_is1) (Version: 8.29 - Skype Technologies S.A.)
Splash (HKLM-x32\...\Mirillis Splash) (Version: 2.0.4 - Mirillis)
Stratagus (HKLM-x32\...\Stratagus) (Version: 2.3.0 - )
Subtitle Edit 3.4.13 (HKLM-x32\...\SubtitleEdit_is1) (Version: 3.4.13.0 - Nikse)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.23 - Synaptics Incorporated)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.14327 - TeamViewer)
Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)
Verbatim GREEN BUTTON 1.49 (HKLM-x32\...\Verbatim GREEN BUTTON_is1) (Version: - Verbatim)
Verbatim Product Update 1.06 (HKLM-x32\...\Verbatim Product Update_is1) (Version: - Verbatim)
VIP Access SDK (1.0.1.5) (HKLM-x32\...\VIP Access SDK) (Version: 1.0.1.5 - Symantec Inc.)
Vivaldi (HKLM-x32\...\Vivaldi) (Version: 1.15.1147.47 - Vivaldi)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
Wargus (HKLM-x32\...\Wargus) (Version: 2.3 - )
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{F92064F6-BDE8-46FC-A19F-4E12D311BE3A}) (Version: 1.0.30 - Microsoft Corporation)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.4) (Version: 1.3.4 - Xvid Team)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-09-08] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-09-08] (AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-09-08] (AVAST Software)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-03-13] (COMODO)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-03-13] (COMODO)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-09-08] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-03] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiacm64.dll [2015-08-04] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-09-08] (AVAST Software)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-03-13] (COMODO)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-03] (Malwarebytes)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1B9E32B5-CCEC-42EB-B8F4-AAC8B4196FC5} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-03-13] (COMODO)
Task: {1F338257-C2D7-40DE-9F69-004760F80B29} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2018-03-13] (COMODO)
Task: {1FC7E135-C4A4-4FDA-A26A-ED7F676EFBF8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
Task: {3197AF77-459F-418D-A9C2-4587B06DB47B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
Task: {4874B55D-7180-4FA3-AC60-9902A857AE9A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-08-19] (AVAST Software)
Task: {494B4D57-A4A0-4FC5-89A7-8DD91C0B847E} - System32\Tasks\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\HPUCDSilent.exe" -d "F:\HP Soft\SWSETUP\SP59885"
Task: {4E6ECB7A-723D-449D-80AD-E8FF492B783F} - System32\Tasks\{ED21BF16-45AF-4A72-9714-4664A263AE39} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\Chicony\setup.exe" -d "F:\HP Soft\SWSETUP\SP59885\Chicony"
Task: {5230D0A3-E7ED-4A88-A584-E7A3C2895F34} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-09-08] (AVAST Software)
Task: {5B8CEEB8-5A3C-44FA-AFBC-7A73F4B94E04} - System32\Tasks\SafeZone scheduled Autoupdate 1472299585 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {98A3E896-82AE-4277-9A86-42A3E4699A60} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-03-13] (COMODO)
Task: {99E5340E-981D-41AC-B384-53AB8ADBECBC} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-03-13] (COMODO)
Task: {9A2CAF72-545D-456D-83CB-CAB827914D47} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2018-03-13] (COMODO)
Task: {9B8A9E5C-6AAB-42A6-B145-6486D179B67E} - System32\Tasks\Core Temp Autostart Bape => C:\Program Files\Core Temp\Core Temp.exe [2017-09-19] (ALCPU)
Task: {B158AB10-E11C-459B-AB56-AEDCB9F912AA} - System32\Tasks\Cybereason RansomFree Autostart => C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFree.exe [2017-11-20] (Cybereason)
Task: {B7756F70-EFC1-49E0-865D-C7550B7F95B5} - System32\Tasks\Cybereason RansomFree Keepalive => C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFree.exe [2017-11-20] (Cybereason)
Task: {C18EF710-FCAA-429E-9A81-0A2023AD0299} - System32\Tasks\{991635FF-73B7-4A97-B5B1-34B531EE63F5} => C:\Windows\system32\pcalua.exe -a C:\Users\Bape\Downloads\sp52437.exe -d C:\Users\Bape\Downloads
Task: {D71778E3-0E01-4261-8BCB-32BCD8B6864D} - System32\Tasks\{4E3D8F2E-ED2A-45ED-91B2-EED0731BF53E} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.27.0.101/cs/abandoninstall?source=lightinstaller&page=tsMain
Task: {E4B0B24C-19FC-4363-B0AD-550F2E698A67} - System32\Tasks\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F} => C:\Windows\system32\pcalua.exe -a C:\Users\Bape\Downloads\sp59885.exe -d C:\Users\Bape\Downloads
Task: {EB4E3302-5CDD-499D-8BB8-3AC672D1654A} - System32\Tasks\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985} => C:\Windows\system32\pcalua.exe -a "D:\Instalace\HP Soft\SWSETUP\sp81892.exe" -d "D:\Instalace\HP Soft\SWSETUP"
Task: {ED7AFBCA-563E-4F01-A504-7607703C89E5} - System32\Tasks\HPCeeScheduleForBape => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-09-23] (HP Development Company, L.P.)
