prevence

[d.a.p]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-02-2017
Ran by Libina (administrator) on LIBINA (08-02-2017 09:46:28)
Running from C:\Users\Libina\Desktop
Loaded Profiles: Libina (Available Profiles: Libina)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Secunia) C:\Program Files\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(forum.viry.cz) C:\Users\Libina\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14696704 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [HPUsageTrackingLEDM] => C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-10-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [483840 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-2238009666-4088943951-4243750297-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7173848 2016-12-21] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
GroupPolicy: Restriction - Chrome <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{1c6c9c5a-a672-41ae-be90-df1f965f1140}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-19] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-19] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2238009666-4088943951-4243750297-1001 -> hxxps://www.google.cz/?gfe_rd=cr&ei=S76LV6KVKYHb8AfKubGQDQ
Edge Extension: (AdBlock) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.9.0.0_neutral__c1wakc4j0nefm [2017-01-25]

FireFox:
========
FF ProfilePath: C:\Users\Libina\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\ttduf3ut.default [2017-02-08]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\Libina\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\ttduf3ut.default\Extensions\langpack-cs@palemoon.org.xpi [2016-08-22] [not signed]
FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: (SmartPrintButton) - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [not signed]
FF HKU\S-1-5-21-2238009666-4088943951-4243750297-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Libina\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Libina\AppData\Roaming\IDM\idmmzcc5 [2017-02-08] [not signed]
FF HKU\S-1-5-21-2238009666-4088943951-4243750297-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-19] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.cz/?gws_rd=ssl
CHR StartupUrls: Default -> "hxxp://aktualnizpravy.cz/my_news.php?delbook=csaEZRPq4OBZlXpA0aI8gIV4hQ4tED&add_book=3","hxxp://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\56.0.2924.87\PepperFlash\pepflashplayer.dll => No File
CHR Profile: C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default [2017-02-08]
CHR Extension: (Prezentace Google) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-17]
CHR Extension: (Flash Video Downloader) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2016-12-03]
CHR Extension: (Dokumenty Google) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-17]
CHR Extension: (Disk Google) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-17]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2017-01-30]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2017-01-30]
CHR Extension: (YouTube) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-17]
CHR Extension: (uBlock Origin) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-12-19]
CHR Extension: (Vyhledávání Google) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-17]
CHR Extension: (Adobe Acrobat) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-30]
CHR Extension: (Gmail Offline) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-11-17]
CHR Extension: (SPOTS - A better way to start) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejocekekgcaldnmjngfdbmbeebcekelc [2016-11-21]
CHR Extension: (Foxtab Speed Dial) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcoecifcadmambfikillppkoafmgachp [2015-11-17]
CHR Extension: (Tabulky Google) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-01]
CHR Extension: (feedly) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2016-08-22]
CHR Extension: (Domovská stránka pro váš prohlížeč) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iijggnjpdajkbhmnmofglkmoimfbjnjo [2015-11-17]
CHR Extension: (Kontrola e-mailu Google) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2016-02-06]
CHR Extension: (feedly) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndhinffkekpekljifjkkkkkhopnjodja [2016-08-22]
CHR Extension: (IDM Integration Module) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-09]
CHR Extension: (Rozšíření Odběry RSS (od Googlu)) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2015-11-17]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]
CHR Extension: (ImTranslator: Překladač, Slovník, Hlas) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2017-02-04]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2017-01-30]
CHR Extension: (Gmail) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-17]
CHR Extension: (Chrome Media Router) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR Profile: C:\Users\Libina\AppData\Local\Google\Chrome\User Data\System Profile [2017-02-08]
CHR Extension: (No Name) - C:\Users\Libina\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\dkgcomhcmhlbdokplmbpkejkojkmjglg [2016-10-31]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2017-01-26]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [284872 2015-10-19] (Advanced Micro Devices, Inc.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2016-08-04] (Freemake) [File not signed]
R2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]
S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2120712 2016-05-05] (Electronic Arts)
S3 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [659992 2013-04-18] (Secunia)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 a016bus; C:\WINDOWS\System32\drivers\a016bus.sys [83880 2008-01-18] (MCCI Corporation)
S3 a016mgmt; C:\WINDOWS\System32\drivers\a016mgmt.sys [104488 2008-01-18] (MCCI Corporation)
S3 a016obex; C:\WINDOWS\System32\drivers\a016obex.sys [100648 2008-01-18] (MCCI Corporation)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\i386\AODDriver2.sys [50400 2014-02-11] (Advanced Micro Devices)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [26168 2016-02-06] (Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [40504 2016-02-06] (Disc Soft Ltd)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [26328 2015-01-13] (Sony Mobile Communications)
S3 HPMo4DE3; C:\WINDOWS\System32\drivers\HPMo4DE3.sys [20992 2011-03-09] (TPMX Electronics Ltd.)
S3 HPub4DE3; C:\WINDOWS\System32\Drivers\HPub4DE3.sys [13824 2011-04-12] (TPMX Electronics Ltd.)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_x86.sys [16024 2013-04-18] (Secunia)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [789248 2000-01-01] (Realtek )
S3 s0016bus; C:\WINDOWS\System32\drivers\s0016bus.sys [89256 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\WINDOWS\System32\drivers\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\WINDOWS\System32\drivers\s0016obex.sys [110632 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\WINDOWS\System32\drivers\s0016unic.sys [115752 2008-05-16] (MCCI Corporation)
