Kontrola logu

[milav]

Omlouvám se, posílám znovu, v předešlém jsem nevyplnil předmět.
Prosím o kontrolu logu, zdá se mí že mi něco žere paměť. Mám spuštěvé dvě aplikace a vytížení paměti je asi 61% a procesoru asi 5%. Antiviry neodhalily nic. Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Milan at 2017-10-30 22:33:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 41 GB (50%) free of 82 GB
Total RAM: 1953 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:33:08, on 30.10.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Milan\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\taskmgr.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Milan\Desktop\RSIT.exe
C:\Program Files\trend micro\Milan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=29530
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: PDF Architect 4 Helper - {38279E1A-7019-40C1-B579-E99DFB3312E8} - C:\Program Files\PDF Architect 4\creator-ie-helper.dll
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files\PDF Architect 4\creator-ie-plugin.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Spybot-S&D Cleaning] "C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Milan\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Milan\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [SeznamInstall-uninstall:6a554ab8e493479525f55210b0b6dfed] "C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe" -c "C:\Users\Milan\AppData\Roaming\Seznam.cz"
O4 - Startup: Dropbox.lnk = Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PDF Architect 4 - pdfforge GmbH - C:\Program Files\PDF Architect 4\ws.exe
O23 - Service: PDF Architect 4 CrashHandler - pdfforge GmbH - C:\Program Files\PDF Architect 4\crash-handler-ws.exe
O23 - Service: PDF Architect 4 Creator - pdfforge GmbH - C:\Program Files\PDF Architect 4\creator-ws.exe
O23 - Service: PDF Architect 4 Manager - © pdfforge GmbH. - C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
O23 - Service: PDF Architect Helper Service - pdfforge GbR - C:\Program Files\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GbR - C:\Program Files\PDF Architect\ConversionService.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 8532 bytes

======Scheduled tasks folder======

C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3185578175-294760507-565108644-1000Core.job - C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3185578175-294760507-565108644-1000UA.job - C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\qrar7tc0.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

"FFPDFArchitectConverter@pdfarchitect.com"=C:\Program Files\PDF Architect\FFPDFArchitectExt
"pdf_architect_4_conv@pdfarchitect.org"=C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.130 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_27_0_0_130.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38279E1A-7019-40C1-B579-E99DFB3312E8}]
PDF Architect 4 Helper - C:\Program Files\PDF Architect 4\creator-ie-helper.dll [2016-01-15 38112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
PDF Architect Helper - C:\Program Files\PDF Architect\PDFIEHelper.dll [2012-11-22 91784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13 3214392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - PDF Architect 4 Toolbar - C:\Program Files\PDF Architect 4\creator-ie-plugin.dll [2016-01-15 547040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-11-19 9874024]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-10-21 142616]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-10-21 177432]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-10-21 176408]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-27 1983816]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]
"OrderReminder"=C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe [2005-03-18 98304]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1002984]
"SDTray"=C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [2012-11-13 3825176]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spybot-S&D Cleaning"=C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [2016-03-21 5915776]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2017-06-13 7648984]
"Dropbox Update"=C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-04 143144]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-28 1011200]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"cz.seznam.software.autoupdate"=C:\Users\Milan\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Milan\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SeznamInstall-uninstall:6a554ab8e493479525f55210b0b6dfed"=C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe [2017-10-30 534528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe [2017-10-17 3566904]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe
OpenOffice.org 3.3.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-10-21 294400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2017-10-30 22:20:47 ----D---- C:\rsit
2017-10-27 18:09:34 ----D---- C:\ProgramData\~0
2017-10-11 18:05:14 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-11 07:57:53 ----A---- C:\Windows\system32\mshtml.dll
2017-10-11 07:57:52 ----A---- C:\Windows\system32\wininet.dll
2017-10-11 07:57:52 ----A---- C:\Windows\system32\jscript9.dll
2017-10-11 07:57:52 ----A---- C:\Windows\system32\ieframe.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\win32k.sys
2017-10-11 07:57:51 ----A---- C:\Windows\system32\vbscript.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\urlmon.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\tquery.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\rdpcore.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\Query.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-11 07:57:51 ----A---- C:\Windows\system32\ntkrnlpa.exe
2017-10-11 07:57:51 ----A---- C:\Windows\system32\jscript.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\iertutil.dll
2017-10-11 07:57:51 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-11 07:57:50 ----A---- C:\Windows\system32\msfeeds.dll
2017-10-11 07:57:50 ----A---- C:\Windows\system32\msexcl40.dll
2017-10-11 07:57:50 ----A---- C:\Windows\system32\mf.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\wlansec.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\themeui.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\t2embed.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\ntdll.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\mswstr10.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-11 07:57:49 ----A---- C:\Windows\system32\msctf.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\iedkcs32.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\gdi32.dll
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-11 07:57:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-11 07:57:48 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\webcheck.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\msjint40.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\mshtmled.dll
2017-10-11 07:57:48 ----A---- C:\Windows\system32\ie4uinit.exe
2017-10-11 07:57:48 ----A---- C:\Windows\system32\dxtrans.dll
2017-10-11 07:57:47 ----A---- C:\Windows\system32\rrinstaller.exe
2017-10-11 07:57:47 ----A---- C:\Windows\system32\mfps.dll
2017-10-11 07:57:47 ----A---- C:\Windows\system32\mfpmp.exe
2017-10-11 07:57:47 ----A---- C:\Windows\system32\ieapfltr.dll
2017-10-11 07:57:47 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-10-11 07:57:47 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-10-11 07:57:46 ----A---- C:\Windows\system32\smss.exe
2017-10-11 07:57:46 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-11 07:57:46 ----A---- C:\Windows\system32\ieui.dll
2017-10-11 07:57:45 ----A---- C:\Windows\system32\kerberos.dll
2017-10-11 07:57:45 ----A---- C:\Windows\system32\advapi32.dll
2017-10-11 07:57:44 ----A---- C:\Windows\system32\mssrch.dll
2017-10-11 07:57:44 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-11 07:57:43 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\srcore.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\occache.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\mssvp.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\msrating.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\jsproxy.dll
2017-10-11 07:57:42 ----A---- C:\Windows\system32\dxtmsft.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\wdigest.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\sspicli.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\schannel.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\ncrypt.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\mssph.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\inseng.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\ieUnatt.exe
2017-10-11 07:57:41 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-10-11 07:57:41 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-11 07:57:40 ----A---- C:\Windows\system32\TSpkg.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\srclient.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\iesetup.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\iernonce.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\drivers\appid.sys
2017-10-11 07:57:40 ----A---- C:\Windows\system32\bcrypt.dll
2017-10-11 07:57:40 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\secur32.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\rstrui.exe
2017-10-11 07:57:39 ----A---- C:\Windows\system32\lsass.exe
2017-10-11 07:57:39 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-10-11 07:57:39 ----A---- C:\Windows\system32\csrsrv.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\credssp.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\appidsvc.dll
2017-10-11 07:57:39 ----A---- C:\Windows\system32\appidapi.dll
2017-10-11 07:57:38 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-11 07:57:38 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-11 07:57:38 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-11 07:57:38 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-11 07:57:38 ----A---- C:\Windows\system32\msshooks.dll
2017-10-11 07:57:38 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-11 07:57:38 ----A---- C:\Windows\system32\icaapi.dll
2017-10-11 07:57:38 ----A---- C:\Windows\system32\auditpol.exe
2017-10-11 07:57:38 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-10-11 07:57:38 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-11 07:57:37 ----A---- C:\Windows\system32\msobjs.dll
2017-10-11 07:57:37 ----A---- C:\Windows\system32\msaudite.dll
2017-10-11 07:57:37 ----A---- C:\Windows\system32\mferror.dll
2017-10-11 07:57:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-10-11 07:57:37 ----A---- C:\Windows\system32\adtschema.dll
2017-10-08 19:37:22 ----D---- C:\Users\Milan\AppData\Roaming\Adobe

