Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Preventivní kontrola, podezřelé chování

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zpráva
Autor
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#16 Příspěvek od Rudy »

Zatím není zač, nechám to tu otevřené.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#17 Příspěvek od Max_cz »

Dobrý den,

tak minulý týden a i dnes se mi stalo, že při hledánín a googlu mi to vyhodilo opět hlášku o nadměrném využívání z mé sítě a potvrzení, že nejsem robot...

Doma využíváme více věcí na internet, ale vše ostatní bylo vypnuto a puštěn jen již dříve zmiňovaný PC...

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#18 Příspěvek od Rudy »

Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#19 Příspěvek od Max_cz »

Kód: Vybrat vše

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-03-2017
Ran by Max_cz (administrator) on DESKTOP-K1CDC3N (06-03-2017 18:40:16)
Running from C:\Users\Max_cz\Desktop
Loaded Profiles: Max_cz (Available Profiles: defaultuser0 & Max_cz)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.17\AsusFanControlService.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\32\WacomDesktopCenter.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(CÍGLER SOFTWARE, a.s.) C:\Program Files (x86)\CIGLER SOFTWARE\Money S3\MS3Auto.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17012.10301.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Spotify Ltd) C:\Users\Max_cz\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Max_cz\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Max_cz\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Max_cz\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Max_cz\AppData\Roaming\Spotify\Spotify.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-10-04] (Microsoft Corporation)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1610936 2016-09-14] (COMODO)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2017-02-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-01-27] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2384984 2017-02-05] (Adobe Systems Incorporated)
HKU\S-1-5-21-497983172-942744989-883898907-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2017-02-04] (Piriform Ltd)
HKU\S-1-5-21-497983172-942744989-883898907-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23818360 2016-12-18] (Google)
HKU\S-1-5-21-497983172-942744989-883898907-1001\...\Run: [Spotify Web Helper] => C:\Users\Max_cz\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-22] (Spotify Ltd)
HKU\S-1-5-21-497983172-942744989-883898907-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2881824 2017-02-04] (Valve Corporation)
HKU\S-1-5-21-497983172-942744989-883898907-1001\...\Run: [S3AutomaticSTART] => C:\Program Files (x86)\CIGLER SOFTWARE\Money S3\MS3Auto.exe [31661880 2017-03-01] (CÍGLER SOFTWARE, a.s.)
HKU\S-1-5-21-497983172-942744989-883898907-1001\...\Run: [S3Automatic] => C:\Program Files (x86)\CIGLER SOFTWARE\Money S3\MS3Auto.exe [31661880 2017-03-01] (CÍGLER SOFTWARE, a.s.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorMunki Gamma.lnk [2017-02-03]
ShortcutTarget: ColorMunki Gamma.lnk -> C:\Program Files (x86)\X-Rite\ColorMunki Photo\Gamma\CalibrationLoader.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorMunkiPhotoTray.exe.lnk [2017-02-03]
ShortcutTarget: ColorMunkiPhotoTray.exe.lnk -> C:\Program Files (x86)\X-Rite\ColorMunki Photo\Tray\ColorMunki Photo Tray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk [2017-02-03]
ShortcutTarget: i1Profiler Tray.lnk -> C:\Program Files (x86)\X-Rite\i1Profiler\i1ProfilerTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\XRGamma.lnk [2017-02-03]
ShortcutTarget: XRGamma.lnk -> C:\Program Files (x86)\X-Rite\i1Profiler\XRGamma.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3a91b5ca-a6c0-45a6-85a7-8134d6749e99}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-497983172-942744989-883898907-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2017-02-03] (Sun Microsystems, Inc.)

