Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o konrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Bruno39
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 01 led 2016 14:43

Prosím o konrolu logu

#1 Příspěvek od Bruno39 »

Prosím o konrolu logu lebo uz 2krat mi ukardli steam ucet
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.01.2019 01
Ran by Bruno (administrator) on DESKTOP-KN6KRSK (20-01-2019 12:21:59)
Running from C:\Users\Bruno\Desktop
Loaded Profiles: Bruno (Available Profiles: Bruno)
Platform: Windows 10 Enterprise LTSC 2019 Version 1809 17763.253 (X64) Language: Čeština (Česká republika)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\DriverStore\FileRepository\c0337288.inf_amd64_3c3211f00f323cb5\B337205\atiesrxx.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdredline.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\c0337288.inf_amd64_3c3211f00f323cb5\B337205\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
() E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe
(Microsoft Corporation) C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SoftEther VPN Client UI Helper] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5258552 2018-11-17] (SoftEther VPN Project at University of Tsukuba, Japan.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5889480 2018-12-14] (LogMeIn Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3133216 2019-01-05] (Valve Corporation)
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [35184016 2019-01-10] (Epic Games, Inc.)
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [Discord] => C:\Users\Bruno\AppData\Local\Discord\app-0.0.304\Discord.exe [81747288 2019-01-15] (Discord Inc.)
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [BitTorrent] => C:\Users\Bruno\AppData\Roaming\BitTorrent\BitTorrent.exe [1746368 2018-11-17] (BitTorrent Inc.)
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [WallpaperEngine] => E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe [1698296 2018-12-15] ()
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [vibranceGUI] => C:\Users\Bruno\Desktop\vibranceGUI.exe [794624 2018-12-10] (juvlarN)
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Run: [FACEIT] => C:\Users\Bruno\AppData\Local\FACEITApp\update.exe [2203584 2019-01-20] ()
IFEO\SppExtComObj.exe: [Debugger] rundll32.exe SppExtComObjHook.dll,PatcherMain
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2018-11-17]
ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
Startup: C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2019-01-19]
ShortcutTarget: Twitch.lnk -> C:\Users\Bruno\AppData\Roaming\Twitch\Bin\Twitch.exe (Twitch Interactive, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{fd7bb464-5075-44c3-9abd-c63c303a5e70}: [DhcpNameServer] 192.168.31.1

