kontrola logu FRST

[qwerwer]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Maťka (administrator) on ASUS on 24-07-2015 07:22:52
Running from C:\Users\Maťka\Desktop
Loaded Profiles: Maťka (Available Profiles: Maťka)
Platform: Windows 8.1 Connected (X64) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Maťka\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595848 2015-01-28] (ESET)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-04-23] (ASUSTek Computer Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] (Atheros Communications)
HKU\S-1-5-21-184161504-2821680062-4277906011-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{5687305C-F884-4A4F-BF83-BCA38818218D}: [DhcpNameServer] 158.193.86.1 158.193.86.5
Tcpip\..\Interfaces\{E064D898-055E-4013-BE81-5B7FCB37B7E9}: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-25]
CHR Extension: (Google Docs) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-25]
CHR Extension: (Google Drive) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-25]
CHR Extension: (YouTube) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-25]
CHR Extension: (Google Search) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-25]
CHR Extension: (Google Sheets) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-25]
CHR Extension: (Gmail) - C:\Users\Maťka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1349576 2015-01-28] (ESET)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [41984 2010-11-20] (Microsoft Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-09-23] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-03-10] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241880 2015-03-10] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169792 2015-03-10] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [159480 2015-03-10] (ESET)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-28] (Intel Corporation)
S3 qcusbnet; C:\Windows\system32\DRIVERS\innosusbnet.sys [510976 2012-10-26] (QUALCOMM Incorporated)
S3 qcusbser; C:\Windows\system32\DRIVERS\innosusbser.sys [369792 2012-10-26] (QUALCOMM Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
U0 msahci; system32\drivers\msahci.sys