FireFox:
========
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-12-09] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2017-02-05] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-02-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-02-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-12-09] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2017-02-05] (Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [No File]

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxp://www.google.cz/ig?hl=cs"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default [2017-03-06]
CHR Extension: (Prezentace Google) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-04]
CHR Extension: (SEO Profesional Toolbar) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\adecfhccdknoobplgempjhbojlbpahhn [2016-10-04]
CHR Extension: (Dokumenty Google) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-04]
CHR Extension: (Disk Google) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-04]
CHR Extension: (YouTube) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-04]
CHR Extension: (Adblock na Youtube™) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2016-10-04]
CHR Extension: (Adobe Acrobat) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-03]
CHR Extension: (Tabulky Google) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-04]
CHR Extension: (Google Keep – poznámky a seznamy) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2017-02-19]
CHR Extension: (Invite All Friends on Facebook) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmmhkeajgflmokoaaoadgkhhmibjbpj [2017-02-15]
CHR Extension: (Přidávání a otevírání aplikací pro Ch...) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhfiojdaegegaeiefilimljmbiegiebd [2016-10-04]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-10-12]
CHR Extension: (Kontrola e-mailu Google) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2016-10-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]
CHR Extension: (Instagram for Chrome) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnbmdkdflhjiclaoiiifmheknpccalb [2016-11-26]
CHR Extension: (Gmail) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-04]
CHR Extension: (Chrome Media Router) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR HKU\S-1-5-21-497983172-942744989-883898907-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [753240 2017-02-05] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-05] (Adobe Systems, Incorporated)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe [963544 2017-02-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-09-26] () [File not signed]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.17\AsusFanControlService.exe [2394072 2017-02-01] (ASUSTeK Computer Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5817256 2016-09-14] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2271928 2016-09-14] (COMODO)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [439800 2016-06-02] (Intel Corporation)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-10-04] (Futuremark)
R2 hasplms; C:\Windows\system32\hasplms.exe [4608320 2017-02-03] (SafeNet Inc.)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [365048 2016-06-02] (Intel Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2017-02-08] (NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-10-04] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2017-01-23] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [671696 2016-12-16] (Wacom Technology, Corp.)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [83312 2017-02-03] (X-Rite Inc.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2016-10-04] (ASUSTek Computer Inc.)
R3 AndroidAFD; C:\Windows\SysWow64\drivers\AndroidAFDx64.sys [28472 2016-10-04] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-10-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [40960 2016-09-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [862648 2016-09-08] (COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [54336 2016-09-08] (COMODO)
S3 colormunki; C:\Windows\System32\Drivers\colormunki_x64.sys [51600 2017-02-03] (Thesycon GmbH, Germany)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [559080 2016-04-19] (Intel Corporation)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2016-11-27] (EldoS Corporation)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-11-27] (SafeNet Inc.)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [147304 2016-09-08] (COMODO)