Internet Explorer:
==================
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: jugn7tq7.default
FF ProfilePath: C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\jugn7tq7.default [2019-01-20]
FF Homepage: Mozilla\Firefox\Profiles\jugn7tq7.default -> hxxps://www.google.sk
FF NewTab: Mozilla\Firefox\Profiles\jugn7tq7.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__181117
FF Extension: (AdBlocker Ultimate) - C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\jugn7tq7.default\Extensions\adblockultimate@adblockultimate.net.xpi [2018-12-10]
FF Extension: (Enhanced Steam) - C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\jugn7tq7.default\Extensions\jid1-YdiFiTEkQgInxA@jetpack.xpi [2019-01-10]
FF Extension: (Touch VPN) - C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\jugn7tq7.default\Extensions\touch-vpn@anchorfree.com.xpi [2018-12-11]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\Windows\System32\DriverStore\FileRepository\c0337288.inf_amd64_3c3211f00f323cb5\B337205\atiesrxx.exe [508512 2018-12-19] (AMD)
R2 bdredline; C:\Program Files\Bitdefender Antivirus Free\bdredline.exe [2195280 2018-03-22] (Bitdefender)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8352184 2019-01-12] ()
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2018-11-16] (EasyAntiCheat Ltd)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3366344 2018-12-14] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2269504 2018-11-16] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3130184 2018-11-16] (Electronic Arts)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1293936 2018-11-15] (Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-01-10] (Microsoft Corporation)
R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5258552 2018-11-17] (SoftEther VPN Project at University of Tsukuba, Japan.)
S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [384512 2018-09-15] ()
R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [246688 2018-11-13] (Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [341136 2018-11-13] (Bitdefender)
R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [246688 2018-11-13] (Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3880120 2018-12-10] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [114208 2018-12-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [67576 2018-12-19] (Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\c0337288.inf_amd64_3c3211f00f323cb5\B337205\atikmdag.sys [52749408 2018-12-19] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\c0337288.inf_amd64_3c3211f00f323cb5\B337205\atikmpag.sys [590432 2018-12-19] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [112688 2018-11-08] (Advanced Micro Devices, Inc.)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [1423336 2018-10-29] (BitDefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [367096 2018-12-04] (Bitdefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23032 2018-04-19] (Bitdefender)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [290688 2018-12-03] (BitDefender S.R.L. Bucharest, ROMANIA)
R1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [374632 2018-11-19] (BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\Windows\System32\drivers\gzflt.sys [201000 2018-11-20] (BitDefender LLC)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2018-12-14] (LogMeIn Inc.)
R3 Neo_VPN; C:\Windows\System32\drivers\Neo6_x64_VPN.sys [37824 2018-11-17] (SoftEther Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [605696 2018-09-15] (Realtek )
R3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [8206848 2018-09-15] (Realtek Semiconductor Corporation )
R1 SeLow; C:\Windows\system32\DRIVERS\SeLow_x64.sys [50624 2018-11-17] (SoftEther Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 tap-tb-0901; C:\Windows\System32\drivers\tap-tb-0901.sys [38656 2018-07-31] (The OpenVPN Project)
R2 trufos; C:\Windows\System32\drivers\trufos.sys [610840 2018-12-07] (Bitdefender)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46680 2018-12-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [330936 2018-12-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62136 2018-12-10] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-20 12:21 - 2019-01-20 12:22 - 000012108 _____ C:\Users\Bruno\Desktop\FRST.txt
2019-01-20 12:17 - 2019-01-20 12:21 - 000000000 ____D C:\FRST
2019-01-20 12:07 - 2019-01-20 12:15 - 002427904 _____ (Farbar) C:\Users\Bruno\Desktop\FRST64.exe
2019-01-20 12:06 - 2019-01-20 12:06 - 007320272 _____ (Malwarebytes) C:\Users\Bruno\Desktop\adwcleaner_7.2.6.0.exe
2019-01-20 10:01 - 2019-01-20 10:01 - 007657592 _____ (ESET spol. s r.o.) C:\Users\Bruno\Downloads\esetonlinescanner_enu.exe
2019-01-20 10:01 - 2019-01-20 10:01 - 000000000 ____D C:\Users\Bruno\AppData\Local\ESET
2019-01-20 07:14 - 2019-01-20 07:21 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\FACEIT
2019-01-20 07:14 - 2019-01-20 07:14 - 078145312 _____ (TeamSpeak Systems GmbH) C:\Users\Bruno\Downloads\TeamSpeak3-Client-win64-3.2.3.exe
2019-01-20 07:14 - 2019-01-20 07:14 - 000002250 _____ C:\Users\Bruno\Desktop\FACEIT.lnk
2019-01-20 07:14 - 2019-01-20 07:14 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FACEIT Ltd
2019-01-20 07:14 - 2019-01-20 07:14 - 000000000 ____D C:\Users\Bruno\AppData\Local\FACEITApp
2019-01-20 05:50 - 2019-01-20 05:50 - 000000000 ____D C:\ProgramData\bdch
2019-01-19 15:07 - 2019-01-20 12:09 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\Twitch
2019-01-19 15:07 - 2019-01-19 15:07 - 000000972 _____ C:\Users\Bruno\Desktop\Twitch.lnk
2019-01-19 15:07 - 2019-01-19 15:07 - 000000958 _____ C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twitch.lnk
2019-01-19 15:07 - 2019-01-19 15:07 - 000000000 ____D C:\ProgramData\Twitch
2019-01-19 15:06 - 2019-01-19 15:07 - 087474720 _____ C:\Users\Bruno\Downloads\TwitchSetup_[usher-401747221].exe
2019-01-18 22:17 - 2019-01-18 22:18 - 000000021 _____ C:\Users\Bruno\Desktop\screens.txt
2019-01-14 19:26 - 2019-01-14 19:26 - 000001019 _____ C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk
2019-01-14 19:26 - 2019-01-14 19:26 - 000001011 _____ C:\Users\Bruno\Desktop\osu!.lnk
2019-01-14 19:25 - 2019-01-14 19:35 - 000000000 ____D C:\Users\Bruno\AppData\Local\osu!
2019-01-14 19:25 - 2019-01-14 19:25 - 000000000 ____D C:\Users\Bruno\Downloads\Localisation
2019-01-14 19:24 - 2019-01-14 19:24 - 004156096 _____ (ppy) C:\Users\Bruno\Downloads\osu!install.exe
2019-01-12 14:20 - 2019-01-12 14:20 - 000000000 ____D C:\Users\Bruno\AppData\Local\BattlEye
2019-01-12 14:11 - 2019-01-12 14:11 - 000076764 _____ C:\ProgramData\agent.update.1547298680.bdinstall.v2.bin
2019-01-12 11:51 - 2019-01-12 11:51 - 000001192 _____ C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free.lnk
2019-01-12 11:51 - 2018-04-19 21:37 - 000023032 _____ (Bitdefender) C:\Windows\system32\Drivers\bdelam.sys
2019-01-12 11:50 - 2019-01-12 11:50 - 000001207 _____ C:\Users\Public\Desktop\Bitdefender Antivirus Free.lnk
2019-01-12 11:50 - 2019-01-12 11:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free
2019-01-12 11:50 - 2019-01-12 11:50 - 000000000 ____D C:\ProgramData\Bitdefender
2019-01-12 11:50 - 2018-12-04 17:28 - 000367096 _____ (Bitdefender) C:\Windows\system32\Drivers\bddci.sys
2019-01-12 11:50 - 2018-12-03 17:06 - 000290688 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\edrsensor.sys
2019-01-12 11:50 - 2018-11-20 10:42 - 000201000 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2019-01-12 11:50 - 2018-11-19 13:10 - 000374632 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\gemma.sys
2019-01-12 11:50 - 2018-10-29 11:24 - 001423336 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\atc.sys
2019-01-12 11:49 - 2019-01-12 11:49 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\QuickScan
2019-01-12 11:49 - 2018-12-07 05:10 - 000610840 _____ (Bitdefender) C:\Windows\system32\Drivers\trufos.sys
2019-01-12 11:48 - 2019-01-20 12:21 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2019-01-12 11:47 - 2019-01-12 11:47 - 000003802 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2019-01-12 11:45 - 2019-01-12 14:11 - 000000000 ____D C:\Program Files\Bitdefender Agent
2019-01-12 11:45 - 2019-01-12 11:45 - 010372016 _____ C:\Users\Bruno\Downloads\bitdefender_online.exe
2019-01-12 11:45 - 2019-01-12 11:45 - 000103476 _____ C:\ProgramData\agent.1547289951.bdinstall.v2.bin
2019-01-12 11:45 - 2019-01-12 11:45 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2019-01-12 11:35 - 2019-01-12 11:51 - 000000000 ____D C:\Users\Bruno\Downloads\KRT CLUB 2.1.2.69 By Onhax Pk
