Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zavirovaný notebook po instalaci programu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Zavirovaný notebook po instalaci programu

#1 Příspěvek od andersos »

Dobrý den,
stáhnul jsem si program, nainstaloval ho a poté se mi úplně zbláznil notebook. Začínají mi vyskakovat různá okna sotva ho zapnu a smazalo se mi pár věcí. Zkoušel jsem ADW cleaner, ale ten se mi po chvilce, kdy jsem chtěl nalezené soubory odstranit, zaseknul. Mohl by mi prosím vás někdo pomoci to vyřešit?
Předem moc děkuji a posílám vytvořený log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondřej at 2016-07-11 17:13:33
Microsoft Windows 10 Home
System drive C: has 653 GB (70%) free of 936 GB
Total RAM: 3987 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:13:39, on 11. 7. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0420)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ContentPush\app\bin\nw.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe
C:\Program Files (x86)\badu\uc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files (x86)\badu\uc.exe
C:\Program Files (x86)\ContentPush\app\bin\nw.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files (x86)\ContentPush\app\bin\nw.exe
C:\Program Files (x86)\ContentPush\app\bin\nw.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\Ondřej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=wscript C:\WINDOWS\run.vbs,
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [Bonus.SSR.FR12] "C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [apphide] C:\Program Files (x86)\badu\uc.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Notices] "C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe"
O4 - HKCU\..\Run: [svchost0] "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"\UUC0789.exe
O4 - HKCU\..\Run: [apphide] C:\Program Files (x86)\badu\uc.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @oem11.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Renew Single Click (dowidoly) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Gujighqepot Debuger (Gujighqepotdebugertiwaserewty.exe) - Unknown owner - C:\Program Files (x86)\Pherdpy\Gujighqepotdebugertiwaserewty.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Reservation Plastic (rijufoze) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: Task Bar Return Key (werocuwyzbt) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13257 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
dashost.exe {df3cfb57-ec3b-4f26-826e008741f735b2}
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\79C1BA66-1468245540-E411-85C7-F0761C76E061\jnsd488B.tmp"
"C:\Program Files (x86)\79C1BA66-1468245540-E411-85C7-F0761C76E061\hnsh5EB5.tmp"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files (x86)\79C1BA66-1468245540-E411-85C7-F0761C76E061\knsd300B.tmpfs"
C:\WINDOWS\system32\WLANExt.exe 1855039707280
\??\C:\WINDOWS\system32\conhost.exe 0x4

"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
taskeng.exe {1B213CB9-9A74-4BE9-A9F4-7B3A8BF5C28E}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
sihost.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\ContentPush\app\bin\nw.exe" "C:\Program Files (x86)\ContentPush\app\app"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe" scan upload
igfxEM.exe
igfxHK.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
igfxTray.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

"C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe"
"C:\Program Files (x86)\badu\uc.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
"C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
"C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
"C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
"C:\Program Files (x86)\badu\uc.exe"
"C:\Program Files (x86)\ContentPush\app\bin\nw.exe" --type=gpu-process --channel="4336.0.91684923\403541460" --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4248 /prefetch:822062411
"C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
"C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
"C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 231D0945-7E1B-BA60-A77C-E4E4A6780610 -Reinvoke
"C:\Program Files (x86)\ContentPush\app\bin\nw.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=cs --extension-process --nodejs --working-directory="C:\Program Files (x86)\ContentPush\app\app" --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4336 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4336.1.1668027417\1279142757" /prefetch:673131151
"C:\Program Files (x86)\ContentPush\app\bin\nw.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=cs --extension-process --nodejs --working-directory="C:\Program Files (x86)\ContentPush\app\app" --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4336 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4336.2.768661002\1431465882" /prefetch:673131151
"C:\Program Files (x86)\Skype\Phone\Skype.exe" "/skypecheck:"skypecheck:?signedIn&userId=ander331""
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=51.0.2704.103 --handshake-handle=0x174
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2356.0.1167283591\968954882" --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,13,25,46,54 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4248 --mojo-platform-channel-handle=1160 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe" --onOSstartup=true --showwindow=false --waitForRegistration=true
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\main.js"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --primordial-pipe-token=0598FD42AACBF06D4C1CC0DE308B6E7B --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="2356.15.140784312\699275430" --mojo-platform-channel-handle=4160 /prefetch:1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --disable-3d-apis --disable-pinch --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-file="C:\Users\ONDEJ~1\AppData\Local\Temp\CreativeCloud\ACC\CEF.log" --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/3.6.0.248" --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-gpu-compositing --channel="7132.0.988573984\809891438" /prefetch:673131151
"jre\bin\OIO.exe" -classpath ".;./*" OnlineIO /S /NET=amonetize /SUBID=11426
"jre\bin\OIO.exe" -classpath ".;./*" OnlineIO /S /NET=amonetize /SUBID=11426
"jre\bin\OIO.exe" -classpath ".;./*" OnlineIO /S /NET=amonetize /SUBID=11426
"jre\bin\OIO.exe" -classpath ".;./*" OnlineIO /S /NET=amonetize /SUBID=11426
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --disable-3d-apis --disable-pinch --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-file="C:\Users\ONDEJ~1\AppData\Local\Temp\CreativeCloud\ACC\CEF.log" --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/3.6.0.248" --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-gpu-compositing --channel="7132.1.2116270858\2016774731" /prefetch:673131151
C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe 1102 7576 C:\WINDOWS\system32\config\systemprofile\AppData\Local\JxBrowser --lang=cs
C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe 1104 6356 C:\WINDOWS\system32\config\systemprofile\AppData\Local\JxBrowser --lang=cs
C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe 1103 7640 C:\WINDOWS\system32\config\systemprofile\AppData\Local\JxBrowser --lang=cs
C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe 1101 8080 C:\WINDOWS\system32\config\systemprofile\AppData\Local\JxBrowser --lang=cs
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=gpu-process --channel="8548.0.262328676\137768198" --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,43 --gpu-vendor-id=0x0000 --gpu-device-id=0x0000 --gpu-driver-vendor --gpu-driver-version /prefetch:822062411
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=gpu-process --channel="7960.0.116993980\1562552835" --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,43 --gpu-vendor-id=0x0000 --gpu-device-id=0x0000 --gpu-driver-vendor --gpu-driver-version /prefetch:822062411
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=gpu-process --channel="6016.0.1227195844\1736468881" --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,43 --gpu-vendor-id=0x0000 --gpu-device-id=0x0000 --gpu-driver-vendor --gpu-driver-version /prefetch:822062411
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=gpu-process --channel="8916.0.1128728164\186108741" --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,43 --gpu-vendor-id=0x0000 --gpu-device-id=0x0000 --gpu-driver-vendor --gpu-driver-version /prefetch:822062411
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=cs --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=8548 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="8548.1.556564592\1776362834" /prefetch:673131151
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=cs --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=8916 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="8916.1.1676258998\1501258588" /prefetch:673131151
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=cs --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=6016 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="6016.1.854138928\2067869549" /prefetch:673131151
"C:\WINDOWS\TEMP\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=cs --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=7960 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="7960.1.1557270039\1306096162" /prefetch:673131151
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
OnlineGuardian.exe 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 624 628 636 8192 632
"C:\Users\Ondřej\Downloads\RSITx64 (1).exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\UCBrowserUpdater.job - C:\Program Files (x86)\UCBrowser\Application\update_task.exe /update