R4 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-10-23] (ASUSTeK Computer Inc.)
S3 MbswMailbox; C:\Program Files (x86)\ASUS\AI Suite III\690b33e1-0462-4e84-9bea-c7552b45432a.sys [17208 2016-10-18] ()
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-02-08] (NVIDIA Corporation)
R3 PdiPorts; C:\Windows\System32\drivers\PdiPorts.sys [19248 2017-02-03] (Portrait Displays, Inc.)
R3 WacHidRouterPro; C:\Windows\System32\drivers\wachidrouter.sys [119448 2016-12-16] (Wacom Technology)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2016-10-18] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2017-02-03] (Nicomsoft Ltd.) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-06 18:40 - 2017-03-06 18:40 - 00022691 _____ C:\Users\Max_cz\Desktop\FRST.txt
2017-03-06 18:40 - 2017-03-06 18:40 - 00000000 ____D C:\Users\Max_cz\Desktop\FRST-OlderVersion
2017-03-05 15:09 - 2017-03-05 15:09 - 00040462 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E11(0000278349).srt
2017-03-05 15:09 - 2017-03-05 15:09 - 00040128 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E09(0000278347).srt
2017-03-05 15:09 - 2017-03-05 15:09 - 00038249 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E08(0000278346).srt
2017-03-05 15:09 - 2017-03-05 15:09 - 00037778 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E10(0000278348).srt
2017-03-05 15:09 - 2017-03-05 15:09 - 00033045 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E12(0000278350).srt
2017-03-03 21:47 - 2017-03-03 21:47 - 00044456 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E07(0000278345).srt
2017-03-02 21:02 - 2017-03-02 21:02 - 00039606 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E06(0000278344).srt
2017-03-01 21:28 - 2017-03-01 21:28 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4.dll
2017-03-01 21:28 - 2017-03-01 21:28 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4r.dll
2017-03-01 21:28 - 2017-03-01 21:28 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4a.dll
2017-03-01 21:28 - 2017-03-01 21:28 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2017-03-01 21:28 - 2017-03-01 21:28 - 00002202 _____ C:\Users\Public\Desktop\S3 Kasa.lnk
2017-03-01 21:28 - 2017-03-01 21:28 - 00002197 _____ C:\Users\Public\Desktop\Money S3.lnk
2017-03-01 21:28 - 2017-03-01 21:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CÍGLER SOFTWARE
2017-03-01 21:26 - 2017-03-01 21:30 - 00000000 ____D C:\ProgramData\CIGLER SOFTWARE
2017-03-01 21:26 - 2017-03-01 21:26 - 00000000 ____D C:\Users\Public\Documents\CIGLER SOFTWARE
2017-03-01 21:26 - 2017-03-01 21:26 - 00000000 ____D C:\Program Files (x86)\CIGLER SOFTWARE
2017-03-01 21:23 - 2017-03-01 21:25 - 373421768 _____ (Stardust Software) C:\Users\Max_cz\Downloads\money_s3_start_17200_cz.exe
2017-03-01 21:17 - 2017-03-01 21:17 - 00038560 _____ C:\Users\Max_cz\Downloads\Boardwalk-Empire-S04E05(0000278343).srt
2017-02-28 00:38 - 2017-02-28 00:38 - 00082265 _____ C:\Users\Max_cz\Downloads\F2170003 (5).pdf
2017-02-28 00:32 - 2017-02-28 00:32 - 00084871 _____ C:\Users\Max_cz\Downloads\F2170003 (4).pdf
2017-02-28 00:30 - 2017-02-28 00:30 - 00084424 _____ C:\Users\Max_cz\Downloads\F2170003 (3).pdf
2017-02-28 00:28 - 2017-02-28 00:28 - 00084424 _____ C:\Users\Max_cz\Downloads\F2170003 (2).pdf
2017-02-27 23:55 - 2017-02-27 23:55 - 00145221 _____ C:\Users\Max_cz\Downloads\F2170003 (1).pdf
2017-02-27 23:44 - 2017-02-27 23:44 - 00076162 _____ C:\Users\Max_cz\Downloads\F2170003.pdf
2017-02-26 23:01 - 2017-02-26 23:01 - 00017058 _____ C:\Users\Max_cz\Downloads\WEB_REG_OZNAMENI2.pdf
2017-02-26 20:08 - 2017-02-26 20:09 - 184242832 _____ C:\Users\Max_cz\Downloads\libreoffice-5.2.5.1.tar.xz
2017-02-25 14:25 - 2017-02-25 14:25 - 00842044 _____ C:\Users\Max_cz\Downloads\Detail nákupního košíku - KALUMA s.r.o.pdf
2017-02-22 23:23 - 2017-02-22 23:23 - 00000000 ____D C:\Users\Max_cz\Documents\Ashampoo Burning Studio 2017
2017-02-22 23:22 - 2017-02-22 23:22 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\Ashampoo
2017-02-22 23:21 - 2017-02-22 23:22 - 00000000 ____D C:\Users\Max_cz\AppData\Local\ashampoo
2017-02-22 23:21 - 2017-02-22 23:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2017-02-22 23:20 - 2017-02-22 23:21 - 00000000 ____D C:\ProgramData\Ashampoo