Task: {F07FA95B-A7D1-4F59-B038-2CB0F64E6C55} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {FBA28A69-500E-486A-9C2B-41AA4EC1B9CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\HPCeeScheduleForBape.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-07-10 07:25 - 2018-03-13 19:17 - 000107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2016-07-10 07:26 - 2018-03-13 19:17 - 000244416 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2013-07-19 14:09 - 2013-07-19 14:09 - 000099096 _____ () C:\Windows\system32\SCPwrSetSvr.exe
2018-09-08 23:28 - 2018-09-08 23:28 - 000703192 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2013-08-05 08:15 - 2013-08-05 08:15 - 000070712 _____ () C:\Windows\system32\bdmpega64.acm
2018-09-08 23:28 - 2018-09-08 23:28 - 000575704 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-09-08 23:29 - 2018-09-08 23:29 - 000896216 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-09-08 23:28 - 2018-09-08 23:28 - 000541400 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-09-08 23:28 - 2018-09-08 23:28 - 000986840 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2018-09-09 19:06 - 2018-09-09 19:06 - 005692560 _____ () C:\Program Files\AVAST Software\Avast\defs\18090904\algo.dll
2018-03-12 11:44 - 2018-03-12 11:44 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\accelerometerdll.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdpcom64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiadlxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiapfxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalcl64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticaldd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalrt64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atidemgy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atieclxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atiesrxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atig6pxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atig6txx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimpc64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimuixx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atio6axx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atitmm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiu9p64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd6a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clinfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\coinst_15.20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DelayAPO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\e1cmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HPMDPCoInst12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hpservice.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NETwNc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NETwNr64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NicInstC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenVideo64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OVDecode64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PROUnstl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SynTPCo19.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAnimation.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtpUS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdpcom32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiadlxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalcl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticaldd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticfx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atidxx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atigktxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atimpc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atioglxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiu9pag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdva.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiuxpag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenVideo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OVDecode.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SynCom.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SynTPCom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Accelerometer.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ati2erec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmdag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmpag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\e1c62x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hpdskflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\NETwNs64.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\SynTP.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\logotyp_na_bile_transparentni_pozadi.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\unetbootin-windows-625.exe:$CmdZnID [26]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\1-se.com -> 1-se.com
There are 11402 more sites.
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2018-09-09 00:47 - 000000851 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Bape\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 83.240.0.135 - 83.240.0.215
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
mpsdrv => Firewall Service is not running.
MpsSvc => Firewall Service is not running.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: IObitUnSvr => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupreg: f.lux => "C:\Users\Bape\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{545E7112-A8A8-4BCB-81F4-A13994A873DC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CF5BD543-561C-4999-984D-00FACD69B7B9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{74C44C13-78CB-4C8E-8EDB-90D41B2A6D2E}C:\users\bape\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\bape\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{66ED80CE-6457-4B43-B923-16FC0AB0B2E4}C:\users\bape\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\bape\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{9DFF00B2-53CA-47C8-B677-2EA546C08618}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FDE19334-09FF-433B-BFFD-76BBAEB7708E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4C2946D4-4C17-4D4A-9D1D-04C7233B5B6D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{54AC3A73-D378-4874-9AD9-A029F84F43B0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{DACE189A-FB56-4E97-9B17-16DFB1C39179}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3A68E6B0-6C7D-4BDF-B7E2-F533DDE557FD}] => (Allow) C:\Program Files (x86)\Kuki\addons\skin.netboxkuki\proxies\proxy2.exe
FirewallRules: [{E8AD4026-2AD9-45AE-99EC-75139634D1E9}] => (Allow) C:\Program Files (x86)\Kuki\addons\skin.netboxkuki\proxies\proxy2.exe
==================== Restore Points =========================
27-08-2018 22:58:17 Naplánovaný kontrolní bod
31-08-2018 17:17:19 Windows Update
09-09-2018 07:09:38 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices =============
Name: Intel(R) Centrino(R) Advanced-N 6205
Description: Intel(R) Centrino(R) Advanced-N 6205
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: NETwNs64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Zařízení Bluetooth (síť PAN)
Description: Zařízení Bluetooth (síť PAN)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthPan
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Sériový port sběrnice PCI
Description: Sériový port sběrnice PCI
Class Guid:
Manufacturer:
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/09/2018 07:05:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/09/2018 05:24:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program Explorer.EXE verze 6.1.7601.23537 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.
ID procesu: 4d8
Čas spuštění: 01d4484e395c362d
Čas ukončení: 60000
Cesta k aplikaci: C:\Windows\Explorer.EXE
ID hlášení: 1bac3445-b444-11e8-b428-101f74fbe7cb
Error: (09/09/2018 04:46:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/09/2018 01:47:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/09/2018 06:33:14 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/09/2018 01:56:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/09/2018 01:16:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/08/2018 03:44:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
System errors:
=============
Error: (09/09/2018 07:06:17 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: Nový server médií nebyl inicializován, protože u funkce CoCreateInstance(CLSID_UPnPRegistrar) došlo k chybě 0x80070422. Ověřte, zda je spuštěná služba UPnPHost a zda je správně nainstalovaná součást systému Windows UPnPHost.