2019-01-12 11:34 - 2019-01-12 11:34 - 014475993 _____ C:\Users\Bruno\Downloads\KRT CLUB 2.1.2.69 By Onhax Pk.rar
2019-01-12 09:49 - 2019-01-12 09:49 - 000000992 _____ C:\Users\Bruno\Downloads\hosts.txt
2019-01-12 09:42 - 2019-01-13 17:50 - 000000000 ____D C:\Program Files\Common Files\AV
2019-01-12 09:40 - 2019-01-12 09:41 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2019-01-12 09:22 - 2019-01-12 15:19 - 000000000 ____D C:\Users\Bruno\Downloads\KIS19
2019-01-12 09:09 - 2015-09-01 16:19 - 000020950 _____ C:\Users\Bruno\Downloads\csgo_text.txt
2019-01-12 08:09 - 2019-01-12 08:09 - 000000000 ____D C:\Program Files\Malwarebytes
2019-01-12 08:07 - 2019-01-12 08:56 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-01-12 06:42 - 2019-01-12 06:42 - 000000000 ____D C:\AdwCleaner
2019-01-10 19:15 - 2019-01-10 19:15 - 000001116 _____ C:\Users\Public\Desktop\OpenOffice 4.1.6.lnk
2019-01-10 19:15 - 2019-01-10 19:15 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6
2019-01-10 19:15 - 2019-01-10 19:15 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\OpenOffice
2019-01-10 19:15 - 2019-01-10 19:15 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2019-01-10 19:14 - 2019-01-10 19:14 - 000000000 ____D C:\Users\Bruno\Desktop\OpenOffice 4.1.6 (cs) Installation Files
2019-01-10 13:57 - 2019-01-10 13:57 - 002854419 _____ C:\Users\Bruno\Downloads\csgo-callouts-radar.zip
2019-01-10 07:19 - 2019-01-10 07:19 - 026806784 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 023440384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 020811776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 019024384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 012858368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 012151808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 009677352 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-01-10 07:19 - 2019-01-10 07:19 - 007857152 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 006544800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 006057984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 005440016 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-01-10 07:19 - 2019-01-10 07:19 - 003952952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 003550592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 003380224 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 003338328 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 003270144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002986352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002929152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002777432 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002626360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-01-10 07:19 - 2019-01-10 07:19 - 002594872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002469648 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002437552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002323696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002275896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002186752 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001641616 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001616384 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001602560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001388032 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001255736 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-01-10 07:19 - 2019-01-10 07:19 - 001212416 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001201136 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 001058848 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-01-10 07:19 - 2019-01-10 07:19 - 001050936 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-01-10 07:19 - 2019-01-10 07:19 - 000998912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000735232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000570368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000448000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000387384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000178696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-01-10 07:19 - 2019-01-10 07:19 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000140808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2019-01-10 07:19 - 2019-01-10 07:19 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintWorkflowService.dll
2019-01-10 07:19 - 2019-01-10 07:19 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2019-01-10 07:19 - 2019-01-10 07:19 - 000047112 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-01-10 07:19 - 2019-01-10 07:19 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-01-09 18:07 - 2019-01-09 18:08 - 000840413 _____ C:\Users\Bruno\Desktop\Vojtech Mihálik prezentacia.pptm
2019-01-09 16:22 - 2019-01-09 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2019-01-09 16:22 - 2019-01-09 16:22 - 000000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2019-01-09 16:22 - 2019-01-09 16:22 - 000000000 ____D C:\Windows\SHELLNEW
2019-01-09 16:22 - 2019-01-09 16:22 - 000000000 ____D C:\Windows\PCHEALTH
2019-01-09 16:22 - 2019-01-09 16:22 - 000000000 ____D C:\Program Files\Microsoft Office
2019-01-09 16:22 - 2019-01-09 16:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2019-01-09 16:22 - 2019-01-09 16:22 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2019-01-09 16:21 - 2019-01-09 16:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-01-09 16:21 - 2019-01-09 16:21 - 000000000 __RHD C:\MSOCache
2019-01-09 16:21 - 2019-01-09 16:21 - 000000000 ____D C:\Users\Bruno\AppData\Local\Microsoft Help
2019-01-09 16:17 - 2019-01-09 16:19 - 000000000 ____D C:\Users\Bruno\Downloads\Microsoft powerpoint
2019-01-07 13:22 - 2019-01-07 13:22 - 000000023 _____ C:\Users\Bruno\Downloads\Counter Strike Global Offensive Steam 52.txt
2019-01-07 06:58 - 2019-01-07 06:58 - 006082499 _____ C:\Users\Bruno\Downloads\dai_alfa.zip
2019-01-06 15:39 - 2017-05-14 11:04 - 000000000 ____D C:\Users\Bruno\Downloads\2016 Rossa - Ridna zemľa ( CD 2 )
2019-01-06 15:35 - 2014-01-05 11:16 - 000000000 ____D C:\Users\Bruno\Downloads\ROSSA - Uno - ludovky vychod new 2013
2019-01-06 09:49 - 2019-01-06 09:49 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\TunnelBear
2019-01-06 09:49 - 2019-01-06 09:49 - 000000000 ____D C:\Users\Bruno\AppData\Local\IsolatedStorage
2019-01-06 09:31 - 2019-01-06 09:44 - 000000000 ____D C:\Program Files (x86)\VyprVPN
2019-01-04 22:19 - 2019-01-04 22:19 - 000007861 _____ C:\Users\Bruno\Downloads\funplay.jpeg
2018-12-28 21:54 - 2018-12-28 22:59 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\obs-studio
2018-12-28 21:54 - 2018-12-28 21:54 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2018-12-28 21:54 - 2018-12-28 21:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2018-12-28 21:54 - 2018-12-28 21:54 - 000000000 ____D C:\Program Files\obs-studio
2018-12-28 12:32 - 2018-12-28 12:32 - 000011700 _____ C:\Users\Bruno\Downloads\Q3279WG5B_D65.icm
2018-12-26 20:21 - 2018-12-26 20:21 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\vibranceGUI
2018-12-26 20:21 - 2018-12-10 19:29 - 000794624 _____ (juvlarN) C:\Users\Bruno\Desktop\vibranceGUI.exe
2018-12-25 10:11 - 2018-12-25 10:13 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\audacity
2018-12-25 10:11 - 2018-12-25 10:11 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2018-12-25 10:11 - 2018-12-25 10:11 - 000001076 _____ C:\Users\Public\Desktop\Audacity.lnk
2018-12-25 10:11 - 2018-12-25 10:11 - 000000000 ____D C:\Users\Bruno\AppData\Local\Audacity
2018-12-25 10:11 - 2018-12-25 10:11 - 000000000 ____D C:\Program Files (x86)\Audacity
2018-12-23 21:42 - 2018-12-23 21:42 - 000044896 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tapvyprvpn.sys
2018-12-23 21:42 - 2018-12-23 21:42 - 000036496 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tap0901.sys
2018-12-22 14:17 - 2018-12-22 14:17 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\TownOfSalem
2018-12-22 14:12 - 2018-12-22 14:12 - 000000222 _____ C:\Users\Bruno\Desktop\Town of Salem.url
2018-12-22 11:21 - 2018-12-22 11:21 - 000019696 _____ (EasyAntiCheat Oy) C:\Windows\system32\eac_usermode_270061471175634.dll
2018-12-21 22:44 - 2018-12-21 22:44 - 000000000 ____D C:\Users\Bruno\Desktop\DMS.Prepacte.official.2018.320.kbps.MP3-luk366
2018-12-21 16:26 - 2018-12-21 16:37 - 000000186 _____ C:\Users\Bruno\Desktop\info ku acc.txt
2018-12-21 12:08 - 2019-01-06 15:11 - 000000000 ____D C:\Users\Bruno\Downloads\hudba