2017-02-22 23:20 - 2017-02-22 23:20 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2017-02-22 23:16 - 2017-02-22 23:17 - 76963992 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Max_cz\Downloads\ashampoo_burning_studio_2017_25270.exe
2017-02-21 23:48 - 2017-02-21 23:49 - 06971584 _____ (Tim Kosse) C:\Users\Max_cz\Downloads\FileZilla_3.24.1_win64-setup.exe
2017-02-21 23:02 - 2017-02-21 23:03 - 00000460 _____ C:\Users\Max_cz\Downloads\url.htm
2017-02-21 22:26 - 2017-02-21 22:26 - 00347584 _____ (Big Nerd Software, LLC) C:\Users\Max_cz\Downloads\WebLaunchRecorder (1).exe
2017-02-08 23:41 - 2017-03-06 18:19 - 00000000 ____D C:\Users\Max_cz\AppData\Local\CrashDumps
2017-02-08 22:19 - 2017-02-08 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-02-08 22:18 - 2017-02-08 22:18 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-02-08 22:18 - 2017-02-08 22:18 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2017-02-08 22:18 - 2017-02-08 22:18 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-02-08 22:18 - 2017-02-08 22:18 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-02-08 22:18 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-02-08 22:18 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2017-02-08 22:17 - 2017-02-08 22:17 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-02-08 20:42 - 2017-02-08 20:42 - 00087969 _____ C:\Users\Max_cz\Downloads\078-faktura-fototori-2017.pdf
2017-02-07 00:22 - 2017-02-20 20:53 - 415924024 _____ C:\Users\Max_cz\Downloads\rychly prachy 63.avi
2017-02-07 00:21 - 2017-02-07 00:22 - 00016450 _____ C:\Users\Max_cz\Downloads\[CzT]Rychly_Prachy_63_Lucka_13_08_2011_CZ_.torrent
2017-02-07 00:20 - 2017-02-07 00:25 - 409102985 _____ C:\Users\Max_cz\Downloads\Autenticka videa 3 - Bulharsko (Jana Rychlý prachy).wmv
2017-02-07 00:20 - 2017-02-07 00:20 - 00062908 _____ C:\Users\Max_cz\Downloads\[CzT]Autenticka_videa_3_Bulharsko_Jana_Rychly_prachy_2010_.torrent
2017-02-07 00:19 - 2017-02-07 00:21 - 351163841 _____ C:\Users\Max_cz\Downloads\Rychlý prachy 77 speciál Jarmila  (16.09.2013).wmv
2017-02-07 00:18 - 2017-02-07 00:18 - 00013995 _____ C:\Users\Max_cz\Downloads\[CzT]Rychly_prachy_77_Jarmila_special_16_09_2013_CZ_.torrent
2017-02-07 00:08 - 2017-02-07 00:11 - 1061252001 _____ C:\Users\Max_cz\Downloads\Rychlý Prachy 127. - Denisa (3.2.2017).mp4
2017-02-07 00:08 - 2017-02-07 00:08 - 00020747 _____ C:\Users\Max_cz\Downloads\[CzT]Rychly_Prachy_127_Denisa_3_2_2017_CZ_720pHD_.torrent
2017-02-05 14:12 - 2017-02-05 14:12 - 00001294 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-02-05 13:40 - 2017-02-05 13:40 - 00726516 _____ C:\Users\Max_cz\Downloads\Doklad_2170411616.pdf
2017-02-04 13:04 - 2017-03-06 16:52 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-02-04 12:57 - 2017-02-04 13:05 - 00248170 _____ C:\Users\Max_cz\Desktop\Fixlog.txt
2017-02-04 12:56 - 2017-02-04 12:56 - 00015327 _____ C:\Users\Max_cz\Desktop\LM.bat
2017-02-04 12:43 - 2017-02-04 12:43 - 00010779 _____ C:\Users\Max_cz\Downloads\fixlist.rar
2017-02-04 04:14 - 2017-02-04 04:14 - 08813488 _____ (Piriform Ltd) C:\Users\Max_cz\Downloads\ccsetup526.exe
2017-02-04 03:23 - 2017-02-04 03:23 - 00262108 _____ C:\Windows\Minidump\020417-7843-01.dmp
2017-02-04 03:20 - 2017-03-01 02:45 - 00003260 _____ C:\Windows\System32\Tasks\GPU Tweak II
2017-02-04 02:27 - 2017-02-04 02:27 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00069448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-02-04 02:27 - 2017-02-04 02:27 - 00000000 ____D C:\Users\Max_cz\AppData\Local\UnrealEngine
2017-02-04 02:27 - 2017-02-04 02:27 - 00000000 ____D C:\Users\Max_cz\AppData\Local\redout
2017-02-04 02:26 - 2017-02-04 02:27 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-02-04 02:26 - 2017-02-04 02:27 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-02-04 02:26 - 2017-02-04 02:27 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-02-04 02:26 - 2017-02-04 02:26 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-02-04 02:04 - 2017-02-04 02:04 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-02-04 02:00 - 2017-02-04 02:00 - 00000000 ____D C:\Users\Max_cz\AppData\Local\Steam
2017-02-04 01:58 - 2017-02-07 00:28 - 00000000 ____D C:\Program Files (x86)\Steam
2017-02-04 01:58 - 2017-02-04 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-02-04 00:16 - 2017-03-06 18:40 - 02423808 _____ (Farbar) C:\Users\Max_cz\Desktop\FRST64.exe
2017-02-04 00:16 - 2017-03-06 18:40 - 00000000 ____D C:\FRST

