DistributedCOM vyřešení chyb

[tomorn]

Ahoj,
prosím o pomoc při řešení vysoké aktivity disku. V protokolech systému jsem zjistil asi příčinu ale nevím jak postupovat. A již se mi počítač 2x restartoval na chvilku se objevila modrá obrazovka - taková ta modrá smrt ve win 8.1.

Pravděpodobný problém: "Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca se v daném časovém limitu neregistroval u služby DCOM."

Nevím jakým logem začít tak se raději zeptám.

Děkuji.

[Rudy]

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

[tomorn]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by tomorn mistni ucet (administrator) on TOMAS-THINK on 09-04-2015 17:43:32
Running from C:\Users\tomorn\Desktop
Loaded Profiles: tomorn mistni ucet (Available profiles: tomorn mistni ucet)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
(Lenovo Corporation) C:\Program Files\lenovo\Communications Utility\AVControlCenter32.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Lenovo Corporation) C:\Program Files\lenovo\Communications Utility\avfaudiosw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Lenovo Group Limited) C:\Program Files\lenovo\SettingsDependency\SettingsService.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Lenovo) C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo) C:\Program Files\lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Lenovo) C:\Program Files\lenovo\Lenovo Solution Center\LSCNotify.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Pražská softwarová s.r.o.) C:\CPP\CppKalkulacky\CppCalcServer.exe
(Pražská softwarová s.r.o.) C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\apcsystray.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Lenovo Corporation) C:\Program Files\lenovo\Communications Utility\tpknrres.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
() C:\Program Files (x86)\Opera\28.0.1750.51_1\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\28.0.1750.51_1\opera.exe
(forum.viry.cz) C:\Users\tomorn\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [384344 2014-02-17] (Lenovo.)
HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937928 2014-12-10] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] => rundll32.exe "C:\Program Files\Lenovo\Communications Utility\LibStartStub.dll",AVStartupStub
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [518424 2013-07-18] (Acronis)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-08] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Display] => C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe [284024 2011-08-24] (Schneider Electric)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7805824 2013-11-22] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1102192 2013-10-10] (Acronis International GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7806232 2015-03-26] (SUPERAntiSpyware)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {0b74b0ea-da00-11e4-bfcb-001f3aefc032} - "D:\setup.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {579dcc70-cd31-11e4-bfae-001f3aefc032} - "D:\Startme.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c241-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c247-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\APC UPS Status.lnk
ShortcutTarget: APC UPS Status.lnk -> C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe (Schneider Electric)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ING eKalkulačka.lnk
ShortcutTarget: ING eKalkulačka.lnk -> C:\IngApps\ING_eKalkulacka_ING_CZ\run.cmd ()
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe (Pražská softwarová s.r.o.)
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kooperativa - PDF Server.lnk
ShortcutTarget: Kooperativa - PDF Server.lnk -> C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe (Pražská softwarová s.r.o.)
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe (Pražská softwarová s.r.o.)
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kooperativa - PDF Server.lnk
ShortcutTarget: Kooperativa - PDF Server.lnk -> C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe (Pražská softwarová s.r.o.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1076011386-52816415-3729311051-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {14579F23-A5A0-4F3D-9E90-3DD5FD1C6E1B} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {314F55F3-3212-45C1-A39A-5ADDB8B1A4AD} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {392D204A-C60C-49A7-BB4B-E937F2737D5D} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {4100BC4D-C4A1-4F69-9984-1463D2A6C082} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {4401D234-3176-4A54-849F-FD22C5D8C3F0} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {4664258D-8806-4EDC-9EF9-DD9DDC441092} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {B67A06F3-8775-43A5-AB21-544D12D06B1D} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {E2302477-A84F-4BBF-80F9-F89A17D36F96} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-08] (Avast Software s.r.o.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-08] (Avast Software s.r.o.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 62.204.224.2 62.240.163.170

FireFox:
========
FF ProfilePath: C:\Users\tomorn\AppData\Roaming\Mozilla\Firefox\Profiles\4dv2f4g5.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-17] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-17] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-09-25] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-09-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-22]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-06-23]
FF HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12

Chrome:
=======
CHR Profile: C:\Users\tomorn\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\tomorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-02]
CHR Extension: (Google Wallet) - C:\Users\tomorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-12]
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - No Path Or update_url value