======List of files/folders modified in the last 1 month======

2017-10-30 22:33:02 ----D---- C:\Program Files\trend micro
2017-10-30 22:31:28 ----D---- C:\Windows\temp
2017-10-30 22:24:45 ----D---- C:\Windows\system32\config
2017-10-30 22:13:11 ----SHD---- C:\System Volume Information
2017-10-30 22:07:37 ----D---- C:\Users\Milan\AppData\Roaming\Seznam.cz
2017-10-30 22:06:24 ----D---- C:\Windows\System32
2017-10-30 22:06:24 ----D---- C:\Windows\inf
2017-10-30 22:06:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-10-30 22:00:24 ----D---- C:\Windows\winsxs
2017-10-30 22:00:24 ----D---- C:\Windows\system32\Tasks
2017-10-30 22:00:24 ----D---- C:\Windows\system32\DriverStore
2017-10-30 22:00:24 ----D---- C:\Windows\system32\catroot2
2017-10-30 22:00:24 ----D---- C:\Program Files\Internet Explorer
2017-10-30 22:00:23 ----D---- C:\Windows\system32\drivers\etc
2017-10-30 22:00:23 ----D---- C:\Windows\system32\drivers
2017-10-30 22:00:22 ----SHD---- C:\Windows\Installer
2017-10-30 22:00:19 ----D---- C:\Users\Milan\AppData\Roaming\Dropbox
2017-10-30 22:00:11 ----D---- C:\ProgramData\Spybot - Search & Destroy
2017-10-30 22:00:11 ----D---- C:\ProgramData\HP Product Assistant
2017-10-30 22:00:11 ----D---- C:\ProgramData
2017-10-30 22:00:11 ----D---- C:\Program Files\Mozilla Maintenance Service
2017-10-30 22:00:11 ----D---- C:\Program Files\Mozilla Firefox
2017-10-30 22:00:10 ----D---- C:\Program Files\CCleaner
2017-10-30 22:00:07 ----D---- C:\ProgramData\McAfee
2017-10-30 22:00:04 ----D---- C:\Windows\registration
2017-10-30 22:00:00 ----D---- C:\Windows\system32\Macromed
2017-10-30 21:58:59 ----RD---- C:\Program Files
2017-10-30 21:58:56 ----D---- C:\Program Files\HP
2017-10-30 21:57:15 ----D---- C:\Windows\system32\catroot
2017-10-30 21:03:51 ----A---- C:\Windows\system32\log.txt
2017-10-30 21:02:39 ----D---- C:\Users\Milan\AppData\Roaming\Skype
2017-10-30 21:01:10 ----D---- C:\Windows\Tasks
2017-10-30 21:01:10 ----D---- C:\Windows\system32\wfp
2017-10-30 21:01:09 ----D---- C:\Windows\system32\wbem
2017-10-30 21:01:09 ----D---- C:\Windows
2017-10-30 20:48:10 ----D---- C:\ProgramData\F-Secure
2017-10-30 18:36:41 ----HD---- C:\Config.Msi
2017-10-27 19:35:10 ----D---- C:\Windows\twain_32
2017-10-27 18:52:25 ----D---- C:\Program Files\Common Files\HP
2017-10-27 18:31:00 ----HD---- C:\Users\Milan\AppData\Roaming\Image Zone Express
2017-10-15 08:52:44 ----D---- C:\Windows\Microsoft.NET
2017-10-11 18:17:25 ----D---- C:\Windows\system32\migration
2017-10-11 18:17:25 ----D---- C:\Windows\system32\en-US
2017-10-11 18:17:25 ----D---- C:\Windows\system32\cs-CZ
2017-10-11 18:09:13 ----D---- C:\Windows\system32\MRT
2017-10-11 18:05:06 ----AC---- C:\Windows\system32\MRT.exe
2017-10-11 07:45:48 ----D---- C:\Program Files\Mozilla Thunderbird
2017-10-08 19:18:32 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2017-10-08 15:31:41 ----SD---- C:\Users\Milan\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-08-25 252808]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 MpKsl3d23dc58;MpKsl3d23dc58; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{27F5E6F9-1739-428A-823D-320A26FDDD72}\MpKsl3d23dc58.sys [2017-10-30 40776]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-02-24 100328]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-02-24 308200]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-10-21 10858496]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-11-23 3253352]
R3 MEI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 105696]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-05-16 391272]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 eapihdrv;eapihdrv; \??\C:\Users\Milan\AppData\Local\Temp\ehdrv.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 103696]
R2 PDF Architect 4 Creator;PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [2016-01-15 772832]
R2 PDF Architect 4 Manager;PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [2015-10-05 959248]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [2012-11-22 1522312]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [2012-11-22 905864]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2016-09-21 4088608]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2016-11-24 235984]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 280864]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 104960]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2017-10-05 175568]
S3 PDF Architect 4 CrashHandler;PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [2016-01-15 970464]
S3 PDF Architect 4;PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2016-01-15 2220768]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-25 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