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-06 18:19 - 2016-12-20 19:56 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\Spotify
2017-03-06 18:19 - 2016-12-20 19:56 - 00000000 ____D C:\Users\Max_cz\AppData\Local\Spotify
2017-03-06 18:05 - 2016-10-03 18:42 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-03-06 16:54 - 2016-10-03 19:14 - 00000000 ____D C:\Users\Max_cz\AppData\Local\Adobe
2017-03-06 16:52 - 2016-10-12 19:12 - 00000000 ___RD C:\Users\Max_cz\Disk Google
2017-03-05 23:01 - 2016-10-03 18:45 - 00000000 ____D C:\Users\Max_cz
2017-03-05 15:20 - 2016-10-31 22:56 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\vlc
2017-03-02 23:31 - 2016-10-25 20:22 - 00000132 _____ C:\Users\Max_cz\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2017-03-02 21:11 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness
2017-03-01 20:51 - 2016-10-12 20:00 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\FileZilla
2017-03-01 20:40 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-01 20:36 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-03-01 02:50 - 2016-10-03 18:47 - 03226950 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-01 02:50 - 2016-07-16 23:25 - 01432326 _____ C:\Windows\system32\perfh005.dat
2017-03-01 02:50 - 2016-07-16 23:25 - 00409610 _____ C:\Windows\system32\perfc005.dat
2017-03-01 02:44 - 2017-01-30 18:22 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-01 02:44 - 2016-10-03 18:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-01 02:44 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-03-01 02:43 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\NDF
2017-02-27 01:05 - 2016-11-17 01:05 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\uTorrent
2017-02-25 14:36 - 2016-10-03 19:59 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\PTGui
2017-02-25 00:07 - 2016-11-05 08:55 - 00000000 ____D C:\Users\Max_cz\Desktop\Zábava
2017-02-23 17:02 - 2016-10-04 17:44 - 00000000 ____D C:\Windows\system32\MRT
2017-02-23 17:02 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-02-23 17:02 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp
2017-02-23 16:58 - 2016-10-04 17:44 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-02-22 21:01 - 2016-10-13 21:05 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-21 23:49 - 2017-02-01 22:01 - 00000000 ____D C:\Users\Max_cz\AppData\Local\Screencast-O-Matic-v2
2017-02-20 21:52 - 2016-10-31 21:33 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\TeamViewer
2017-02-08 22:19 - 2017-01-30 18:21 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-08 22:19 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF
2017-02-08 22:18 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo-1-1-0-26-0.exe
2017-02-08 22:18 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo-1-1-0-26-0.exe
2017-02-08 22:17 - 2017-01-30 18:21 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-08 22:17 - 2017-01-30 18:21 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-08 22:16 - 2017-01-04 15:21 - 34719288 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-02-08 22:16 - 2017-01-04 15:21 - 28211768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-02-08 22:16 - 2017-01-04 15:20 - 00951224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-02-08 22:16 - 2017-01-04 15:20 - 00903096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-02-08 22:16 - 2017-01-04 15:20 - 00448560 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-02-08 22:16 - 2017-01-04 15:20 - 00397240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-02-08 22:16 - 2017-01-04 15:19 - 01964600 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437653.dll