Opera:
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 APC Data Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe [21880 2011-08-24] (Schneider Electric)
R2 APC UPS Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe [705912 2011-08-24] (Schneider Electric)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-08] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-12] (Avast Software)
R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [639944 2014-12-01] (Lenovo Corporation)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2255064 2013-10-28] (Broadcom Corporation.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-18] (Hewlett-Packard Co.) [File not signed]
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-12-05] (Lenovo)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2017736 2014-12-09] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [714696 2014-12-01] (Lenovo Corporation)
S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [474568 2014-12-10] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [470472 2014-12-09] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272440 2015-03-09] (Lenovo)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [558592 2013-10-20] () [File not signed]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [49136 2015-03-27] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448464 2015-03-30] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-08] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-04-08] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-08] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-08] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-08] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-08] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-08] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-08] ()
S3 athrusb; C:\Windows\system32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-10-28] (Broadcom Corporation.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-03] (Disc Soft Ltd)
R3 LnvHIDHW; C:\Windows\System32\drivers\LnvHIDHW.sys [29496 2014-04-07] (Lenovo)
S3 NANMp50; C:\Windows\System32\Drivers\NANMp50.sys [46776 2010-03-25] (Printing Communications Assoc., Inc. (PCAUSA))
S3 NANSp50; C:\Windows\System32\Drivers\NANSp50.sys [45752 2010-03-25] (Printing Communications Assoc., Inc. (PCAUSA))
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation )
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation )
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [45296 2014-07-28] (Synaptics Incorporated)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2015-03-30] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [198432 2015-03-30] (Acronis International GmbH)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-12] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [X]
S2 SPDRIVER_1.37.0.1323; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1323\jsdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-09 17:43 - 2015-04-09 17:44 - 00024898 _____ () C:\Users\tomorn\Desktop\FRST.txt
2015-04-09 17:42 - 2015-04-09 17:43 - 00000000 ____D () C:\FRST
2015-04-09 17:40 - 2015-04-09 17:40 - 00112640 _____ (forum.viry.cz) C:\Users\tomorn\Desktop\FRSTLauncher.exe
2015-04-09 17:39 - 2015-04-09 17:39 - 02095616 _____ (Farbar) C:\Users\tomorn\Desktop\FRST64.exe
2015-04-09 17:01 - 2015-04-09 17:12 - 00000226 _____ () C:\WINDOWS\setupact.log
2015-04-09 17:01 - 2015-04-09 17:01 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-09 16:52 - 2015-04-09 17:19 - 00075538 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-09 16:41 - 2015-04-09 16:41 - 00003852 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1428590498
2015-04-09 16:41 - 2015-04-09 16:41 - 00001147 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 28.lnk
2015-04-09 16:40 - 2015-04-09 16:40 - 00691664 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable (3).exe
2015-04-09 15:48 - 2015-04-09 15:49 - 00691664 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable (2).exe
2015-04-09 12:02 - 2015-04-09 12:02 - 00014308 _____ () C:\Users\tomorn\Downloads\provize_nevyrizene_107318 (1).xls
2015-04-09 07:05 - 2015-04-09 07:05 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-08 23:24 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-08 23:24 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-08 23:24 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-08 23:24 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-08 23:24 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-08 22:17 - 2013-12-11 18:40 - 00002092 _____ () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk
2015-04-08 22:17 - 2013-12-11 18:40 - 00002092 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk
2015-04-08 22:17 - 2013-12-11 18:40 - 00002092 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk
2015-04-08 21:04 - 2015-04-08 21:04 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-04-08 21:04 - 2015-04-08 21:04 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-04-08 20:58 - 2015-04-08 20:58 - 00691688 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable (1).exe
2015-04-08 20:56 - 2015-04-08 20:56 - 00691688 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable.exe
2015-04-08 15:03 - 2015-04-08 15:03 - 04761245 _____ () C:\Users\tomorn\Downloads\Allegro 2014 kalkulator Partners 4.96.zip
2015-04-08 12:59 - 2015-04-08 13:00 - 00427008 _____ () C:\Users\tomorn\Downloads\KalkOSVC.xls
2015-04-07 19:14 - 2015-04-07 19:17 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-07 19:14 - 2015-04-07 19:14 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-06 21:51 - 2015-04-06 21:52 - 05344528 _____ (Piriform Ltd) C:\Users\tomorn\Downloads\ccsetup504.exe
2015-04-03 18:51 - 2015-04-03 19:10 - 516282246 _____ () C:\Users\tomorn\Downloads\Artlantis_Studio_5.1.2.5-Win64bit.zip
2015-04-03 18:12 - 2015-04-03 18:12 - 00010625 _____ () C:\Users\tomorn\Downloads\provize_nevyrizene_107318.xls
2015-04-03 15:28 - 2015-04-03 15:29 - 00030352 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2015-04-03 15:28 - 2015-04-03 15:28 - 00001715 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-04-03 15:28 - 2015-04-03 15:28 - 00000000 ____D () C:\Program Files\DAEMON Tools Lite
2015-04-03 15:27 - 2015-04-03 15:27 - 13146016 _____ (Disc Soft Ltd) C:\Users\tomorn\Downloads\DTLite501-0406.exe
2015-04-03 15:07 - 2015-04-03 15:07 - 00002535 _____ () C:\Users\tomorn\Desktop\Windows 7 USB DVD Download Tool.lnk
2015-04-03 15:07 - 2015-04-03 15:07 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2015-04-03 15:07 - 2015-04-03 15:07 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2015-04-02 21:59 - 2015-04-02 22:00 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\hypocalc
2015-04-02 21:58 - 2015-04-02 21:58 - 01179136 _____ () C:\Users\tomorn\Downloads\hypocalc-update.exe
2015-04-02 21:58 - 2015-04-02 21:58 - 00000000 ____D () C:\Users\tomorn\AppData\Local\hypocalc
2015-04-02 13:20 - 2015-04-02 13:20 - 01366016 _____ () C:\Users\tomorn\Downloads\Prezentace_NZU2013.ppt
2015-04-02 13:03 - 2015-04-02 13:03 - 00128512 _____ () C:\Users\tomorn\Downloads\Kontaktni_osoby_23052014.xls
2015-04-01 19:57 - 2015-04-01 19:57 - 04677544 _____ (Auslogics Software Pty Ltd ) C:\Users\tomorn\Downloads\disk-defrag-setup.exe
2015-04-01 19:57 - 2015-04-01 19:57 - 00001262 _____ () C:\Users\tomorn\Desktop\Auslogics Disk Defrag.lnk
2015-04-01 19:57 - 2015-04-01 19:57 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Auslogics
2015-04-01 19:57 - 2015-04-01 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-04-01 19:57 - 2015-04-01 19:57 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2015-04-01 13:33 - 2015-04-01 13:33 - 00020529 _____ () C:\Users\tomorn\Downloads\klienti_byznys_seznam.xls
2015-03-31 13:28 - 2015-03-31 13:28 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\ModelovaHypoteka
2015-03-31 12:12 - 2015-04-02 15:28 - 00017424 _____ () C:\Users\tomorn\Desktop\AEGON Expert 2.0.log
2015-03-31 00:04 - 2015-03-31 00:04 - 06431728 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408 (2).exe
2015-03-31 00:02 - 2015-03-31 00:03 - 05487040 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\Windows8-Setup (1).exe
2015-03-31 00:02 - 2015-03-31 00:02 - 06431728 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408 (1).exe
2015-03-31 00:01 - 2015-03-31 00:01 - 06431728 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408.exe
2015-03-31 00:01 - 2015-03-31 00:01 - 00001419 _____ () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Stáhnout Windows.lnk
2015-03-31 00:01 - 2015-03-31 00:01 - 00001417 _____ () C:\Users\tomorn\Desktop\Stáhnout Windows.lnk
2015-03-31 00:01 - 2015-03-31 00:01 - 00000000 __RHD () C:\ESD
2015-03-31 00:00 - 2015-03-31 00:00 - 05487040 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\Windows8-Setup.exe
2015-03-30 23:24 - 2015-03-30 23:24 - 01473404 _____ () C:\Users\tomorn\Downloads\BootableUSB (1).zip
2015-03-30 14:10 - 2015-04-09 00:38 - 00000000 ____D () C:\ostatni
2015-03-30 10:37 - 2015-03-30 10:37 - 00001967 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2015-03-30 01:44 - 2015-04-03 06:54 - 00000000 _RSHD () C:\acroldr
2015-03-30 01:09 - 2015-03-30 01:09 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Acronis
2015-03-30 01:06 - 2015-03-30 01:07 - 00000000 ____D () C:\ProgramData\Acronis
2015-03-30 01:06 - 2015-03-30 01:06 - 01464096 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tdrpman.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 01120032 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00367200 _____ (Acronis) C:\WINDOWS\system32\Drivers\afcdp.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00269600 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\snapman.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00198432 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00116000 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2015-03-30 01:05 - 2015-03-30 01:05 - 00001217 _____ () C:\Users\Public\Desktop\Acronis True Image 2014.lnk
2015-03-30 01:05 - 2015-03-30 01:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2015-03-30 01:05 - 2015-03-30 01:05 - 00000000 ____D () C:\Program Files (x86)\Acronis
2015-03-27 10:12 - 2015-03-27 10:13 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2015-03-27 10:12 - 2015-03-27 10:12 - 02997112 _____ (Crystal Dew World ) C:\Users\tomorn\Downloads\CrystalDiskInfo6_2_2-en.exe
2015-03-27 10:12 - 2015-03-27 10:12 - 00001198 _____ () C:\Users\tomorn\Desktop\CrystalDiskInfo.lnk
2015-03-27 10:12 - 2015-03-27 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-03-27 08:44 - 2015-03-27 08:44 - 00000736 _____ () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\download.lnk
2015-03-25 19:54 - 2015-03-25 19:54 - 00231760 _____ () C:\Users\tomorn\Downloads\CrucialScan.exe
2015-03-24 22:31 - 2015-03-24 22:31 - 04241920 _____ () C:\Users\tomorn\Downloads\Nove fondy do IZP_komplet.ppt
2015-03-24 02:43 - 2015-03-24 02:43 - 01473404 _____ () C:\Users\tomorn\Downloads\BootableUSB.zip
2015-03-24 02:25 - 2015-03-24 02:26 - 30887202 _____ () C:\Users\tomorn\Downloads\Novicorp WinToFlash 0.8.0100 beta Portable.zip
2015-03-24 02:14 - 2015-03-24 02:14 - 02721168 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\Windows7-USB-DVD-tool.exe
2015-03-20 12:13 - 2015-03-20 12:13 - 01125626 _____ () C:\Users\tomorn\Downloads\ProcessExplorer.zip
2015-03-20 10:42 - 2015-03-20 10:43 - 01657639 _____ () C:\Users\tomorn\Downloads\TNÚ_Oceňovací tabulky a progrese_srovnání.xlsx
2015-03-18 19:07 - 2015-03-18 19:07 - 00130902 _____ () C:\Users\tomorn\Downloads\google.csv
2015-03-18 19:04 - 2015-03-18 19:04 - 00021757 _____ () C:\Users\tomorn\Downloads\contacts.csv
2015-03-18 18:21 - 2015-03-18 18:21 - 00059392 _____ () C:\Users\tomorn\Downloads\Objednavka odhadu_nova UCB.xls
2015-03-18 18:21 - 2015-03-18 18:21 - 00026624 _____ () C:\Users\tomorn\Downloads\Formular o stavu nemovitosti.xls
2015-03-18 17:40 - 2015-04-09 16:41 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-18 14:02 - 2015-03-18 14:08 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Sony
2015-03-18 14:01 - 2015-03-18 14:01 - 00000000 ____D () C:\ProgramData\Sony Corporation
2015-03-18 14:00 - 2015-03-18 14:00 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-18 13:56 - 2015-03-18 14:06 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Sony
2015-03-18 13:56 - 2015-03-18 14:01 - 00000000 ____D () C:\Program Files (x86)\Sony Media Go Install
2015-03-12 22:08 - 2015-03-12 22:08 - 00001958 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-03-12 22:08 - 2015-03-12 22:08 - 00001898 _____ () C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2015-03-12 22:07 - 2015-04-08 21:04 - 00028144 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-03-11 14:27 - 2015-03-11 14:27 - 00000000 ____D () C:\Users\tomorn mistni ucet\AppData\Local\Lenovo
2015-03-11 14:27 - 2015-03-11 14:27 - 00000000 ____D () C:\Users\tomorn mistni ucet
2015-03-11 09:23 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-03-11 09:23 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-03-11 09:23 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-03-11 09:23 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-03-11 09:23 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-03-11 09:23 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-03-11 09:23 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-03-11 09:23 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-03-11 09:23 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-03-11 09:23 - 2015-01-28 17:41 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-03-11 09:23 - 2015-01-28 17:41 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-03-11 09:23 - 2015-01-28 17:41 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-03-11 09:23 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-03-11 09:23 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-03-11 09:23 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-03-11 09:23 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-03-11 09:22 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-03-11 09:22 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-03-11 09:22 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-03-11 09:22 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-03-11 09:22 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-03-11 09:22 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-03-11 09:22 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-03-11 09:22 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-03-11 09:22 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-03-11 09:22 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-03-11 09:22 - 2015-02-20 03:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-03-11 09:22 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-03-11 09:22 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-03-11 09:22 - 2015-02-20 03:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-03-11 09:22 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-03-11 09:22 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-03-11 09:22 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-03-11 09:22 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-03-11 09:22 - 2015-02-07 01:09 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-03-11 09:22 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-03-11 09:22 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-03-11 09:22 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-03-11 09:22 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-03-11 09:22 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-03-11 09:22 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-03-11 09:22 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-03-11 09:22 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-11 09:22 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-03-11 09:22 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-03-11 09:22 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-03-11 09:22 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-03-11 09:22 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-03-11 09:22 - 2015-01-30 05:00 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-03-11 09:22 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-03-11 09:22 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-03-11 09:22 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-03-11 09:22 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-03-11 09:22 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-03-11 09:22 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-03-11 09:22 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-03-11 09:22 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-03-11 09:22 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-03-11 09:22 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-03-11 09:22 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-03-11 09:22 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-03-11 09:22 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-03-11 09:22 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-11 09:22 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-11 09:22 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-03-11 09:22 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-03-11 09:22 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-03-11 09:22 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-03-11 09:22 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-11 09:22 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-03-11 09:22 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-03-11 09:22 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-03-11 09:21 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-03-11 09:21 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-03-11 09:21 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-03-11 09:21 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-03-11 09:21 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-03-11 09:21 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-03-11 09:21 - 2015-02-20 04:35 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-03-11 09:21 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-03-11 09:21 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-03-11 09:21 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-03-11 09:21 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-03-11 09:21 - 2015-02-20 03:56 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-03-11 09:21 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-03-11 09:21 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-03-11 09:21 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-03-11 09:21 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-03-11 09:21 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-03-11 09:21 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-03-11 09:21 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-03-11 09:21 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-03-11 09:21 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-03-11 09:21 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-03-11 09:21 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-03-11 09:21 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-03-11 09:21 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-03-11 09:21 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-03-11 09:21 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-11 09:21 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-03-11 09:21 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-03-11 09:21 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-03-11 09:21 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-03-11 09:21 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-03-11 09:21 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-03-10 14:15 - 2015-03-10 14:16 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Solvusoft
2015-03-10 14:15 - 2012-10-15 18:02 - 00019888 _____ (solvusoft) C:\WINDOWS\system32\roboot64.exe
2015-03-10 14:14 - 2015-03-10 14:14 - 00000000 ____D () C:\Spacekace
2015-03-10 11:27 - 2015-03-10 11:59 - 00000000 ____D () C:\ProgramData\WinZip
2015-03-10 11:27 - 2015-03-10 11:46 - 00000000 ____D () C:\ProgramData\Norton