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-06-21 213192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-21 2099504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-06-21 154824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-03-10 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-06-21 1522992]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-10 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10 13671640]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-02-24 2787264]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-02-24 1859936]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2016-03-19 176952]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-03-22 508128]
"gplyra"=C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe [2016-06-10 1400320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-12 551104]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-06-15 2917456]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-05-17 53123712]
"Notices"=C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe [2016-07-05 2293368]
"svchost0"=C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe [2016-04-25 1161376]
"apphide"=C:\Program Files (x86)\badu\uc.exe [2016-07-11 221256]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 594992]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2016-04-07 2313408]
"Bonus.SSR.FR12"=C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [2016-07-06 1517088]
"apphide"=C:\Program Files (x86)\badu\uc.exe [2016-07-11 221256]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableLUA"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-07-11 17:05:31 ----D---- C:\rsit
2016-07-11 17:05:31 ----D---- C:\Program Files\trend micro
2016-07-11 16:13:43 ----D---- C:\ProgramData\a7001f7b-5c51-0
2016-07-11 16:13:41 ----D---- C:\ProgramData\a7001f7b-6317-1
2016-07-11 16:12:08 ----D---- C:\Program Files\Online.IO
2016-07-11 16:10:45 ----D---- C:\Program Files (x86)\Seznam.cz
2016-07-11 16:10:17 ----D---- C:\Users\Ondřej\AppData\Roaming\Seznam.cz
2016-07-11 16:02:39 ----D---- C:\Users\Ondřej\AppData\Roaming\UPUpdata
2016-07-11 16:01:04 ----A---- C:\WINDOWS\system32\drivers\ucguard.sys
2016-07-11 16:00:31 ----D---- C:\Program Files (x86)\UCBrowser
2016-07-11 15:59:30 ----D---- C:\Program Files (x86)\badu
2016-07-11 15:59:00 ----D---- C:\Program Files (x86)\79C1BA66-1468245540-E411-85C7-F0761C76E061
2016-07-11 15:58:57 ----D---- C:\Users\Ondřej\AppData\Roaming\gplyra
2016-07-11 15:58:15 ----D---- C:\Users\Ondřej\AppData\Roaming\Desktop
2016-07-11 15:58:08 ----D---- C:\Program Files (x86)\MPC Cleaner
2016-07-11 15:57:07 ----D---- C:\extensions
2016-07-11 15:57:03 ----D---- C:\Program Files (x86)\Pherdpy
2016-07-11 15:56:55 ----D---- C:\Program Files (x86)\ContentPush
2016-07-11 15:56:54 ----D---- C:\Program Files (x86)\WeatherChickn
2016-07-11 15:56:32 ----ASH---- C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQJP.exe
2016-07-11 15:56:25 ----A---- C:\WINDOWS\chromebrowser.exe
2016-07-05 13:08:15 ----AD---- C:\Program Files (x86)\ABBYY FineReader 12
2016-07-05 12:21:49 ----D---- C:\Users\Ondřej\AppData\Roaming\NotepadApp
2016-07-05 12:21:22 ----D---- C:\Program Files (x86)\HPSec
2016-07-05 12:03:17 ----D---- C:\temp
2016-06-22 14:25:17 ----D---- C:\Users\Ondřej\AppData\Roaming\XnView
2016-06-14 23:26:36 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-06-14 23:26:35 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-06-14 23:26:35 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-06-14 23:26:35 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-06-14 23:26:35 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-06-14 23:26:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-06-14 23:26:33 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-06-14 23:26:33 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-06-14 23:26:33 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-06-14 23:26:33 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-06-14 23:26:33 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-06-14 23:26:32 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-06-14 23:26:32 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-06-14 23:26:32 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-06-14 23:26:32 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-06-14 23:26:31 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-06-14 23:26:31 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-06-14 23:26:31 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-06-14 23:26:31 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-06-14 23:26:30 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-06-14 23:26:30 ----A---- C:\WINDOWS\system32\mos.dll
2016-06-14 23:26:30 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-06-14 23:26:29 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-06-14 23:26:29 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-06-14 23:26:29 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-06-14 23:26:29 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-06-14 23:26:28 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-06-14 23:26:24 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-06-14 23:26:24 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-06-14 23:26:23 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-06-14 23:26:23 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-06-14 23:26:23 ----A---- C:\WINDOWS\system32\moshost.dll
2016-06-14 23:26:23 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-06-14 23:26:23 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-06-14 23:26:22 ----A---- C:\WINDOWS\system32\tdlrecover.exe
2016-06-14 23:26:22 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-06-14 23:26:19 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-06-14 23:26:19 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-06-14 23:26:18 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-06-14 23:26:18 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-14 23:26:18 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-06-14 23:26:17 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-06-14 23:26:17 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-06-14 23:26:17 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-06-14 23:26:17 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-06-14 23:26:17 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-06-14 23:26:15 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-06-14 23:26:14 ----A---- C:\WINDOWS\system32\twinui.dll
2016-06-14 23:26:14 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-14 23:26:12 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-06-14 23:26:10 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-06-14 23:26:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-06-14 23:26:09 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-06-14 23:26:08 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-06-14 23:26:07 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-06-14 23:26:07 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-06-14 23:26:07 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-14 23:26:06 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-06-14 23:26:05 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-06-14 23:26:05 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2016-06-14 23:26:04 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-06-14 23:26:03 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-06-14 23:26:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-06-14 23:26:02 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-06-14 23:26:02 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-06-14 23:26:02 ----A---- C:\WINDOWS\system32\gpsvc.dll
2016-06-14 23:26:01 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-06-14 23:26:01 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-06-14 23:26:00 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-06-14 23:26:00 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-06-14 23:25:59 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-06-14 23:25:58 ----A---- C:\WINDOWS\SYSWOW64\LocationFramework.dll
2016-06-14 23:25:58 ----A---- C:\WINDOWS\system32\ole32.dll
2016-06-14 23:25:58 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-06-14 23:25:57 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-06-14 23:25:57 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-06-14 23:25:57 ----A---- C:\WINDOWS\system32\drivers\dumpsdport.sys
2016-06-14 23:25:56 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-06-14 23:25:56 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-06-14 23:25:56 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-06-14 23:25:55 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-06-14 23:25:55 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-06-14 23:25:55 ----A---- C:\WINDOWS\system32\invagent.dll
2016-06-14 23:25:55 ----A---- C:\WINDOWS\system32\AppContracts.dll
2016-06-14 23:25:54 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-06-14 23:25:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-06-14 23:25:54 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-06-14 23:25:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-06-14 23:25:53 ----A---- C:\WINDOWS\SYSWOW64\tdlrecover.exe
2016-06-14 23:25:53 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-06-14 23:25:52 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-06-14 23:25:52 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-06-14 23:25:52 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2016-06-14 23:25:52 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-06-14 23:25:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-06-14 23:25:51 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-06-14 23:25:51 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-06-14 23:25:50 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2016-06-14 23:25:50 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-06-14 23:25:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-06-14 23:25:50 ----A---- C:\WINDOWS\explorer.exe
2016-06-14 23:25:49 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2016-06-14 23:25:49 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-06-14 23:25:49 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-06-14 23:25:48 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2016-06-14 23:25:48 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-06-14 23:25:48 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2016-06-14 23:25:48 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2016-06-14 23:25:48 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-06-14 23:25:47 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-06-14 23:25:47 ----A---- C:\WINDOWS\system32\ws2_32.dll
2016-06-14 23:25:47 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-06-14 23:25:47 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2016-06-14 23:25:46 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-06-14 23:25:46 ----A---- C:\WINDOWS\system32\setupapi.dll
2016-06-14 23:25:46 ----A---- C:\WINDOWS\system32\rastls.dll
2016-06-14 23:25:45 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-06-14 23:25:45 ----A---- C:\WINDOWS\system32\usocore.dll
2016-06-14 23:25:45 ----A---- C:\WINDOWS\system32\SRH.dll
2016-06-14 23:25:45 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-06-14 23:25:45 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-06-14 23:25:44 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-06-14 23:25:44 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-06-14 23:25:44 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-06-14 23:25:43 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-06-14 23:25:43 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2016-06-14 23:25:43 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2016-06-14 23:25:43 ----A---- C:\WINDOWS\system32\BrokerLib.dll
2016-06-14 23:25:43 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-06-14 23:25:42 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-06-14 23:25:42 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-06-14 23:25:42 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2016-06-14 23:25:42 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-06-14 23:25:41 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-06-14 23:25:41 ----A---- C:\WINDOWS\system32\omadmclient.exe
2016-06-14 23:25:41 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-06-14 23:25:40 ----A---- C:\WINDOWS\system32\shell32.dll
2016-06-14 23:25:39 ----A---- C:\WINDOWS\system32\vpnike.dll
2016-06-14 23:25:39 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-06-14 23:25:39 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-06-14 23:25:39 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-14 23:25:38 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-06-14 23:25:37 ----A---- C:\WINDOWS\system32\wininet.dll
2016-06-14 23:25:37 ----A---- C:\WINDOWS\system32\hal.dll
2016-06-14 23:25:37 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-06-14 23:25:36 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-06-14 23:25:36 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2016-06-14 23:25:36 ----A---- C:\WINDOWS\SYSWOW64\mswsock.dll
2016-06-14 23:25:36 ----A---- C:\WINDOWS\system32\mswsock.dll
2016-06-14 23:25:36 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-06-14 23:25:35 ----A---- C:\WINDOWS\system32\polstore.dll
2016-06-14 23:25:35 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-06-14 23:25:31 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2016-06-14 23:25:30 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2016-06-14 23:25:30 ----A---- C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-14 23:25:30 ----A---- C:\WINDOWS\system32\gpapi.dll
2016-06-14 23:25:30 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-06-14 23:25:29 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-06-14 23:25:29 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-06-14 23:25:29 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-06-14 23:25:29 ----A---- C:\WINDOWS\system32\cryptsvc.dll
2016-06-14 23:25:28 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-06-14 23:25:28 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-06-14 23:25:28 ----A---- C:\WINDOWS\system32\internetmail.dll
2016-06-14 23:25:28 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-06-14 23:25:27 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-06-14 23:25:27 ----A---- C:\WINDOWS\system32\GnssAdapter.dll
2016-06-14 23:25:27 ----A---- C:\WINDOWS\system32\devinv.dll
2016-06-14 23:25:26 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-06-14 23:25:26 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2016-06-14 23:25:26 ----A---- C:\WINDOWS\system32\NetworkUXBroker.exe
2016-06-14 23:25:26 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-06-14 23:25:25 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-06-14 23:25:25 ----A---- C:\WINDOWS\SYSWOW64\polstore.dll
2016-06-14 23:25:25 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-06-14 23:25:25 ----A---- C:\WINDOWS\system32\drivers\ufx01000.sys
2016-06-14 23:25:25 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2016-06-14 23:25:24 ----A---- C:\WINDOWS\SYSWOW64\newdev.dll
2016-06-14 23:25:24 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-06-14 23:25:24 ----A---- C:\WINDOWS\system32\newdev.dll
2016-06-14 23:25:24 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-06-14 23:25:23 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2016-06-14 23:25:23 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2016-06-14 23:25:23 ----A---- C:\WINDOWS\system32\cdd.dll
2016-06-14 23:25:22 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2016-06-14 23:25:22 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-06-14 23:25:22 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2016-06-14 23:25:21 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-06-14 23:25:21 ----A---- C:\WINDOWS\system32\drivers\Ndu.sys
2016-06-14 23:25:21 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-06-14 23:25:20 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-06-14 23:25:20 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2016-06-14 23:25:19 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2016-06-14 23:25:19 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2016-06-14 23:25:19 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2016-06-14 23:25:19 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2016-06-14 23:25:18 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-06-14 23:25:18 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-06-14 23:25:18 ----A---- C:\WINDOWS\system32\httpprxp.dll
2016-06-14 23:25:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2016-06-14 23:25:17 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2016-06-14 23:25:17 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-06-14 23:25:17 ----A---- C:\WINDOWS\system32\adhsvc.dll
2016-06-14 23:25:16 ----A---- C:\WINDOWS\SYSWOW64\FwRemoteSvr.dll
2016-06-14 23:25:16 ----A---- C:\WINDOWS\system32\httpprxm.dll
2016-06-14 23:25:16 ----A---- C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-14 23:25:16 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-06-14 23:25:15 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2016-06-14 23:25:15 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2016-06-14 23:25:15 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-06-14 23:25:14 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-06-14 23:25:14 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-06-14 23:25:14 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2016-06-14 23:25:13 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-06-14 23:25:13 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-06-14 23:25:13 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-06-14 23:25:13 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-06-14 23:25:13 ----A---- C:\WINDOWS\system32\AppCapture.dll