2017-02-08 22:16 - 2017-01-04 15:19 - 01604160 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-02-08 22:16 - 2017-01-04 15:19 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437653.dll
2017-02-08 22:16 - 2017-01-04 15:19 - 01047088 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-02-08 22:16 - 2017-01-04 15:19 - 00985136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-02-08 22:16 - 2017-01-04 15:19 - 00221640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-02-08 22:16 - 2017-01-04 15:19 - 00054720 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-02-08 22:16 - 2017-01-04 15:18 - 40132536 _____ C:\Windows\system32\nvcompiler.dll
2017-02-08 22:16 - 2017-01-04 15:18 - 35231160 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-02-08 22:16 - 2017-01-04 15:18 - 02957240 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-02-08 22:16 - 2017-01-04 15:18 - 02594744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-02-08 22:16 - 2017-01-04 15:18 - 00394800 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2017-02-08 22:16 - 2017-01-04 15:18 - 00355768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2017-02-08 22:16 - 2017-01-04 15:03 - 11016832 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-02-08 22:16 - 2017-01-04 15:03 - 10907184 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-02-08 22:16 - 2017-01-04 15:03 - 09247528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-02-08 22:16 - 2017-01-04 15:03 - 09000152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 10453336 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 08846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00818496 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00817472 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00698728 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00658400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00657048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00631992 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00586968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00407240 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-02-08 22:16 - 2017-01-04 15:02 - 00338960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-02-08 22:16 - 2016-09-23 22:42 - 03977632 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-02-08 22:16 - 2016-09-23 22:42 - 03513632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-02-06 23:54 - 2016-10-04 17:30 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-06 20:48 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-06 20:28 - 2017-02-01 22:00 - 00347584 _____ (Big Nerd Software, LLC) C:\Users\Max_cz\Downloads\WebLaunchRecorder.exe
2017-02-05 14:15 - 2016-10-03 19:14 - 00000000 ____D C:\ProgramData\Adobe
2017-02-05 14:15 - 2016-10-03 18:45 - 00000000 ____D C:\Users\Max_cz\AppData\Roaming\Adobe
2017-02-05 14:11 - 2016-10-04 19:19 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-05 14:09 - 2016-10-03 19:16 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-05 13:54 - 2016-10-03 19:15 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-02-05 13:47 - 2016-10-03 19:16 - 00000000 ____D C:\Program Files\Adobe
2017-02-04 12:17 - 2016-10-03 19:21 - 00000000 ____D C:\Users\Max_cz\Desktop\Práce
2017-02-04 03:23 - 2016-11-27 10:04 - 934806714 _____ C:\Windows\MEMORY.DMP
2017-02-04 03:23 - 2016-11-27 10:04 - 00000000 ____D C:\Windows\Minidump
2017-02-04 01:23 - 2016-10-04 19:22 - 00000022 _____ C:\Windows\GPU-Z.INI