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-09 17:39 - 2014-06-21 23:17 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Packages
2015-04-09 17:38 - 2014-06-22 10:59 - 00000000 ____D () C:\Users\tomorn\Documents\Soubory aplikace Outlook
2015-04-09 17:29 - 2015-02-22 13:02 - 00002704 _____ () C:\WINDOWS\system32\AutoPico.log
2015-04-09 17:07 - 2014-06-21 23:23 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1076011386-52816415-3729311051-1001
2015-04-09 17:05 - 2014-10-09 16:11 - 00003758 _____ () C:\WINDOWS\System32\Tasks\AutoKMS
2015-04-09 17:04 - 2014-06-22 08:34 - 00000000 ___DO () C:\Users\tomorn\OneDrive
2015-04-09 17:03 - 2014-10-10 07:34 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-04-09 17:03 - 2014-10-03 17:48 - 00005305 _____ () C:\WINDOWS\system32\Service_KMS.log
2015-04-09 17:02 - 2014-10-21 01:33 - 00000980 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-09 17:02 - 2014-10-19 09:04 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-09 17:01 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-09 16:50 - 2014-10-21 01:33 - 00000984 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-09 16:18 - 2014-06-25 02:33 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\TeamViewer
2015-04-09 16:18 - 2014-06-22 10:19 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\DAEMON Tools Lite
2015-04-09 16:16 - 2014-10-06 09:07 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-09 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-09 15:32 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\tomorn\Documents\Moje naskenované obrázky
2015-04-09 12:52 - 2014-10-19 20:40 - 00000000 ____D () C:\Users\tomorn\AppData\Local\ČSOB_Pojišťovna,_a.s
2015-04-09 12:47 - 2014-06-22 21:14 - 00000000 ____D () C:\ProgramData\firebird
2015-04-09 12:41 - 2014-06-22 21:06 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Deployment
2015-04-09 07:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-09 07:05 - 2014-12-26 09:40 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-09 01:03 - 2014-06-22 08:34 - 00002238 ____H () C:\Users\tomorn\Documents\Default.rdp
2015-04-09 00:39 - 2014-03-18 17:33 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-09 00:39 - 2014-03-18 16:54 - 00739924 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-09 00:39 - 2014-03-18 16:54 - 00151610 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-08 23:24 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-08 22:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-04-08 22:35 - 2014-06-22 18:09 - 00007628 _____ () C:\Users\tomorn\AppData\Local\Resmon.ResmonCfg
2015-04-08 22:18 - 2014-06-22 18:00 - 00000000 ____D () C:\ProgramData\Lenovo
2015-04-08 22:17 - 2014-06-22 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-04-08 22:17 - 2014-06-22 23:49 - 00000000 ____D () C:\WINDOWS\System32\Tasks\TVT
2015-04-08 22:17 - 2014-06-22 18:07 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2015-04-08 22:17 - 2014-06-22 18:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2015-04-08 22:01 - 2014-06-22 04:10 - 00000000 ____D () C:\Users\tomorn
2015-04-08 21:04 - 2014-06-22 09:39 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00271200 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00136752 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00088408 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00065736 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00029168 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-08 08:33 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\tomorn\Documents\Partners
2015-04-07 22:25 - 2014-06-24 13:31 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\ViberPC
2015-04-07 22:25 - 2014-06-24 13:29 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Viber
2015-04-07 20:51 - 2014-12-08 03:54 - 00000000 ____D () C:\Program Files (x86)\KA15
2015-04-07 12:58 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\tomorn\Documents\AXAStudio
2015-04-06 23:39 - 2014-10-27 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFtk - The PDF Toolkit
2015-04-06 23:39 - 2014-10-27 13:25 - 00000000 ____D () C:\Program Files (x86)\PDFtk
2015-04-06 19:23 - 2014-06-22 10:25 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-04-06 19:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-05 21:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-03 15:11 - 2014-06-22 08:38 - 00000000 ____D () C:\install
2015-04-02 07:37 - 2015-01-31 23:15 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-04-02 07:37 - 2015-01-31 23:15 - 00000971 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-03-31 20:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-30 14:16 - 2014-10-24 20:00 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\LSC
2015-03-30 13:59 - 2014-06-22 19:48 - 00000000 ____D () C:\Users\tomorn\Desktop\flash MF
2015-03-30 13:53 - 2014-07-02 17:54 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\MyPhoneExplorer
2015-03-30 12:32 - 2014-06-22 11:04 - 00000000 ____D () C:\Users\tomorn\Documents\zaloha telefonu
2015-03-30 10:37 - 2014-06-22 18:00 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2015-03-30 10:37 - 2014-06-22 18:00 - 00000000 ____D () C:\Program Files\lenovo
2015-03-30 10:36 - 2014-06-22 18:06 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2015-03-30 10:34 - 2014-12-07 13:42 - 00000000 ____D () C:\Program Files (x86)\AusLogics Registry Defrag
2015-03-24 03:13 - 2014-06-22 04:10 - 00002562 _____ () C:\WINDOWS\diagwrn.xml
2015-03-24 03:13 - 2014-06-22 04:10 - 00001908 _____ () C:\WINDOWS\diagerr.xml
2015-03-18 17:46 - 2015-03-03 14:42 - 00000000 ____D () C:\Program Files (x86)\Opera beta
2015-03-18 17:41 - 2014-06-22 23:54 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Opera Software
2015-03-18 17:41 - 2014-06-22 23:54 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Opera Software
2015-03-18 14:16 - 2014-06-22 17:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-17 17:49 - 2015-02-04 10:19 - 00000527 _____ () C:\Users\tomorn\ticket1.xml
2015-03-17 17:48 - 2014-08-27 10:57 - 00000000 ____D () C:\Users\tomorn\Desktop\Lenovo S660 zaloha
2015-03-17 09:13 - 2014-08-26 15:08 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Adobe
2015-03-17 09:07 - 2014-06-22 09:48 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-03-12 07:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-03-12 02:49 - 2013-08-22 16:44 - 00483440 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-03-12 02:45 - 2014-10-21 09:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-12 02:45 - 2014-06-22 11:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-11 15:47 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\tomorn\Documents\CSOBPSmlouvy
2015-03-11 09:31 - 2014-06-21 23:35 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-03-11 09:31 - 2013-08-22 15:25 - 00000269 _____ () C:\WINDOWS\win.ini
2015-03-11 09:26 - 2014-06-21 23:35 - 122905848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\tomorn\AppData\Roaming\LXTRRLNZ
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\tomorn\AppData\Roaming\MFZWJ
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\tomorn\AppData\Roaming\QF
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\tomorn\AppData\Roaming\THAGUQRU
2014-06-22 18:09 - 2015-04-08 22:35 - 0007628 _____ () C:\Users\tomorn\AppData\Local\Resmon.ResmonCfg
2014-06-23 00:26 - 2014-06-23 01:05 - 0000358 _____ () C:\ProgramData\hpzinstall.log