[Kodlz]

Ahoj,
Poprosim o vlozeni logu FRST.txt a Addition.txt z aplikace FRSTLauncher.exe (Farbar Recovery Scan Tool). Navod naleznes zde: https://forum.viry.cz/viewtopic.php?f=13&t=152707
Obsah Additional.txt muzes vlozit rovnou sem do vlakna.

Poprosim Te take, zda by si mi vedel poslat printscreen z Task manageru serazeneho podle vytizeni pameti, aby sem vedel ktere aplikace a kolik ti berou pameti.

[milav]

Ahoj. S tím print screenem se zkusím nějak poprat.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-10-2017
Ran by Milan (administrator) on MILAN-PC (31-10-2017 09:51:07)
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan (Available Profiles: Milan)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
() C:\Users\Milan\AppData\Roaming\Seznam.cz\bin\~~erase-399112-5428-40367.$$$
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9874024 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1983816 2009-07-27] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [OrderReminder] => C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe [98304 2005-03-18] (Hewlett-Packard)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [5915776 2016-03-21] (Safer-Networking Ltd.)
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7648984 2017-06-13] (Piriform Ltd)
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [Dropbox Update] => C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-04] (Dropbox, Inc.)
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Milan\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Milan\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\RunOnce: [SeznamInstall-uninstall:6a554ab8e493479525f55210b0b6dfed] => C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe [534528 2017-10-30] () <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2011-12-26]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-08-05]
ShortcutTarget: Dropbox.lnk -> C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-12-26]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{3FDCC64A-7CFA-4651-B704-1F461A4FD72C}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3185578175-294760507-565108644-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3185578175-294760507-565108644-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=29530
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {0AE2AEBE-219A-487C-91F5-4BAED3A4D42F} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {21847039-42C1-4622-9A82-ABEBC42DC68F} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {2204E442-5DC4-4F6D-AA92-5A4E16F4278E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {331D243F-EA60-4426-8098-EACD2C3BC6B0} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {72FA176B-A3CD-442A-8A4A-4A43EB529059} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {73C79A96-C317-45DA-912C-91C6A6BB72C1} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {B035C288-8426-4E3C-BC50-1F4A54FDF7FA} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {BB9DE296-C17A-4360-897C-DB397FC82C75} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {CDB3A312-DBC3-47CE-A6ED-AFBAA64AAF28} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-3185578175-294760507-565108644-1000 -> {F5B8D723-BE88-4B71-B1D3-7A38F4DEC806} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll [2012-11-22] (pdfforge GbR)
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13] (Safer-Networking Ltd.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
Toolbar: HKLM - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\qrar7tc0.default [2017-10-31]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\qrar7tc0.default -> Seznam
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\qrar7tc0.default ->
FF Homepage: Mozilla\Firefox\Profiles\qrar7tc0.default -> hxxps://www.seznam.cz/
FF Extension: (Seznam pro Firefox - Esko) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\qrar7tc0.default\Extensions\sko-extension@firma.seznam.cz.xpi [2017-10-30]
FF Extension: (Seznam pro Firefox - Email) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\qrar7tc0.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}.xpi [2017-10-30]
FF Extension: (No Name) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\qrar7tc0.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [not found]
FF Extension: (Skype extension for Firefox) - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2017-07-02] [not signed]
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: (PDF Architect Converter For Firefox) - C:\Program Files\PDF Architect\FFPDFArchitectExt [2012-11-28] [not signed]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-05-11] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-30] ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-02-05] (CANON INC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2220768 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [970464 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [772832 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 asmthub3; C:\Windows\System32\DRIVERS\asmthub3.sys [100328 2011-02-24] (ASMedia Technology Inc)
R3 asmtxhci; C:\Windows\System32\DRIVERS\asmtxhci.sys [308200 2011-02-24] (ASMedia Technology Inc)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)
R1 MpKsl3d23dc58; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{27F5E6F9-1739-428A-823D-320A26FDDD72}\MpKsl3d23dc58.sys [40776 2017-10-30] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 eapihdrv; \??\C:\Users\Milan\AppData\Local\Temp\ehdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-31 09:51 - 2017-10-31 09:51 - 000017240 _____ C:\Users\Milan\Desktop\FRST.txt
2017-10-31 09:50 - 2017-10-31 09:51 - 000000000 ____D C:\FRST
2017-10-31 09:49 - 2017-10-31 09:49 - 000112640 _____ (forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe
2017-10-31 09:47 - 2017-10-31 09:48 - 001799680 _____ (Farbar) C:\Users\Milan\Desktop\FRST.exe
2017-10-30 22:20 - 2017-10-30 22:21 - 000000000 ____D C:\rsit