==================== Files in the root of some directories =======

2017-01-22 22:59 - 2017-01-22 23:13 - 0000236 _____ () C:\Users\Max_cz\AppData\Roaming\.ptbt1
2016-10-25 20:22 - 2017-03-02 23:31 - 0000132 _____ () C:\Users\Max_cz\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2016-12-02 17:40 - 2016-12-02 17:40 - 0001480 _____ () C:\Users\Max_cz\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2017-02-02 02:33 - 2017-02-02 02:33 - 0001353 _____ () C:\Users\Max_cz\AppData\Local\recently-used.xbel
2016-12-16 19:59 - 2016-12-16 19:59 - 0000017 _____ () C:\Users\Max_cz\AppData\Local\resmon.resmoncfg
2016-11-26 01:24 - 2016-11-23 13:19 - 0000570 _____ () C:\Users\Max_cz\AppData\Local\TroubleshooterConfig.json
2017-01-27 22:16 - 2017-01-27 22:16 - 0000003 _____ () C:\Users\Max_cz\AppData\Local\updater.log
2017-01-27 22:16 - 2017-01-27 22:16 - 0000424 _____ () C:\Users\Max_cz\AppData\Local\UserProducts.xml

Some files in TEMP:
====================
2017-02-05 14:09 - 2017-02-05 14:09 - 0288456 _____ (Adobe Systems Incorporated) C:\Users\Max_cz\AppData\Local\Temp\AAMHelper.exe
2017-02-05 14:07 - 2017-02-05 14:07 - 2212144 _____ (Adobe Systems Incorporated) C:\Users\Max_cz\AppData\Local\Temp\AdobeApplicationManager.exe
2017-03-04 18:53 - 2017-03-04 18:53 - 1157515 _____ () C:\Users\Max_cz\AppData\Local\Temp\ubiDDD3.tmp.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-02-26 19:16

==================== End of FRST.txt ============================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#20 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
CHR Extension: (SEO Profesional Toolbar) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\adecfhccdknoobplgempjhbojlbpahhn [2016-10-04]
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Users\Max_cz\AppData\Local\Temp

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#21 Příspěvek od Max_cz »

Kód: Vybrat vše

Fix result of Farbar Recovery Scan Tool (x64) Version: 05-03-2017
Ran by Max_cz (06-03-2017 19:34:05) Run:2
Running from C:\Users\Max_cz\Desktop
Loaded Profiles: Max_cz (Available Profiles: defaultuser0 & Max_cz)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CHR Extension: (SEO Profesional Toolbar) - C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\adecfhccdknoobplgempjhbojlbpahhn [2016-10-04]
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Users\Max_cz\AppData\Local\Temp

EmptyTemp:
End
*****************

C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\adecfhccdknoobplgempjhbojlbpahhn => moved successfully
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully

"C:\Users\Max_cz\AppData\Local\Temp" folder move:

Could not move "C:\Users\Max_cz\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 85451781 B
Java, Flash, Steam htmlcache => 29789537 B
Windows/system/drivers => 3139266 B
Edge => 0 B
Chrome => 857184734 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 5116 B
LocalService => 0 B
NetworkService => 13716 B
defaultuser0 => 0 B
Max_cz => 1886629273 B

RecycleBin => 0 B
EmptyTemp: => 2.7 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-03-2017 19:36:47)

C:\Users\Max_cz\AppData\Local\Temp => moved successfully

==== End of Fixlog 19:36:47 ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#22 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#23 Příspěvek od Max_cz »

Uvidím zase v průběhu, od posledně to vyskočilo jen asi třikrát... Zatím děkuji

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#24 Příspěvek od Max_cz »

Ještě bych měl dotaz, jak je možné, že na uvedeném PC je například psaní v Google Chrome zasekané?

Píšu a znaky mi tam skáčou opožděně, jakoby se zasekal Chrome

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#25 Příspěvek od Rudy »

Zkusíme vyčistit prohlížeče. Spusťte tyto skeny:

1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize




autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;





Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a

2. Junkware removal tool: http://thisisudax.org/downloads/JRT.exe
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#26 Příspěvek od Max_cz »

Tak jsem pustil to první a už 20minut mi tam píše tohle https://ctrlv.cz/LM9E a nic se neděje

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#27 Příspěvek od Max_cz »

Kód: Vybrat vše

Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Max_cz on 07.03.2017 at 22:28:09,49.
Microsoft Windows 10 Pro 10.0.14393  x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Max_cz\Desktop\zoek.exe [Scan all users] [Script inserted] 