Some content of TEMP:
====================
C:\Users\tomorn\AppData\Local\Temp\3lwwz33_.dll
C:\Users\tomorn\AppData\Local\Temp\6vg-htm_.dll
C:\Users\tomorn\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\tomorn\AppData\Local\Temp\bggcbktb.dll
C:\Users\tomorn\AppData\Local\Temp\dltlimd5.dll
C:\Users\tomorn\AppData\Local\Temp\drzby1wp.dll
C:\Users\tomorn\AppData\Local\Temp\eu2dsief.dll
C:\Users\tomorn\AppData\Local\Temp\foqadeyg.dll
C:\Users\tomorn\AppData\Local\Temp\jf5ctas8.dll
C:\Users\tomorn\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\tomorn\AppData\Local\Temp\kpxezisu.dll
C:\Users\tomorn\AppData\Local\Temp\lmsqrdxj.dll
C:\Users\tomorn\AppData\Local\Temp\mlyiu_tz.dll
C:\Users\tomorn\AppData\Local\Temp\ovv7mx-e.dll
C:\Users\tomorn\AppData\Local\Temp\pfo6ygip.dll
C:\Users\tomorn\AppData\Local\Temp\rqf3cvea.dll
C:\Users\tomorn\AppData\Local\Temp\sevnz.exe
C:\Users\tomorn\AppData\Local\Temp\SppExtComObjHook.dll
C:\Users\tomorn\AppData\Local\Temp\trmoiaim.dll
C:\Users\tomorn\AppData\Local\Temp\udvpvxqe.dll
C:\Users\tomorn\AppData\Local\Temp\xluii8vg.dll
C:\Users\tomorn\AppData\Local\Temp\xr8bwtt0.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\tomorn\Desktop" je 9704 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[tomorn]

# AdwCleaner v4.201 - Log vytvořen 09/04/2015 v 19:05:13
# Aktualizováno 08/04/2015 by Xplode
# Databáze : 2015-04-08.1 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : tomorn mistni ucet - TOMAS-THINK
# Spuštěno z : C:\Users\tomorn\Desktop\adwcleaner_4.201.exe
# Nastavení : Čištění

***** [ Služby ] *****

Služba Smazáno : SPDRIVER_1.37.0.1323

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Users\tomorn\AppData\Roaming\Solvusoft
Soubor Smazáno : C:\WINDOWS\System32\roboot64.exe

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\3b97feac-7cdb-477d-b10f-bd46148c67e9
Klíč Smazáno : HKLM\SOFTWARE\878cfab3-0db0-45fe-b8dd-c2c6c86affa3
Klíč Smazáno : HKLM\SOFTWARE\9b6b6e4f-c233-41cb-b9a6-5390dc73c9fd
Klíč Smazáno : HKLM\SOFTWARE\cbc79570-92ad-422f-b0ff-f8a192c7326a
Klíč Smazáno : HKCU\Software\Conduit
Klíč Smazáno : HKU\.DEFAULT\Software\Goobzo

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 cs)


-\\ Google Chrome v41.0.2272.118


-\\ Comodo Dragon v


-\\ Opera v28.0.1750.51

[C:\Users\tomorn\AppData\Roaming\Opera Software\Opera Stable\Web Data] - Smazáno [Search Provider] : hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd&icid=opera
[C:\Users\tomorn\AppData\Roaming\Opera Software\Opera Stable\Web Data] - Smazáno [Search Provider] : hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd&icid=opera

-\\ Chrome Canary v


*************************

AdwCleaner[R0].txt - [1857 bytů] - [09/04/2015 19:02:28]
AdwCleaner[S0].txt - [1665 bytů] - [09/04/2015 19:05:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1723 bytů] ##########

[Rudy]

Dejte nový log FRST.