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-20 12:21 - 2018-11-16 19:18 - 000000000 ____D C:\ProgramData\Package Cache
2019-01-20 12:18 - 2018-11-16 19:52 - 000000000 ____D C:\Users\Bruno\AppData\LocalLow\Mozilla
2019-01-20 12:15 - 2018-11-16 19:17 - 000000000 ____D C:\AMD
2019-01-20 12:06 - 2018-11-16 19:23 - 000004210 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7362245D-3FE2-47C7-9D52-DFBCC5B3E989}
2019-01-20 11:44 - 2018-11-16 18:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-01-20 11:44 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-01-20 11:04 - 2018-11-16 19:43 - 000000836 _____ C:\Users\Bruno\Desktop\bruno.txt
2019-01-20 10:00 - 2018-11-19 13:18 - 000000000 ____D C:\Users\Bruno\AppData\Local\CrashDumps
2019-01-20 09:47 - 2018-11-16 20:13 - 000000000 ____D C:\Program Files (x86)\Steam
2019-01-20 07:14 - 2018-11-16 21:56 - 000000000 ____D C:\Users\Bruno\AppData\Local\SquirrelTemp
2019-01-20 07:14 - 2018-11-16 19:32 - 000000000 ____D C:\Users\Bruno\AppData\Local\D3DSCache
2019-01-20 05:43 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-01-19 17:18 - 2018-11-16 21:56 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\discord
2019-01-19 14:12 - 2018-11-17 07:53 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\BitTorrent
2019-01-19 13:57 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-01-19 13:46 - 2018-12-16 08:35 - 000003112 _____ C:\Windows\System32\Tasks\AMDLinkUpdate
2019-01-18 05:11 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-01-16 18:59 - 2018-11-16 21:56 - 000002233 _____ C:\Users\Bruno\Desktop\Discord.lnk
2019-01-16 18:59 - 2018-11-16 21:56 - 000000000 ____D C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2019-01-16 18:59 - 2018-11-16 21:56 - 000000000 ____D C:\Users\Bruno\AppData\Local\Discord
2019-01-15 20:05 - 2018-11-16 19:56 - 000000000 ____D C:\Users\Bruno\AppData\Local\Ubisoft Game Launcher
2019-01-14 06:34 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-01-13 22:19 - 2018-11-16 19:17 - 000000000 ____D C:\Users\Bruno
2019-01-13 17:57 - 2018-11-16 19:07 - 001693636 _____ C:\Windows\system32\PerfStringBackup.INI
2019-01-13 17:57 - 2018-09-15 18:33 - 000716902 _____ C:\Windows\system32\perfh005.dat
2019-01-13 17:57 - 2018-09-15 18:33 - 000144982 _____ C:\Windows\system32\perfc005.dat
2019-01-13 17:55 - 2018-12-19 16:38 - 000000000 ____D C:\Users\Bruno\AppData\Local\LogMeIn Hamachi
2019-01-13 17:52 - 2018-11-17 11:04 - 000000000 ____D C:\Program Files\SoftEther VPN Client
2019-01-13 17:51 - 2018-11-16 18:57 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-01-12 11:51 - 2018-09-15 08:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-01-12 11:43 - 2018-11-16 19:52 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-01-12 11:43 - 2018-11-16 19:17 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2019-01-12 11:43 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\BBI
2019-01-12 06:51 - 2018-11-16 18:57 - 000341496 _____ C:\Windows\system32\FNTCACHE.DAT
2019-01-12 06:50 - 2018-11-16 19:52 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-01-10 09:59 - 2018-11-16 19:52 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-01-10 09:21 - 2018-09-15 18:35 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-01-10 09:21 - 2018-09-15 18:35 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-01-10 09:21 - 2018-09-15 18:35 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-01-10 09:21 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-01-10 07:21 - 2018-11-16 19:44 - 000000000 ____D C:\Windows\system32\MRT
2019-01-10 07:21 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-01-10 07:20 - 2018-11-16 19:44 - 132790320 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-01-09 16:22 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-01-02 20:48 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-01-02 20:48 - 2018-09-15 08:36 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-12-30 23:54 - 2018-11-18 07:05 - 000000000 ____D C:\Users\Bruno\Downloads\filmy
2018-12-29 06:00 - 2018-12-11 10:56 - 000000000 ____D C:\Users\Bruno\AppData\Local\Battle.net
2018-12-28 10:11 - 2018-12-11 11:27 - 000000000 ____D C:\Program Files (x86)\Call of Duty Black Ops 4
2018-12-28 09:27 - 2018-11-16 19:19 - 000000000 ____D C:\Users\Bruno\AppData\Local\Packages
2018-12-28 08:16 - 2018-09-15 18:33 - 000000000 ____D C:\Windows\SysWOW64\WCN
2018-12-28 08:16 - 2018-09-15 18:33 - 000000000 ____D C:\Windows\system32\WCN
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ___SD C:\Windows\SysWOW64\F12
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ___SD C:\Windows\system32\F12
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\oobe
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\oobe
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\migwiz
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\IME
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\system
2018-12-28 08:16 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-12-28 08:16 - 2018-09-15 07:09 - 000000000 ____D C:\Windows\servicing
2018-12-28 07:23 - 2018-12-16 12:17 - 000000000 ____D C:\Users\Bruno\Downloads\Posel ztracených duší (Ghost Whisperer)
2018-12-27 17:33 - 2018-09-15 18:34 - 000000000 ____D C:\Windows\OCR