======List of files/folders modified in the last 1 month======

2016-07-11 17:13:31 ----D---- C:\WINDOWS\Temp
2016-07-11 17:06:34 ----D---- C:\WINDOWS\prefetch
2016-07-11 17:05:31 ----RD---- C:\Program Files
2016-07-11 17:05:18 ----D---- C:\Program Files (x86)\Steam
2016-07-11 17:05:01 ----D---- C:\Users\Ondřej\AppData\Roaming\Skype
2016-07-11 17:02:24 ----D---- C:\WINDOWS\System32
2016-07-11 16:48:26 ----D---- C:\AdwCleaner
2016-07-11 16:23:44 ----D---- C:\WINDOWS\system32\Tasks
2016-07-11 16:23:43 ----RD---- C:\Program Files (x86)
2016-07-11 16:23:43 ----D---- C:\WINDOWS\Tasks
2016-07-11 16:13:43 ----HD---- C:\ProgramData
2016-07-11 16:07:05 ----RD---- C:\Users
2016-07-11 16:03:33 ----D---- C:\WINDOWS\system32\drivers
2016-07-11 16:03:09 ----D---- C:\WINDOWS\system32\sru
2016-07-11 16:00:19 ----D---- C:\Windows
2016-07-11 15:59:26 ----D---- C:\WINDOWS\system32\drivers\etc
2016-07-11 15:55:23 ----D---- C:\Users\Ondřej\AppData\Roaming\BitTorrent
2016-07-11 15:53:36 ----D---- C:\Users\Ondřej\AppData\Roaming\vlc
2016-07-11 15:51:50 ----D---- C:\WINDOWS\Microsoft.NET
2016-07-11 10:33:47 ----D---- C:\WINDOWS\system32\NDF
2016-07-10 18:13:05 ----AD---- C:\KMPlayer
2016-07-10 17:46:33 ----D---- C:\WINDOWS\AppReadiness
2016-07-10 00:26:15 ----D---- C:\ProgramData\NVIDIA Corporation
2016-07-09 18:09:43 ----D---- C:\WINDOWS\INF
2016-07-09 18:09:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-09 09:56:52 ----HD---- C:\Program Files\WindowsApps
2016-07-07 02:39:37 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2016-07-06 11:52:02 ----SHD---- C:\Config.Msi
2016-07-05 13:14:01 ----SHD---- C:\WINDOWS\Installer
2016-07-05 11:42:38 ----SHD---- C:\System Volume Information
2016-07-02 19:01:11 ----D---- C:\WINDOWS\rescache
2016-07-02 17:43:50 ----D---- C:\WINDOWS\system32\config
2016-06-27 09:05:40 ----D---- C:\WINDOWS\system32\DriverStore
2016-06-24 17:58:35 ----D---- C:\WINDOWS\system32\WDI
2016-06-23 12:13:32 ----D---- C:\WINDOWS\WinSxS
2016-06-21 15:55:21 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2016-06-21 15:54:57 ----D---- C:\Program Files (x86)\Common Files
2016-06-21 15:51:51 ----AD---- C:\Program Files (x86)\Microsoft Office
2016-06-21 15:17:50 ----D---- C:\WINDOWS\system32\catroot2
2016-06-17 20:11:53 ----D---- C:\WINDOWS\system32\LogFiles
2016-06-17 09:24:10 ----D---- C:\WINDOWS\CbsTemp
2016-06-17 09:24:07 ----D---- C:\WINDOWS\syswow64
2016-06-15 21:17:31 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-06-15 21:17:31 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-06-15 21:17:29 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-06-15 21:17:29 ----D---- C:\WINDOWS\system32\wbem
2016-06-15 21:17:29 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-06-15 21:17:29 ----D---- C:\WINDOWS\system32\en-US
2016-06-15 21:17:29 ----D---- C:\WINDOWS\system32\cs-CZ
2016-06-15 21:17:26 ----D---- C:\WINDOWS\bcastdvr
2016-06-15 21:17:26 ----D---- C:\WINDOWS\AppPatch
2016-06-15 21:17:26 ----D---- C:\Program Files\Internet Explorer
2016-06-15 21:17:26 ----D---- C:\Program Files (x86)\Internet Explorer
2016-06-15 21:17:25 ----D---- C:\WINDOWS\system32\migration
2016-06-15 13:55:35 ----D---- C:\WINDOWS\system32\MRT
2016-06-15 13:51:16 ----A---- C:\WINDOWS\system32\MRT.exe
2016-06-14 20:33:01 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R3 bcbtums;@oem11.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCM43XX;@oem21.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-02-25 7549616]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-05-28 112640]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2016-03-29 245760]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-10-30 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-05-28 84992]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-14 6278392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-04-28 3949656]
R3 MEIx64;@oem12.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverx64.sys [2013-12-10 100312]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-02-25 12479040]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-02-24 26560]
R3 nvvad_WaveExtensible;@oem31.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-02-24 47760]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-05-28 954368]
S3 btwampfl;@oem11.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-19 117248]
S3 dg_ssudbus;@oem20.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudbus.sys [2015-10-10 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-10-30 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IntcDAud;@oem3.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-03-07 450520]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 iwdbus;@oem1.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-03-01 27032]
S3 LMDriver;@oem27.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2013-07-18 21360]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NvStUSB;@oem15.inf,%NvStUSB.SvcDesc%;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2015-04-27 452240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2016-04-07 694464]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-04-05 2021592]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2016-03-02 83768]
R2 BcmBtRSupport;@oem11.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2016-06-10 2944768]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 dowidoly;Renew Single Click; C:\Program Files (x86)\79C1BA66-1468245540-E411-85C7-F0761C76E061\jnsd488B.tmp [2016-07-11 244224]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-02-24 1163200]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-14 370064]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-02-24 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-02-24 4812736]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-02-23 1263040]
R2 OneSyncSvc_31ea5;Hostitel synchronizace_31ea5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-02-24 6308288]
S2 Gujighqepotdebugertiwaserewty.exe;Gujighqepot Debuger; C:\Program Files (x86)\Pherdpy\Gujighqepotdebugertiwaserewty.exe [2016-07-11 705760]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 154440]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2562ae;Hostitel synchronizace_2562ae; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2f9f6;Hostitel synchronizace_2f9f6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2fbf1;Hostitel synchronizace_2fbf1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_304e9;Hostitel synchronizace_304e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3168c;Hostitel synchronizace_3168c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_316a3;Hostitel synchronizace_316a3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_31b03;Hostitel synchronizace_31b03; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_33c884;Hostitel synchronizace_33c884; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_34391;Hostitel synchronizace_34391; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_34493;Hostitel synchronizace_34493; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_362cb;Hostitel synchronizace_362cb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_37c01;Hostitel synchronizace_37c01; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_37d54;Hostitel synchronizace_37d54; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_37dc3;Hostitel synchronizace_37dc3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_37fbe;Hostitel synchronizace_37fbe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3839e;Hostitel synchronizace_3839e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3899e;Hostitel synchronizace_3899e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39496;Hostitel synchronizace_39496; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3957b;Hostitel synchronizace_3957b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39734;Hostitel synchronizace_39734; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39b76;Hostitel synchronizace_39b76; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39cf1;Hostitel synchronizace_39cf1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39d83;Hostitel synchronizace_39d83; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39f9b;Hostitel synchronizace_39f9b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a020;Hostitel synchronizace_3a020; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a02c;Hostitel synchronizace_3a02c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a088;Hostitel synchronizace_3a088; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a3d0;Hostitel synchronizace_3a3d0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a48f;Hostitel synchronizace_3a48f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a5a9;Hostitel synchronizace_3a5a9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a7ab;Hostitel synchronizace_3a7ab; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3aa8a;Hostitel synchronizace_3aa8a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3aafb;Hostitel synchronizace_3aafb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ac04;Hostitel synchronizace_3ac04; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3aea9;Hostitel synchronizace_3aea9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3aee0;Hostitel synchronizace_3aee0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3af8a;Hostitel synchronizace_3af8a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b239;Hostitel synchronizace_3b239; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b265;Hostitel synchronizace_3b265; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b6f3;Hostitel synchronizace_3b6f3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b968;Hostitel synchronizace_3b968; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b988;Hostitel synchronizace_3b988; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bbb2;Hostitel synchronizace_3bbb2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bf16;Hostitel synchronizace_3bf16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bf53;Hostitel synchronizace_3bf53; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bfb2;Hostitel synchronizace_3bfb2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c0fd;Hostitel synchronizace_3c0fd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c38b;Hostitel synchronizace_3c38b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c806;Hostitel synchronizace_3c806; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c88f;Hostitel synchronizace_3c88f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c8ec;Hostitel synchronizace_3c8ec; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c926;Hostitel synchronizace_3c926; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cb67;Hostitel synchronizace_3cb67; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cb85;Hostitel synchronizace_3cb85; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cc9b;Hostitel synchronizace_3cc9b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ccb5;Hostitel synchronizace_3ccb5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cd68;Hostitel synchronizace_3cd68; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cda0;Hostitel