2017-10-30 18:00 - 2017-10-30 18:00 - 000000000 ____D C:\Users\Milan\Desktop\Původní data aplikace Firefox
2017-10-27 18:09 - 2017-10-30 22:00 - 000000000 ____D C:\Users\Milan\AppData\Local\IIIQF
2017-10-27 18:09 - 2017-10-30 22:00 - 000000000 ____D C:\ProgramData\~0
2017-10-27 10:02 - 2017-10-27 18:29 - 000123665 _____ C:\Windows\hpgins21.dat.temp
2017-10-26 16:41 - 2007-05-02 10:39 - 000000282 _____ C:\Windows\hpgmdl21.dat.temp
2017-10-26 16:17 - 2017-10-30 22:00 - 000000000 ___RD C:\Users\Milan\Documents\Scanned Documents
2017-10-26 16:17 - 2017-10-30 22:00 - 000000000 ____D C:\Users\Milan\Documents\Fax
2017-10-19 21:28 - 2017-10-30 22:00 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-10-11 18:05 - 2017-10-11 18:05 - 124059592 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-10-11 07:57 - 2017-09-13 16:13 - 004001512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-10-11 07:57 - 2017-09-13 16:13 - 003945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-10-11 07:57 - 2017-09-13 16:13 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-10-11 07:57 - 2017-09-13 16:13 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-10-11 07:57 - 2017-09-13 16:10 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000830464 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-10-11 07:57 - 2017-09-13 16:09 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-10-11 07:57 - 2017-09-13 16:08 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-10-11 07:57 - 2017-09-13 15:53 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-10-11 07:57 - 2017-09-13 15:50 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-10-11 07:57 - 2017-09-13 15:50 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-10-11 07:57 - 2017-09-13 15:50 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-10-11 07:57 - 2017-09-13 15:50 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-10-11 07:57 - 2017-09-13 15:50 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-10-11 07:57 - 2017-09-13 15:48 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-10-11 07:57 - 2017-09-13 15:46 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-10-11 07:57 - 2017-09-13 15:46 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-10-11 07:57 - 2017-09-13 15:46 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-10-11 07:57 - 2017-09-13 15:46 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-10-11 07:57 - 2017-09-13 15:46 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-10-11 07:57 - 2017-09-13 15:46 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-10-11 07:57 - 2017-09-13 15:46 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-10-11 07:57 - 2017-09-09 00:47 - 000347344 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-10-11 07:57 - 2017-09-08 16:14 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-10-11 07:57 - 2017-09-08 16:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-10-11 07:57 - 2017-09-08 16:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-10-11 07:57 - 2017-09-08 16:10 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-10-11 07:57 - 2017-09-08 16:09 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-10-11 07:57 - 2017-09-08 16:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-10-11 07:57 - 2017-09-08 16:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-10-11 07:57 - 2017-09-08 15:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-10-11 07:57 - 2017-09-08 15:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-10-11 07:57 - 2017-09-08 15:50 - 002402304 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-10-11 07:57 - 2017-09-08 15:20 - 000640512 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2017-10-11 07:57 - 2017-09-08 15:20 - 000345088 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2017-10-11 07:57 - 2017-09-08 15:20 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2017-10-11 07:57 - 2017-09-07 20:27 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-10-11 07:57 - 2017-09-07 20:26 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-10-11 07:57 - 2017-09-07 20:11 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-10-11 07:57 - 2017-09-07 20:10 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-10-11 07:57 - 2017-09-07 20:10 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-10-11 07:57 - 2017-09-07 20:10 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-10-11 07:57 - 2017-09-07 20:09 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-10-11 07:57 - 2017-09-07 20:04 - 020267008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-10-11 07:57 - 2017-09-07 20:03 - 002292736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-10-11 07:57 - 2017-09-07 20:03 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-10-11 07:57 - 2017-09-07 20:02 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-10-11 07:57 - 2017-09-07 19:59 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-10-11 07:57 - 2017-09-07 19:58 - 000663040 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-10-11 07:57 - 2017-09-07 19:58 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-10-11 07:57 - 2017-09-07 19:58 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-10-11 07:57 - 2017-09-07 19:58 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-10-11 07:57 - 2017-09-07 19:52 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-11 07:57 - 2017-09-07 19:49 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-10-11 07:57 - 2017-09-07 19:44 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-10-11 07:57 - 2017-09-07 19:44 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-11 07:57 - 2017-09-07 19:43 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-10-11 07:57 - 2017-09-07 19:40 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-10-11 07:57 - 2017-09-07 19:39 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-10-11 07:57 - 2017-09-07 19:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-10-11 07:57 - 2017-09-07 19:36 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-10-11 07:57 - 2017-09-07 19:29 - 004547072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-10-11 07:57 - 2017-09-07 19:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-10-11 07:57 - 2017-09-07 19:26 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-10-11 07:57 - 2017-09-07 19:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-10-11 07:57 - 2017-09-07 19:25 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-10-11 07:57 - 2017-09-07 19:25 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-10-11 07:57 - 2017-09-07 19:17 - 013677568 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-10-11 07:57 - 2017-09-07 19:01 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-10-11 07:57 - 2017-09-07 18:57 - 001316864 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-10-11 07:57 - 2017-09-07 18:57 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-10-11 07:57 - 2017-09-07 16:12 - 002755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2017-10-11 07:57 - 2017-09-07 15:48 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-10-11 07:57 - 2017-09-07 15:48 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-10-11 07:57 - 2017-09-07 15:48 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-10-11 07:57 - 2017-08-19 16:10 - 003209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-10-11 07:57 - 2017-08-19 16:10 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-10-11 07:57 - 2017-08-19 16:10 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2017-10-11 07:57 - 2017-08-19 15:57 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2017-10-11 07:57 - 2017-08-19 15:57 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-10-11 07:57 - 2017-08-14 18:35 - 000827904 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2017-10-11 07:57 - 2017-08-14 18:35 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2017-10-11 07:57 - 2017-08-13 22:35 - 000031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2017-10-08 19:37 - 2017-10-09 08:26 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Adobe
2017-10-01 19:04 - 2017-10-01 19:04 - 000132864 _____ C:\Users\Milan\Downloads\sklolaminatove-desky-a-role-technicke-informace.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-31 09:50 - 2015-07-16 05:38 - 000000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3185578175-294760507-565108644-1000UA.job
2017-10-31 09:39 - 2016-11-19 08:30 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\Mozilla
2017-10-31 09:30 - 2012-01-11 23:21 - 000000000 ___HD C:\Users\Milan\AppData\LocalLow\Temp
2017-10-31 08:48 - 2009-07-14 05:34 - 000028944 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-10-31 08:48 - 2009-07-14 05:34 - 000028944 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-10-31 08:43 - 2011-04-12 02:37 - 000668882 _____ C:\Windows\system32\perfh005.dat
2017-10-31 08:43 - 2011-04-12 02:37 - 000141542 _____ C:\Windows\system32\perfc005.dat
2017-10-31 08:43 - 2010-11-20 22:01 - 001584626 _____ C:\Windows\system32\PerfStringBackup.INI
2017-10-31 08:43 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2017-10-31 08:37 - 2011-12-24 20:49 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Skype
2017-10-30 23:04 - 2013-03-18 21:28 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-10-30 23:04 - 2011-12-25 20:58 - 000000000 ___HD C:\Users\Milan\AppData\Local\Adobe
2017-10-30 23:04 - 2011-12-24 22:55 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-10-30 23:04 - 2011-12-24 22:55 - 000000000 ____D C:\Windows\system32\Macromed
2017-10-30 22:33 - 2013-04-26 20:15 - 000000000 ____D C:\Program Files\trend micro
2017-10-30 22:07 - 2015-04-27 21:16 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Seznam.cz
2017-10-30 22:00 - 2017-07-02 21:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-10-30 22:00 - 2017-02-20 23:37 - 000000000 ____D C:\Users\Milan\AppData\Local\FSDART
2017-10-30 22:00 - 2013-06-29 18:53 - 000000000 ____D C:\ProgramData\McAfee
2017-10-30 22:00 - 2012-05-16 21:53 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Dropbox
2017-10-30 22:00 - 2012-05-03 06:09 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-10-30 22:00 - 2011-12-26 11:45 - 000000000 ____D C:\ProgramData\HP Product Assistant
2017-10-30 22:00 - 2011-12-25 22:31 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-10-30 22:00 - 2011-12-24 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-10-30 22:00 - 2011-12-24 20:03 - 000000000 ____D C:\Program Files\CCleaner
2017-10-30 22:00 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\registration
2017-10-30 21:58 - 2011-12-26 11:44 - 000000000 ____D C:\Program Files\HP
2017-10-30 21:01 - 2011-12-24 15:04 - 000000000 ____D C:\Users\Milan
2017-10-30 21:01 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-10-30 20:48 - 2017-02-20 23:37 - 000000000 ____D C:\ProgramData\F-Secure
2017-10-27 19:00 - 2011-12-26 11:44 - 000123676 _____ C:\Windows\hpgins21.dat
2017-10-27 19:00 - 2011-12-26 11:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-10-27 18:52 - 2011-12-26 11:46 - 000000000 ____D C:\Program Files\Common Files\HP
2017-10-27 18:31 - 2012-01-05 21:01 - 000000000 ___HD C:\Users\Milan\AppData\Roaming\Image Zone Express
2017-10-27 14:21 - 2015-07-16 05:38 - 000000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3185578175-294760507-565108644-1000Core.job
2017-10-26 20:04 - 2011-12-26 13:24 - 000000000 ___HD C:\Users\Milan\Documents\Moje naskenované obrázky
2017-10-11 18:19 - 2009-07-14 05:33 - 000305632 _____ C:\Windows\system32\FNTCACHE.DAT
2017-10-11 18:09 - 2013-08-13 23:07 - 000000000 ____D C:\Windows\system32\MRT
2017-10-11 18:05 - 2011-12-28 10:05 - 124059592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-10-11 07:45 - 2016-12-28 19:16 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2017-10-03 20:09 - 2015-02-17 20:54 - 000029852 _____ C:\Users\Milan\Desktop\Alternátor.odt