Error: (09/09/2018 07:06:17 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: Nový server médií nebyl inicializován, protože u funkce CoCreateInstance(CLSID_UPnPRegistrar) došlo k chybě 0x80070422. Ověřte, zda je spuštěná služba UPnPHost a zda je správně nainstalovaná součást systému Windows UPnPHost.
Error: (09/09/2018 07:06:13 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Naslouchací proces domácí skupiny ukončena s chybou %%-2147023143 = Pro mapovač koncových bodů nejsou k dispozici další koncové body., specifickou pro službu.
Error: (09/09/2018 05:03:25 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Naslouchací proces domácí skupiny ukončena s chybou %%-2147023143 = Pro mapovač koncových bodů nejsou k dispozici další koncové body., specifickou pro službu.
Error: (09/09/2018 05:03:23 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error: (09/09/2018 05:03:16 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error: (09/09/2018 04:48:38 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: Nový server médií nebyl inicializován, protože u funkce CoCreateInstance(CLSID_UPnPRegistrar) došlo k chybě 0x80070422. Ověřte, zda je spuštěná služba UPnPHost a zda je správně nainstalovaná součást systému Windows UPnPHost.
Error: (09/09/2018 04:48:38 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: Nový server médií nebyl inicializován, protože u funkce CoCreateInstance(CLSID_UPnPRegistrar) došlo k chybě 0x80070422. Ověřte, zda je spuštěná služba UPnPHost a zda je správně nainstalovaná součást systému Windows UPnPHost.
CodeIntegrity:
===================================
Date: 2018-09-09 21:31:57.881
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:31:48.405
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:30:59.962
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:30:57.892
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:30:55.869
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:30:53.905
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:30:51.893
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-09-09 21:30:49.928
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\AESTAR64.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
Percentage of memory in use: 51%
Total physical RAM: 8142.36 MB
Available physical RAM: 3963.27 MB
Total Virtual: 20353.5 MB
Available Virtual: 15142.46 MB
==================== Drives ================================
Drive a: () (Network) (Total:116.36 GB) (Free:19.3 GB) NTFS
Drive c: () (Fixed) (Total:116.36 GB) (Free:19.3 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: () (Fixed) (Total:180.9 GB) (Free:20.87 GB) NTFS
Drive e: (Bape 104) (CDROM) (Total:4.14 GB) (Free:0 GB) UDF
Drive f: (Verbatim) (Fixed) (Total:1863 GB) (Free:1194.01 GB) exFAT
Drive h: (Expansion Drive) (Fixed) (Total:1863.01 GB) (Free:279.3 GB) NTFS
\\?\Volume{62c59243-4086-11e7-b992-806e6f6e6963}\ () (Fixed) (Total:0.82 GB) (Free:0.81 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 8B37352D)
Partition 1: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=844 MB) - (Type=27)
Partition 3: (Not Active) - (Size=180.9 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: BB8F31F9)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 1863 GB) (Disk ID: B2144158)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problém s háčky u n, d, t.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s háčky u n, d, t.
Zdravím!
Můžete mít problém, zvaný keylogger, ale může to být způsobeno instalací nějakého programu, nebo systémová chyba. Spusťte tuto utilitu:
Můžete mít problém, zvaný keylogger, ale může to být způsobeno instalací nějakého programu, nebo systémová chyba. Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s háčky u n, d, t.
To už jsem udělal a nic. Moc nevěřím že tam mám keylogger, mám tam Avast, projíždím pravidelně MBAM, mám firewall Comodo se zapnutým HIPS, vše aktuální. Neklikám na vše. Porno už taky nesjíždím - jsem ženatej. 
Pomozte prosím co dál.
Pomozte prosím co dál.-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s háčky u n, d, t.
Teď bych chtěl vidět log z ADW.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s háčky u n, d, t.
Odinstaloval jsem zatím Javu a Cyberreason ransom free a beze změny.
Je to tu:
# -------------------------------
# Malwarebytes AdwCleaner 7.2.3.1
# -------------------------------
# Build: 09-03-2018
# Database: 2018-09-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-10-2018
# Duration: 00:00:25
# OS: Windows 7 Professional
# Scanned: 41904
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
AdwCleaner[S00].txt - [1749 octets] - [09/09/2018 01:52:50]
AdwCleaner[C00].txt - [1823 octets] - [09/09/2018 01:54:15]
AdwCleaner[S01].txt - [1379 octets] - [09/09/2018 01:58:29]
AdwCleaner[S02].txt - [1440 octets] - [09/09/2018 02:01:51]
AdwCleaner[S03].txt - [1501 octets] - [09/09/2018 16:21:08]
AdwCleaner[S04].txt - [1562 octets] - [09/09/2018 22:54:16]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S05].txt ##########
Je to tu:
# -------------------------------
# Malwarebytes AdwCleaner 7.2.3.1
# -------------------------------
# Build: 09-03-2018
# Database: 2018-09-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-10-2018
# Duration: 00:00:25
# OS: Windows 7 Professional
# Scanned: 41904
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
AdwCleaner[S00].txt - [1749 octets] - [09/09/2018 01:52:50]
AdwCleaner[C00].txt - [1823 octets] - [09/09/2018 01:54:15]
AdwCleaner[S01].txt - [1379 octets] - [09/09/2018 01:58:29]
AdwCleaner[S02].txt - [1440 octets] - [09/09/2018 02:01:51]
AdwCleaner[S03].txt - [1501 octets] - [09/09/2018 16:21:08]
AdwCleaner[S04].txt - [1562 octets] - [09/09/2018 22:54:16]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S05].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s háčky u n, d, t.