synchronizace_3cda0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d138;Hostitel synchronizace_3d138; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d38b;Hostitel synchronizace_3d38b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d769;Hostitel synchronizace_3d769; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e1ac;Hostitel synchronizace_3e1ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e20a;Hostitel synchronizace_3e20a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e3bf;Hostitel synchronizace_3e3bf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e531;Hostitel synchronizace_3e531; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e7e2;Hostitel synchronizace_3e7e2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ed4b;Hostitel synchronizace_3ed4b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3f15d;Hostitel synchronizace_3f15d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3f5bf;Hostitel synchronizace_3f5bf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3f854;Hostitel synchronizace_3f854; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3f9bb;Hostitel synchronizace_3f9bb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3fc02;Hostitel synchronizace_3fc02; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ff9f;Hostitel synchronizace_3ff9f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_40019;Hostitel synchronizace_40019; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4079e;Hostitel synchronizace_4079e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-14 301976]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 154440]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2016-03-19 651576]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2562ae;Služba zasílání zpráv_2562ae; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2f9f6;Služba zasílání zpráv_2f9f6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2fbf1;Služba zasílání zpráv_2fbf1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_304e9;Služba zasílání zpráv_304e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3168c;Služba zasílání zpráv_3168c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_316a3;Služba zasílání zpráv_316a3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_31b03;Služba zasílání zpráv_31b03; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_31ea5;Služba zasílání zpráv_31ea5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_33c884;Služba zasílání zpráv_33c884; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_34391;Služba zasílání zpráv_34391; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_34493;Služba zasílání zpráv_34493; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_362cb;Služba zasílání zpráv_362cb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_37c01;Služba zasílání zpráv_37c01; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_37d54;Služba zasílání zpráv_37d54; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_37dc3;Služba zasílání zpráv_37dc3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_37fbe;Služba zasílání zpráv_37fbe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3839e;Služba zasílání zpráv_3839e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3899e;Služba zasílání zpráv_3899e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39496;Služba zasílání zpráv_39496; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3957b;Služba zasílání zpráv_3957b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39734;Služba zasílání zpráv_39734; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39b76;Služba zasílání zpráv_39b76; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39cf1;Služba zasílání zpráv_39cf1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39d83;Služba zasílání zpráv_39d83; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39f9b;Služba zasílání zpráv_39f9b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a020;Služba zasílání zpráv_3a020; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a02c;Služba zasílání zpráv_3a02c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a088;Služba zasílání zpráv_3a088; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a3d0;Služba zasílání zpráv_3a3d0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a48f;Služba zasílání zpráv_3a48f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a5a9;Služba zasílání zpráv_3a5a9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a7ab;Služba zasílání zpráv_3a7ab; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3aa8a;Služba zasílání zpráv_3aa8a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3aafb;Služba zasílání zpráv_3aafb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ac04;Služba zasílání zpráv_3ac04; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3aea9;Služba zasílání zpráv_3aea9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3aee0;Služba zasílání zpráv_3aee0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3af8a;Služba zasílání zpráv_3af8a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b239;Služba zasílání zpráv_3b239; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b265;Služba zasílání zpráv_3b265; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b6f3;Služba zasílání zpráv_3b6f3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b968;Služba zasílání zpráv_3b968; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b988;Služba zasílání zpráv_3b988; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bbb2;Služba zasílání zpráv_3bbb2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bf16;Služba zasílání zpráv_3bf16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bf53;Služba zasílání zpráv_3bf53; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bfb2;Služba zasílání zpráv_3bfb2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c0fd;Služba zasílání zpráv_3c0fd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c38b;Služba zasílání zpráv_3c38b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c806;Služba zasílání zpráv_3c806; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c88f;Služba zasílání zpráv_3c88f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c8ec;Služba zasílání zpráv_3c8ec; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c926;Služba zasílání zpráv_3c926; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cb67;Služba zasílání zpráv_3cb67; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cb85;Služba zasílání zpráv_3cb85; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cc9b;Služba zasílání zpráv_3cc9b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ccb5;Služba zasílání zpráv_3ccb5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cd68;Služba zasílání zpráv_3cd68; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cda0;Služba zasílání zpráv_3cda0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d138;Služba zasílání zpráv_3d138; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d38b;Služba zasílání zpráv_3d38b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d769;Služba zasílání zpráv_3d769; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e1ac;Služba zasílání zpráv_3e1ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e20a;Služba zasílání zpráv_3e20a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e3bf;Služba zasílání zpráv_3e3bf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e531;Služba zasílání zpráv_3e531; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e7e2;Služba zasílání zpráv_3e7e2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ed4b;Služba zasílání zpráv_3ed4b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f15d;Služba zasílání zpráv_3f15d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f5bf;Služba zasílání zpráv_3f5bf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f854;Služba zasílání zpráv_3f854; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f9bb;Služba zasílání zpráv_3f9bb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3fc02;Služba zasílání zpráv_3fc02; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ff9f;Služba zasílání zpráv_3ff9f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_40019;Služba zasílání zpráv_40019; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4079e;Služba zasílání zpráv_4079e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_40aa6;Služba zasílání zpráv_40aa6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_412db;Služba zasílání zpráv_412db; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_41e12;Služba zasílání zpráv_41e12; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_42b60;Služba zasílání zpráv_42b60; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_42c3b;Služba zasílání zpráv_42c3b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43249;Služba zasílání zpráv_43249; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_45988;Služba zasílání zpráv_45988; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46551;Služba zasílání zpráv_46551; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4662d;Služba zasílání zpráv_4662d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46a41;Služba zasílání zpráv_46a41; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_475eb;Služba zasílání zpráv_475eb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47741;Služba zasílání zpráv_47741; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47c27;Služba zasílání zpráv_47c27; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47db0;Služba zasílání zpráv_47db0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49815;Služba zasílání zpráv_49815; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49b11;Služba zasílání zpráv_49b11; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4ae31;Služba zasílání zpráv_4ae31; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4b188;Služba zasílání zpráv_4b188; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4b710;Služba zasílání zpráv_4b710; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4c40b;Služba zasílání zpráv_4c40b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d7d4;Služba zasílání zpráv_4d7d4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4f458;Služba zasílání zpráv_4f458; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_51499;Služba zasílání zpráv_51499; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_561d2;Služba zasílání zpráv_561d2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_56aa1;Služba zasílání zpráv_56aa1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_61fa4;Služba zasílání zpráv_61fa4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_6afa72d;Služba zasílání zpráv_6afa72d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_6b08d;Služba zasílání zpráv_6b08d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_6d3bf;Služba zasílání zpráv_6d3bf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_6fc4c;Služba zasílání zpráv_6fc4c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_75432;Služba zasílání zpráv_75432; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_b0616;Služba zasílání zpráv_b0616; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Zajímalo by mne, co to bylo za program.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#3 Příspěvek od andersos »