S3 s0017bus; C:\WINDOWS\System32\drivers\s0017bus.sys [86824 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\WINDOWS\System32\drivers\s0017mgmt.sys [108328 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\WINDOWS\System32\drivers\s0017obex.sys [104616 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\WINDOWS\System32\drivers\s0017unic.sys [109736 2008-10-21] (MCCI Corporation)
S3 s1018obex; C:\WINDOWS\System32\drivers\s1018obex.sys [104744 2009-03-25] (MCCI Corporation)
S3 s1029bus; C:\WINDOWS\System32\drivers\s1029bus.sys [90280 2009-05-25] (MCCI Corporation)
S3 s1029mgmt; C:\WINDOWS\System32\drivers\s1029mgmt.sys [115880 2009-05-25] (MCCI Corporation)
S3 s1029obex; C:\WINDOWS\System32\drivers\s1029obex.sys [111912 2009-05-25] (MCCI Corporation)
S3 s1029unic; C:\WINDOWS\System32\drivers\s1029unic.sys [116904 2009-05-25] (MCCI Corporation)
S3 s916bus; C:\WINDOWS\System32\drivers\s916bus.sys [83496 2007-11-02] (MCCI Corporation)
S3 s916mgmt; C:\WINDOWS\System32\drivers\s916mgmt.sys [103976 2007-11-02] (MCCI Corporation)
S3 s916obex; C:\WINDOWS\System32\drivers\s916obex.sys [100008 2007-11-02] (MCCI Corporation)
S3 se3ebus; C:\WINDOWS\System32\drivers\se3ebus.sys [83080 2007-04-10] (MCCI Corporation)
S3 se3emgmt; C:\WINDOWS\System32\drivers\se3emgmt.sys [100360 2007-04-10] (MCCI Corporation)
S3 se3eobex; C:\WINDOWS\System32\drivers\se3eobex.sys [98568 2007-04-10] (MCCI Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [5120 2012-12-19] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 wdf_usb; C:\WINDOWS\system32\drivers\usb2ser.sys [128704 2016-08-16] (MBB)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [128704 2016-08-16] (MBB)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
R3 whfltr2k; C:\WINDOWS\System32\drivers\whfltr2k.sys [7424 2000-01-01] ()
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
U5 VClone; C:\Windows\System32\Drivers\VClone.sys [30208 2011-01-15] (Elaborate Bytes AG)
U3 WMPNetworkSvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-08 09:46 - 2017-02-08 09:47 - 00018580 _____ C:\Users\Libina\Desktop\FRST.txt
2017-02-08 09:44 - 2017-02-08 09:44 - 00112640 _____ (forum.viry.cz) C:\Users\Libina\Desktop\FRSTLauncher.exe
2017-02-08 09:43 - 2017-02-08 09:43 - 01763328 _____ (Farbar) C:\Users\Libina\Desktop\FRST.exe
2017-01-26 15:41 - 2016-10-17 16:35 - 00147120 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
2017-01-25 20:28 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-19 19:36 - 2017-01-19 19:36 - 00095808 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2017-01-19 19:36 - 2017-01-19 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-19 19:35 - 2017-01-19 19:35 - 00000000 ____D C:\Program Files\Java
2017-01-14 06:57 - 2017-01-14 09:17 - 00000089 _____ C:\Users\Libina\AppData\Local\FSDownloader.err
2017-01-11 16:12 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-11 16:12 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-11 16:12 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-11 16:12 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-11 16:12 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-11 16:12 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-11 16:12 - 2016-12-21 06:00 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 16:12 - 2016-12-21 05:47 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-11 16:12 - 2016-12-21 05:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-11 16:12 - 2016-12-21 05:44 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-11 16:12 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-11 16:12 - 2016-12-21 05:42 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-11 16:12 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-11 16:12 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-11 16:12 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-11 16:12 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-11 16:12 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-11 16:12 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-11 16:12 - 2016-12-21 05:30 - 01406976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-01-11 16:12 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-11 16:12 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-11 16:12 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems32.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 01136992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00911712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00812896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00615264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-11 16:12 - 2016-12-14 06:26 - 00558432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00550240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00492384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00401248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00372576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-11 16:12 - 2016-12-14 06:26 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2017-01-11 16:12 - 2016-12-14 06:04 - 00261984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-11 16:12 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-11 16:12 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-11 16:12 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-11 16:12 - 2016-12-14 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-11 16:12 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 16:12 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-11 16:12 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-11 16:12 - 2016-12-14 05:37 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-11 16:12 - 2016-12-14 05:37 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-11 16:12 - 2016-12-14 05:36 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-11 16:12 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-11 16:12 - 2016-12-14 05:23 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-11 16:12 - 2016-12-14 05:23 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-11 16:12 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-11 16:12 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-11 16:12 - 2016-12-14 05:22 - 01235456 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-11 16:12 - 2016-12-14 05:22 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-11 16:11 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-11 16:11 - 2016-12-21 06:59 - 00101728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-11 16:11 - 2016-12-21 06:20 - 06020448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-11 16:11 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-11 16:11 - 2016-12-21 06:05 - 00523784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-11 