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: G - G:\AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {6d02c475-70e8-11e6-908f-100ba928b780} - G:\setup.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {7457a9ae-5f29-11e8-acc5-101f74fbe7cb} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {94ac21a8-67cf-11e8-b9a1-101f74fbe7cb} - F:\LG_PC_Programs.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {9e086d2c-3b43-11e8-9670-101f74fbe7cb} - I:\HiSuiteDownLoader.exe
BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
Task: {494B4D57-A4A0-4FC5-89A7-8DD91C0B847E} - System32\Tasks\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\HPUCDSilent.exe" -d "F:\HP Soft\SWSETUP\SP59885"
Task: {4E6ECB7A-723D-449D-80AD-E8FF492B783F} - System32\Tasks\{ED21BF16-45AF-4A72-9714-4664A263AE39} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\Chicony\setup.exe" -d "F:\HP Soft\SWSETUP\SP59885\Chicony"
Task: {E4B0B24C-19FC-4363-B0AD-550F2E698A67} - System32\Tasks\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F} => C:\Windows\system32\pcalua.exe -a C:\Users\Bape\Downloads\sp59885.exe -d C:\Users\Bape\Downloads
Task: {EB4E3302-5CDD-499D-8BB8-3AC672D1654A} - System32\Tasks\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985} => C:\Windows\system32\pcalua.exe -a "D:\Instalace\HP Soft\SWSETUP\sp81892.exe" -d "D:\Instalace\HP Soft\SWSETUP"
Task: {3197AF77-459F-418D-A9C2-4587B06DB47B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
Task: {FBA28A69-500E-486A-9C2B-41AA4EC1B9CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\accelerometerdll.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdpcom64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiadlxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiapfxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalcl64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticaldd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalrt64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atidemgy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atieclxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atiesrxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atig6pxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atig6txx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimpc64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimuixx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atio6axx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atitmm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiu9p64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd6a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clinfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\coinst_15.20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DelayAPO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\e1cmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HPMDPCoInst12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hpservice.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NETwNc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NETwNr64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NicInstC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenVideo64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OVDecode64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PROUnstl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SynTPCo19.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAnimation.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtpUS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdpcom32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiadlxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalcl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticaldd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticfx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atidxx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atigktxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atimpc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atioglxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiu9pag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdva.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiuxpag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenVideo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OVDecode.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SynCom.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SynTPCom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Accelerometer.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ati2erec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmdag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmpag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\e1c62x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hpdskflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\NETwNs64.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\SynTP.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\logotyp_na_bile_transparentni_pozadi.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\unetbootin-windows-625.exe:$CmdZnID [26]
EmptyTemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s háčky u n, d, t.
Žádná změna.
Fix result of Farbar Recovery Scan Tool (x64) Version: 09.09.2018
Ran by Bape (10-09-2018 15:09:41) Run:1
Running from C:\Users\Bape\Desktop
Loaded Profiles: Bape (Available Profiles: Bape & moni)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: G - G:\AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {6d02c475-70e8-11e6-908f-100ba928b780} - G:\setup.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {7457a9ae-5f29-11e8-acc5-101f74fbe7cb} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {94ac21a8-67cf-11e8-b9a1-101f74fbe7cb} - F:\LG_PC_Programs.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {9e086d2c-3b43-11e8-9670-101f74fbe7cb} - I:\HiSuiteDownLoader.exe
BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
Task: {494B4D57-A4A0-4FC5-89A7-8DD91C0B847E} - System32\Tasks\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\HPUCDSilent.exe" -d "F:\HP Soft\SWSETUP\SP59885"
Task: {4E6ECB7A-723D-449D-80AD-E8FF492B783F} - System32\Tasks\{ED21BF16-45AF-4A72-9714-4664A263AE39} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\Chicony\setup.exe" -d "F:\HP Soft\SWSETUP\SP59885\Chicony"
Task: {E4B0B24C-19FC-4363-B0AD-550F2E698A67} - System32\Tasks\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F} => C:\Windows\system32\pcalua.exe -a C:\Users\Bape\Downloads\sp59885.exe -d C:\Users\Bape\Downloads
Task: {EB4E3302-5CDD-499D-8BB8-3AC672D1654A} - System32\Tasks\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985} => C:\Windows\system32\pcalua.exe -a "D:\Instalace\HP Soft\SWSETUP\sp81892.exe" -d "D:\Instalace\HP Soft\SWSETUP"
Task: {3197AF77-459F-418D-A9C2-4587B06DB47B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
Task: {FBA28A69-500E-486A-9C2B-41AA4EC1B9CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\accelerometerdll.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdpcom64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiadlxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiapfxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalcl64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticaldd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalrt64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atidemgy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atieclxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atiesrxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atig6pxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atig6txx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimpc64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimuixx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atio6axx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atitmm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiu9p64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd6a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clinfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\coinst_15.20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DelayAPO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\e1cmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HPMDPCoInst12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hpservice.