Some zero byte size files/folders:
==========================
C:\Windows\System32\SppExtComObjHook.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16.01.2019 01
Ran by Bruno (20-01-2019 12:22:55)
Running from C:\Users\Bruno\Desktop
Windows 10 Enterprise LTSC 2019 Version 1809 17763.253 (X64) (2018-11-16 18:00:37)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4026889717-166049279-3436938343-500 - Administrator - Disabled)
Bruno (S-1-5-21-4026889717-166049279-3436938343-1001 - Administrator - Enabled) => C:\Users\Bruno
DefaultAccount (S-1-5-21-4026889717-166049279-3436938343-503 - Limited - Disabled)
Guest (S-1-5-21-4026889717-166049279-3436938343-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4026889717-166049279-3436938343-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {51405D0C-825B-964D-00BD-77E435F203F3}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 18.12.3 - Advanced Micro Devices, Inc.)
Assassin's Creed Odyssey (HKLM-x32\...\Uplay Install 5059) (Version: - Ubisoft)
Assassin's Creed: Odyssey (HKLM-x32\...\Assassin's Creed: Odyssey_is1) (Version: - )
Audacity 2.3.0 (HKLM-x32\...\Audacity_is1) (Version: 2.3.0 - Audacity Team)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.15.77 - Bitdefender)
BitTorrent (HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\BitTorrent) (Version: 7.10.4.44847 - BitTorrent Inc.)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
Call of Duty Black Ops 4 (HKLM-x32\...\Call of Duty Black Ops 4) (Version: - Blizzard Entertainment)
Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Counter Strike 1.6 GT (HKLM-x32\...\Counter Strike 1.6 GT) (Version: - )
Counter-Strike 1.6 v43g (HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Counter-Strike 1.6_is1) (Version: - Valve)
Discord (HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\Discord) (Version: 0.0.304 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{0E63B233-DC24-442C-BD38-0B91D90FEC5B}) (Version: 1.1.167.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FACEIT (HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\FACEITApp) (Version: 1.20.0 - FACEIT Ltd.)
FIFA 19 (HKLM-x32\...\{3391E07D-8484-4124-817E-FCBDA859FD62}) (Version: 1.0.58.64628 - Electronic Arts)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\{86C80028-CB1C-42B7-8FAA-C486A0B1996A}) (Version: 2.2.0.627 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.627 - LogMeIn, Inc.)
Microsoft PowerPoint 2010 (HKLM-x32\...\Office14.POWERPOINT) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{d98165f5-8b37-4100-8852-a0664374ff8a}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27012 (HKLM-x32\...\{427ada59-85e7-4bc8-b8d5-ebf59db60423}) (Version: 14.16.27012.6 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Monster Hunter: World (HKLM-x32\...\Monster Hunter: World_is1) (Version: - )
Mozilla Firefox 64.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 64.0.2 (x64 en-US)) (Version: 64.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0.3 - Mozilla)
MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 22.0.2 - OBS Project)
OpenOffice 4.1.6 (HKLM-x32\...\{8DADDDBF-EB36-4D00-9291-8C281F1755A6}) (Version: 4.16.9790 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.30.15625 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{52ee272d-8d33-481d-8301-3b4b0bb89a31}) (Version: latest - ppy Pty Ltd)
Roblox Player for Bruno (HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\roblox-player) (Version: - Roblox Corporation)
SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.28.9669 - SoftEther VPN Project)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
Tom Clancy's Rainbow Six Siege RUS (HKLM-x32\...\Uplay Install 1842) (Version: - Ubisoft Montreal)
Twitch (HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 73.2 - Ubisoft)
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
XCOM 2 (HKLM-x32\...\XCOM 2_is1) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (Alexander Roshal)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2018-12-17] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05A904F5-405C-4CA6-A82A-2D31DDB1FDC7} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2018-11-15] (Bitdefender)
Task: {206FF9C8-96C1-4920-83C3-7BC275C479B4} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [2018-12-18] (Advanced Micro Devices, Inc.)
Task: {3B193614-2B8D-4A2B-A50C-793D00D33561} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
Task: {56F6710B-F095-4B2D-A987-F2AFF5D6F6A1} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2018-12-17] (Advanced Micro Devices, Inc.)
Task: {9C0235BB-C157-4AA5-8564-3CAC661E41CD} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [2018-12-18] (Advanced Micro Devices, Inc.)
Task: {E39F8E32-F4B6-44B2-B8AF-D84A6CFEB7B8} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-09-15] ()
Task: {EDDAA302-C4B0-490F-9D37-74460EB146CF} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2019-01-12 11:50 - 2017-11-21 12:29 - 000278280 _____ () C:\Program Files\Bitdefender Antivirus Free\txmlutil.dll
2019-01-12 11:50 - 2018-11-14 21:28 - 000994752 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_000_000\ashttpbr.mdl
2019-01-12 11:50 - 2018-11-14 21:28 - 000544880 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_000_000\ashttpdsp.mdl
2019-01-12 11:50 - 2018-11-14 21:28 - 003240080 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_000_000\ashttpph.mdl
2019-01-12 11:50 - 2018-11-14 21:28 - 001530368 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_000_000\ashttprbl.mdl
2018-09-15 08:28 - 2018-09-15 08:28 - 000834088 _____ () C:\Windows\System32\InputHost.dll
2018-09-15 08:28 - 2018-09-15 08:28 - 000474624 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-12-12 16:29 - 2018-12-12 16:29 - 002801152 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-12-13 14:29 - 2018-12-13 14:29 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.DLL
2018-12-13 14:29 - 2018-12-13 14:29 - 002551808 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2018-09-15 08:28 - 2018-09-15 08:28 - 001740288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-12-15 22:29 - 2018-12-15 22:20 - 001698296 _____ () E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe
2018-09-15 08:28 - 2018-09-15 08:28 - 001942528 _____ () C:\Windows\ShellExperiences\PeopleCommonControls.dll
2018-09-15 08:28 - 2018-09-15 08:28 - 001396224 _____ () C:\Windows\ShellExperiences\PeopleBarFlyout.dll
2018-12-12 16:29 - 2018-12-12 16:29 - 002877952 _____ () C:\Windows\ShellExperiences\WindowsInternal.People.PeoplePicker.dll
2018-09-15 08:28 - 2018-09-15 08:28 - 000551424 _____ () C:\Windows\ShellExperiences\WindowsInternal.People.Relevance.QueryClient.dll
2018-12-15 22:29 - 2018-12-15 22:20 - 000932856 _____ () E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\plugins\corsair\cueextensions32.dll
2018-12-15 22:29 - 2018-12-15 22:20 - 000979960 _____ () E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\bin\resourceutil32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Bruno\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Bruno\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\localhost -> localhost