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-24 07:22 - 2015-07-24 07:23 - 00010736 _____ C:\Users\Maťka\Desktop\FRST.txt
2015-07-24 07:22 - 2015-07-24 07:22 - 00000000 ____D C:\FRST
2015-07-24 07:19 - 2015-07-24 07:18 - 00112640 _____ (forum.viry.cz) C:\Users\Maťka\Desktop\FRSTLauncher.exe
2015-07-24 07:17 - 2015-07-24 07:16 - 02135552 _____ (Farbar) C:\Users\Maťka\Desktop\FRST64.exe
2015-07-24 06:50 - 2015-07-24 06:50 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-07-24 06:50 - 2015-07-24 06:50 - 00000000 ____D C:\Program Files\CCleaner
2015-07-23 23:36 - 2015-07-23 23:36 - 00010770 _____ C:\Windows\system32\.crusader
2015-07-23 23:17 - 2015-07-24 06:38 - 00000000 ____D C:\Program Files\HitmanPro
2015-07-23 23:17 - 2015-07-23 23:36 - 00000000 ____D C:\ProgramData\HitmanPro
2015-07-23 22:51 - 2015-07-23 22:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-23 22:35 - 2015-07-23 22:44 - 00000000 ____D C:\AdwCleaner
2015-07-23 20:27 - 2015-07-23 20:27 - 00000000 ____D C:\Users\Maťka\AppData\Local\ESET
2015-07-23 20:09 - 2015-07-23 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-07-23 20:09 - 2015-07-23 20:09 - 00000000 ____D C:\ProgramData\ESET
2015-07-23 20:09 - 2015-07-23 20:09 - 00000000 ____D C:\Program Files\ESET
2015-07-23 19:46 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-23 19:46 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-23 19:46 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-23 19:46 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-23 19:46 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-23 19:46 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-07-23 19:46 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-23 19:46 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-23 19:46 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-23 19:46 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-23 19:46 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-23 19:46 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-23 19:46 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-23 19:45 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-23 19:45 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-23 19:45 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-23 19:45 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-23 19:45 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-23 19:45 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-23 19:45 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-23 19:45 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-23 19:45 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-07-23 19:45 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-23 19:45 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-23 19:45 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-07-23 19:45 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-23 19:45 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-23 19:45 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-23 19:45 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-23 19:45 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-23 19:45 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-23 19:45 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-23 19:45 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-23 19:45 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-07-23 19:45 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-07-23 19:45 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-07-23 19:45 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-07-23 19:45 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-07-23 19:45 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-07-23 19:45 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-07-23 19:45 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-07-23 19:45 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-07-23 19:44 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-07-23 19:44 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-07-23 19:44 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-07-23 19:39 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-23 19:39 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-23 19:39 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-07-23 19:39 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-07-23 19:18 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-23 19:18 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-23 19:18 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-23 19:18 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-23 19:18 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-23 19:18 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-23 19:18 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-23 19:18 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-23 19:18 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-07-23 19:18 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-07-23 19:18 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-07-23 19:18 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-07-23 19:18 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-07-23 19:18 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-07-23 19:12 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-07-23 19:08 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-23 19:08 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-23 19:08 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2015-07-23 19:08 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\system32\locale.nls
2015-07-23 19:07 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-23 19:07 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-23 19:06 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-23 19:06 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-23 19:06 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-23 19:06 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-23 19:06 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-07-23 19:06 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-07-23 19:06 - 2015-05-02 01:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-07-23 19:06 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-07-23 19:06 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-07-23 19:05 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-07-23 19:05 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2015-07-20 22:19 - 2015-07-20 22:19 - 00000290 __RSH C:\ProgramData\ntuser.pol
2015-07-19 23:43 - 2015-07-19 23:51 - 00000000 ____D C:\Users\Maťka\Desktop\mata kluc14-15
2015-07-18 09:59 - 2015-07-20 22:21 - 00000000 ____D C:\Users\Maťka\Desktop\Jana
2015-07-17 20:30 - 2015-07-17 20:30 - 00001022 _____ C:\Windows\Tasks\Oq3XRhU1SiYWUtEPbct3.job
2015-07-17 20:28 - 2015-07-22 09:55 - 00000000 ____D C:\Users\Maťka\AppData\Roaming\Opera Software
2015-07-17 20:28 - 2015-07-22 09:55 - 00000000 ____D C:\Users\Maťka\AppData\Local\Opera Software
2015-07-17 20:16 - 2015-07-23 20:22 - 00000000 ____D C:\Program Files (x86)\StatFoobar
2015-07-17 20:15 - 2015-07-23 20:29 - 00000000 ____D C:\Program Files (x86)\Tv For Chrome
2015-07-17 12:29 - 2015-07-17 12:29 - 00042496 _____ C:\Users\Maťka\Downloads\Cennik listnaté jeseň 2014.xls
2015-07-16 16:38 - 2015-07-16 16:38 - 00174592 _____ C:\Users\Maťka\Downloads\Objednávkové tlacivo Ekofit 2015 o (2).xls
2015-07-16 14:38 - 2015-07-16 14:38 - 00174592 _____ C:\Users\Maťka\Downloads\Objednávkové tlacivo Ekofit 2015 o.xls