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NETwNc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NETwNr64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NicInstC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenVideo64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OVDecode64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PROUnstl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SynTPCo19.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAnimation.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtpUS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdpcom32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiadlxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalcl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticaldd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticfx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atidxx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atigktxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atimpc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atioglxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiu9pag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdva.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiuxpag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenVideo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OVDecode.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SynCom.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SynTPCom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Accelerometer.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ati2erec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmdag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmpag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\e1c62x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hpdskflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\NETwNs64.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\SynTP.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\logotyp_na_bile_transparentni_pozadi.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\unetbootin-windows-625.exe:$CmdZnID [26]
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" => removed successfully
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G" => removed successfully
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d02c475-70e8-11e6-908f-100ba928b780}" => removed successfully
HKLM\Software\Classes\CLSID\{6d02c475-70e8-11e6-908f-100ba928b780} => not found
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7457a9ae-5f29-11e8-acc5-101f74fbe7cb}" => removed successfully
HKLM\Software\Classes\CLSID\{7457a9ae-5f29-11e8-acc5-101f74fbe7cb} => not found
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{94ac21a8-67cf-11e8-b9a1-101f74fbe7cb}" => removed successfully
HKLM\Software\Classes\CLSID\{94ac21a8-67cf-11e8-b9a1-101f74fbe7cb} => not found
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9e086d2c-3b43-11e8-9670-101f74fbe7cb}" => removed successfully
HKLM\Software\Classes\CLSID\{9e086d2c-3b43-11e8-9670-101f74fbe7cb} => not found
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" => removed successfully
HKLM\Software\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{494B4D57-A4A0-4FC5-89A7-8DD91C0B847E}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{494B4D57-A4A0-4FC5-89A7-8DD91C0B847E}" => removed successfully
C:\Windows\System32\Tasks\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E6ECB7A-723D-449D-80AD-E8FF492B783F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E6ECB7A-723D-449D-80AD-E8FF492B783F}" => removed successfully
C:\Windows\System32\Tasks\{ED21BF16-45AF-4A72-9714-4664A263AE39} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ED21BF16-45AF-4A72-9714-4664A263AE39}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4B0B24C-19FC-4363-B0AD-550F2E698A67}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4B0B24C-19FC-4363-B0AD-550F2E698A67}" => removed successfully
C:\Windows\System32\Tasks\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EB4E3302-5CDD-499D-8BB8-3AC672D1654A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB4E3302-5CDD-499D-8BB8-3AC672D1654A}" => removed successfully
C:\Windows\System32\Tasks\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3197AF77-459F-418D-A9C2-4587B06DB47B}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3197AF77-459F-418D-A9C2-4587B06DB47B}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBA28A69-500E-486A-9C2B-41AA4EC1B9CE}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBA28A69-500E-486A-9C2B-41AA4EC1B9CE}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
C:\Windows\explorer.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\accelerometerdll.DLL => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\adsmsext.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\amdpcom64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiadlxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiapfxx.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\aticalcl64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\aticaldd64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\aticalrt64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atidemgy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atieclxx.exe => ":$CMDTCID" ADS could not remove.
C:\Windows\system32\atiesrxx.exe => ":$CMDTCID" ADS could not remove.
C:\Windows\system32\atig6pxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atig6txx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiglpxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atimpc64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atimuixx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atio6axx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atitmm64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiu9p64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiumd64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiumd6a.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\audiodg.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\AudioEng.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\AUDIOKSE.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\AudioSes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\audiosrv.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\bcdedit.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\blackbox.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\chajei.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\cintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\clinfo.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\coinst_15.20.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\cryptsp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\cryptui.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\davclnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\DelayAPO.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\diagtrack.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\drmmgrtn.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\drmv2clt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\e1cmsg.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\EncDump.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\evr.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\HPMDPCoInst12.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\hpservice.exe => ":$CMDTCID" ADS could not remove.
C:\Windows\system32\IMJP10.IME => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\IMJP10K.DLL => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\imkr80.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\input.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\mfplat.dll => ":$CmdTcID" ADS could not remove.
"C:\Windows\system32\MRT.exe" => ":$CmdTcID" ADS not found.