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-01-12 09:55 - 2019-01-13 17:51 - 000000162 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1 activation-v2.kaspersky.com
127.0.0.1 activation-v2.geo.kaspersky.com
0.0.0.0 activation-v2.kaspersky.com
0.0.0.0 activation-v2.geo.kaspersky.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4026889717-166049279-3436938343-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.31.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "BCSSync"
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\StartupApproved\Run: => "Ubisoft Game Launcher"
HKU\S-1-5-21-4026889717-166049279-3436938343-1001\...\StartupApproved\Run: => "vibranceGUI"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{13EF2B93-16F4-41E6-B402-441A8E26480F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
FirewallRules: [{E77A42DF-9160-4CEE-AEFE-63041568C363}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
FirewallRules: [{2180BCA5-300E-4E4C-B72A-64DD347F502C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
FirewallRules: [{3E7FCE2D-79AD-44D3-922B-2799C17628B7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
FirewallRules: [TCP Query User{B8CE4087-20CD-464D-BEE6-11C0FEE8293D}E:\program files\grand theft auto v\gta5.exe] => (Allow) E:\program files\grand theft auto v\gta5.exe (Rockstar Games)
FirewallRules: [UDP Query User{50B839F3-2824-4DBE-B505-DB65FE0B3EF9}E:\program files\grand theft auto v\gta5.exe] => (Allow) E:\program files\grand theft auto v\gta5.exe (Rockstar Games)
FirewallRules: [{9EAE5113-1046-4E8C-913D-4ABCA830D406}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{A8535528-1F08-489B-AEB0-E4D06A7A9B06}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{F8408AE2-DB85-44C5-8010-D33AED50FA26}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe ()
FirewallRules: [{4816FC49-D06F-4C86-9B3F-C4BB9BB5D3D8}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe ()
FirewallRules: [{26B4C273-0D16-4C2C-96E3-DC159618D840}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Zula EU\zula_launcher.exe (MadByte Games)
FirewallRules: [{458033D3-CF0F-436E-B040-E4E4395748AC}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Zula EU\zula_launcher.exe (MadByte Games)
FirewallRules: [TCP Query User{9E256236-7203-48EC-831A-D265D290AA9E}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.)
FirewallRules: [UDP Query User{834AEE38-B266-4617-871B-6C4406AEC26F}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.)
FirewallRules: [TCP Query User{AB32BF8E-01CC-4860-809C-E9ECC3E22009}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games, Inc.)
FirewallRules: [UDP Query User{E91887BE-81A1-45BF-B5C1-D09DAC10787A}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games, Inc.)
FirewallRules: [{2CD7FB64-C3C0-4C8E-9580-2B6EF421EB7E}] => (Allow) C:\Users\Bruno\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc.)
FirewallRules: [{2015D4B0-D530-4A3D-8CA4-6A24880D5A31}] => (Allow) C:\Users\Bruno\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc.)
FirewallRules: [{6D65C64C-5A32-48A9-9D0B-1DA0954AE76B}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (PUBG Corporation )
FirewallRules: [{F45CA1BE-BCA1-4C5C-9459-D3318E20DCDC}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (PUBG Corporation )
FirewallRules: [{3922AC21-A32D-4BED-A511-8287F502D557}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{EDA4CA64-723E-43C1-919A-1196DD3D24D0}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{DE892E07-9A95-4994-960B-29A85461E0C6}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{A9A9408A-F436-44C9-A321-0E09C75859D2}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{A01748B7-15D9-4785-B34C-77167BB8A2CB}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{62285035-142C-4157-893E-DBE846A3F950}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
FirewallRules: [{B4F615E1-146E-4515-B485-2472F4CC4F18}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games, Inc.)
FirewallRules: [{312168EC-B0D1-4298-B21D-C041EDE74D23}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games, Inc.)
FirewallRules: [{6CB55A74-1C3C-44EE-9A76-D80C02FD96C8}] => (Allow) E:\Program Files\Assassin's Creed Odyssey\ACOdyssey.exe No File
FirewallRules: [{AC13625D-482E-4120-8ED7-13C562111E9A}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 19\FIFASetup\fifaconfig.exe (Electronic Arts)
FirewallRules: [{0134D831-D578-4A7D-A2A0-70C5A6C522DE}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 19\FIFASetup\fifaconfig.exe (Electronic Arts)
FirewallRules: [{13468DC1-2B81-4181-A050-CB07F4C54B1F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation)
FirewallRules: [{316FC0F7-B130-479A-9DD0-C14EF3189F55}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation)
FirewallRules: [TCP Query User{76383718-D13D-48AD-AB56-D5190CD0A61E}C:\program files (x86)\xcom 2\binaries\win64\xcomgame.exe] => (Allow) C:\program files (x86)\xcom 2\binaries\win64\xcomgame.exe (Firaxis Games)
FirewallRules: [UDP Query User{2CBFFA9C-EB8C-4ABA-8217-40290BED7708}C:\program files (x86)\xcom 2\binaries\win64\xcomgame.exe] => (Allow) C:\program files (x86)\xcom 2\binaries\win64\xcomgame.exe (Firaxis Games)
FirewallRules: [TCP Query User{E103C4C8-5AA2-402F-95F1-9F9B99647689}C:\program files (x86)\call of duty black ops 4\blackops4.exe] => (Allow) C:\program files (x86)\call of duty black ops 4\blackops4.exe (Activision Publishing, Inc.)
FirewallRules: [UDP Query User{9E72D5D6-7696-43CC-BDE0-B6FEF0290F8F}C:\program files (x86)\call of duty black ops 4\blackops4.exe] => (Allow) C:\program files (x86)\call of duty black ops 4\blackops4.exe (Activision Publishing, Inc.)
FirewallRules: [TCP Query User{56805C76-1ADB-4F11-8752-9A882B8D1B1F}C:\games\counter strike 1.6 gt\hl.exe] => (Block) C:\games\counter strike 1.6 gt\hl.exe No File
FirewallRules: [UDP Query User{7A9E6A3F-5E1E-4040-BFC9-F639B8FF6BE6}C:\games\counter strike 1.6 gt\hl.exe] => (Block) C:\games\counter strike 1.6 gt\hl.exe No File
FirewallRules: [{177A58DA-D10C-4F28-8786-298B9B4C18A0}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe ()
FirewallRules: [{1F0926B1-5BBC-4264-A1A1-77218A6B2EB3}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe ()
FirewallRules: [{666C0091-CE81-4E45-A7F9-02BE51C7C110}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Half-Life\hl.exe (Valve)
FirewallRules: [{21FBB596-A69D-47A1-820D-7C485615803F}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Half-Life\hl.exe (Valve)
FirewallRules: [TCP Query User{9A692F37-3269-465F-B782-863253E5653F}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe No File
FirewallRules: [UDP Query User{88585BFC-570E-4938-B5A7-149EF704017E}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe No File
FirewallRules: [{D79F8046-97CC-491C-A88A-197360B8DC15}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Ring of Elysium\SLauncher.exe ()
FirewallRules: [{90206C3B-7638-40A4-AED4-560ACF733FF5}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Ring of Elysium\SLauncher.exe ()
FirewallRules: [{8B7B94FB-7C87-4390-96BC-E6B8DCE4B949}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\SCP Secret Laboratory\SCPSL.exe ()
FirewallRules: [{9D519E2A-A001-4382-9669-363DD99AF503}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\SCP Secret Laboratory\SCPSL.exe ()
FirewallRules: [{52FD6EA1-0645-487E-A615-52A8A48172C6}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\SCP Secret Laboratory\LocalAdmin.exe ()
FirewallRules: [{5C7CC7F5-776F-4155-B043-0057DAFA5986}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\SCP Secret Laboratory\LocalAdmin.exe ()
FirewallRules: [{DAC4B0A6-F686-418C-B9AE-E2DAE06D685B}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Town of Salem\TownOfSalem.exe ()
FirewallRules: [{AEED8B67-667A-4A24-B7D2-C8D51814074F}] => (Allow) E:\Program Files\SteamLibrary\steamapps\common\Town of Salem\TownOfSalem.exe ()
FirewallRules: [TCP Query User{A9812F82-3395-4143-97E7-A1F112780EF1}E:\program files\tom clancy's rainbow six siege rus\rainbowsix.exe] => (Allow) E:\program files\tom clancy's rainbow six siege rus\rainbowsix.exe (Ubisoft)
FirewallRules: [UDP Query User{8FE22C93-8DA2-426E-B1D4-A60121F1FA45}E:\program files\tom clancy's rainbow six siege rus\rainbowsix.exe] => (Allow) E:\program files\tom clancy's rainbow six siege rus\rainbowsix.exe (Ubisoft)