[tomorn]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by tomorn mistni ucet (administrator) on TOMAS-THINK on 09-04-2015 19:35:07
Running from C:\Users\tomorn\Desktop
Loaded Profiles: tomorn mistni ucet (Available profiles: tomorn mistni ucet)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Lenovo) C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
(Lenovo Corporation) C:\Program Files\lenovo\Communications Utility\AVControlCenter32.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Lenovo Corporation) C:\Program Files\lenovo\Communications Utility\avfaudiosw.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Lenovo Group Limited) C:\Program Files\lenovo\SettingsDependency\SettingsService.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Lenovo) C:\Program Files\lenovo\Lenovo Solution Center\LSCNotify.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo) C:\Program Files\lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Pražská softwarová s.r.o.) C:\CPP\CppKalkulacky\CppCalcServer.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Pražská softwarová s.r.o.) C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
(Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\apcsystray.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Lenovo Corporation) C:\Program Files\lenovo\Communications Utility\tpknrres.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [384344 2014-02-17] (Lenovo.)
HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937928 2014-12-10] (Lenovo)
HKLM\...\Run: [LENOVO.TPKNRRES] => rundll32.exe "C:\Program Files\Lenovo\Communications Utility\LibStartStub.dll",AVStartupStub
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [518424 2013-07-18] (Acronis)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-08] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Display] => C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe [284024 2011-08-24] (Schneider Electric)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7805824 2013-11-22] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1102192 2013-10-10] (Acronis International GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7806232 2015-03-26] (SUPERAntiSpyware)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {0b74b0ea-da00-11e4-bfcb-001f3aefc032} - "D:\setup.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {579dcc70-cd31-11e4-bfae-001f3aefc032} - "D:\Startme.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c241-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c247-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\APC UPS Status.lnk
ShortcutTarget: APC UPS Status.lnk -> C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe (Schneider Electric)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ING eKalkulačka.lnk
ShortcutTarget: ING eKalkulačka.lnk -> C:\IngApps\ING_eKalkulacka_ING_CZ\run.cmd ()
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe (Pražská softwarová s.r.o.)
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kooperativa - PDF Server.lnk
ShortcutTarget: Kooperativa - PDF Server.lnk -> C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe (Pražská softwarová s.r.o.)
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe (Pražská softwarová s.r.o.)
Startup: C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kooperativa - PDF Server.lnk
ShortcutTarget: Kooperativa - PDF Server.lnk -> C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe (Pražská softwarová s.r.o.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1076011386-52816415-3729311051-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {14579F23-A5A0-4F3D-9E90-3DD5FD1C6E1B} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {314F55F3-3212-45C1-A39A-5ADDB8B1A4AD} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {392D204A-C60C-49A7-BB4B-E937F2737D5D} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {4100BC4D-C4A1-4F69-9984-1463D2A6C082} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {4401D234-3176-4A54-849F-FD22C5D8C3F0} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {4664258D-8806-4EDC-9EF9-DD9DDC441092} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {B67A06F3-8775-43A5-AB21-544D12D06B1D} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKU\S-1-5-21-1076011386-52816415-3729311051-1001 -> {E2302477-A84F-4BBF-80F9-F89A17D36F96} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-08] (Avast Software s.r.o.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-08] (Avast Software s.r.o.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 62.204.224.2 62.240.163.170

FireFox:
========
FF ProfilePath: C:\Users\tomorn\AppData\Roaming\Mozilla\Firefox\Profiles\4dv2f4g5.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-17] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-17] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-09-25] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-09-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-22]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-06-23]
FF HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12

Chrome:
=======
CHR Profile: C:\Users\tomorn\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\tomorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-02]
CHR Extension: (Google Wallet) - C:\Users\tomorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-12]
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - No Path Or update_url value