C:\Windows\system32\msnetobj.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\msscp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\msxml3.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\msxml3r.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\NETwNc64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\NETwNr64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\NicInstC.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\nlsbres.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\OpenCL.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\OpenVideo64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\OVDecode64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcadm.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcaevts.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcalua.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcasvc.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcawrk.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\phon.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\poqexec.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\PROUnstl.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\qdvd.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\qintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\quick.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\scavengeui.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\SynTPCo19.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\tintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\UIAnimation.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\user32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\UtcResources.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WebClnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\wmdrmsdk.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WpdMtp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WpdMtpUS.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WSManHTTPConfig.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WSManMigrationPlugin.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmAuto.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\wsmplpxy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\wsmprovhost.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmRes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmSvc.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmWmiPl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\adsmsext.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\amdocl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\amdpcom32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiadlxy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticalcl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticaldd.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticalrt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticfx32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atidxx32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atigktxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiglpxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atimpc32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atioglxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiu9pag.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiumdag.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiumdva.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiuxpag.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\AudioEng.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\AUDIOKSE.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\AudioSes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\blackbox.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\chajei.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\cintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\cryptsp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\cryptui.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\D3DCompiler_43.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\D3DX9_43.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\davclnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\drmmgrtn.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\drmv2clt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\evr.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\explorer.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\IMJP10.IME => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\IMJP10K.DLL => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\imkr80.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\input.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\mfplat.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msnetobj.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msscp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msxml3.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msxml3r.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\nlsbres.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\OpenCL.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\OpenVideo.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\OVDecode.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\phon.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\pintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\poqexec.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\qdvd.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\qintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\quick.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\SynCom.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\SynTPCom.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\tintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\UIAnimation.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\user32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WebClnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\wmdrmsdk.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WSManHTTPConfig.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WSManMigrationPlugin.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmAuto.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\wsmplpxy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\wsmprovhost.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmRes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmSvc.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmWmiPl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\Accelerometer.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\ati2erec.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\atikmdag.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\atikmpag.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\bowser.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\e1c62x64.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\hpdskflt.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\mrxdav.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\NETwNs64.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\PEAuth.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\SynTP.sys => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Desktop\evlist_uzivatelP.doc => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Desktop\evlist_uzivatelP.doc => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Desktop\MediaCreationTool.exe => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Desktop\MediaCreationTool.exe => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\Documents.zip => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Downloads\Documents.zip => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\logotyp_na_bile_transparentni_pozadi.png => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\memostation-setup-cs.exe => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Downloads\memostation-setup-cs.exe => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\unetbootin-windows-625.exe => ":$CmdZnID" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 12582912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 36379087 B
Java, Flash, Steam htmlcache => 519 B
Windows/system/drivers => 37503941 B
Edge => 0 B
Chrome => 0 B
Firefox => 1065620847 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 66228 B
systemprofile32 => 66228 B
LocalService => 0 B
NetworkService => 66228 B
Bape => 595228425 B
moni => 4908070 B
RecycleBin => 7642838 B
EmptyTemp: => 1.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:12:18 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 09.09.2018
Ran by Bape (10-09-2018 15:09:41) Run:1
Running from C:\Users\Bape\Desktop
Loaded Profiles: Bape (Available Profiles: Bape & moni)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: G - G:\AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {6d02c475-70e8-11e6-908f-100ba928b780} - G:\setup.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {7457a9ae-5f29-11e8-acc5-101f74fbe7cb} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {94ac21a8-67cf-11e8-b9a1-101f74fbe7cb} - F:\LG_PC_Programs.exe
HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\...\MountPoints2: {9e086d2c-3b43-11e8-9670-101f74fbe7cb} - I:\HiSuiteDownLoader.exe
BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
Task: {494B4D57-A4A0-4FC5-89A7-8DD91C0B847E} - System32\Tasks\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\HPUCDSilent.exe" -d "F:\HP Soft\SWSETUP\SP59885"
Task: {4E6ECB7A-723D-449D-80AD-E8FF492B783F} - System32\Tasks\{ED21BF16-45AF-4A72-9714-4664A263AE39} => C:\Windows\system32\pcalua.exe -a "F:\HP Soft\SWSETUP\SP59885\Chicony\setup.exe" -d "F:\HP Soft\SWSETUP\SP59885\Chicony"
Task: {E4B0B24C-19FC-4363-B0AD-550F2E698A67} - System32\Tasks\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F} => C:\Windows\system32\pcalua.exe -a C:\Users\Bape\Downloads\sp59885.exe -d C:\Users\Bape\Downloads
Task: {EB4E3302-5CDD-499D-8BB8-3AC672D1654A} - System32\Tasks\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985} => C:\Windows\system32\pcalua.exe -a "D:\Instalace\HP Soft\SWSETUP\sp81892.exe" -d "D:\Instalace\HP Soft\SWSETUP"
Task: {3197AF77-459F-418D-A9C2-4587B06DB47B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
Task: {FBA28A69-500E-486A-9C2B-41AA4EC1B9CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-27] (Google Inc.)
AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\accelerometerdll.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdpcom64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiadlxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiapfxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalcl64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticaldd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aticalrt64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atidemgy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atieclxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atiesrxx.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\atig6pxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atig6txx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimpc64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atimuixx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atio6axx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atitmm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiu9p64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atiumd6a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clinfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\coinst_15.20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DelayAPO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\e1cmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HPMDPCoInst12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hpservice.exe:$CMDTCID [0]
AlternateDataStreams: C:\Windows\system32\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NETwNc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NETwNr64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NicInstC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenVideo64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OVDecode64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PROUnstl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SynTPCo19.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAnimation.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtpUS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdpcom32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiadlxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalcl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticaldd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticalrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aticfx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atidxx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atigktxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiglpxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atimpc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atioglxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiu9pag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiumdva.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiuxpag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chajei.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10.IME:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IMJP10K.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imkr80.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenCL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenVideo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OVDecode.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\phon.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quick.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SynCom.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SynTPCom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tintlgnt.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Accelerometer.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ati2erec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmdag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\atikmpag.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bowser.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\e1c62x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hpdskflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\NETwNs64.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\SynTP.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\evlist_uzivatelP.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Desktop\MediaCreationTool.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\Documents.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\logotyp_na_bile_transparentni_pozadi.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Bape\Downloads\memostation-setup-cs.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdTcID [64]
AlternateDataStreams: C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Bape\Downloads\unetbootin-windows-625.exe:$CmdZnID [26]
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" => removed successfully
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G" => removed successfully
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d02c475-70e8-11e6-908f-100ba928b780}" => removed successfully
HKLM\Software\Classes\CLSID\{6d02c475-70e8-11e6-908f-100ba928b780} => not found
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7457a9ae-5f29-11e8-acc5-101f74fbe7cb}" => removed successfully
HKLM\Software\Classes\CLSID\{7457a9ae-5f29-11e8-acc5-101f74fbe7cb} => not found
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{94ac21a8-67cf-11e8-b9a1-101f74fbe7cb}" => removed successfully
HKLM\Software\Classes\CLSID\{94ac21a8-67cf-11e8-b9a1-101f74fbe7cb} => not found
"HKU\S-1-5-21-1050733673-4065207461-4260594767-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9e086d2c-3b43-11e8-9670-101f74fbe7cb}" => removed successfully
HKLM\Software\Classes\CLSID\{9e086d2c-3b43-11e8-9670-101f74fbe7cb} => not found
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" => removed successfully
HKLM\Software\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{494B4D57-A4A0-4FC5-89A7-8DD91C0B847E}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{494B4D57-A4A0-4FC5-89A7-8DD91C0B847E}" => removed successfully
C:\Windows\System32\Tasks\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F4D8E215-A75B-4D9F-AA0D-DCCEFA72D733}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E6ECB7A-723D-449D-80AD-E8FF492B783F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E6ECB7A-723D-449D-80AD-E8FF492B783F}" => removed successfully
C:\Windows\System32\Tasks\{ED21BF16-45AF-4A72-9714-4664A263AE39} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ED21BF16-45AF-4A72-9714-4664A263AE39}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4B0B24C-19FC-4363-B0AD-550F2E698A67}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4B0B24C-19FC-4363-B0AD-550F2E698A67}" => removed successfully
C:\Windows\System32\Tasks\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ADCB3DBC-CE94-45B5-8D84-5FEA1086E89F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EB4E3302-5CDD-499D-8BB8-3AC672D1654A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB4E3302-5CDD-499D-8BB8-3AC672D1654A}" => removed successfully
C:\Windows\System32\Tasks\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B0F8770D-DD11-4F48-BE51-C4AB73DEB985}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3197AF77-459F-418D-A9C2-4587B06DB47B}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3197AF77-459F-418D-A9C2-4587B06DB47B}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBA28A69-500E-486A-9C2B-41AA4EC1B9CE}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBA28A69-500E-486A-9C2B-41AA4EC1B9CE}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
C:\Windows\explorer.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\accelerometerdll.DLL => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\adsmsext.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\amdpcom64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiadlxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiapfxx.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\aticalcl64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\aticaldd64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\aticalrt64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atidemgy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atieclxx.exe => ":$CMDTCID" ADS could not remove.
C:\Windows\system32\atiesrxx.exe => ":$CMDTCID" ADS could not remove.
C:\Windows\system32\atig6pxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atig6txx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiglpxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atimpc64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atimuixx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atio6axx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atitmm64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiu9p64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiumd64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\atiumd6a.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\audiodg.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\AudioEng.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\AUDIOKSE.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\AudioSes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\audiosrv.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\bcdedit.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\blackbox.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\chajei.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\cintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\clinfo.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\coinst_15.20.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\cryptsp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\cryptui.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\davclnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\DelayAPO.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\diagtrack.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\drmmgrtn.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\drmv2clt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\e1cmsg.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\EncDump.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\evr.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\HPMDPCoInst12.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\hpservice.exe => ":$CMDTCID" ADS could not remove.
C:\Windows\system32\IMJP10.IME => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\IMJP10K.DLL => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\imkr80.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\input.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\mfplat.dll => ":$CmdTcID" ADS could not remove.
"C:\Windows\system32\MRT.exe" => ":$CmdTcID" ADS not found.
C:\Windows\system32\msnetobj.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\msscp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\msxml3.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\msxml3r.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\NETwNc64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\NETwNr64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\NicInstC.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\nlsbres.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\OpenCL.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\OpenVideo64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\OVDecode64.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcadm.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcaevts.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcalua.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcasvc.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pcawrk.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\phon.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\pintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\poqexec.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\PROUnstl.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\qdvd.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\qintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\quick.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\scavengeui.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\SynTPCo19.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\tintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\UIAnimation.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\user32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\UtcResources.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WebClnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\wmdrmsdk.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WpdMtp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WpdMtpUS.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WSManHTTPConfig.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WSManMigrationPlugin.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmAuto.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\wsmplpxy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\wsmprovhost.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmRes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmSvc.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\WsmWmiPl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\adsmsext.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\amdocl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\amdpcom32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiadlxy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticalcl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticaldd.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticalrt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\aticfx32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atidxx32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atigktxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiglpxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atimpc32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atioglxx.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiu9pag.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiumdag.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiumdva.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\atiuxpag.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\AudioEng.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\AUDIOKSE.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\AudioSes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\blackbox.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\chajei.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\cintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\cryptsp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\cryptui.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\D3DCompiler_43.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\D3DX9_43.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\davclnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\drmmgrtn.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\drmv2clt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\evr.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\explorer.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\IMJP10.IME => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\IMJP10K.DLL => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\imkr80.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\input.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\mfplat.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msnetobj.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msscp.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msxml3.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\msxml3r.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\nlsbres.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\OpenCL.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\OpenVideo.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\OVDecode.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\phon.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\pintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\poqexec.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\qdvd.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\qintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\quick.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\SynCom.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\SynTPCom.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\tintlgnt.ime => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\UIAnimation.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\user32.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WebClnt.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\wmdrmsdk.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WSManHTTPConfig.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WSManMigrationPlugin.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmAuto.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\wsmplpxy.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\wsmprovhost.exe => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmRes.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmSvc.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\SysWOW64\WsmWmiPl.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\Accelerometer.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\ati2erec.dll => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\atikmdag.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\atikmpag.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\bowser.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\e1c62x64.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\hpdskflt.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\mrxdav.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\NETwNs64.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\PEAuth.sys => ":$CmdTcID" ADS could not remove.