==================== Restore Points =========================

04-01-2019 09:54:17 Naplánovaný kontrolní bod
06-01-2019 09:49:07 TunnelBear
09-01-2019 16:21:43 Installed Microsoft PowerPoint 2010
10-01-2019 19:14:56 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
19-01-2019 19:53:22 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/20/2019 11:51:25 AM) (Source: Software Protection Platform Service) (EventID: 8229) (User: )
Description: Stroji pravidel se nepodařilo provést některé naplánované akce.
Kód chyby:0x80080005
Cesta:<none>
Argumenty:<none>

Error: (01/20/2019 11:48:15 AM) (Source: Software Protection Platform Service) (EventID: 8229) (User: )
Description: Stroji pravidel se nepodařilo provést některé naplánované akce.
Kód chyby:0x80080005
Cesta:<none>
Argumenty:<none>

Error: (01/20/2019 11:46:14 AM) (Source: Software Protection Platform Service) (EventID: 8229) (User: )
Description: Stroji pravidel se nepodařilo provést některé naplánované akce.
Kód chyby:0x80080005
Cesta:<none>
Argumenty:<none>

Error: (01/20/2019 10:00:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: bdagent.exe, verzia: 1.0.15.77, časová značka: 0x5c385878
Názov chybujúceho modulu: MSVCR120.dll, verzia: 12.0.21005.1, časová značka: 0x524f83ff
Kód výnimky: 0xc0000409
Odstup chyby: 0x0000000000074a30
Identifikácia chybujúceho procesu: 0x1610
Čas spustenia chybujúcej aplikácie: 0x01d4b09d60764768
Cesta chybujúcej aplikácie: C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
Cesta chybujúceho modulu: C:\Program Files\Bitdefender Antivirus Free\MSVCR120.dll
Identifikácia hlásenia: 5a03f4d1-94c4-48e7-b169-09d8266c3fdd
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (01/20/2019 05:50:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: bdagent.exe, verzia: 1.0.15.77, časová značka: 0x5c385878
Názov chybujúceho modulu: MSVCR120.dll, verzia: 12.0.21005.1, časová značka: 0x524f83ff
Kód výnimky: 0xc0000409
Odstup chyby: 0x0000000000074a30
Identifikácia chybujúceho procesu: 0xf64
Čas spustenia chybujúcej aplikácie: 0x01d4aff528c42a3c
Cesta chybujúcej aplikácie: C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
Cesta chybujúceho modulu: C:\Program Files\Bitdefender Antivirus Free\MSVCR120.dll
Identifikácia hlásenia: 8543483e-d735-473b-9b68-1338138c5f84
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (01/20/2019 05:47:29 AM) (Source: Software Protection Platform Service) (EventID: 8229) (User: )
Description: Stroji pravidel se nepodařilo provést některé naplánované akce.
Kód chyby:0x80080005
Cesta:<none>
Argumenty:<none>

Error: (01/20/2019 05:44:20 AM) (Source: Software Protection Platform Service) (EventID: 8229) (User: )
Description: Stroji pravidel se nepodařilo provést některé naplánované akce.
Kód chyby:0x80080005
Cesta:<none>
Argumenty:<none>

Error: (01/20/2019 05:42:19 AM) (Source: Software Protection Platform Service) (EventID: 8229) (User: )
Description: Stroji pravidel se nepodařilo provést některé naplánované akce.
Kód chyby:0x80080005
Cesta:<none>
Argumenty:<none>


System errors:
=============
Error: (01/20/2019 12:13:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby eapihdrv zlyhalo kvôli nasledujúcej chybe:
Načtení tohoto ovladače je blokováno.

Error: (01/20/2019 12:13:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Bruno\AppData\Local\Temp\ehdrv.sys

Error: (01/20/2019 12:13:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby eapihdrv zlyhalo kvôli nasledujúcej chybe:
Načtení tohoto ovladače je blokováno.

Error: (01/20/2019 12:13:32 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Bruno\AppData\Local\Temp\ehdrv.sys

Error: (01/20/2019 12:13:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby eapihdrv zlyhalo kvôli nasledujúcej chybe:
Načtení tohoto ovladače je blokováno.

Error: (01/20/2019 12:13:32 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Bruno\AppData\Local\Temp\ehdrv.sys

Error: (01/20/2019 12:13:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby eapihdrv zlyhalo kvôli nasledujúcej chybe:
Načtení tohoto ovladače je blokováno.

Error: (01/20/2019 12:13:32 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Bruno\AppData\Local\Temp\ehdrv.sys


Windows Defender:
===================================
Date: 2019-01-12 11:50:41.682
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Occamy.C
ID: 2147726780
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_C:\Users\Bruno\Downloads\KRT CLUB 2.1.2.69 By Onhax Pk\KRT_CLUB_2.1.2.69.exe
Původ zjišťování: Místní počítač
Typ zjišťování: FastPath
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-KN6KRSK\Bruno
Název procesu: C:\Program Files\Bitdefender Antivirus Free\kitinstaller\BPInstaller.exe
Verze podpisu: AV: 1.283.2804.0, AS: 1.283.2804.0, NIS: 1.283.2804.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-12 11:32:36.039
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/Kapahyku.A
ID: 2147707350
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_C:\Users\Bruno\Downloads\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: C:\Windows\System32\SearchProtocolHost.exe
Verze podpisu: AV: 1.283.2800.0, AS: 1.283.2800.0, NIS: 1.283.2800.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-12 11:32:30.170
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/Kapahyku.A
ID: 2147707350
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_C:\Users\Bruno\AppData\Local\Temp\Rar$DRa7236.15091\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-KN6KRSK\Bruno
Název procesu: C:\Program Files\WinRAR\WinRAR.exe
Verze podpisu: AV: 1.283.2800.0, AS: 1.283.2800.0, NIS: 1.283.2800.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-12 09:51:52.651
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Occamy.C
ID: 2147726780
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_C:\Users\Bruno\Downloads\KIS19\Trial reset\KRT_CLUB_2.1.2.69.exe
Původ zjišťování: Místní počítač
Typ zjišťování: FastPath
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: C:\Windows\explorer.exe
Verze podpisu: AV: 1.283.2788.0, AS: 1.283.2788.0, NIS: 1.283.2788.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-12 09:51:43.228
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Occamy.C
ID: 2147726780
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_C:\Users\Bruno\Downloads\KIS19\Trial reset\KRT_CLUB_2.1.2.69.exe
Původ zjišťování: Místní počítač
Typ zjišťování: FastPath
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: C:\Windows\explorer.exe
Verze podpisu: AV: 1.283.2788.0, AS: 1.283.2788.0, NIS: 1.283.2788.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-12 10:18:09.215
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.283.2800.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15500.2
Kód chyby: 0x80240438
Popis chyby :Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2019-01-12 09:55:21.566
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.283.2788.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15500.2
Kód chyby: 0x80240438
Popis chyby :Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2018-12-27 12:27:16.795
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.283.1524.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15500.2
Kód chyby: 0x8024402c
Popis chyby :Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2018-12-07 16:24:24.224
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o obnovení položky z karantény.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Tiggre!plock
ID: 2147723626
Závažnost: Vážné
Kategorie: Trojský kůň
Uživatel: DESKTOP-KN6KRSK\Bruno
Kód chyby: 0x80508014
Popis chyby: Položku v karanténě nelze obnovit.
Verze podpisu: AV: 1.283.25.0, AS: 1.283.25.0
Verze modulu: 1.1.15500.2

Date: 2018-12-07 16:24:21.430
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o obnovení položky z karantény.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Tiggre!plock
ID: 2147723626
Závažnost: Vážné
Kategorie: Trojský kůň
Uživatel: DESKTOP-KN6KRSK\Bruno
Kód chyby: 0x80508014
Popis chyby: Položku v karanténě nelze obnovit.
Verze podpisu: AV: 1.283.25.0, AS: 1.283.25.0
Verze modulu: 1.1.15500.2