Opera:
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 APC Data Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe [21880 2011-08-24] (Schneider Electric)
R2 APC UPS Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe [705912 2011-08-24] (Schneider Electric)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-08] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-12] (Avast Software)
R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [639944 2014-12-01] (Lenovo Corporation)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2255064 2013-10-28] (Broadcom Corporation.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-18] (Hewlett-Packard Co.) [File not signed]
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-12-05] (Lenovo)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2017736 2014-12-09] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [714696 2014-12-01] (Lenovo Corporation)
S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [474568 2014-12-10] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [470472 2014-12-09] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272440 2015-03-09] (Lenovo)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [558592 2013-10-20] () [File not signed]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [49136 2015-03-27] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448464 2015-03-30] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-08] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-04-08] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-08] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-08] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-08] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-08] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-08] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-08] ()
S3 athrusb; C:\Windows\system32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-10-28] (Broadcom Corporation.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-03] (Disc Soft Ltd)
R3 LnvHIDHW; C:\Windows\System32\drivers\LnvHIDHW.sys [29496 2014-04-07] (Lenovo)
S3 NANMp50; C:\Windows\System32\Drivers\NANMp50.sys [46776 2010-03-25] (Printing Communications Assoc., Inc. (PCAUSA))
S3 NANSp50; C:\Windows\System32\Drivers\NANSp50.sys [45752 2010-03-25] (Printing Communications Assoc., Inc. (PCAUSA))
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation )
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation )
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [45296 2014-07-28] (Synaptics Incorporated)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2015-03-30] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [198432 2015-03-30] (Acronis International GmbH)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-12] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-09 19:35 - 2015-04-09 19:35 - 00024112 _____ () C:\Users\tomorn\Desktop\FRST.txt
2015-04-09 19:02 - 2015-04-09 19:05 - 00000000 ____D () C:\AdwCleaner
2015-04-09 19:01 - 2015-04-09 19:01 - 02217984 _____ () C:\Users\tomorn\Desktop\adwcleaner_4.201.exe
2015-04-09 17:42 - 2015-04-09 19:35 - 00000000 ____D () C:\FRST
2015-04-09 17:40 - 2015-04-09 17:40 - 00112640 _____ (forum.viry.cz) C:\Users\tomorn\Desktop\FRSTLauncher.exe
2015-04-09 17:39 - 2015-04-09 17:39 - 02095616 _____ (Farbar) C:\Users\tomorn\Desktop\FRST64.exe
2015-04-09 17:01 - 2015-04-09 19:17 - 00000452 _____ () C:\WINDOWS\setupact.log
2015-04-09 17:01 - 2015-04-09 17:01 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-09 16:52 - 2015-04-09 19:28 - 00107151 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-09 16:41 - 2015-04-09 16:41 - 00003852 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1428590498
2015-04-09 16:41 - 2015-04-09 16:41 - 00001147 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 28.lnk
2015-04-09 16:40 - 2015-04-09 16:40 - 00691664 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable (3).exe
2015-04-09 15:48 - 2015-04-09 15:49 - 00691664 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable (2).exe
2015-04-09 12:02 - 2015-04-09 12:02 - 00014308 _____ () C:\Users\tomorn\Downloads\provize_nevyrizene_107318 (1).xls
2015-04-09 07:05 - 2015-04-09 07:05 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-08 23:24 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-08 23:24 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-08 23:24 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-08 23:24 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-08 23:24 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-08 23:24 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-08 22:17 - 2013-12-11 18:40 - 00002092 _____ () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk
2015-04-08 22:17 - 2013-12-11 18:40 - 00002092 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk
2015-04-08 22:17 - 2013-12-11 18:40 - 00002092 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Update Search.lnk
2015-04-08 21:04 - 2015-04-08 21:04 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-04-08 21:04 - 2015-04-08 21:04 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-04-08 20:58 - 2015-04-08 20:58 - 00691688 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable (1).exe
2015-04-08 20:56 - 2015-04-08 20:56 - 00691688 _____ (Opera Software) C:\Users\tomorn\Downloads\Opera_NI_stable.exe
2015-04-08 15:03 - 2015-04-08 15:03 - 04761245 _____ () C:\Users\tomorn\Downloads\Allegro 2014 kalkulator Partners 4.96.zip
2015-04-08 12:59 - 2015-04-08 13:00 - 00427008 _____ () C:\Users\tomorn\Downloads\KalkOSVC.xls
2015-04-07 19:14 - 2015-04-07 19:17 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-07 19:14 - 2015-04-07 19:14 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-06 21:51 - 2015-04-06 21:52 - 05344528 _____ (Piriform Ltd) C:\Users\tomorn\Downloads\ccsetup504.exe
2015-04-03 18:51 - 2015-04-03 19:10 - 516282246 _____ () C:\Users\tomorn\Downloads\Artlantis_Studio_5.1.2.5-Win64bit.zip
2015-04-03 18:12 - 2015-04-03 18:12 - 00010625 _____ () C:\Users\tomorn\Downloads\provize_nevyrizene_107318.xls
2015-04-03 15:28 - 2015-04-03 15:29 - 00030352 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2015-04-03 15:28 - 2015-04-03 15:28 - 00001715 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-04-03 15:28 - 2015-04-03 15:28 - 00000000 ____D () C:\Program Files\DAEMON Tools Lite
2015-04-03 15:27 - 2015-04-03 15:27 - 13146016 _____ (Disc Soft Ltd) C:\Users\tomorn\Downloads\DTLite501-0406.exe
2015-04-03 15:07 - 2015-04-03 15:07 - 00002535 _____ () C:\Users\tomorn\Desktop\Windows 7 USB DVD Download Tool.lnk
2015-04-03 15:07 - 2015-04-03 15:07 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2015-04-03 15:07 - 2015-04-03 15:07 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2015-04-02 21:59 - 2015-04-02 22:00 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\hypocalc
2015-04-02 21:58 - 2015-04-02 21:58 - 01179136 _____ () C:\Users\tomorn\Downloads\hypocalc-update.exe
2015-04-02 21:58 - 2015-04-02 21:58 - 00000000 ____D () C:\Users\tomorn\AppData\Local\hypocalc
2015-04-02 13:20 - 2015-04-02 13:20 - 01366016 _____ () C:\Users\tomorn\Downloads\Prezentace_NZU2013.ppt
2015-04-02 13:03 - 2015-04-02 13:03 - 00128512 _____ () C:\Users\tomorn\Downloads\Kontaktni_osoby_23052014.xls
2015-04-01 19:57 - 2015-04-01 19:57 - 04677544 _____ (Auslogics Software Pty Ltd ) C:\Users\tomorn\Downloads\disk-defrag-setup.exe
2015-04-01 19:57 - 2015-04-01 19:57 - 00001262 _____ () C:\Users\tomorn\Desktop\Auslogics Disk Defrag.lnk
2015-04-01 19:57 - 2015-04-01 19:57 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Auslogics
2015-04-01 19:57 - 2015-04-01 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-04-01 19:57 - 2015-04-01 19:57 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2015-04-01 13:33 - 2015-04-01 13:33 - 00020529 _____ () C:\Users\tomorn\Downloads\klienti_byznys_seznam.xls
2015-03-31 13:28 - 2015-03-31 13:28 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\ModelovaHypoteka
2015-03-31 12:12 - 2015-04-02 15:28 - 00017424 _____ () C:\Users\tomorn\Desktop\AEGON Expert 2.0.log
2015-03-31 00:04 - 2015-03-31 00:04 - 06431728 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408 (2).exe
2015-03-31 00:02 - 2015-03-31 00:03 - 05487040 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\Windows8-Setup (1).exe
2015-03-31 00:02 - 2015-03-31 00:02 - 06431728 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408 (1).exe
2015-03-31 00:01 - 2015-03-31 00:01 - 06431728 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\OSGS14-WindowsSetupBox-32bitand64bit-English-4141408.exe
2015-03-31 00:01 - 2015-03-31 00:01 - 00001419 _____ () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Stáhnout Windows.lnk
2015-03-31 00:01 - 2015-03-31 00:01 - 00001417 _____ () C:\Users\tomorn\Desktop\Stáhnout Windows.lnk
2015-03-31 00:01 - 2015-03-31 00:01 - 00000000 __RHD () C:\ESD
2015-03-31 00:00 - 2015-03-31 00:00 - 05487040 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\Windows8-Setup.exe
2015-03-30 23:24 - 2015-03-30 23:24 - 01473404 _____ () C:\Users\tomorn\Downloads\BootableUSB (1).zip
2015-03-30 14:10 - 2015-04-09 00:38 - 00000000 ____D () C:\ostatni
2015-03-30 10:37 - 2015-03-30 10:37 - 00001967 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2015-03-30 01:44 - 2015-04-03 06:54 - 00000000 _RSHD () C:\acroldr
2015-03-30 01:09 - 2015-03-30 01:09 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Acronis
2015-03-30 01:06 - 2015-03-30 01:07 - 00000000 ____D () C:\ProgramData\Acronis
2015-03-30 01:06 - 2015-03-30 01:06 - 01464096 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tdrpman.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 01120032 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00367200 _____ (Acronis) C:\WINDOWS\system32\Drivers\afcdp.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00269600 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\snapman.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00198432 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2015-03-30 01:06 - 2015-03-30 01:06 - 00116000 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2015-03-30 01:05 - 2015-03-30 01:05 - 00001217 _____ () C:\Users\Public\Desktop\Acronis True Image 2014.lnk
2015-03-30 01:05 - 2015-03-30 01:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2015-03-30 01:05 - 2015-03-30 01:05 - 00000000 ____D () C:\Program Files (x86)\Acronis
2015-03-27 10:12 - 2015-03-27 10:13 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2015-03-27 10:12 - 2015-03-27 10:12 - 02997112 _____ (Crystal Dew World ) C:\Users\tomorn\Downloads\CrystalDiskInfo6_2_2-en.exe
2015-03-27 10:12 - 2015-03-27 10:12 - 00001198 _____ () C:\Users\tomorn\Desktop\CrystalDiskInfo.lnk
2015-03-27 10:12 - 2015-03-27 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-03-27 08:44 - 2015-03-27 08:44 - 00000736 _____ () C:\Users\tomorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\download.lnk
2015-03-25 19:54 - 2015-03-25 19:54 - 00231760 _____ () C:\Users\tomorn\Downloads\CrucialScan.exe
2015-03-24 22:31 - 2015-03-24 22:31 - 04241920 _____ () C:\Users\tomorn\Downloads\Nove fondy do IZP_komplet.ppt
2015-03-24 02:43 - 2015-03-24 02:43 - 01473404 _____ () C:\Users\tomorn\Downloads\BootableUSB.zip
2015-03-24 02:25 - 2015-03-24 02:26 - 30887202 _____ () C:\Users\tomorn\Downloads\Novicorp WinToFlash 0.8.0100 beta Portable.zip
2015-03-24 02:14 - 2015-03-24 02:14 - 02721168 _____ (Microsoft Corporation) C:\Users\tomorn\Downloads\Windows7-USB-DVD-tool.exe
2015-03-20 12:13 - 2015-03-20 12:13 - 01125626 _____ () C:\Users\tomorn\Downloads\ProcessExplorer.zip
2015-03-20 10:42 - 2015-03-20 10:43 - 01657639 _____ () C:\Users\tomorn\Downloads\TNÚ_Oceňovací tabulky a progrese_srovnání.xlsx
2015-03-18 19:07 - 2015-03-18 19:07 - 00130902 _____ () C:\Users\tomorn\Downloads\google.csv
2015-03-18 19:04 - 2015-03-18 19:04 - 00021757 _____ () C:\Users\tomorn\Downloads\contacts.csv
2015-03-18 18:21 - 2015-03-18 18:21 - 00059392 _____ () C:\Users\tomorn\Downloads\Objednavka odhadu_nova UCB.xls
2015-03-18 18:21 - 2015-03-18 18:21 - 00026624 _____ () C:\Users\tomorn\Downloads\Formular o stavu nemovitosti.xls
2015-03-18 17:40 - 2015-04-09 16:41 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-18 14:02 - 2015-03-18 14:08 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Sony
2015-03-18 14:01 - 2015-03-18 14:01 - 00000000 ____D () C:\ProgramData\Sony Corporation
2015-03-18 14:00 - 2015-03-18 14:00 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-18 13:56 - 2015-03-18 14:06 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Sony
2015-03-18 13:56 - 2015-03-18 14:01 - 00000000 ____D () C:\Program Files (x86)\Sony Media Go Install
2015-03-12 22:08 - 2015-03-12 22:08 - 00001958 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-03-12 22:08 - 2015-03-12 22:08 - 00001898 _____ () C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2015-03-12 22:07 - 2015-04-08 21:04 - 00028144 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-03-11 14:27 - 2015-03-11 14:27 - 00000000 ____D () C:\Users\tomorn mistni ucet\AppData\Local\Lenovo
2015-03-11 14:27 - 2015-03-11 14:27 - 00000000 ____D () C:\Users\tomorn mistni ucet
2015-03-11 09:23 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-03-11 09:23 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-03-11 09:23 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-03-11 09:23 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-03-11 09:23 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-03-11 09:23 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-03-11 09:23 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-03-11 09:23 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-03-11 09:23 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-03-11 09:23 - 2015-01-28 17:41 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-03-11 09:23 - 2015-01-28 17:41 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-03-11 09:23 - 2015-01-28 17:41 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-03-11 09:23 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-03-11 09:23 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-03-11 09:23 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-03-11 09:23 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-03-11 09:22 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-03-11 09:22 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-03-11 09:22 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-03-11 09:22 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-03-11 09:22 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-03-11 09:22 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-03-11 09:22 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-03-11 09:22 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-03-11 09:22 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-03-11 09:22 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-03-11 09:22 - 2015-02-20 03:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-03-11 09:22 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-03-11 09:22 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-03-11 09:22 - 2015-02-20 03:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-03-11 09:22 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-03-11 09:22 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-03-11 09:22 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-03-11 09:22 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-03-11 09:22 - 2015-02-07 01:09 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-03-11 09:22 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-03-11 09:22 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-03-11 09:22 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-03-11 09:22 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-03-11 09:22 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-03-11 09:22 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-03-11 09:22 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-03-11 09:22 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-11 09:22 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-03-11 09:22 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-03-11 09:22 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-03-11 09:22 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-03-11 09:22 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-03-11 09:22 - 2015-01-30 05:00 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-03-11 09:22 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-03-11 09:22 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-03-11 09:22 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-03-11 09:22 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-03-11 09:22 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-03-11 09:22 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-03-11 09:22 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-03-11 09:22 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-03-11 09:22 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-03-11 09:22 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-03-11 09:22 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-03-11 09:22 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-03-11 09:22 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-03-11 09:22 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-11 09:22 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-11 09:22 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-03-11 09:22 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-03-11 09:22 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-03-11 09:22 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-03-11 09:22 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-11 09:22 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-03-11 09:22 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-03-11 09:22 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-03-11 09:21 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-03-11 09:21 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-03-11 09:21 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-03-11 09:21 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-03-11 09:21 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-03-11 09:21 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-03-11 09:21 - 2015-02-20 04:35 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-03-11 09:21 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-03-11 09:21 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-03-11 09:21 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-03-11 09:21 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-03-11 09:21 - 2015-02-20 03:56 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-03-11 09:21 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-03-11 09:21 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-03-11 09:21 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-03-11 09:21 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-03-11 09:21 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-03-11 09:21 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-03-11 09:21 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-03-11 09:21 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-03-11 09:21 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-03-11 09:21 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-03-11 09:21 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-03-11 09:21 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-03-11 09:21 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-03-11 09:21 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-03-11 09:21 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-11 09:21 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-03-11 09:21 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-03-11 09:21 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-03-11 09:21 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-03-11 09:21 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-03-11 09:21 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-03-10 14:14 - 2015-03-10 14:14 - 00000000 ____D () C:\Spacekace
2015-03-10 11:27 - 2015-03-10 11:59 - 00000000 ____D () C:\ProgramData\WinZip
2015-03-10 11:27 - 2015-03-10 11:46 - 00000000 ____D () C:\ProgramData\Norton