Stahoval jsem film. V ReadMe bylo napsáno at ho zpustím přes Media Player a to jsem udělal. Pak to začalo stahovat nějakej kodek a nainstovalo se ještě pár programů, který jsem hned odinstaloval. Bohužel i po tom mi to stále dělá.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#4 Příspěvek od Rudy »

Aha. Teď bych rád viděl log z ADW.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#5 Příspěvek od andersos »

Bohužel ten mi nejde vytvořit, protože když dam smazat nalezené soubory, tak se ukáže, ze program neodpovídá.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#6 Příspěvek od Rudy »

Zkuste ho spustit v nouz. režimu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#7 Příspěvek od andersos »

Tady je:
# AdwCleaner v5.201 - Logfile created 11/07/2016 at 21:36:07
# Updated 30/06/2016 by ToolsLib
# Database : 2016-07-10.3 [Local]
# Operating system : Windows 10 Home (X64)
# Username : Ondřej - ONDRA
# Running from : C:\Users\Ondřej\Desktop\adwcleaner_5.201 (1).exe
# Option : Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****

Service Found : UCGuard
Service Found : zigipyro
Service Found : dowidoly
Service Found : rijufoze
Service Found : werocuwyzbt
Service Found : zigipyro

***** [ Folders ] *****

Folder Found : C:\ProgramData\a7001f7b-5c51-0
Folder Found : C:\ProgramData\a7001f7b-6317-1
Folder Found : C:\Program Files (x86)\MPC Cleaner
Folder Found : C:\Program Files (x86)\WeatherChickn
Folder Found : C:\Program Files (x86)\badu
Folder Found : C:\Program Files (x86)\ContentPush
Folder Found : C:\Program Files (x86)\79C1BA66-1468245540-E411-85C7-F0761C76E061
Folder Found : C:\Users\ONDEJ~1\AppData\Local\Temp\MPC
Folder Found : C:\Users\Ondřej\AppData\Local\79C1BA66-1468272240-E411-85C7-F0761C76E061
Folder Found : C:\Users\Ondřej\AppData\Roaming\UPUpdata
Folder Found : C:\Users\Ondřej\AppData\Roaming\gplyra
Folder Found : C:\extensions
Folder Found : C:\Users\Ondřej\AppData\Local\app

***** [ Files ] *****

File Found : C:\WINDOWS\chromebrowser.exe
File Found : C:\WINDOWS\SysNative\drivers\ucguard.sys

***** [ DLL ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

Key Found : HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
Key Found : HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
Key Found : HKCU\Software\System Healer
Key Found : HKCU\Software\UCBrowserPID
Key Found : HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
Key Found : HKLM\SOFTWARE\UCBrowserPID
Key Found : HKLM\SOFTWARE\youndooSoftware
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PopupProduct
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ContentPush
Key Found : HKU\S-1-5-21-508344559-3349700843-2002687948-1001\Software\System Healer
Key Found : HKU\S-1-5-21-508344559-3349700843-2002687948-1001\Software\UCBrowserPID
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{74FE845E-E2C1-4A3C-90A8-3163DDD6A43A}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{84AEE83D-5ED5-4B3B-9E00-7340127A0181}]
Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon [Userinit] - wscript C:\WINDOWS\run.vbs,
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [apphide]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [apphide]
Value Found : HKU\S-1-5-21-508344559-3349700843-2002687948-1001\Software\Microsoft\Windows\CurrentVersion\Run [apphide]

***** [ Web browsers ] *****


*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [4963 bytes] - [18/11/2015 16:16:24]
C:\AdwCleaner\AdwCleaner[C2].txt - [1453 bytes] - [27/02/2016 23:41:46]
C:\AdwCleaner\AdwCleaner[C3].txt - [361 bytes] - [11/07/2016 16:48:26]
C:\AdwCleaner\AdwCleaner[C4].txt - [363 bytes] - [11/07/2016 18:18:45]
C:\AdwCleaner\AdwCleaner[C5].txt - [363 bytes] - [11/07/2016 20:31:26]
C:\AdwCleaner\AdwCleaner[C6].txt - [363 bytes] - [11/07/2016 20:50:16]
C:\AdwCleaner\AdwCleaner[S1].txt - [4478 bytes] - [18/11/2015 16:14:42]
C:\AdwCleaner\AdwCleaner[S2].txt - [5618 bytes] - [27/02/2016 23:40:22]
C:\AdwCleaner\AdwCleaner[S3].txt - [4769 bytes] - [11/07/2016 16:46:29]
C:\AdwCleaner\AdwCleaner[S4].txt - [5221 bytes] - [11/07/2016 18:16:06]
C:\AdwCleaner\AdwCleaner[S5].txt - [5366 bytes] - [11/07/2016 20:27:14]
C:\AdwCleaner\AdwCleaner[S6].txt - [4066 bytes] - [11/07/2016 20:48:02]
C:\AdwCleaner\AdwCleaner[S7].txt - [4058 bytes] - [11/07/2016 21:36:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [4131 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#8 Příspěvek od Rudy »

ADW nemazal, neklikl jste na >cleaning<. Zkuste ještě jednou.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#9 Příspěvek od andersos »

Musel mazat, protože ted tady už nic nenašel, zkoušel jsem to ještě včera.

# AdwCleaner v5.201 - Logfile created 11/07/2016 at 21:40:41
# Updated 30/06/2016 by ToolsLib
# Database : 2016-07-10.3 [Local]
# Operating system : Windows 10 Home (X64)
# Username : Ondřej - ONDRA
# Running from : C:\Users\Ondřej\Desktop\adwcleaner_5.201 (1).exe
# Option : Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLL ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [4963 bytes] - [18/11/2015 16:16:24]
C:\AdwCleaner\AdwCleaner[C2].txt - [1453 bytes] - [27/02/2016 23:41:46]
C:\AdwCleaner\AdwCleaner[C3].txt - [361 bytes] - [11/07/2016 16:48:26]
C:\AdwCleaner\AdwCleaner[C4].txt - [363 bytes] - [11/07/2016 18:18:45]
C:\AdwCleaner\AdwCleaner[C5].txt - [363 bytes] - [11/07/2016 20:31:26]
C:\AdwCleaner\AdwCleaner[C6].txt - [363 bytes] - [11/07/2016 20:50:16]
C:\AdwCleaner\AdwCleaner[C7].txt - [4404 bytes] - [11/07/2016 21:37:29]
C:\AdwCleaner\AdwCleaner[S1].txt - [4478 bytes] - [18/11/2015 16:14:42]
C:\AdwCleaner\AdwCleaner[S2].txt - [5618 bytes] - [27/02/2016 23:40:22]
C:\AdwCleaner\AdwCleaner[S3].txt - [4769 bytes] - [11/07/2016 16:46:29]
C:\AdwCleaner\AdwCleaner[S4].txt - [5221 bytes] - [11/07/2016 18:16:06]
C:\AdwCleaner\AdwCleaner[S5].txt - [5366 bytes] - [11/07/2016 20:27:14]
C:\AdwCleaner\AdwCleaner[S6].txt - [4066 bytes] - [11/07/2016 20:48:02]
C:\AdwCleaner\AdwCleaner[S7].txt - [4210 bytes] - [11/07/2016 21:36:07]
C:\AdwCleaner\AdwCleaner[S8].txt - [1648 bytes] - [11/07/2016 21:40:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [1721 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#10 Příspěvek od Rudy »

Asi ano, pak jste ale nedal správný log. Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#11 Příspěvek od andersos »

Tak to se omlouvám. Zde je požadovaný log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2016 01
Ran by Ondřej (administrator) on ONDRA (12-07-2016 19:50:13)
Running from C:\Users\Ondřej\Desktop
Loaded Profiles: Ondřej (Available Profiles: Ondřej)
Platform: Windows 10 Home Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Oracle Corporation) C:\Program Files\Online.IO\jre\bin\OIO.exe
(Oracle Corporation) C:\Program Files\Online.IO\jre\bin\OIO.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(EIXPIBOU Xuzsoihe) C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(TeamDev Ltd) C:\Windows\Temp\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe
(TeamDev Ltd) C:\Windows\Temp\jxbrowser-chromium-43.0.2357.52.6.3\jxbrowser-chromium.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(forum.viry.cz) C:\Users\Ondřej\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 2014-04-10] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-02-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [gplyra] => C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1517088 2016-07-06] (ABBYY Production LLC.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs,
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [Notices] => C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe [2293368 2016-07-05] (EIXPIBOU Xuzsoihe)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [svchost0] => "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"\UUC0789.exe
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 146.102.41.11 146.102.41.12
Tcpip\..\Interfaces\{1ece9659-f892-4362-8109-1c10587dbd87}: [DhcpNameServer] 146.102.41.11 146.102.41.12
Tcpip\..\Interfaces\{5199bccb-827e-4371-b0e6-f5e9a6e7c748}: [DhcpNameServer] 172.30.0.6 172.30.0.28

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-06-24] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-24] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-06-24] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-03-10] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-06-24] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-10] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-24] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-24] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-24] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-24] (Microsoft Corporation)

FireFox:
========
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-10] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-06-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-06-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)

Chrome:
=======
CHR StartupUrls: atimershfuzerygrekuse -> "hxxps://www.seznam.cz/"
CHR Profile: C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-11]
CHR Extension: (Dokumenty Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-08]
CHR Extension: (Disk Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-11]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2016-07-11]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2016-07-11]
CHR Extension: (YouTube) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-11]
CHR Extension: (Tabulky Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-07-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2016-07-11]
CHR Extension: (Gmail) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-11]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2944768 2016-06-24] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-02-24] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [370064 2015-10-14] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-02-24] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-02-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-02-24] (NVIDIA Corporation)
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-06-23] (Microsoft Corporation) [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7549616 2014-02-25] (Broadcom Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-02-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2016-02-24] (NVIDIA Corporation)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [761600 2015-06-24] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [61624 2015-09-20] (Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-12 19:50 - 2016-07-12 19:51 - 00017462 _____ C:\Users\Ondřej\Desktop\FRST.txt
2016-07-12 19:49 - 2016-07-12 19:50 - 00000000 ____D C:\FRST
2016-07-12 19:48 - 2016-07-12 19:48 - 00112640 _____ (forum.viry.cz) C:\Users\Ondřej\Desktop\FRSTLauncher.exe
2016-07-12 19:47 - 2016-07-12 19:47 - 02390528 _____ (Farbar) C:\Users\Ondřej\Desktop\FRST64.exe
2016-07-12 10:29 - 2016-07-12 19:42 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-07-11 21:55 - 2016-07-11 21:55 - 00108248 _____ C:\Users\Ondřej\Downloads\Finding-Dory(0000272780).srt
2016-07-11 21:51 - 2016-07-11 21:51 - 00000000 ____D C:\Users\Ond�ej\AppData\Local\Adobe
2016-07-11 21:51 - 2016-07-11 21:51 - 00000000 ____D C:\Users\Ond�ej
2016-07-11 21:50 - 2016-07-11 21:50 - 22317996 _____ C:\Users\Ondřej\Downloads\wetransfer-573f2f.zip
2016-07-11 21:34 - 2016-07-11 21:34 - 00000000 ____D C:\WINDOWS\pss
2016-07-11 20:30 - 2016-07-11 20:30 - 00000000 ____D C:\Program Files (x86)\{516D9F5A-D8E3-485A-838A-AE688ED07E5C}
2016-07-11 18:15 - 2016-07-11 18:15 - 03712064 _____ C:\Users\Ondřej\Desktop\adwcleaner_5.201 (1).exe
2016-07-11 17:13 - 2016-07-11 17:13 - 01222144 _____ C:\Users\Ondřej\Downloads\RSITx64 (1).exe
2016-07-11 17:05 - 2016-07-11 17:13 - 00000000 ____D C:\Program Files\trend micro
2016-07-11 17:05 - 2016-07-11 17:05 - 01222144 _____ C:\Users\Ondřej\Downloads\RSITx64.exe
2016-07-11 17:05 - 2016-07-11 17:05 - 00000000 ____D C:\rsit
2016-07-11 16:25 - 2016-07-11 16:25 - 03712064 _____ C:\Users\Ondřej\Downloads\adwcleaner_5.201.exe
2016-07-11 16:13 - 2016-07-11 16:13 - 00003614 _____ C:\WINDOWS\System32\Tasks\OIO
2016-07-11 16:12 - 2016-07-11 16:13 - 00000000 ____D C:\Program Files\Online.IO
2016-07-11 16:10 - 2016-07-11 16:24 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\Seznam.cz
2016-07-11 16:10 - 2016-07-11 16:10 - 00000000 ____D C:\Users\Default\AppData\Local\MicrosoftEdge
2016-07-11 16:10 - 2016-07-11 16:10 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2016-07-11 16:10 - 2016-07-11 16:10 - 00000000 ____D C:\Users\Default User\AppData\Local\MicrosoftEdge
2016-07-11 16:10 - 2016-07-11 16:10 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2016-07-11 16:10 - 2016-07-11 16:10 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2016-07-11 16:07 - 2016-07-11 16:07 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Steam
2016-07-11 16:07 - 2016-07-11 16:07 - 00000000 ____D C:\Users\Ondřej
2016-07-11 16:05 - 2016-07-11 20:46 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-07-11 16:01 - 2016-07-12 15:14 - 00000470 _____ C:\WINDOWS\Tasks\UCBrowserUpdater.job
2016-07-11 16:01 - 2016-07-11 16:01 - 00003490 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater
2016-07-11 15:59 - 2016-07-11 15:57 - 00001006 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-07-11 15:57 - 2016-07-12 10:59 - 00000000 ____D C:\Program Files (x86)\Pherdpy
2016-07-11 15:57 - 2016-07-11 15:58 - 00000000 ____D C:\Users\Ondřej\AppData\Local\thudephwutisnimge
2016-07-11 15:56 - 2016-07-10 10:32 - 00936960 ___SH (AutoIt Team) C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQJP.exe
2016-07-11 15:56 - 2016-07-10 10:32 - 00718352 ___SH C:\Users\Ondřej\AppData\Roaming\ZWfaXAYhTaIC
2016-07-11 15:56 - 2016-07-10 10:32 - 00036481 ___SH C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQ
2016-07-07 11:57 - 2016-07-07 11:57 - 11026864 _____ C:\Users\Ondřej\Desktop\Baccarat video.mp4
2016-07-05 13:11 - 2016-07-05 13:11 - 00002903 _____ C:\Users\Public\Desktop\ABBYY FineReader 12.lnk
2016-07-05 13:11 - 2016-07-05 13:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 12
2016-07-05 13:08 - 2016-07-05 13:14 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 12
2016-07-05 12:26 - 2014-05-14 14:44 - 00000928 _____ C:\Users\Ondřej\Downloads\_readme.txt
2016-07-05 12:21 - 2016-07-05 22:25 - 00000000 ____D C:\Program Files (x86)\HPSec
2016-07-05 12:21 - 2016-07-05 12:21 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\NotepadApp
2016-07-05 12:03 - 2016-07-05 13:04 - 00000000 ____D C:\temp
2016-06-28 13:20 - 2016-06-28 13:20 - 00000000 ____D C:\Users\Ondřej\AppData\Local\NetworkTiles
2016-06-27 08:47 - 2016-06-27 08:47 - 00011462 _____ C:\Users\Ondřej\Documents\[CzT]Hvezdy_nam_nepraly_The_Fault_in_Our_Stars_2014_CZ_.torrent
2016-06-22 14:25 - 2016-06-22 14:29 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\XnView
2016-06-21 13:06 - 2016-06-21 13:06 - 00000165 ____H C:\Users\Ondřej\Desktop\~$TOP100 companies_edited version.xlsx
2016-06-15 13:51 - 2016-06-15 13:52 - 05803227 _____ C:\Users\Ondřej\Desktop\TOP100-2015-web.pdf
2016-06-14 23:26 - 2016-05-28 08:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-06-14 23:26 - 2016-05-28 08:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-06-14 23:26 - 2016-05-28 07:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-06-14 23:26 - 2016-05-28 07:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-06-14 23:26 - 2016-05-28 07:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-06-14 23:26 - 2016-05-28 06:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-06-14 23:26 - 2016-05-28 06:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-06-14 23:26 - 2016-05-28 06:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-06-14 23:26 - 2016-05-28 06:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-06-14 23:26 - 2016-05-28 06:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-06-14 23:26 - 2016-05-28 06:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-06-14 23:26 - 2016-05-28 06:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-06-14 23:26 - 2016-05-28 06:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-06-14 23:26 - 2016-05-28 06:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-06-14 23:26 - 2016-05-28 06:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-06-14 23:26 - 2016-05-28 06:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-06-14 23:26 - 2016-05-28 06:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-06-14 23:26 - 2016-05-28 06:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-06-14 23:26 - 2016-05-28 06:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-06-14 23:26 - 2016-05-28 06:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-06-14 23:26 - 2016-05-28 06:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-06-14 23:26 - 2016-05-28 06:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-06-14 23:26 - 2016-05-28 06:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-06-14 23:26 - 2016-05-28 06:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-06-14 23:26 - 2016-05-28 06:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-06-14 23:26 - 2016-05-28 06:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-06-14 23:26 - 2016-05-28 06:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-06-14 23:26 - 2016-05-28 06:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-06-14 23:26 - 2016-05-28 06:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-06-14 23:26 - 2016-05-28 06:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-06-14 23:26 - 2016-05-28 06:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-06-14 23:26 - 2016-05-28 06:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-06-14 23:26 - 2016-05-28 06:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-06-14 23:26 - 2016-05-28 06:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-06-14 23:26 - 2016-05-28 06:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-06-14 23:26 - 2016-05-28 06:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-06-14 23:26 - 2016-05-28 06:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-06-14 23:26 - 2016-05-28 06:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-06-14 23:26 - 2016-05-28 06:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-06-14 23:26 - 2016-05-28 06:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-06-14 23:26 - 2016-05-28 06:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-06-14 23:26 - 2016-05-28 06:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-06-14 23:26 - 2016-05-28 06:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-06-14 23:26 - 2016-05-28 06:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-06-14 23:26 - 2016-05-28 06:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-06-14 23:26 - 2016-05-28 06:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-06-14 23:26 - 2016-05-28 06:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-06-14 23:26 - 2016-05-28 06:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-06-14 23:26 - 2016-05-28 06:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-06-14 23:26 - 2016-05-28 06:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-06-14 23:26 - 2016-05-28 06:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-06-14 23:26 - 2016-05-28 06:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-06-14 23:26 - 2016-05-28 06:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-06-14 23:26 - 2016-05-28 06:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-06-14 23:26 - 2016-05-28 06:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-06-14 23:26 - 2016-05-28 06:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-06-14 23:26 - 2016-05-28 06:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-06-14 23:26 - 2016-05-28 06:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-14 23:26 - 2016-05-28 06:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-06-14 23:26 - 2016-05-28 06:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-06-14 23:26 - 2016-05-28 06:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-06-14 23:26 - 2016-05-28 06:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-06-14 23:26 - 2016-05-28 06:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-06-14 23:26 - 2016-05-28 06:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-14 23:26 - 2016-05-28 06:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-14 23:26 - 2016-05-28 06:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-06-14 23:26 - 2016-05-28 06:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-06-14 23:26 - 2016-05-28 05:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-06-14 23:26 - 2016-05-28 05:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-06-14 23:26 - 2016-05-28 05:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-06-14 23:25 - 2016-05-28 08:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-06-14 23:25 - 2016-05-28 08:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-06-14 23:25 - 2016-05-28 08:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-06-14 23:25 - 2016-05-28 08:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-06-14 23:25 - 2016-05-28 07:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2016-06-14 23:25 - 2016-05-28 07:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-06-14 23:25 - 2016-05-28 07:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2016-06-14 23:25 - 2016-05-28 07:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-06-14 23:25 - 2016-05-28 07:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2016-06-14 23:25 - 2016-05-28 07:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-06-14 23:25 - 2016-05-28 07:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-06-14 23:25 - 2016-05-28 07:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-06-14 23:25 - 2016-05-28 07:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-06-14 23:25 - 2016-05-28 07:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2016-06-14 23:25 - 2016-05-28 07:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-06-14 23:25 - 2016-05-28 07:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-06-14 23:25 - 2016-05-28 07:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2016-06-14 23:25 - 2016-05-28 07:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-06-14 23:25 - 2016-05-28 07:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-06-14 23:25 - 2016-05-28 07:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-06-14 23:25 - 2016-05-28 07:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-06-14 23:25 - 2016-05-28 07:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-06-14 23:25 - 2016-05-28 07:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-06-14 23:25 - 2016-05-28 07:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-06-14 23:25 - 2016-05-28 07:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-06-14 23:25 - 2016-05-28 07:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-06-14 23:25 - 2016-05-28 07:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-06-14 23:25 - 2016-05-28 07:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-06-14 23:25 - 2016-05-28 07:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-06-14 23:25 - 2016-05-28 07:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-06-14 23:25 - 2016-05-28 07:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-06-14 23:25 - 2016-05-28 07:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-06-14 23:25 - 2016-05-28 07:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-14 23:25 - 2016-05-28 07:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-06-14 23:25 - 2016-05-28 07:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-06-14 23:25 - 2016-05-28 07:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-06-14 23:25 - 2016-05-28 07:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2016-06-14 23:25 - 2016-05-28 07:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2016-06-14 23:25 - 2016-05-28 06:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-06-14 23:25 - 2016-05-28 06:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-06-14 23:25 - 2016-05-28 06:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-06-14 23:25 - 2016-05-28 06:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-06-14 23:25 - 2016-05-28 06:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-06-14 23:25 - 2016-05-28 06:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-06-14 23:25 - 2016-05-28 06:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