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz
Percentage of memory in use: 41%
Total physical RAM: 8137.71 MB
Available physical RAM: 4746.99 MB
Total Virtual: 15561.71 MB
Available Virtual: 8722.6 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:446.59 GB) (Free:161.32 GB) NTFS
Drive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.02 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: () (Fixed) (Total:931.41 GB) (Free:88.22 GB) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{3f80a835-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 3FC5B496)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=931.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 447.1 GB) (Disk ID: 3F80A835)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=446.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118271
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o konrolu logu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Bruno39
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 01 led 2016 14:43

Re: Prosím o konrolu logu

#3 Příspěvek od Bruno39 »

# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build: 12-18-2018
# Database: 2019-01-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-20-2019
# Duration: 00:00:00
# OS: Windows 10 Enterprise LTSC 2019
# Cleaned: 0
# Failed: 1


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

Not Deleted api.bing.com


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1894 octets] - [12/01/2019 06:42:26]
AdwCleaner[C00].txt - [1928 octets] - [12/01/2019 06:42:39]
AdwCleaner[S01].txt - [1400 octets] - [12/01/2019 08:37:24]
AdwCleaner[C01].txt - [1566 octets] - [12/01/2019 08:37:32]
AdwCleaner[S02].txt - [1522 octets] - [20/01/2019 13:13:46]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118271
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o konrolu logu

#4 Příspěvek od Rudy »

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
FF NewTab: Mozilla\Firefox\Profiles\jugn7tq7.default -> hxxp://securedsearch.lavasoft.com/?pr=v ... 20__181117
C:\Windows\System32\SppExtComObjHook.dll
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
AlternateDataStreams: C:\Users\Bruno\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Bruno\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
FirewallRules: [{6CB55A74-1C3C-44EE-9A76-D80C02FD96C8}] => (Allow) E:\Program Files\Assassin's Creed Odyssey\ACOdyssey.exe No File
FirewallRules: [TCP Query User{56805C76-1ADB-4F11-8752-9A882B8D1B1F}C:\games\counter strike 1.6 gt\hl.exe] => (Block) C:\games\counter strike 1.6 gt\hl.exe No File
FirewallRules: [UDP Query User{7A9E6A3F-5E1E-4040-BFC9-F639B8FF6BE6}C:\games\counter strike 1.6 gt\hl.exe] => (Block) C:\games\counter strike 1.6 gt\hl.exe No File
FirewallRules: [TCP Query User{9A692F37-3269-465F-B782-863253E5653F}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe No File
FirewallRules: [UDP Query User{88585BFC-570E-4938-B5A7-149EF704017E}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe No File
C:\Users\Bruno\Downloads\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe
C:\Users\Bruno\AppData\Local\Temp\Rar$DRa7236.15091\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe

EmptyTemp:
Hosts:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Bruno39
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 01 led 2016 14:43

Re: Prosím o konrolu logu

#5 Příspěvek od Bruno39 »

Fix result of Farbar Recovery Scan Tool (x64) Version: 20.01.2019
Ran by Bruno (20-01-2019 15:33:32) Run:1
Running from C:\Users\Bruno\Desktop
Loaded Profiles: Bruno (Available Profiles: Bruno)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
FF NewTab: Mozilla\Firefox\Profiles\jugn7tq7.default -> hxxp://securedsearch.lavasoft.com/?pr=v ... 20__181117
C:\Windows\System32\SppExtComObjHook.dll
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
AlternateDataStreams: C:\Users\Bruno\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Bruno\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
FirewallRules: [{6CB55A74-1C3C-44EE-9A76-D80C02FD96C8}] => (Allow) E:\Program Files\Assassin's Creed Odyssey\ACOdyssey.exe No File
FirewallRules: [TCP Query User{56805C76-1ADB-4F11-8752-9A882B8D1B1F}C:\games\counter strike 1.6 gt\hl.exe] => (Block) C:\games\counter strike 1.6 gt\hl.exe No File
FirewallRules: [UDP Query User{7A9E6A3F-5E1E-4040-BFC9-F639B8FF6BE6}C:\games\counter strike 1.6 gt\hl.exe] => (Block) C:\games\counter strike 1.6 gt\hl.exe No File
FirewallRules: [TCP Query User{9A692F37-3269-465F-B782-863253E5653F}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe No File
FirewallRules: [UDP Query User{88585BFC-570E-4938-B5A7-149EF704017E}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe No File
C:\Users\Bruno\Downloads\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe
C:\Users\Bruno\AppData\Local\Temp\Rar$DRa7236.15091\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
"Firefox newtab" => removed successfully
Symbolic link found: "C:\Windows\System32\SppExtComObjHook.dll" => "C:\Windows\AKMS\x64\SppExtComObjHook.dll"
"C:\Windows\System32\SppExtComObjHook.dll" => Symbolic link removed successfully
C:\Windows\System32\SppExtComObjHook.dll => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx => removed successfully
HKLM\Software\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\CLSID\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx => removed successfully
HKLM\Software\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
C:\Users\Bruno\Data aplikací => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS removed successfully
"C:\Users\Bruno\AppData\Roaming" => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS not found.
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6CB55A74-1C3C-44EE-9A76-D80C02FD96C8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{56805C76-1ADB-4F11-8752-9A882B8D1B1F}C:\games\counter strike 1.6 gt\hl.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7A9E6A3F-5E1E-4040-BFC9-F639B8FF6BE6}C:\games\counter strike 1.6 gt\hl.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9A692F37-3269-465F-B782-863253E5653F}C:\counter-strike 1.6\hl.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{88585BFC-570E-4938-B5A7-149EF704017E}C:\counter-strike 1.6\hl.exe" => removed successfully
"C:\Users\Bruno\Downloads\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe" => not found
"C:\Users\Bruno\AppData\Local\Temp\Rar$DRa7236.15091\Kaspersky Reset Trial [KRT] 5.1.0.35\KRT_5.1.0.35.exe" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 44224029 B
Java, Flash, Steam htmlcache => 414051659 B
Windows/system/drivers => 18784949 B
Edge => 0 B
Chrome => 0 B
Firefox => 1099442126 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 16684 B
LocalService => 0 B
NetworkService => 160066 B
NetworkService => 0 B
Bruno => 15260319 B

RecycleBin => 0 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:34:53 ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118271
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o konrolu logu

#6 Příspěvek od Rudy »

Smazáno, log je již OK. Pro jistotu bych provedl ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Bruno39
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 01 led 2016 14:43

Re: Prosím o konrolu logu

#7 Příspěvek od Bruno39 »

Sken MBAM nic nenasiel takze by to malo byt dobre dakujem za pomoc

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118271
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o konrolu logu

#8 Příspěvek od Rudy »

OK, nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno