prosím o kontrolu po odstranění virů

[hoffip]

zdravím
objevilo se mi několik virů a malware, prosím o kontrolu po odstranění
moc děkuji

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-06-2017 01
Ran by já (administrator) on HOFFI (26-06-2017 10:04:39)
Running from C:\Users\já\Desktop
Loaded Profiles: já & NeroMediaHomeUser.4 (Available Profiles: já & NeroMediaHomeUser.4)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\afwServ.exe
(Acronis) C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchksrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(深圳市猫哈网络科技发展有限公司) C:\Program Files\Maoha\JiSuZip\JszipSvc.exe
(Intel) C:\Program Files\Intel\AMT\LMS.exe
(Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Secure VPN\VpnSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(Intel) C:\Program Files\Intel\AMT\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files\Common Files\Acronis\Plán2\schedhlp.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchk.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\MOM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Secure VPN\Vpn.exe
() C:\Users\já\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\já\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [5129128 2009-11-26] (Acronis)
HKLM\...\Run: [Služba Acronis Scheduler2] => C:\Program Files\Common Files\Acronis\Plán2\schedhlp.exe [361976 2009-11-26] (Acronis)
HKLM\...\Run: [atchk] => C:\Program Files\Intel\AMT\atchk.exe [401408 2009-12-01] (Intel Corporation)
HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220288 2017-05-31] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [263232 2017-06-19] (AVG Technologies CZ, s.r.o.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\já\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\já\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-06-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [JzShlobj] -> {9A0700D2-920A-4E52-8697-9B5230C92612} => C:\Program Files\Maoha\JiSuZip\JZipExt.dll [2016-12-27] (深圳市猫哈网络科技发展有限公司)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk [2015-09-16]
ShortcutTarget: Adobe Gamma Loader.exe.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVG Secure VPN.lnk [2017-06-20]
ShortcutTarget: AVG Secure VPN.lnk -> C:\Program Files\AVG\Secure VPN\Vpn.exe (AVG Technologies CZ, s.r.o.)
GroupPolicy: Restriction - Chrome <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.152.40.4 10.152.40.5
Tcpip\..\Interfaces\{957CA755-4DA1-4618-81CD-7110FC24614F}: [DhcpNameServer] 10.152.40.4 10.152.40.5
Tcpip\..\Interfaces\{ACEF57F9-4765-4608-B24C-B4A6E37F6E67}: [DhcpNameServer] 192.168.1.1 10.0.1.1
Tcpip\..\Interfaces\{FB99F0FB-A5B9-47BF-A50C-27B9CDD98661}: [NameServer] 77.234.40.79

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131423511432154247&GUID=9ADB3CEC-CC8D-4F96-BCE2-4C23247433A5
SearchScopes: HKU\S-1-5-21-3652049243-2285433834-3787751601-1000 -> {567240AD-E7B0-4880-9D1E-6CF3B7627A95} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,
SearchScopes: HKU\S-1-5-21-3652049243-2285433834-3787751601-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={61259027-1D93-4029-BA51-AB46E0FB91FC}&mid=f4886081db2f47cda1dbd16836cb9048-8aa6e2c146376c05a3fa4797ea92f95d671d07c1&lang=cs&ds=AVG&coid=avgtbavg&cmpid=0415avt&pr=fr&d=2015-05-01 08:51:28&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default [2017-06-26]
FF user.js: detected! => C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\user.js [2017-04-08]
FF NewTab: Mozilla\Firefox\Profiles\3zclphja.default -> hxxp://www-searching.com/?site=shyosffdefault&prd=set_ff&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\3zclphja.default -> Seznam
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\3zclphja.default -> hxxp://search.seznam.cz/?sourceid=quicksearch_25756&q={searchTerms}&
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\3zclphja.default -> Seznam
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\3zclphja.default -> Seznam
FF Homepage: Mozilla\Firefox\Profiles\3zclphja.default -> hxxps://www.seznam.cz/
FF Keyword.URL: Mozilla\Firefox\Profiles\3zclphja.default -> hxxp://www-searching.com/search.aspx?site=shdefault1&prd=smw&pid=s&shr=d&q={searchTerms}&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,
FF Extension: (Tables) - C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\Extensions\378507@extcorp.net.xpi [2017-04-08]
FF Extension: (Emoji Keyboard) - C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\Extensions\@emojikeyboard.xpi [2017-06-24]
FF Extension: (Enhancer for YouTube™) - C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2017-06-24]
FF Extension: (uBlock Origin) - C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\Extensions\uBlock0@raymondhill.net.xpi [2017-06-24]
FF SearchPlugin: C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\searchplugins\seznam-avast.xml [2017-04-28]
FF SearchPlugin: C:\Users\já\AppData\Roaming\Mozilla\Firefox\Profiles\3zclphja.default\searchplugins\smod.xml [2017-06-19]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-05-15]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www-searching.com/?pid=s&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,&vp=ch&prd=set_ch
CHR StartupUrls: Default -> "hxxp://www-searching.com/?pid=s&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,&vp=ch&prd=set_ch"
CHR NewTab: Default -> "active": true,
"entry": "chrome-extension://olfeabkoenfaoljndfecamgilllcpiak/core/chrome/content/speedDial/speedDial.html"

CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shyos&prd=set_ch&q={searchTerms}&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,
CHR DefaultSearchKeyword: Default -> www-searching.com
CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}
CHR Profile: C:\Users\já\AppData\Local\Google\Chrome\User Data\Default [2017-06-24]
CHR Extension: (Prezentace Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-18]
CHR Extension: (Dokumenty Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-18]
CHR Extension: (Disk Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Seznam Lištička - Email) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2017-06-20]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2017-06-20]
CHR Extension: (YouTube) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Vyhledávání Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Tabulky Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-18]
CHR Extension: (Tables) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-20]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2017-06-20]
CHR Extension: (Gmail) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-18]
CHR Extension: (Chrome Media Router) - C:\Users\já\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-20]
CHR Profile: C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile [2017-06-24]
CHR Extension: (Prezentace Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-28]
CHR Extension: (Dokumenty Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-28]
CHR Extension: (Disk Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-28]
CHR Extension: (YouTube) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-28]
CHR Extension: (Vyhledávání Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-28]
CHR Extension: (Tabulky Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-28]
CHR Extension: (Bookmark Manager) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-28]
CHR Extension: (Peněženka Google) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-28]
CHR Extension: (Gmail) - C:\Users\já\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-28]
CHR HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe [661008 2009-11-26] (Acronis)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [2480048 2014-01-10] (Acronis)
R2 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [176128 2009-12-01] (Intel Corporation) [File not signed]
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [264432 2017-06-19] (AVG Technologies CZ, s.r.o.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [311624 2017-06-19] (AVG Technologies CZ, s.r.o.)
S3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [5782800 2017-06-19] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [1189720 2017-05-31] (AVG Technologies CZ, s.r.o.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 JszipService; C:\Program Files\Maoha\JiSuZip\JszipSvc.exe [130072 2017-02-16] (深圳市猫哈网络科技发展有限公司) <==== ATTENTION
R2 LMS; C:\Program Files\Intel\AMT\LMS.exe [102400 2009-12-01] (Intel) [File not signed]
R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-29] (Nero AG)
R2 SecureVpn; C:\Program Files\AVG\Secure VPN\VpnSvc.exe [2154704 2017-04-03] (AVG Technologies CZ, s.r.o.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [4677904 2017-02-21] (AVG Technologies CZ, s.r.o.)
R2 UNS; C:\Program Files\Intel\AMT\UNS.exe [2519040 2009-12-01] (Intel) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 1142ce0cc4169c34adc828c3a750e8ad; C:\Windows\system32\drivers\1142ce0cc4169c34adc828c3a750e8ad.sys [58648 2017-06-19] () [File not signed]
R1 avgbdisk; C:\Windows\system32\drivers\avgbdiskx.sys [135872 2017-06-19] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys [260616 2017-06-19] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys [151024 2017-06-19] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\system32\drivers\avgblogx.sys [270344 2017-06-19] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys [43992 2017-06-19] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\system32\drivers\avgHwid.sys [35264 2017-06-19] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [109056 2017-06-19] (AVG Technologies CZ, s.r.o.)
R3 avgNetNd6; C:\Windows\System32\DRIVERS\avgNetNd6.sys [28408 2017-06-19] (AVG Technologies CZ, s.r.o.)
R1 avgNetSec; C:\Windows\system32\drivers\avgNetSec.sys [392176 2017-06-19] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [91464 2017-06-19] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [63280 2017-06-19] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\system32\drivers\avgSnx.sys [765704 2017-06-19] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\system32\drivers\avgSP.sys [483736 2017-06-19] (AVG Technologies CZ, s.r.o.)
S2 avgStm; C:\Windows\system32\drivers\avgStm.sys [116280 2017-06-19] (AVG Technologies CZ, s.r.o.)
S3 avgTap; C:\Windows\System32\DRIVERS\avgTap.sys [49136 2016-12-09] (The OpenVPN Project)
R0 avgVmm; C:\Windows\system32\drivers\avgVmm.sys [280928 2017-06-19] (AVG Technologies CZ, s.r.o.)
R3 e1express; C:\Windows\System32\DRIVERS\e1e6232.sys [219352 2009-06-05] (Intel Corporation)
S3 e1kexpress; C:\Windows\System32\DRIVERS\e1k6032.sys [164864 2009-07-14] (Intel Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [22728 2017-01-19] (SlimWare Utilities, Inc.)
R0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [911680 2014-01-10] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [31792 2017-02-21] (AVG Netherlands B.V.)
R1 WiserIso; C:\Windows\System32\Drivers\vcdrom.sys [22360 2016-12-27] () <==== ATTENTION
S3 catchme; \??\C:\Users\J8D6B~1\AppData\Local\Temp\catchme.sys [X]
S1 JszipProtect; \??\C:\Program Files\Maoha\JiSuZip\JsZipProtect.sys [X] <==== ATTENTION
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-26 10:04 - 2017-06-26 10:07 - 00020131 _____ C:\Users\já\Desktop\FRST.txt
2017-06-26 10:04 - 2017-06-26 10:04 - 00000000 ____D C:\FRST
2017-06-26 10:03 - 2017-06-26 10:03 - 00112640 _____ (forum.viry.cz) C:\Users\já\Desktop\FRSTLauncher.exe
2017-06-26 09:57 - 2017-06-26 09:57 - 01780224 _____ (Farbar) C:\Users\já\Desktop\FRST.exe
2017-06-24 13:05 - 2017-06-24 13:06 - 09599704 _____ (Piriform Ltd) C:\Users\já\Downloads\ccsetup531pro.exe
2017-06-23 23:17 - 2017-06-23 23:17 - 00000000 ____D C:\Users\já\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2017-06-23 23:16 - 2017-06-23 23:16 - 02168712 _____ (emc) C:\Users\já\Downloads\uTorrent221.exe
2017-06-22 15:50 - 2017-06-22 15:50 - 00001121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-06-22 15:49 - 2017-06-22 15:49 - 00266328 _____ (Mozilla) C:\Users\já\Downloads\Firefox Setup Stub 54.0.exe
2017-06-20 17:24 - 2016-12-09 15:35 - 00049136 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\avgTap.sys
2017-06-20 17:11 - 2017-06-20 17:11 - 00000000 ___RD C:\Program Files\Skype
2017-06-20 17:11 - 2017-06-20 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-06-20 17:11 - 2017-06-20 17:11 - 00000000 ____D C:\Program Files\Common Files\Skype
2017-06-20 17:06 - 2017-06-20 17:06 - 00002552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2017-06-20 17:06 - 2017-06-20 17:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
2017-06-20 17:06 - 2017-02-21 09:29 - 00049936 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\TURegOpt.exe
2017-06-20 17:06 - 2017-02-21 09:25 - 00042256 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\authuitu.dll
2017-06-20 15:23 - 2017-06-20 15:23 - 02160656 _____ C:\Users\já\Downloads\wrar540cz(1).exe
2017-06-20 15:18 - 2017-06-20 15:22 - 07349520 _____ C:\Users\já\Downloads\listicka-partner-28314-1.1.18-offline.exe
2017-06-20 15:18 - 2017-06-20 15:22 - 00733272 _____ () C:\Users\já\Downloads\wrar540cz.exe
2017-06-20 15:18 - 2017-06-20 15:18 - 00733272 _____ () C:\Users\já\Downloads\winrar-seznam-listicka.exe
2017-06-20 14:27 - 2017-06-20 14:27 - 00029428 _____ C:\Users\já\Documents\cc_20170620_142732.reg
2017-06-20 14:22 - 2017-06-20 14:22 - 09598376 _____ (Piriform Ltd) C:\Users\já\Downloads\ccsetup531.exe
2017-06-20 14:18 - 2017-06-20 14:18 - 00000000 ___HD C:\$AV_AVG
2017-06-19 15:38 - 2017-06-19 15:38 - 00483736 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2017-06-19 15:38 - 2017-06-19 15:38 - 00280928 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2017-06-19 15:38 - 2017-06-19 15:38 - 00116280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgstm.sys
2017-06-19 15:38 - 2017-06-19 15:38 - 00109056 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2017-06-19 15:38 - 2017-06-19 15:38 - 00091464 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2017-06-19 15:38 - 2017-06-19 15:38 - 00063280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2017-06-19 15:38 - 2017-06-19 15:38 - 00035264 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00765704 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00392176 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetSec.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00331896 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2017-06-19 15:38 - 2017-06-19 15:37 - 00270344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgblogx.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00260616 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdriverx.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00151024 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidshx.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00135872 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbdiskx.sys
2017-06-19 15:38 - 2017-06-19 15:37 - 00043992 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbunivx.sys
2017-06-19 15:37 - 2017-06-19 15:37 - 00028408 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetNd6.sys
2017-06-19 15:36 - 2017-06-20 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-06-19 15:32 - 2017-06-19 15:32 - 03449304 _____ (AVG Technologies CZ, s.r.o.) C:\Users\já\Downloads\Antivirus_Free_1896.exe
2017-06-19 15:18 - 2017-06-19 15:18 - 00000270 __RSH C:\Users\já\ntuser.pol
2017-06-19 15:18 - 2017-06-19 15:18 - 00000000 ____D C:\ProgramData\KZMount
2017-06-19 15:10 - 2017-06-19 15:11 - 00007846 _____ C:\Users\já\Documents\cc_20170619_151044.reg
2017-06-19 15:05 - 2017-06-19 15:22 - 00001042 _____ C:\Users\NeroMediaHomeUser.4\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-19 15:01 - 2017-06-19 15:01 - 00000000 ____D C:\Windows\system32\SSL
2017-06-19 14:56 - 2017-06-19 15:01 - 01705984 _____ C:\Users\já\AppData\Local\po.db
2017-06-19 14:55 - 2017-06-19 15:00 - 00930816 _____ C:\Users\já\AppData\Local\test_db_cara.db
2017-06-19 14:55 - 2017-06-19 14:57 - 00000000 ____D C:\Users\já\AppData\Roaming\UCChannel
2017-06-19 14:55 - 2017-06-19 14:55 - 00006450 __RSH C:\ProgramData\ntuser.pol
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\Users\já\AppData\Roaming\BrowserModule
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\ProgramData\SearchModule
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\Program Files\Maoha
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\Program Files\Common Files\Noobzo
2017-06-19 14:55 - 2016-12-27 04:34 - 00022360 _____ C:\Windows\system32\Drivers\vcdrom.sys
2017-06-19 14:54 - 2017-06-24 00:52 - 00000000 ____D C:\Program Files\pchandller
2017-06-19 14:54 - 2017-06-24 00:48 - 00000000 ____D C:\Users\já\AppData\Roaming\IeMiss2
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Users\já\AppData\Roaming\0pnijvqfwvu
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Users\já\AppData\Roaming\05e5es0sxef
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\X4QSC0WHQI
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\tmjzeq4n24p
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\P5ZHQEO2H0
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\BZip
2017-06-19 14:54 - 2017-06-19 15:43 - 00000000 ____D C:\ProgramData\WindowsVideoErrorReporting
2017-06-19 14:54 - 2017-06-19 15:15 - 00000000 ____D C:\Program Files\Retreive
2017-06-19 14:54 - 2017-06-19 14:54 - 00000000 ____D C:\Users\Public\Documents\XMUpdate
2017-06-16 15:23 - 2017-06-16 15:23 - 00055797 _____ C:\Users\já\Downloads\Modification Translocation.rar
2017-06-16 07:34 - 2017-06-19 16:23 - 00058648 _____ C:\Windows\system32\Drivers\1142ce0cc4169c34adc828c3a750e8ad.sys
2017-06-16 07:34 - 2017-06-16 07:34 - 00051622 _____ C:\Windows\uninstaller.dat
2017-06-14 06:42 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-06-14 06:41 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-14 06:41 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-14 06:41 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-14 06:41 - 2017-06-02 09:57 - 00497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-14 06:41 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-06-14 06:41 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-06-14 06:41 - 2017-05-21 06:10 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-06-14 06:41 - 2017-05-21 06:10 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-06-14 06:41 - 2017-05-21 06:06 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-06-14 06:41 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-06-14 06:41 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-06-14 06:41 - 2017-05-21 05:43 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-14 06:41 - 2017-05-21 05:42 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-14 06:41 - 2017-05-21 05:42 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-14 06:41 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-06-14 06:41 - 2017-05-21 05:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-06-14 06:41 - 2017-05-21 05:42 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-06-14 06:41 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-06-14 06:41 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-06-14 06:41 - 2017-05-14 21:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-06-14 06:41 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-06-14 06:41 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-14 06:41 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-06-14 06:41 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-06-14 06:41 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-06-14 06:41 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-06-14 06:41 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-06-14 06:41 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-06-14 06:41 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-06-14 06:41 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-14 06:41 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-06-14 06:41 - 2017-05-14 21:11 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-06-14 06:41 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-14 06:41 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-06-14 06:41 - 2017-05-14 21:05 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-06-14 06:41 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-06-14 06:41 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-06-14 06:41 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-06-14 06:41 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-06-14 06:41 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-06-14 06:41 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-06-14 06:41 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-06-14 06:41 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-06-14 06:41 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-14 06:41 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-06-14 06:41 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-14 06:41 - 2017-05-14 20:40 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-06-14 06:41 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-06-14 06:41 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-06-14 06:41 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-14 06:41 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-14 06:41 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-14 06:41 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-14 06:41 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-06-14 06:41 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-14 06:41 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-14 06:41 - 2017-05-12 20:04 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-14 06:41 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-14 06:41 - 2017-05-12 19:45 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-14 06:41 - 2017-05-12 19:45 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-14 06:41 - 2017-05-12 19:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-14 06:41 - 2017-05-12 19:45 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-14 06:41 - 2017-05-12 19:44 - 02401792 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-14 06:41 - 2017-05-12 19:43 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-14 06:41 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-14 06:41 - 2017-05-12 19:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-14 06:41 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-14 06:41 - 2017-05-12 18:25 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-14 06:41 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-14 06:41 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-14 06:41 - 2017-05-10 17:12 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-14 06:41 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-14 06:41 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-14 06:41 - 2017-05-10 17:10 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-14 06:41 - 2017-05-10 17:01 - 02092032 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-14 06:41 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-14 06:41 - 2017-05-10 17:00 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-14 06:41 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-14 06:41 - 2017-05-10 17:00 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-14 06:41 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-14 06:41 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-14 06:41 - 2017-05-10 17:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-14 06:41 - 2017-05-10 16:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-14 06:41 - 2017-05-09 17:11 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-14 06:41 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-14 06:41 - 2017-05-09 17:01 - 00066048 _____ C:\Windows\system32\PrintBrmUi.exe
2017-06-14 06:41 - 2017-05-07 17:14 - 00078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-14 06:41 - 2017-05-07 16:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-14 06:41 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-06-12 14:35 - 2017-06-12 14:57 - 00000000 ____D C:\Users\já\Desktop\nápady na paludárko
2017-06-08 16:05 - 2017-06-08 16:05 - 00000000 ____D C:\Users\já\Desktop\záloha
2017-06-04 15:30 - 2017-06-24 13:34 - 00001742 _____ C:\Users\Public\Desktop\Webium's Modpack.lnk
2017-06-04 15:30 - 2017-06-24 13:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\webium's modpack
2017-05-27 20:04 - 2017-05-27 20:04 - 00000000 ____D C:\Users\já\Desktop\paludarko 27.5.17

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-26 10:00 - 2009-07-14 06:34 - 00020880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-26 10:00 - 2009-07-14 06:34 - 00020880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-26 09:06 - 2016-11-18 14:03 - 00000000 ____D C:\Users\já\AppData\LocalLow\Mozilla
2017-06-26 06:36 - 2016-05-18 15:01 - 00000000 ____D C:\Users\já\AppData\Roaming\Seznam.cz
2017-06-26 06:20 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-25 20:33 - 2014-09-26 07:42 - 00000000 ____D C:\Users\já\AppData\Roaming\TS3Client
2017-06-25 01:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2017-06-24 13:41 - 2014-09-26 06:22 - 00000000 ____D C:\Users\já\Desktop\Programy
2017-06-24 13:09 - 2015-04-18 18:04 - 00000000 ____D C:\Users\já\AppData\Roaming\uTorrent
2017-06-24 13:07 - 2014-01-10 01:02 - 00000000 ____D C:\Program Files\CCleaner
2017-06-23 23:15 - 2013-11-30 13:25 - 01583226 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-23 23:15 - 2009-07-14 10:44 - 00668542 _____ C:\Windows\system32\perfh005.dat
2017-06-23 23:15 - 2009-07-14 10:44 - 00141202 _____ C:\Windows\system32\perfc005.dat
2017-06-23 13:28 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Zip POPT Wizard Lite
2017-06-22 15:59 - 2015-04-26 23:05 - 00000000 ____D C:\Users\já\Desktop\Hry
2017-06-22 15:50 - 2015-04-17 20:29 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-22 15:50 - 2014-01-10 01:02 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-22 15:45 - 2014-01-10 01:01 - 00000000 ____D C:\Program Files\VideoLAN
2017-06-20 23:55 - 2017-02-18 18:38 - 00000000 ____D C:\Users\NeroMediaHomeUser.4
2017-06-20 23:53 - 2014-01-10 01:00 - 00000000 ____D C:\Program Files\WinRAR
2017-06-20 17:24 - 2016-06-10 11:27 - 00000000 ____D C:\Users\já\AppData\Roaming\AVG
2017-06-20 17:24 - 2015-09-21 06:35 - 00000000 ____D C:\ProgramData\Avg
2017-06-20 17:24 - 2015-04-17 17:17 - 00000000 ____D C:\Program Files\AVG
2017-06-20 17:12 - 2015-04-18 23:55 - 00000000 ____D C:\ProgramData\Skype
2017-06-20 17:05 - 2015-09-21 06:33 - 00000000 ____D C:\Users\já\AppData\Local\AvgSetupLog
2017-06-20 15:36 - 2010-11-11 07:01 - 00000000 ____D C:\Users\já\AppData\Roaming\WinRAR
2017-06-20 15:23 - 2014-01-10 01:00 - 00000000 ____D C:\Users\já\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-20 15:23 - 2014-01-10 01:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-20 14:22 - 2014-01-10 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-06-19 19:34 - 2014-01-26 16:32 - 00001912 _____ C:\Windows\epplauncher.mif
2017-06-19 15:35 - 2014-06-05 07:28 - 00002327 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-19 15:35 - 2013-11-30 13:20 - 00001228 _____ C:\Users\já\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-19 15:18 - 2013-11-30 13:19 - 00000000 ____D C:\Users\já
2017-06-19 15:06 - 2015-04-29 08:49 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-19 15:04 - 2017-05-15 07:52 - 00000000 ____D C:\ProgramData\Adguard
2017-06-19 14:54 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\GroupPolicy
2017-06-17 00:54 - 2015-06-12 23:04 - 00000000 ____D C:\Windows\rescache
2017-06-16 15:05 - 2014-09-26 08:00 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-06-16 15:05 - 2014-09-26 08:00 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-06-16 15:05 - 2014-09-26 08:00 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-14 14:32 - 2009-07-14 06:33 - 00424304 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-14 14:27 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\migwiz
2017-06-14 08:56 - 2014-09-26 09:26 - 00000000 ____D C:\Windows\system32\MRT
2017-06-14 08:52 - 2014-09-26 09:26 - 130903960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-08 15:59 - 2016-10-05 08:15 - 00000000 ____D C:\Users\já\Desktop\MODY wot
2017-06-04 21:28 - 2016-03-23 17:31 - 00000000 ____D C:\Users\já\Desktop\WOT
2017-06-02 09:33 - 2009-07-14 06:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-30 22:45 - 2014-01-26 16:18 - 00456360 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Files in the root of some directories =======

2016-03-21 16:52 - 2016-03-21 16:52 - 0012879 _____ () C:\Users\já\AppData\Roaming\alsoft.ini
2017-06-19 14:56 - 2017-06-19 15:01 - 1705984 _____ () C:\Users\já\AppData\Local\po.db
2015-04-28 17:54 - 2015-05-09 14:12 - 0007606 _____ () C:\Users\já\AppData\Local\Resmon.ResmonCfg
2017-06-19 14:55 - 2017-06-19 15:00 - 0930816 _____ () C:\Users\já\AppData\Local\test_db_cara.db
2017-05-15 07:52 - 2017-05-15 07:52 - 0000287 _____ () C:\ProgramData\fontcacheev1.dat

Files to move or delete:
====================
C:\ProgramData\fontcacheev1.dat


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: AVG Antivirus (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Antivirus (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Antivirus (Disabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\j \Desktop" je 694 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[JaRon]

ahoj,
citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>

Kód: Vybrat vše

Start
(深圳市猫哈网络科技发展有限公司) C:\Program Files\Maoha\JiSuZip\JszipSvc.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\já\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-3652049243-2285433834-3787751601-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\já\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [JzShlobj] -> {9A0700D2-920A-4E52-8697-9B5230C92612} => C:\Program Files\Maoha\JiSuZip\JZipExt.dll [2016-12-27] (深圳市猫哈网络科技发展有限公司)
SearchScopes: HKU\S-1-5-21-3652049243-2285433834-3787751601-1000 -> {567240AD-E7B0-4880-9D1E-6CF3B7627A95} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=H6Jzltpbl1AU,82c86a23-6587-4c46-a6a7-4bde44431477,
SearchScopes: HKU\S-1-5-21-3652049243-2285433834-3787751601-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={61259027-1D93-4029-BA51-AB46E0FB91FC}&mid=f4886081db2f47cda1dbd16836cb9048-8aa6e2c146376c05a3fa4797ea92f95d671d07c1&lang=cs&ds=AVG&coid=avgtbavg&cmpid=0415avt&pr=fr&d=2015-05-01 08:51:28&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
R2 JszipService; C:\Program Files\Maoha\JiSuZip\JszipSvc.exe [130072 2017-02-16] (深圳市猫哈网络科技发展有限公司) <==== ATTENTION
R1 WiserIso; C:\Windows\System32\Drivers\vcdrom.sys [22360 2016-12-27] () <==== ATTENTION
S3 catchme; \??\C:\Users\J8D6B~1\AppData\Local\Temp\catchme.sys [X]
S1 JszipProtect; \??\C:\Program Files\Maoha\JiSuZip\JsZipProtect.sys [X] <==== ATTENTION
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\Users\já\AppData\Roaming\BrowserModule
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\ProgramData\SearchModule
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\Program Files\Maoha
2017-06-19 14:55 - 2017-06-19 14:55 - 00000000 ____D C:\Program Files\Common Files\Noobzo
2017-06-19 14:55 - 2016-12-27 04:34 - 00022360 _____ C:\Windows\system32\Drivers\vcdrom.sys
2017-06-19 14:54 - 2017-06-24 00:52 - 00000000 ____D C:\Program Files\pchandller
2017-06-19 14:54 - 2017-06-24 00:48 - 00000000 ____D C:\Users\já\AppData\Roaming\IeMiss2
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Users\já\AppData\Roaming\0pnijvqfwvu
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Users\já\AppData\Roaming\05e5es0sxef
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\X4QSC0WHQI
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\tmjzeq4n24p
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\P5ZHQEO2H0
2017-06-19 14:54 - 2017-06-19 23:30 - 00000000 ____D C:\Program Files\BZip
2017-06-19 14:54 - 2017-06-19 15:43 - 00000000 ____D C:\ProgramData\WindowsVideoErrorReporting
2017-06-19 14:54 - 2017-06-19 15:15 - 00000000 ____D C:\Program Files\Retreive
2017-06-19 14:54 - 2017-06-19 14:54 - 00000000 ____D C:\Users\Public\Documents\XMUpdate
2017-06-16 15:23 - 2017-06-16 15:23 - 00055797 _____ C:\Users\já\Downloads\Modification Translocation.rar



EmptyTemp:
Reboot:
End

•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[hoffip]

prosím o smazání téma, pc jsem přeinstaloval cýlý znova, díky