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-09 19:33 - 2014-06-21 23:23 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1076011386-52816415-3729311051-1001
2015-04-09 19:14 - 2014-10-09 16:11 - 00003758 _____ () C:\WINDOWS\System32\Tasks\AutoKMS
2015-04-09 19:13 - 2014-10-03 17:48 - 00005307 _____ () C:\WINDOWS\system32\Service_KMS.log
2015-04-09 19:09 - 2014-10-10 07:34 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-04-09 19:09 - 2014-06-22 08:34 - 00000000 ___DO () C:\Users\tomorn\OneDrive
2015-04-09 19:08 - 2014-10-21 01:33 - 00000980 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-09 19:07 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-09 19:02 - 2014-10-19 09:04 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-09 19:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-09 19:01 - 2014-06-22 21:14 - 00000000 ____D () C:\ProgramData\firebird
2015-04-09 19:01 - 2014-06-22 10:59 - 00000000 ____D () C:\Users\tomorn\Documents\Soubory aplikace Outlook
2015-04-09 18:50 - 2014-10-21 01:33 - 00000984 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-09 18:43 - 2014-08-18 16:39 - 00000000 ____D () C:\Temp
2015-04-09 17:39 - 2014-06-21 23:17 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Packages
2015-04-09 17:29 - 2015-02-22 13:02 - 00002704 _____ () C:\WINDOWS\system32\AutoPico.log
2015-04-09 16:18 - 2014-06-25 02:33 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\TeamViewer
2015-04-09 16:18 - 2014-06-22 10:19 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\DAEMON Tools Lite
2015-04-09 16:16 - 2014-10-06 09:07 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-09 15:32 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\tomorn\Documents\Moje naskenované obrázky
2015-04-09 12:52 - 2014-10-19 20:40 - 00000000 ____D () C:\Users\tomorn\AppData\Local\ČSOB_Pojišťovna,_a.s
2015-04-09 12:41 - 2014-06-22 21:06 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Deployment
2015-04-09 07:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-09 07:05 - 2014-12-26 09:40 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-09 01:03 - 2014-06-22 08:34 - 00002238 ____H () C:\Users\tomorn\Documents\Default.rdp
2015-04-09 00:39 - 2014-03-18 17:33 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-09 00:39 - 2014-03-18 16:54 - 00739924 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-09 00:39 - 2014-03-18 16:54 - 00151610 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-08 23:24 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-08 22:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-04-08 22:35 - 2014-06-22 18:09 - 00007628 _____ () C:\Users\tomorn\AppData\Local\Resmon.ResmonCfg
2015-04-08 22:18 - 2014-06-22 18:00 - 00000000 ____D () C:\ProgramData\Lenovo
2015-04-08 22:17 - 2014-06-22 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-04-08 22:17 - 2014-06-22 23:49 - 00000000 ____D () C:\WINDOWS\System32\Tasks\TVT
2015-04-08 22:17 - 2014-06-22 18:07 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2015-04-08 22:17 - 2014-06-22 18:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2015-04-08 22:01 - 2014-06-22 04:10 - 00000000 ____D () C:\Users\tomorn
2015-04-08 21:04 - 2014-06-22 09:39 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00271200 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00136752 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00088408 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00065736 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00029168 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-08 21:04 - 2014-06-22 09:39 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-08 08:33 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\tomorn\Documents\Partners
2015-04-07 22:25 - 2014-06-24 13:31 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\ViberPC
2015-04-07 22:25 - 2014-06-24 13:29 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Viber
2015-04-07 20:51 - 2014-12-08 03:54 - 00000000 ____D () C:\Program Files (x86)\KA15
2015-04-07 12:58 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\tomorn\Documents\AXAStudio
2015-04-06 23:39 - 2014-10-27 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFtk - The PDF Toolkit
2015-04-06 23:39 - 2014-10-27 13:25 - 00000000 ____D () C:\Program Files (x86)\PDFtk
2015-04-06 19:23 - 2014-06-22 10:25 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-04-06 19:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-05 21:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-03 15:11 - 2014-06-22 08:38 - 00000000 ____D () C:\install
2015-04-02 07:37 - 2015-01-31 23:15 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-04-02 07:37 - 2015-01-31 23:15 - 00000971 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-03-31 20:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-30 14:16 - 2014-10-24 20:00 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\LSC
2015-03-30 13:59 - 2014-06-22 19:48 - 00000000 ____D () C:\Users\tomorn\Desktop\flash MF
2015-03-30 13:53 - 2014-07-02 17:54 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\MyPhoneExplorer
2015-03-30 12:32 - 2014-06-22 11:04 - 00000000 ____D () C:\Users\tomorn\Documents\zaloha telefonu
2015-03-30 10:37 - 2014-06-22 18:00 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2015-03-30 10:37 - 2014-06-22 18:00 - 00000000 ____D () C:\Program Files\lenovo
2015-03-30 10:36 - 2014-06-22 18:06 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2015-03-30 10:34 - 2014-12-07 13:42 - 00000000 ____D () C:\Program Files (x86)\AusLogics Registry Defrag
2015-03-24 03:13 - 2014-06-22 04:10 - 00002562 _____ () C:\WINDOWS\diagwrn.xml
2015-03-24 03:13 - 2014-06-22 04:10 - 00001908 _____ () C:\WINDOWS\diagerr.xml
2015-03-18 17:46 - 2015-03-03 14:42 - 00000000 ____D () C:\Program Files (x86)\Opera beta
2015-03-18 17:41 - 2014-06-22 23:54 - 00000000 ____D () C:\Users\tomorn\AppData\Roaming\Opera Software
2015-03-18 17:41 - 2014-06-22 23:54 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Opera Software
2015-03-18 14:16 - 2014-06-22 17:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-17 17:49 - 2015-02-04 10:19 - 00000527 _____ () C:\Users\tomorn\ticket1.xml
2015-03-17 17:48 - 2014-08-27 10:57 - 00000000 ____D () C:\Users\tomorn\Desktop\Lenovo S660 zaloha
2015-03-17 09:13 - 2014-08-26 15:08 - 00000000 ____D () C:\Users\tomorn\AppData\Local\Adobe
2015-03-17 09:07 - 2014-06-22 09:48 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-03-12 07:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-03-12 02:49 - 2013-08-22 16:44 - 00483440 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-03-12 02:45 - 2014-10-21 09:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-12 02:45 - 2014-06-22 11:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-12 02:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-11 15:47 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\tomorn\Documents\CSOBPSmlouvy
2015-03-11 09:31 - 2014-06-21 23:35 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-03-11 09:31 - 2013-08-22 15:25 - 00000269 _____ () C:\WINDOWS\win.ini
2015-03-11 09:26 - 2014-06-21 23:35 - 122905848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\tomorn\AppData\Roaming\LXTRRLNZ
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\tomorn\AppData\Roaming\MFZWJ
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\tomorn\AppData\Roaming\QF
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\tomorn\AppData\Roaming\THAGUQRU
2014-06-22 18:09 - 2015-04-08 22:35 - 0007628 _____ () C:\Users\tomorn\AppData\Local\Resmon.ResmonCfg
2014-06-23 00:26 - 2014-06-23 01:05 - 0000358 _____ () C:\ProgramData\hpzinstall.log