==================== Files in the root of some directories =======

2015-02-13 23:26 - 2015-02-13 23:26 - 006103040 _____ () C:\Program Files\GUT7501.tmp
2016-05-03 21:28 - 2016-05-03 21:28 - 000000091 _____ () C:\Users\Milan\AppData\Roaming\Safer-Networking.log
2014-06-08 22:15 - 2014-06-08 22:15 - 000000000 _____ () C:\Users\Milan\AppData\Roaming\Microsoft\3B5B.tmp
2013-03-22 20:27 - 2015-11-16 08:40 - 000004608 _____ () C:\Users\Milan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-04 12:00 - 2017-07-30 20:04 - 000007598 _____ () C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
2011-12-24 20:54 - 2011-12-24 20:54 - 000000056 _____ () C:\ProgramData\ezsidmv.dat
2011-12-26 11:44 - 2017-10-27 19:44 - 000009589 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


Some files in TEMP:
====================
2017-10-30 22:07 - 2017-10-30 22:07 - 000534528 _____ () C:\Users\Milan\AppData\Local\temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3185578175-294760507-565108644-1000Core.job => C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3185578175-294760507-565108644-1000UA.job => C:\Users\Milan\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AV: Spybot - Search and Destroy (Disabled - Out of date) {1A0DDE8C-B4BA-EFDD-22A8-0F557C7985F0}
AS: Spybot - Search and Destroy (Disabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Milan\Desktop" je 78 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk
C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[milav]

Dodatečně zasílám printscreen

[Kodlz]

Printscreen nevidno.

Na plose, tam kde mas umisteny FRST vytvor TXT soubor, ktery pojmenujes fixlist.txt a do nej vloz nasledujici text:

( Spusť znovu FRST a klikni na >Fix<. Po skončení akce se objeví log, který sem zkopíruj).

start
CreateRestorePoint:

CloseProcesses:

Hosts:

EmptyTemp:

Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\RunOnce: [SeznamInstall-uninstall:6a554ab8e493479525f55210b0b6dfed] => C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe [534528 2017-10-30] () <==== ATTENTION
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 eapihdrv; \??\C:\Users\Milan\AppData\Local\Temp\ehdrv.sys [X]
C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [x]
Task: {183CB6D1-7D82-4DD3-8977-704BA590CCC1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

end

[milav]

Snad jsem to udělal dobře.
Zároveň zkusím znovu připojit printscreen

Fix result of Farbar Recovery Scan Tool (x86) Version: 26-10-2017
Ran by Milan (31-10-2017 12:31:08) Run:1
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan (Available Profiles: Milan)
Boot Mode: Normal

==============================================

fixlist content:
*****************

*****************


==== End of Fixlog 12:31:08 ====

[Kodlz]

ne.... nevlozil jste tam ten text co je v citaci v mem poslednim prispevku. proto to neprovedlo zadnou akci.

[milav]

Text jsem zkopíroval ale neuložil. Tak snad teď. Chtělo to po mě restart, má to tak být?

Fix result of Farbar Recovery Scan Tool (x86) Version: 26-10-2017
Ran by Milan (31-10-2017 13:05:59) Run:2
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan (Available Profiles: Milan)
Boot Mode: Normal

==============================================

fixlist content:
*****************
start
CreateRestorePoint:

CloseProcesses:

Hosts:

EmptyTemp:

Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3185578175-294760507-565108644-1000\...\RunOnce: [SeznamInstall-uninstall:6a554ab8e493479525f55210b0b6dfed] => C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe [534528 2017-10-30] () <==== ATTENTION
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 eapihdrv; \??\C:\Users\Milan\AppData\Local\Temp\ehdrv.sys [X]
C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [x]
Task: {183CB6D1-7D82-4DD3-8977-704BA590CCC1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

end
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon => key removed successfully.
HKU\S-1-5-21-3185578175-294760507-565108644-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SeznamInstall-uninstall:6a554ab8e493479525f55210b0b6dfed => value removed successfully.
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => key removed successfully.
HKLM\System\CurrentControlSet\Services\AppMgmt => key removed successfully.
AppMgmt => service removed successfully.
HKLM\System\CurrentControlSet\Services\eapihdrv => key removed successfully.
eapihdrv => service removed successfully.
C:\Users\Milan\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => moved successfully
"C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [x]" => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{183CB6D1-7D82-4DD3-8977-704BA590CCC1} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{183CB6D1-7D82-4DD3-8977-704BA590CCC1} => key removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => key removed successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8163018 B
Java, Flash, Steam htmlcache => 524 B
Windows/system/drivers => 7558144 B
Edge => 0 B
Chrome => 95232 B
Firefox => 38120022 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 33058 B
Public => 0 B
ProgramData => 0 B
systemprofile => 31575642 B
LocalService => 115860 B
NetworkService => 13006448 B
Milan => 13366781 B

RecycleBin => 907 B
EmptyTemp: => 114.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 13:06:41 ====

[milav]

Ještě jeden pokus printsceen. Pozdě mi došlo, že přílohy musí být asi zkomprimované.

[Kodlz]

Pokud se pc restartovalo tak to vubec nevadi.
Tusim v cem by mohl byt hlavni problem...
Tvoje pc ma jenom 2GB pameti coz popravde v dnesni dobe, kdy naroky aplikaci jsou uz vetsi, nic moc neni.
nejvice pameti momentalne zere firefox (pomalu 1/4 pameti) a dalsi aplikace jsou taky docela hladne.

Urcite by jsem odinstaloval:
Search App by Ask
Seznam Software
Skype Toolbars


muzes jeste zkusit:
Stáhni AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Ulož na plochu
Ukonči všechny programy
Klikni nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vlož.

[milav]

Někde jsem četl, že 32 bitový systém stejně neumí pracovat s větší pamětí. Ale možná jsem to pochopil špatně. Nejsem žádný odborník. V opačném případě pouvažuji o rozšíření.
Ty tři věci k odinstalování ani nevím že mám a nepoužívám je. Musely se mi tam dostat asi nějakou mojí neopatrností.
Asi Panely - Programy - Odinstalovat....? I když ten Search App.... jsem v seznamu nenašel...
A dá se teda teď vyloučit, že mám v PC nějakou havěť, která by využívala moje prostředky?

# AdwCleaner 7.0.4.0 - Logfile created on Tue Oct 31 15:56:56 2017
# Updated on 2017/27/10 by Malwarebytes
# Running on Windows 7 Home Premium (X86)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Program Files\globalUpdate
Deleted: C:\Users\Milan\AppData\Local\globalUpdate
Deleted: C:\Windows\System32\config\systemprofile\AppData\LocalLow\Application Updater
Deleted: C:\ProgramData\AskPartnerNetwork
Deleted: C:\ProgramData\Application Data\AskPartnerNetwork
Deleted: C:\Program Files\AskPartnerNetwork
Deleted: C:\Users\All Users\AskPartnerNetwork
Deleted: C:\Users\Milan\AppData\Local\AskPartnerNetwork
Deleted: C:\Windows\System32\config\systemprofile\AppData\Roaming\Solvusoft
Deleted: C:\ProgramData\apn
Deleted: C:\ProgramData\Application Data\apn
Deleted: C:\Users\All Users\apn
Deleted: C:\Users\Milan\AppData\Roaming\GetNowUpdater
Deleted: C:\Program Files\Internet Speed Checker
Deleted: C:\Program Files\Internet Speed Checker


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC0D210
Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\Features\D2A425F405350054677A7A857BC0D210
Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC0D210
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
Deleted: [Key] - HKLM\SOFTWARE\AskPartnerNetwork
Deleted: [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork
Deleted: [Key] - HKU\S-1-5-21-3185578175-294760507-565108644-1000\Software\AskPartnerNetwork
Deleted: [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork
Deleted: [Key] - HKCU\Software\AskPartnerNetwork
Deleted: [Key] - HKLM\SOFTWARE\Conduit
Deleted: [Key] - HKU\S-1-5-21-3185578175-294760507-565108644-1000\Software\Conduit
Deleted: [Key] - HKCU\Software\Conduit
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2D01}|InstallSource []


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [7277 B] - [2017/10/31 15:52:55]
C:/AdwCleaner/AdwCleaner[S1].txt - [7346 B] - [2017/10/31 15:56:0]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

[Kodlz]

No 32bit systemy umeji vyuzit cca 3.25GB z RAM, takze upgrade pameti ti trochu pomuze, ale i tak musis pocitat s tim ze dnesni programy jsou cim dal tim hladovejsi na pamet.
Ja tam nic skodliveho nevidim.
Pokud chces mit jistotu muzeme to jeste proskenovat:
toolem MBAM: http://forum.viry.cz/viewtopic.php?f=29&t=144868
-Nainstaluj,dej úplný sken

-Log zkopíruj sem.


Mozna by jeste nebylo od veci se kouknout co se tam mas nainstalovane a odinstalovat to co nepouzivas ( po scanu i MBAM). i tim se da usetrit nejaka pamet.