C:\Windows\system32\Drivers\SynTP.sys => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Desktop\evlist_uzivatelP.doc => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Desktop\evlist_uzivatelP.doc => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Desktop\MediaCreationTool.exe => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Desktop\MediaCreationTool.exe => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\Documents.zip => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Downloads\Documents.zip => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\logotyp_na_bile_transparentni_pozadi.png => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\memostation-setup-cs.exe => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Downloads\memostation-setup-cs.exe => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi => ":$CmdTcID" ADS could not remove.
C:\Users\Bape\Downloads\pytel-blech--62'-DVBT_CZ-(romin).avi => ":$CmdZnID" ADS removed successfully
C:\Users\Bape\Downloads\unetbootin-windows-625.exe => ":$CmdZnID" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 12582912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 36379087 B
Java, Flash, Steam htmlcache => 519 B
Windows/system/drivers => 37503941 B
Edge => 0 B
Chrome => 0 B
Firefox => 1065620847 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 66228 B
systemprofile32 => 66228 B
LocalService => 0 B
NetworkService => 66228 B
Bape => 595228425 B
moni => 4908070 B
RecycleBin => 7642838 B
EmptyTemp: => 1.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:12:18 ====
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s háčky u n, d, t.
Ještě udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte. Opravdu to vypadá na systémový problém.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s háčky u n, d, t.
Mám to. Snad je to ono.
Malwarebytes
www.malwarebytes.com
-Podrobnosti logovacího souboru-
Datum skenování: 10.09.18
Čas skenování: 16:24
Logovací soubor: 3af2d95f-b505-11e8-badd-101f74fbe7cb.json
Správce: Ano
-Informace o softwaru-
Verze: 3.5.1.2522
Verze komponentů: 1.0.365
Aktualizovat verzi balíku komponent: 1.0.6749
Licence: Bezplatný
-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: Bape-HP\Bape
-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 263041
Zjištěné hrozby: 0
(Nebyly zjištěny žádné škodlivé položky)
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 9 min, 0 sek
-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat
-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)
Modul: 0
(Nebyly zjištěny žádné škodlivé položky)
Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)
Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)
Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)
Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)
Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)
Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)
Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)
WMI: 0
(Nebyly zjištěny žádné škodlivé položky)
(end)
Malwarebytes
www.malwarebytes.com
-Podrobnosti logovacího souboru-
Datum skenování: 10.09.18
Čas skenování: 16:24
Logovací soubor: 3af2d95f-b505-11e8-badd-101f74fbe7cb.json
Správce: Ano
-Informace o softwaru-
Verze: 3.5.1.2522
Verze komponentů: 1.0.365
Aktualizovat verzi balíku komponent: 1.0.6749
Licence: Bezplatný
-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: Bape-HP\Bape
-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 263041
Zjištěné hrozby: 0
(Nebyly zjištěny žádné škodlivé položky)
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 9 min, 0 sek
-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat
-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)
Modul: 0
(Nebyly zjištěny žádné škodlivé položky)
Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)
Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)
Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)
Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)
Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)
Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)
Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)
WMI: 0
(Nebyly zjištěny žádné škodlivé položky)
(end)
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s háčky u n, d, t.
Ano, je. Tušil jsem, že toto nebude problém malware. Máte 2 možnosti:
1. Obnovu systému k datu, kda korketně fungoval.
2. Opravu systému pomocí utility WinRepair: http://www.stahuj.cz/utility_a_ostatni/ ... ws-repair/ .
1. Obnovu systému k datu, kda korketně fungoval.
2. Opravu systému pomocí utility WinRepair: http://www.stahuj.cz/utility_a_ostatni/ ... ws-repair/ .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s háčky u n, d, t.
Zkusím WinRepair. Obnovu systému dělat nebudu, to to radši smáznu celý. Takže havět tam žádná není?
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s háčky u n, d, t.
Není. PC je čistý. Obnova není nic jiného, než přepsání systémových souborů a registry do stavu k danému datu. Přijdete jen o všchny instalace, které jste instaloval mezi oním datem a dneškem, nastavení a aktualizace systému. Vaše soubory zůstanou zachovány.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?