2016-06-14 23:25 - 2016-05-28 06:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-06-14 23:25 - 2016-05-28 06:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-06-14 23:25 - 2016-05-28 06:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2016-06-14 23:25 - 2016-05-28 06:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2016-06-14 23:25 - 2016-05-28 06:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-06-14 23:25 - 2016-05-28 06:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-14 23:25 - 2016-05-28 06:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-06-14 23:25 - 2016-05-28 06:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-06-14 23:25 - 2016-05-28 06:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-06-14 23:25 - 2016-05-28 06:25 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-06-14 23:25 - 2016-05-28 06:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-06-14 23:25 - 2016-05-28 06:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
2016-06-14 23:25 - 2016-05-28 06:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-06-14 23:25 - 2016-05-28 06:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-06-14 23:25 - 2016-05-28 06:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2016-06-14 23:25 - 2016-05-28 06:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
2016-06-14 23:25 - 2016-05-28 06:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-06-14 23:25 - 2016-05-28 06:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2016-06-14 23:25 - 2016-05-28 06:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-06-14 23:25 - 2016-05-28 06:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-06-14 23:25 - 2016-05-28 06:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2016-06-14 23:25 - 2016-05-28 06:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-06-14 23:25 - 2016-05-28 06:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-06-14 23:25 - 2016-05-28 06:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2016-06-14 23:25 - 2016-05-28 06:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-06-14 23:25 - 2016-05-28 06:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2016-06-14 23:25 - 2016-05-28 06:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-06-14 23:25 - 2016-05-28 06:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-06-14 23:25 - 2016-05-28 06:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2016-06-14 23:25 - 2016-05-28 06:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-06-14 23:25 - 2016-05-28 06:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-06-14 23:25 - 2016-05-28 06:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2016-06-14 23:25 - 2016-05-28 06:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2016-06-14 23:25 - 2016-05-28 06:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-06-14 23:25 - 2016-05-28 06:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-06-14 23:25 - 2016-05-28 06:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-14 23:25 - 2016-05-28 06:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-06-14 23:25 - 2016-05-28 06:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-06-14 23:25 - 2016-05-28 06:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-06-14 23:25 - 2016-05-28 06:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2016-06-14 23:25 - 2016-05-28 06:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-06-14 23:25 - 2016-05-28 06:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-06-14 23:25 - 2016-05-28 06:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-06-14 23:25 - 2016-05-28 06:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-06-14 23:25 - 2016-05-28 06:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-06-14 23:25 - 2016-05-28 06:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-06-14 23:25 - 2016-05-28 06:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-06-14 23:25 - 2016-05-28 06:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-06-14 23:25 - 2016-05-28 06:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-06-14 23:25 - 2016-05-28 06:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2016-06-14 23:25 - 2016-05-28 06:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2016-06-14 23:25 - 2016-05-28 06:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-06-14 23:25 - 2016-05-28 06:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2016-06-14 23:25 - 2016-05-28 06:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-06-14 23:25 - 2016-05-28 06:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-06-14 23:25 - 2016-05-28 06:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-06-14 23:25 - 2016-05-28 06:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-06-14 23:25 - 2016-05-28 06:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-06-14 23:25 - 2016-05-28 06:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-06-14 23:25 - 2016-05-28 06:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-06-14 23:25 - 2016-05-28 06:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-06-14 23:25 - 2016-05-28 06:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-06-14 23:25 - 2016-05-28 06:13 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-06-14 23:25 - 2016-05-28 06:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-06-14 23:25 - 2016-05-28 06:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-06-14 23:25 - 2016-05-28 06:13 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-06-14 23:25 - 2016-05-28 06:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2016-06-14 23:25 - 2016-05-28 06:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-06-14 23:25 - 2016-05-28 06:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-06-14 23:25 - 2016-05-28 06:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-06-14 23:25 - 2016-05-28 06:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-06-14 23:25 - 2016-05-28 06:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2016-06-14 23:25 - 2016-05-28 06:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-06-14 23:25 - 2016-05-28 06:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-06-14 23:25 - 2016-05-28 06:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-06-14 23:25 - 2016-05-28 06:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-06-14 23:25 - 2016-05-28 06:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2016-06-14 23:25 - 2016-05-28 06:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-06-14 23:25 - 2016-05-28 06:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-06-14 23:25 - 2016-05-28 06:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-06-14 23:25 - 2016-05-28 06:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-06-14 23:25 - 2016-05-28 06:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-06-14 23:25 - 2016-05-28 06:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-06-14 23:25 - 2016-05-28 06:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-06-14 23:25 - 2016-05-28 06:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-06-14 23:25 - 2016-05-28 06:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-06-14 23:25 - 2016-05-28 06:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-06-14 23:25 - 2016-05-28 06:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-06-14 23:25 - 2016-05-28 06:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-06-14 23:25 - 2016-05-28 06:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-06-14 23:25 - 2016-05-28 06:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-06-14 23:25 - 2016-05-28 05:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-06-14 23:25 - 2016-05-28 05:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-06-14 23:25 - 2016-05-28 05:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-06-14 23:25 - 2016-05-28 05:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-06-14 23:25 - 2016-05-28 05:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-06-14 23:25 - 2016-05-28 05:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-12 19:46 - 2016-03-31 23:26 - 00000000 ____D C:\Program Files (x86)\Steam
2016-07-12 19:45 - 2016-04-20 11:54 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\Skype
2016-07-12 19:42 - 2016-03-08 20:47 - 00000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-12 19:42 - 2016-03-08 18:25 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-07-12 19:42 - 2015-09-20 12:02 - 00000000 __SHD C:\Users\Ondřej\IntelGraphicsProfiles
2016-07-12 19:41 - 2016-03-08 18:54 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-07-12 17:31 - 2015-09-10 07:43 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-07-12 17:30 - 2016-03-08 18:53 - 00000000 ____D C:\Users\Ondřej
2016-07-12 12:02 - 2016-04-07 15:12 - 00000000 ____D C:\Users\Ondřej\Desktop\Miracle crystal
2016-07-12 10:28 - 2016-03-08 18:04 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-07-12 10:19 - 2016-03-10 00:16 - 00004192 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{249AA381-F725-407F-9DF0-83E4E846400C}
2016-07-12 10:13 - 2015-11-18 16:14 - 00000000 ____D C:\AdwCleaner
2016-07-12 10:09 - 2016-03-08 21:09 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Adobe
2016-07-11 21:59 - 2016-03-08 20:42 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Packages
2016-07-11 21:57 - 2015-09-20 18:22 - 00000000 ____D C:\Users\Ondřej\Desktop\Filmy
2016-07-11 21:56 - 2015-09-20 18:18 - 00000000 ____D C:\KMPlayer
2016-07-11 21:17 - 2016-03-08 18:25 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-07-11 21:13 - 2016-03-08 20:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-07-11 20:33 - 2016-03-13 14:03 - 00000017 _____ C:\Users\Ondřej\Desktop\účet.txt
2016-07-11 20:29 - 2016-03-10 01:01 - 00000000 ____D C:\Users\Ondřej\AppData\Local\CrashDumps
2016-07-11 15:55 - 2016-03-12 20:14 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\BitTorrent
2016-07-11 15:53 - 2016-04-21 12:03 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\vlc
2016-07-11 10:33 - 2016-03-08 18:25 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-07-10 00:26 - 2016-03-08 18:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-07-09 18:09 - 2016-03-08 18:56 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-09 18:09 - 2016-03-08 18:30 - 00751272 _____ C:\WINDOWS\system32\perfh005.dat
2016-07-09 18:09 - 2016-03-08 18:30 - 00150860 _____ C:\WINDOWS\system32\perfc005.dat
2016-07-09 18:09 - 2016-03-08 18:23 - 00000000 ____D C:\WINDOWS\INF
2016-07-09 09:56 - 2016-03-08 18:25 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-07 02:39 - 2016-03-09 01:55 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-07-05 13:08 - 2016-06-07 10:56 - 00000000 ____D C:\Users\Ondřej\AppData\Local\ABBYY
2016-07-03 17:45 - 2015-10-18 17:57 - 00000000 ____D C:\Users\Ondřej\Desktop\Hudba
2016-07-02 19:01 - 2016-03-08 18:25 - 00000000 ____D C:\WINDOWS\rescache
2016-06-18 09:48 - 2016-03-08 20:48 - 00002276 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-17 09:24 - 2016-03-08 18:17 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-15 21:20 - 2016-03-08 18:41 - 00340712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-15 21:17 - 2016-03-08 18:25 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-06-15 21:17 - 2016-03-08 18:25 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-06-15 21:17 - 2016-03-08 18:25 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-06-15 13:55 - 2016-03-09 01:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-06-15 13:51 - 2016-03-09 01:51 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-14 20:33 - 2016-03-08 18:26 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-06-14 20:33 - 2016-03-08 18:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-07-11 15:56 - 2016-07-10 10:32 - 0036481 ___SH () C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQ
2016-07-11 15:56 - 2016-07-10 10:32 - 0936960 ___SH (AutoIt Team) C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQJP.exe
2016-07-11 15:56 - 2016-07-10 10:32 - 0718352 ___SH () C:\Users\Ondřej\AppData\Roaming\ZWfaXAYhTaIC
2016-03-08 18:46 - 2016-03-08 18:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Ondřej\AppData\Local\Temp\28B5.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\6248.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\6DDB.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\8E08.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\acc.exe
C:\Users\Ondřej\AppData\Local\Temp\ACF1.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\Browser_V5.6.12150.8_r_4726_(Build1604251144).exe
C:\Users\Ondřej\AppData\Local\Temp\CodecFixDivx.exe
C:\Users\Ondřej\AppData\Local\Temp\E62F.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\F107.tmp.exe
C:\Users\Ondřej\AppData\Local\Temp\fsdF187.exe
C:\Users\Ondřej\AppData\Local\Temp\MediaPlayer__11426.exe
C:\Users\Ondřej\AppData\Local\Temp\MPCSetup_4.exe
C:\Users\Ondřej\AppData\Local\Temp\msconfig.exe
C:\Users\Ondřej\AppData\Local\Temp\setup.exe
C:\Users\Ondřej\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Ond�ej\Desktop" je 163562 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#12 Příspěvek od andersos »