Muzes po tom jeste smazat nepotřebné soubory pomocí CCleaneru

navod:

Cleaner/Čistič - vyčistí PC od nepotřebných souborů a vysypeš Koš

Registry - vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)
- čištění registru je třeba několikrát zopakovat !

Tools/Nástroje - zde muzes odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém

[milav]

Zbytečné progaramy oidinstaluji, jsem si vědom, že mi tam nějaké zabírají místo. Ccleaner mám nainstalovaný a používám ho na čištění od smetí a čištění registrů. Asi pomocí něj i odinstluji zbytečnosti.

Soubory, které mi našel Malwerbytes jsem poslal do karantény a pro dokončení vyžaduje restart. Ten provedu po odesládí této zprávy.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 01.11.17
Čas skenování: 10:17
Logovací soubor: 74b4a116-bee5-11e7-8f8f-14dae9d76822.json
Správce: Ano

-Informace o softwaru-
Verze: 3.2.2.2029
Verze komponentů: 1.0.212
Aktualizovat verzi balíku komponent: 1.0.3148
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x86
Systém souborů: NTFS
Uživatel: Milan-PC\Milan

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 264368
Zjištěné hrozby: 14
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 10 min, 51 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 1
PUP.Optional.Spigot, HKU\S-1-5-21-3185578175-294760507-565108644-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F5B8D723-BE88-4B71-B1D3-7A38F4DEC806}, Žádná uživatelská akce, [648], [243431],1.0.3148

Hodnota v registru: 2
PUP.Optional.Spigot, HKU\S-1-5-21-3185578175-294760507-565108644-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F5B8D723-BE88-4B71-B1D3-7A38F4DEC806}|URL, Žádná uživatelská akce, [648], [243431],1.0.3148
PUP.Optional.Spigot, HKU\S-1-5-21-3185578175-294760507-565108644-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F5B8D723-BE88-4B71-B1D3-7A38F4DEC806}|OSDFILEURL, Žádná uživatelská akce, [648], [243432],1.0.3148

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 3
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\TEMP, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\PROGRAM FILES\FLYING DEALS, Žádná uživatelská akce, [10469], [177205],1.0.3148

Soubor: 8
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\FlyingDeals.expext.zip, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\BrowserAdapter.7z, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\eula.txt, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\FlyingDeals.PurBrowseG.zip, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\utilFlyingDeals.InstallState, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\updateFlyingDeals.InstallState, Žádná uživatelská akce, [10469], [177205],1.0.3148
PUP.Optional.CrossRider, C:\USERS\MILAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QRAR7TC0.DEFAULT\PREFS.JS, Žádná uživatelská akce, [223], [301531],1.0.3148
PUP.Optional.Solvusoft, C:\PROGRAMDATA\~0\DRIVERDOCSETUP.EXE, Žádná uživatelská akce, [361], [331663],1.0.3148

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

[milav]

Posílám ještě log, který mi to nabídlo po restartu.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 01.11.17
Čas skenování: 10:17
Logovací soubor: 74b4a116-bee5-11e7-8f8f-14dae9d76822.json
Správce: Ano

-Informace o softwaru-
Verze: 3.2.2.2029
Verze komponentů: 1.0.212
Aktualizovat verzi balíku komponent: 1.0.3148
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x86
Systém souborů: NTFS
Uživatel: Milan-PC\Milan

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 264368
Zjištěné hrozby: 14
Hrozby umístěné do karantény: 14
Uplynulý čas: 10 min, 51 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 1
PUP.Optional.Spigot, HKU\S-1-5-21-3185578175-294760507-565108644-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F5B8D723-BE88-4B71-B1D3-7A38F4DEC806}, V karanténě, [648], [243431],1.0.3148

Hodnota v registru: 2
PUP.Optional.Spigot, HKU\S-1-5-21-3185578175-294760507-565108644-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F5B8D723-BE88-4B71-B1D3-7A38F4DEC806}|URL, V karanténě, [648], [243431],1.0.3148
PUP.Optional.Spigot, HKU\S-1-5-21-3185578175-294760507-565108644-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F5B8D723-BE88-4B71-B1D3-7A38F4DEC806}|OSDFILEURL, V karanténě, [648], [243432],1.0.3148

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 3
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\TEMP, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\PROGRAM FILES\FLYING DEALS, V karanténě, [10469], [177205],1.0.3148

Soubor: 8
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\FlyingDeals.expext.zip, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\BrowserAdapter.7z, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\eula.txt, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\FlyingDeals.PurBrowseG.zip, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\bin\utilFlyingDeals.InstallState, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.FlyingDeals, C:\Program Files\Flying Deals\updateFlyingDeals.InstallState, V karanténě, [10469], [177205],1.0.3148
PUP.Optional.CrossRider, C:\USERS\MILAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QRAR7TC0.DEFAULT\PREFS.JS, Nahrazen, [223], [301531],1.0.3148
PUP.Optional.Solvusoft, C:\PROGRAMDATA\~0\DRIVERDOCSETUP.EXE, V karanténě, [361], [331663],1.0.3148

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

[Kodlz]

Jen se chci ujistit zda jste opravdu dal presunout do karanteny, protoze vsude je napsane "Žádná uživatelská akce"?
jeste jednou Vas poprosim o FRST.txt a Addition.txt log.