2015-07-16 14:38 - 2015-07-16 14:38 - 00174592 _____ C:\Users\Maťka\Downloads\Objednávkové tlacivo Ekofit 2015 o (1).xls
2015-07-16 13:01 - 2015-07-16 13:01 - 03682347 _____ C:\Users\Maťka\Downloads\repreroben.zip
2015-07-16 13:00 - 2015-07-16 13:01 - 13744457 _____ C:\Users\Maťka\Downloads\preroben.zip
2015-07-15 21:16 - 2015-07-15 21:17 - 14412886 _____ C:\Users\Maťka\Downloads\zahon (1).zip
2015-07-13 15:21 - 2015-07-13 15:22 - 13668770 _____ C:\Users\Maťka\Downloads\zahon.zip
2015-07-13 15:06 - 2015-07-13 15:06 - 10872570 _____ C:\Users\Maťka\Downloads\Gmail (7).zip
2015-07-13 15:06 - 2015-07-13 15:06 - 10872570 _____ C:\Users\Maťka\Downloads\Gmail (6).zip
2015-07-13 15:05 - 2015-07-13 15:05 - 10872570 _____ C:\Users\Maťka\Downloads\Gmail (5).zip
2015-07-13 15:05 - 2015-07-13 15:05 - 09073097 _____ C:\Users\Maťka\Downloads\rephoto (2).zip
2015-07-13 15:04 - 2015-07-13 15:04 - 12545057 _____ C:\Users\Maťka\Downloads\Gmail (3).zip
2015-07-13 15:04 - 2015-07-13 15:04 - 09966959 _____ C:\Users\Maťka\Downloads\Gmail (4).zip
2015-07-13 15:03 - 2015-07-13 15:04 - 13501780 _____ C:\Users\Maťka\Downloads\Gmail (2).zip
2015-07-13 15:03 - 2015-07-13 15:03 - 10896289 _____ C:\Users\Maťka\Downloads\Gmail (1).zip
2015-07-13 15:02 - 2015-07-13 15:03 - 12762991 _____ C:\Users\Maťka\Downloads\Gmail.zip
2015-07-13 15:02 - 2015-07-13 15:02 - 09437240 _____ C:\Users\Maťka\Downloads\picture 16.bmp
2015-07-13 14:54 - 2015-07-13 14:54 - 13720251 _____ C:\Users\Maťka\Downloads\skalkazadna.zip
2015-07-13 14:53 - 2015-07-13 14:53 - 13703601 _____ C:\Users\Maťka\Downloads\posledne.zip
2015-07-13 14:44 - 2015-07-13 14:45 - 09073097 _____ C:\Users\Maťka\Downloads\rephoto.zip
2015-07-13 14:44 - 2015-07-13 14:45 - 09073097 _____ C:\Users\Maťka\Downloads\rephoto (1).zip
2015-07-10 21:31 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-10 21:31 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-10 21:31 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-10 21:31 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-07-10 21:30 - 2015-05-12 02:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-06-30 10:30 - 2015-06-30 10:30 - 00000000 ____D C:\Users\Maťka\AppData\Roaming\(60-D9-A0-1B-0D-1B)
2015-06-24 21:05 - 2015-06-24 21:06 - 04063476 _____ C:\Users\Maťka\Downloads\Rozprávka - Tri malé prasiatka.zip
2015-06-24 21:04 - 2015-06-24 21:26 - 159997600 _____ C:\Users\Maťka\Downloads\Počúvaj rozprávky a skladaj puzzle- O dvanástich mesiačikoch - pre 1., 2..,3. ,4. ,5.ročník.rar
2015-06-24 21:04 - 2015-06-24 21:23 - 135139560 _____ C:\Users\Maťka\Downloads\Počúvaj rozprávky a skladaj puzzle- Snehulienka- pre 1., 2..,3. ,4. ,5.ročník.rar
2015-06-24 21:04 - 2015-06-24 21:09 - 42620352 _____ C:\Users\Maťka\Downloads\Počúvaj rozprávky a skladaj puzzle Ako šlo vajce na vandrovku - pre 1., 2..,3. ,4. ,5.ročník.rar
2015-06-24 21:03 - 2015-06-24 21:15 - 247496022 _____ C:\Users\Maťka\Downloads\Počúvaj rozprávky a skladaj puzzle- Palculienka- pre 1., 2.. ročník.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-24 07:13 - 2014-09-24 01:13 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-184161504-2821680062-4277906011-1001
2015-07-24 07:08 - 2014-09-24 01:10 - 00000093 _____ C:\Users\Maťka\AppData\Roaming\sp_data.sys
2015-07-24 07:08 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-24 07:08 - 2013-08-22 16:44 - 00478456 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-24 07:05 - 2014-04-23 08:34 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-24 07:05 - 2014-03-18 17:03 - 00000000 ____D C:\Windows\ShellNew
2015-07-24 07:04 - 2014-09-25 19:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-24 07:01 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-07-24 07:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-07-24 06:59 - 2013-08-22 15:25 - 00000210 _____ C:\Windows\win.ini
2015-07-24 06:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-07-23 23:41 - 2014-09-25 15:02 - 00000000 ____D C:\Users\Maťka\AppData\Local\CrashDumps
2015-07-23 23:13 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Web
2015-07-23 22:37 - 2014-12-05 23:59 - 00000000 ____D C:\Users\Maťka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-23 22:37 - 2014-09-25 15:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-23 22:37 - 2014-09-24 01:08 - 00001001 _____ C:\Users\Maťka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-23 22:22 - 2014-09-25 20:10 - 00000000 ____D C:\Program Files (x86)\android_driver_install
2015-07-23 20:09 - 2014-03-18 17:25 - 00863592 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-23 19:50 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-07-23 19:50 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-07-23 19:48 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-07-23 19:34 - 2014-09-28 22:13 - 00000000 ____D C:\Windows\system32\MRT
2015-07-23 19:19 - 2015-04-16 23:16 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-23 19:19 - 2015-03-09 23:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-23 19:16 - 2014-09-23 18:44 - 00000000 ____D C:\Users\Maťka\AppData\Roaming\DAEMON Tools Lite
2015-07-23 19:15 - 2014-04-23 09:52 - 00000000 ____D C:\Windows\Panther
2015-07-23 19:02 - 2015-05-12 14:29 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-07-23 19:02 - 2015-05-12 14:29 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-07-22 09:58 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-07-22 09:55 - 2014-09-23 18:45 - 00000000 __SHD C:\Users\Maťka\AppData\Local\EmieUserList
2015-07-22 09:55 - 2014-09-23 18:45 - 00000000 __SHD C:\Users\Maťka\AppData\Local\EmieSiteList
2015-07-22 09:54 - 2014-04-23 10:54 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2015-07-20 11:58 - 2014-09-29 18:55 - 00000000 ____D C:\Users\Maťka\Desktop\Pracovné vyučovanie
2015-07-19 23:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\GroupPolicy
2015-07-18 10:00 - 2014-10-28 22:56 - 00000000 ____D C:\Users\Maťka\Desktop\Iné
2015-07-17 20:25 - 2014-09-23 18:59 - 00000000 ____D C:\Users\Maťka\AppData\Roaming\WildTangent
2015-07-17 20:25 - 2014-04-23 10:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-17 20:25 - 2014-04-23 10:54 - 00000000 ____D C:\ProgramData\WildTangent
2015-07-17 20:05 - 2014-10-05 19:22 - 00000000 ____D C:\Users\Maťka\AppData\Roaming\GetRightToGo
2015-07-15 21:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-07-15 21:16 - 2014-09-24 16:56 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-15 21:14 - 2014-12-26 21:10 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-13 23:10 - 2014-09-29 15:04 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:10 - 2014-09-29 15:04 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-10 21:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sk-SK
2015-07-10 21:26 - 2015-04-04 11:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-10 21:26 - 2015-04-04 11:25 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-05 12:08 - 2014-10-18 08:45 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 08:43 - 2014-09-28 22:13 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-30 23:42 - 2014-11-18 22:26 - 00000000 ____D C:\Users\Maťka\Desktop\Vlastiveda
2015-06-30 23:40 - 2014-09-29 18:54 - 00000000 ____D C:\Users\Maťka\Desktop\HV
2015-06-30 23:39 - 2014-12-03 20:49 - 00000000 ____D C:\Users\Maťka\Desktop\Zíde sa
2015-06-30 23:39 - 2014-09-29 18:54 - 00000000 ____D C:\Users\Maťka\Desktop\3.ROčNíK
2015-06-30 23:38 - 2014-11-17 18:41 - 00000000 ____D C:\Users\Maťka\Desktop\Matematika
2015-06-25 17:14 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-06-24 22:33 - 2014-09-29 18:54 - 00000000 ____D C:\Users\Maťka\Desktop\1.ROčNíK