==== Older Logs ======================

C:\zoek-results2017-03-06-231053.log	1193 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp. 
# 
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 
# 
# This file contains the mappings of IP addresses to host names. Each 
# entry should be kept on an individual line. The IP address should 
# be placed in the first column followed by the corresponding host name. 
# The IP address and the host name should be separated by at least one 
# space. 
# 
# Additionally, comments (such as these) may be inserted on individual 
# lines or following the machine name denoted by a '#' symbol. 
# 
# For example: 
# 
#      102.54.94.97     rhino.acme.com          # source server 
#       38.25.63.10     x.acme.com              # x client host 
 
127.0.0.1       localhost 

==== Empty Folders Check ======================

C:\PROGRA~3\BlueStacksSetup deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\Shared Space deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\Users\defaultuser0\AppData\LocalLow deleted successfully
C:\Users\defaultuser0\AppData\Local\VirtualStore deleted successfully
C:\Users\Max_cz\AppData\Local\GHISLER deleted successfully
C:\Users\Max_cz\AppData\Local\gtk-3.0 deleted successfully
C:\Users\Max_cz\AppData\Local\PeerDistRepub deleted successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\My Program deleted
C:\Users\Max_cz\.android deleted
C:\PROGRA~2\BitLord deleted
C:\PROGRA~3\{48632410-2828-439F-92F4-5151AA4B9620} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Max_cz\AppData\Local\updater.log deleted
C:\Users\Max_cz\AppData\Local\BitLord deleted
C:\Users\Max_cz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord deleted
C:\windows\SysNative\tasks\update-S-1-5-21-497983172-942744989-883898907-1001 deleted
C:\windows\SysNative\tasks\update-sys deleted
C:\Windows\tasks\update-S-1-5-21-497983172-942744989-883898907-1001.job deleted
C:\Windows\tasks\update-sys.job deleted
C:\Users\Max_cz\Documents\BitLord deleted
"C:\Users\Max_cz\AppData\Roaming\.ptbt1" deleted
"C:\Users\Max_cz\AppData\Roaming\hugin\camlens.db" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.4.0.1\Lightshot.dll" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.4.0.1\Lightshot.exe" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.4.0.1\uploader.dll" deleted
"C:\Users\Max_cz\AppData\Roaming\hugin" deleted
"C:\PROGRA~2\Skillbrains" deleted
"C:\PROGRA~2\Skillbrains\lightshot" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.4.0.1" deleted

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - No path found[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]

Invite All Friends on Facebook - Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmmhkeajgflmokoaaoadgkhhmibjbpj
Přidávání a otevírání aplikací pro Ch... - Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhfiojdaegegaeiefilimljmbiegiebd
Google Drive App Launcher - Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh
Chrome Media Router - Max_cz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences will be reset at reboot
C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Web Data will be reset at reboot
C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal will be reset at reboot

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Max_cz\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Max_cz\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache will be emptied at reboot

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=488 folders=86 255548803 bytes)

==== Empty Temp Folders ======================

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Max_cz\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences" deleted
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Web Data" not found
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal" not found
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0" deleted
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1" deleted
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2" deleted
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3" deleted
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache\f_002b10" deleted
"C:\Users\Max_cz\AppData\Local\Google\Chrome\User Data\Default\Cache\index" deleted

==== EOF on 08.03.2017 at  2:08:18,97 ======================

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#28 Příspěvek od Max_cz »

Kód: Vybrat vše

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.1 (02.11.2017)
Operating System: Windows 10 Pro x64 
Ran by Max_cz (Administrator) on 08.03.2017 at  2:19:20,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 1 

Successfully deleted: C:\Users\Max_cz\AppData\Roaming\new version available (Folder) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.03.2017 at  2:42:46,80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#29 Příspěvek od Rudy »

Změnilo se něco nyní?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Max_cz
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 191
Registrován: 20 pro 2005 22:14
Kontaktovat uživatele:

Re: Preventivní kontrola, podezřelé chování

#30 Příspěvek od Max_cz »

PC se zdá býti rychlejší jak v prohlížeči, tak v OS... Jen teda ten první program mě vypekl, do noci :)

Uvidím, jak ta hláška od googlu....

Zatím Vám moc děkuji a díky za Váš čas!

Odpovědět