Také se mi objevila tato hláška
Přílohy
Bez názvu.png
Bez názvu.png (78.45 KiB) Zobrazeno 2087 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#13 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe
HKLM\...\Run: [gplyra] => C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe
C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe
HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs,
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [Notices] => C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe [2293368 2016-07-05] (EIXPIBOU Xuzsoihe)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [svchost0] => "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"\UUC0789.exe
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQ
C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQJP.exe
C:\Users\Ondřej\AppData\Roaming\ZWfaXAYhTaIC
C:\ProgramData\DP45977C.lfl
C:\Users\Ondřej\AppData\Local\Temp
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Z logu:
Velikost slozky "C:\Users\Ondřej\Desktop" je 163562 MB.
To je příliš mnoho a může to zpomalovat start systému. Vytvořte v C:\Users\Ondřej novou složku, do které přesuňte všechna data z plochy (kromě zástupců). Na plochu si pak dejte zástupce té složky pro snazší přístup.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
andersos
Návštěvník
Návštěvník
Příspěvky: 21
Registrován: 31 kvě 2014 14:56

Re: Zavirovaný notebook po instalaci programu

#14 Příspěvek od andersos »

Fix result of Farbar Recovery Scan Tool (x64) Version: 10-07-2016 01
Ran by Ondřej (2016-07-12 20:57:31) Run:1
Running from C:\Users\Ondřej\Desktop
Loaded Profiles: Ondřej (Available Profiles: Ondřej)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe
HKLM\...\Run: [gplyra] => C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe
C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe
HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs,
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [Notices] => C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe [2293368 2016-07-05] (EIXPIBOU Xuzsoihe)
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\...\Run: [svchost0] => "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"\UUC0789.exe
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQ
C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQJP.exe
C:\Users\Ondřej\AppData\Roaming\ZWfaXAYhTaIC
C:\ProgramData\DP45977C.lfl
C:\Users\Ondřej\AppData\Local\Temp
*****************

C:\Users\Ondřej\AppData\Roaming\NotepadApp\Notices.exe => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\gplyra => value removed successfully
"C:\Users\Ondřej\AppData\Roaming\gplyra\gplyra.exe" => not found.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => value restored successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Notices => value removed successfully
HKU\S-1-5-21-508344559-3349700843-2002687948-1001\Software\Microsoft\Windows\CurrentVersion\Run\\svchost0 => value removed successfully
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQ => moved successfully
C:\Users\Ondřej\AppData\Roaming\SECAcSRAPaOaPBcKVCQJP.exe => moved successfully
C:\Users\Ondřej\AppData\Roaming\ZWfaXAYhTaIC => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully

"C:\Users\Ondřej\AppData\Local\Temp" folder move:

Could not move "C:\Users\Ondřej\AppData\Local\Temp" => Scheduled to move on reboot.


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-07-12 21:00:27)

C:\Users\Ondřej\AppData\Local\Temp => moved successfully

==== End of Fixlog 21:00:36 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zavirovaný notebook po instalaci programu

#15 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“