==================== Files in the root of some directories =======

2014-09-24 01:10 - 2015-07-24 07:08 - 0000093 _____ () C:\Users\Maťka\AppData\Roaming\sp_data.sys
2014-07-19 16:43 - 2014-07-19 16:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-23 10:53 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-04-23 10:53 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-04-23 10:53 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Files to move or delete:
====================
C:\ProgramData\SetStretch.VBS


Some files in TEMP:
====================
C:\Users\Maťka\AppData\Local\Temp\HitmanPro.exe
C:\Users\Maťka\AppData\Local\Temp\InstHelper.exe
C:\Users\Maťka\AppData\Local\Temp\Quarantine.exe
C:\Users\Maťka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Oq3XRhU1SiYWUtEPbct3.job => C:\Users\Ma�ka\AppData\Roaming\Oq3XRhU1SiYWUtEPbct3.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Ma�ka\Desktop" je 16960 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[JaRon]

ahoj,
mam v podstate dve vyhrady:
1.
Task: C:\Windows\Tasks\Oq3XRhU1SiYWUtEPbct3.job => C:\Users\Ma�ka\AppData\Roaming\Oq3XRhU1SiYWUtEPbct3.exe
ak to nepoznas, tak ZMAZ subor *.job

2.
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Ma�ka\Desktop" je 16960 MB.
uprac plochu, aby velkost nepresahovala 300MB

[qwerwer]

Dakujem subor som zmazal a s tou plochou tiez nieco spravim.

[JaRon]

rado sa stalo