16:11 - 2016-12-21 06:02 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-11 16:11 - 2016-12-21 06:01 - 00198496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-11 16:11 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-11 16:11 - 2016-12-21 05:40 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-11 16:11 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-01-11 16:11 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-11 16:11 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 16:11 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-11 16:11 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-11 16:11 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-11 16:11 - 2016-12-21 05:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-11 16:11 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-11 16:11 - 2016-12-21 05:26 - 03776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-11 16:11 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-11 16:11 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 16:11 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-11 16:11 - 2016-12-21 05:23 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-11 16:11 - 2016-12-21 05:22 - 03596800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-11 16:11 - 2016-12-14 06:58 - 01026912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-11 16:11 - 2016-12-14 06:26 - 01127040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-11 16:11 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-11 16:11 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-11 16:11 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-11 16:11 - 2016-12-14 06:05 - 00544608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-11 16:11 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-11 16:11 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-11 16:11 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-11 16:11 - 2016-12-14 05:41 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-11 16:11 - 2016-12-14 05:40 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-11 16:11 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-11 16:11 - 2016-12-14 05:38 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-11 16:11 - 2016-12-14 05:37 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-11 16:11 - 2016-12-14 05:36 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-11 16:11 - 2016-12-14 05:36 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-11 16:11 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-11 16:11 - 2016-12-14 05:35 - 01722368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-11 16:11 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-11 16:11 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-11 16:11 - 2016-12-14 05:35 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-11 16:11 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-11 16:11 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-11 16:11 - 2016-12-14 05:24 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-11 16:11 - 2016-12-14 05:22 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-11 16:11 - 2016-12-14 05:21 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-11 16:11 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-11 16:11 - 2016-11-02 12:05 - 00313088 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-01-11 16:11 - 2016-11-02 11:32 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-11 16:11 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-08 09:45 - 2016-05-17 08:45 - 00000000 ____D C:\FRST
2017-02-08 09:43 - 2015-11-17 15:43 - 00000000 ____D C:\Users\Libina\AppData\Roaming\IDM
2017-02-08 09:30 - 2016-10-31 19:18 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-08 09:27 - 2016-07-16 09:28 - 00000000 ____D C:\WINDOWS\INF
2017-02-07 11:07 - 2015-11-17 15:43 - 00000000 ____D C:\Users\Libina\AppData\Roaming\DMCache
2017-02-05 19:43 - 2016-09-29 08:38 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-02 11:27 - 2015-11-17 16:46 - 00000000 ____D C:\Users\Libina\AppData\Roaming\vlc
2017-02-01 16:45 - 2016-11-09 18:23 - 00001056 _____ C:\Users\Libina\AppData\Local\FSDownloader.nast
2017-02-01 13:45 - 2015-11-17 15:42 - 00000000 ____D C:\Program Files\Internet Download Manager
2017-01-29 19:41 - 2016-09-29 09:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-29 19:40 - 2016-07-16 03:22 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-26 20:32 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-25 20:37 - 2016-07-16 09:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-25 20:24 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-23 16:43 - 2015-11-17 16:27 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 18:49 - 2016-05-05 07:51 - 00000000 ____D C:\Program Files\Electronic Arts
2017-01-19 18:49 - 2015-11-17 17:12 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-01-19 18:47 - 2017-01-05 19:17 - 00000000 ____D C:\Program Files\ROSSMANN
2017-01-19 18:44 - 2016-10-26 09:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-01-19 18:44 - 2012-10-03 11:47 - 00000000 ____D C:\Users\Libina\Desktop\bezpečí
2017-01-15 12:21 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\rescache
2017-01-14 18:50 - 2016-09-29 08:38 - 00343128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-14 09:28 - 2016-07-16 09:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-14 09:28 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-14 09:28 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-14 09:28 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-14 09:28 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-14 09:28 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-14 07:02 - 2015-11-19 15:48 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-14 06:58 - 2016-11-09 18:22 - 00906240 _____ (File-share.top) C:\Users\Libina\Desktop\FSDownloader.exe
2017-01-14 06:58 - 2015-11-19 15:47 - 133456224 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2016-03-04 11:01 - 2016-10-09 11:40 - 0656841 _____ () C:\Users\Libina\AppData\Local\ars.cache
2016-03-04 11:02 - 2016-10-09 11:41 - 1478623 _____ () C:\Users\Libina\AppData\Local\census.cache
2017-01-14 06:57 - 2017-01-14 09:17 - 0000089 _____ () C:\Users\Libina\AppData\Local\FSDownloader.err
2016-11-09 18:23 - 2017-02-01 16:45 - 0001056 _____ () C:\Users\Libina\AppData\Local\FSDownloader.nast
2016-03-04 10:33 - 2016-03-04 10:33 - 0000036 _____ () C:\Users\Libina\AppData\Local\housecall.guid.cache
2016-03-04 10:56 - 2016-10-09 11:37 - 0000010 _____ () C:\Users\Libina\AppData\Local\sponge.last.runtime.cache
2016-09-29 08:42 - 2016-09-29 08:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-11-24 12:14 - 2012-08-31 14:08 - 0024772 _____ () C:\ProgramData\P1100DEF.css
2016-11-24 12:14 - 2016-11-24 12:14 - 0004188 _____ () C:\ProgramData\P1100OS.HTM
2016-11-24 12:14 - 2012-08-31 14:08 - 0002944 _____ () C:\ProgramData\P1100SIG.GIF

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Libina\Desktop" je 438 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

[Kodlz]

Vyuzivas vsechny rozsireni v browseru? mas tam treba ADBlock i uBlockOrigin ....maji stejnou funkci.


Poprosim Te spusť prosim tuto utilitu:

Stáhni AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Ulož na plochu
Ukonči všechny programy
Klikni nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vlož.


nasledne tento tool MBAM: http://forum.viry.cz/viewtopic.php?f=29&t=144868
-Nainstaluj,dej úplný sken

-Log zkopíruj sem.

[d.a.p]

# AdwCleaner v6.043 - Log vytvořen 08/02/2017 v 16:24:43
# Aktualizováno dne 27/01/2017 z Malwarebytes
# Databáze : 2017-02-03.2 [Server]
# Operační systém : Windows 10 Pro (X86)
# Uživatelské jméno : Libina - LIBINA
# Spuštěno z : C:\Users\Libina\Desktop\adwcleaner_6.043.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejocekekgcaldnmjngfdbmbeebcekelc


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****



***** [ Prohlížeče ] *****

[-] [C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazáno: search.yahoo.com
[-] [C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazáno: search.sweetim.com
[-] [C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazáno: ask.com
[-] [C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: dgpdioedihjhncjafcpgbbjdpbbkikmi
[-] [C:\Users\Libina\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: ejocekekgcaldnmjngfdbmbeebcekelc