Some content of TEMP:
====================
C:\Users\tomorn\AppData\Local\Temp\3lwwz33_.dll
C:\Users\tomorn\AppData\Local\Temp\6vg-htm_.dll
C:\Users\tomorn\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\tomorn\AppData\Local\Temp\bggcbktb.dll
C:\Users\tomorn\AppData\Local\Temp\dltlimd5.dll
C:\Users\tomorn\AppData\Local\Temp\drzby1wp.dll
C:\Users\tomorn\AppData\Local\Temp\eu2dsief.dll
C:\Users\tomorn\AppData\Local\Temp\foqadeyg.dll
C:\Users\tomorn\AppData\Local\Temp\jf5ctas8.dll
C:\Users\tomorn\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\tomorn\AppData\Local\Temp\kpxezisu.dll
C:\Users\tomorn\AppData\Local\Temp\lmsqrdxj.dll
C:\Users\tomorn\AppData\Local\Temp\mlyiu_tz.dll
C:\Users\tomorn\AppData\Local\Temp\ovv7mx-e.dll
C:\Users\tomorn\AppData\Local\Temp\pfo6ygip.dll
C:\Users\tomorn\AppData\Local\Temp\Quarantine.exe
C:\Users\tomorn\AppData\Local\Temp\rqf3cvea.dll
C:\Users\tomorn\AppData\Local\Temp\sevnz.exe
C:\Users\tomorn\AppData\Local\Temp\SppExtComObjHook.dll
C:\Users\tomorn\AppData\Local\Temp\sqlite3.dll
C:\Users\tomorn\AppData\Local\Temp\trmoiaim.dll
C:\Users\tomorn\AppData\Local\Temp\udvpvxqe.dll
C:\Users\tomorn\AppData\Local\Temp\xluii8vg.dll
C:\Users\tomorn\AppData\Local\Temp\xr8bwtt0.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-09 06:51

==================== End Of Log ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {0b74b0ea-da00-11e4-bfcb-001f3aefc032} - "D:\setup.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {579dcc70-cd31-11e4-bfae-001f3aefc032} - "D:\Startme.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c241-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c247-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - No Path Or update_url value
C:\WINDOWS\system32\GWX
C:\WINDOWS\SysWOW64\GWX
C:\WINDOWS\system32\ApnDatabase.xml
C:\WINDOWS\System32\Tasks\AutoKMS
C:\WINDOWS\system32\Service_KMS.log
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\Users\tomorn\AppData\Roaming\LXTRRLNZ
C:\Users\tomorn\AppData\Roaming\MFZWJ
C:\Users\tomorn\AppData\Roaming\QF
C:\Users\tomorn\AppData\Roaming\THAGUQRU
C:\Users\tomorn\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[tomorn]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by tomorn mistni ucet at 2015-04-09 20:06:12 Run:1
Running from C:\Users\tomorn\Desktop
Loaded Profiles: tomorn mistni ucet (Available profiles: tomorn mistni ucet)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {0b74b0ea-da00-11e4-bfcb-001f3aefc032} - "D:\setup.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {579dcc70-cd31-11e4-bfae-001f3aefc032} - "D:\Startme.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c241-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
HKU\S-1-5-21-1076011386-52816415-3729311051-1001\...\MountPoints2: {9455c247-81d8-11e4-bf12-001f3aefc032} - "D:\Lenovo_Suite.exe"
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - No Path Or update_url value
C:\WINDOWS\system32\GWX
C:\WINDOWS\SysWOW64\GWX
C:\WINDOWS\system32\ApnDatabase.xml
C:\WINDOWS\System32\Tasks\AutoKMS
C:\WINDOWS\system32\Service_KMS.log
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\Users\tomorn\AppData\Roaming\LXTRRLNZ
C:\Users\tomorn\AppData\Roaming\MFZWJ
C:\Users\tomorn\AppData\Roaming\QF
C:\Users\tomorn\AppData\Roaming\THAGUQRU
C:\Users\tomorn\AppData\Local\Temp
End
*****************

"HKU\S-1-5-21-1076011386-52816415-3729311051-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0b74b0ea-da00-11e4-bfcb-001f3aefc032}" => Key deleted successfully.
HKCR\CLSID\{0b74b0ea-da00-11e4-bfcb-001f3aefc032} => Key not found.
"HKU\S-1-5-21-1076011386-52816415-3729311051-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{579dcc70-cd31-11e4-bfae-001f3aefc032}" => Key deleted successfully.
HKCR\CLSID\{579dcc70-cd31-11e4-bfae-001f3aefc032} => Key not found.
"HKU\S-1-5-21-1076011386-52816415-3729311051-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9455c241-81d8-11e4-bf12-001f3aefc032}" => Key deleted successfully.
HKCR\CLSID\{9455c241-81d8-11e4-bf12-001f3aefc032} => Key not found.
"HKU\S-1-5-21-1076011386-52816415-3729311051-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9455c247-81d8-11e4-bf12-001f3aefc032}" => Key deleted successfully.
HKCR\CLSID\{9455c247-81d8-11e4-bf12-001f3aefc032} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lpdfbkehegfmedglgemnhbnpmfmioggj" => Key deleted successfully.
C:\WINDOWS\system32\GWX => Moved successfully.
C:\WINDOWS\SysWOW64\GWX => Moved successfully.
C:\WINDOWS\system32\ApnDatabase.xml => Moved successfully.
C:\WINDOWS\System32\Tasks\AutoKMS => Moved successfully.
C:\WINDOWS\system32\Service_KMS.log => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Users\tomorn\AppData\Roaming\LXTRRLNZ => Moved successfully.
C:\Users\tomorn\AppData\Roaming\MFZWJ => Moved successfully.
C:\Users\tomorn\AppData\Roaming\QF => Moved successfully.
C:\Users\tomorn\AppData\Roaming\THAGUQRU => Moved successfully.

"C:\Users\tomorn\AppData\Local\Temp" directory move:

Could not move "C:\Users\tomorn\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-09 20:10:46)<=

C:\Users\tomorn\AppData\Local\Temp => Moved successfully.

==== End of Fixlog 20:10:47 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[tomorn]

Po několika dnech sledování se situace příliš nelišila.
Pravděpodobně hodně používaných aplikací a "náročný" uživatel.
Děkuji za pomoc. Nyní mám jistotu, že to není žádným škodlivým softwarem.

Situaci jsem vyřešil koupí SSD disku do mSATA. Počítač frčí jako bych koupil nový, a to jsem systém z původního disku klonoval. Žádná nová instalace Windows. Je vidět, že klasické HDD jsou brzdou počítačů.

Ještě jednou díky a prosím o LOCK.

[Rudy]

Rádo se stalo!