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C10].txt - [3672 Bajty] - [14/11/2016 18:35:22]
C:\AdwCleaner\AdwCleaner[C11].txt - [3765 Bajty] - [21/11/2016 20:52:55]
C:\AdwCleaner\AdwCleaner[C12].txt - [1678 Bajty] - [08/02/2017 16:24:43]
C:\AdwCleaner\AdwCleaner[C1].txt - [7487 Bajty] - [22/11/2015 19:58:41]
C:\AdwCleaner\AdwCleaner[C2].txt - [4381 Bajty] - [07/01/2016 12:14:43]
C:\AdwCleaner\AdwCleaner[C5].txt - [3815 Bajty] - [22/08/2016 17:23:56]
C:\AdwCleaner\AdwCleaner[C6].txt - [3863 Bajty] - [31/08/2015 19:28:55]
C:\AdwCleaner\AdwCleaner[C7].txt - [2500 Bajty] - [14/11/2015 21:02:12]
C:\AdwCleaner\AdwCleaner[C8].txt - [6298 Bajty] - [31/10/2016 19:49:28]
C:\AdwCleaner\AdwCleaner[C9].txt - [3244 Bajty] - [02/11/2016 20:20:33]
C:\AdwCleaner\AdwCleaner[R2].txt - [3865 Bajty] - [26/06/2015 15:53:45]
C:\AdwCleaner\AdwCleaner[R3].txt - [3948 Bajty] - [30/06/2015 18:40:00]
C:\AdwCleaner\AdwCleaner[R4].txt - [4320 Bajty] - [09/07/2015 07:57:33]
C:\AdwCleaner\AdwCleaner[R5].txt - [1046 Bajty] - [14/07/2015 08:39:01]
C:\AdwCleaner\AdwCleaner[R6].txt - [1358 Bajty] - [27/07/2015 08:18:21]
C:\AdwCleaner\AdwCleaner[S10].txt - [6198 Bajty] - [31/10/2016 19:48:31]
C:\AdwCleaner\AdwCleaner[S11].txt - [3539 Bajty] - [02/11/2016 20:19:43]
C:\AdwCleaner\AdwCleaner[S12].txt - [3836 Bajty] - [14/11/2016 18:33:41]
C:\AdwCleaner\AdwCleaner[S13].txt - [3978 Bajty] - [21/11/2016 20:52:02]
C:\AdwCleaner\AdwCleaner[S14].txt - [3939 Bajty] - [08/02/2017 16:23:52]
C:\AdwCleaner\AdwCleaner[S1].txt - [7107 Bajty] - [22/11/2015 19:40:28]
C:\AdwCleaner\AdwCleaner[S2].txt - [8132 Bajty] - [09/07/2015 07:59:06]
C:\AdwCleaner\AdwCleaner[S3].txt - [3798 Bajty] - [14/07/2015 08:40:12]
C:\AdwCleaner\AdwCleaner[S4].txt - [4193 Bajty] - [27/07/2015 08:19:21]
C:\AdwCleaner\AdwCleaner[S6].txt - [3853 Bajty] - [22/08/2016 17:21:17]
C:\AdwCleaner\AdwCleaner[S7].txt - [6122 Bajty] - [31/10/2016 19:43:33]
C:\AdwCleaner\AdwCleaner[S8].txt - [3637 Bajty] - [31/08/2015 19:27:33]
C:\AdwCleaner\AdwCleaner[S9].txt - [2306 Bajty] - [14/11/2015 21:01:07]

########## EOF - C:\AdwCleaner\AdwCleaner[C12].txt - [3582 Bajty] ##########

[d.a.p]

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 08.02.17
Čas skenování: 16:30
Logovací soubor: mba.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.50
Aktualizovat verzi balíku komponent: 1.0.1211
Licence: Bezplatný

-Systémová informace-
OS: Windows 10
CPU: x86
Systém souborů: NTFS
Uživatel: LIBINA\Libina

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 337035
Uplynulý čas: 5 min, 9 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

[Kodlz]

chova se pc nejak nestandartne?

[d.a.p]

všechno v pořádku , Děkuji

[Kodlz]

neni zac