Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Lone wolf

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
nbuci
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 17 lis 2017 19:49

Lone wolf

#1 Příspěvek od nbuci »

Dobrý den,

před nedávnem jsem měl problém s infikováním PC nějakým virem a od té doby na mě občas skočí ikonka na obrazovce která ale není vidět nikde jinde (okno na liště) a ani na ní nejde kliknou ani nic a při jakékoliv akci hned zmizí.

Vzhledem k nápisu "mining on weekends", aktuálnímu tématu bitcoin a vzhledem k tomu že jsem také před dvěma dny měl velký problém se zpomalením PC který jsem částečně vyřešil CCleanerem a pomocí Windows doctor. Stejně mi ale přijde že to není úplně ono.. se bojím aby se nejednalo o nějaký vir zavrtaný hluboko a využívající můj pc k těžbe bitcoinu.

Povedl se mi print screen toho okna tak přikládám.

Děkuji za info.

S pozdravem,
Nemček Matěj.
Přílohy
Bez názvu.png
Bez názvu.png (21 KiB) Zobrazeno 2351 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119666
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Lone wolf

#2 Příspěvek od Rudy »

Zdravím!
Tohle vidím poprvé. Dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
nbuci
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 17 lis 2017 19:49

Re: Lone wolf

#3 Příspěvek od nbuci »

Přikládám scan FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2017
Ran by NBuci (administrator) on LAPTOP-2U6OQUKL (20-11-2017 08:49:21)
Running from C:\Users\NBuci\Desktop
Loaded Profiles: NBuci (Available Profiles: defaultuser0 & NBuci)
Platform: Windows 10 Home Version 1703 15063.726 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_60fa5db9825af077\igfxCUIService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_60fa5db9825af077\igfxEM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(SweetLabs, Inc) C:\Users\NBuci\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Users\NBuci\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
() C:\Users\NBuci\AppData\Roaming\server\runhosts.exe
() C:\Users\NBuci\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_60fa5db9825af077\IntelCpHeciSvc.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\NBuci\AppData\Roaming\server\minergate.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18382816 2017-08-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1493992 2017-08-17] (Realtek Semiconductor)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AdobeReader] => C:\Users\NBuci\AppData\Roaming\server\runhosts.exe [4533248 2017-11-01] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3102496 2017-10-31] (Valve Corporation)
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\NBuci\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\NBuci\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [runhosts] => C:\Users\NBuci\AppData\Roaming\server\runhosts.exe [4533248 2017-11-01] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {60b7fee3-d3e7-11e6-83d4-806e6f6e6963} - "E:\Launcher.exe"
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {70d92191-5d03-11e7-a936-54ee75c11626} - "G:\HiSuiteDownLoader.exe"
Lsa: [Notification Packages] scecli "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Deskjet 1050 J410 series.lnk [2017-11-17]
ShortcutTarget: Sledovat výstrahy inkoustu - HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{212916e8-df55-4a48-9791-fb26c2b0cc99}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{a306e5e8-9100-4a0f-8ca7-27d2edaedbd1}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.cz/?gfe_rd=cr&ei=dKHbV9_YJ6z ... gws_rd=ssl
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-501279221-122349768-22643688-1001 -> DefaultScope {C975260D-3A97-496C-9C59-CEC6832AFE74} URL =
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-05] (Intel Security)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-11-07] (Microsoft Corporation)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-05] (Intel Security)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-05] (Intel Security)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-05] (Intel Security)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 7e4ddurd.default-1509736305825
FF ProfilePath: C:\Users\NBuci\AppData\Roaming\Mozilla\Firefox\Profiles\7e4ddurd.default-1509736305825 [2017-11-20]
FF NewTabOverride: Mozilla\Firefox\Profiles\7e4ddurd.default-1509736305825 -> Enabled: "id":"{ea614400-e918-4741-9a97-7a972ff7c30b
FF Extension: (Seznam pro Firefox - Email) - C:\Users\NBuci\AppData\Roaming\Mozilla\Firefox\Profiles\7e4ddurd.default-1509736305825\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}.xpi [2017-11-03]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-10-20] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome:
=======
CHR HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3715208 2015-12-14] (Intel Corporation)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
R2 AxVirtualAHCISrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe [99712 2015-12-04] (Alcohol Soft Development Team)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [666608 2016-03-22] (Lenovo)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8063656 2017-10-31] (Microsoft Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [134888 2016-10-19] (ELAN Microelectronics Corp.)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1210352 2016-03-23] (Lenovo)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68416 2017-09-08] (Lenovo Group Limited)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2016-01-21] (Intel Corporation)
S2 SecurityHost Windows; C:\Users\NBuci\AppData\Roaming\Microsoft\SecurityHost Service\SecurityHostWarrner.exe [8192 2017-11-03] () [File not signed]
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-05-26] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-05-26] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-05-26] (McAfee, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [100624 2015-06-09] (CyberLink)
R3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [32344 2016-10-19] (ELAN Microelectronic Corp.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [244744 2017-04-13] (Intel Corporation)
R1 MpKsl9319b094; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F2468B54-E5BF-4FED-A835-8EE5286BE5E9}\MpKsl9319b094.sys [58120 2017-11-20] (Microsoft Corporation)
R1 MpKsla4cc1de8; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F362BCBD-4314-4F03-9958-C9D600C95B2B}\MpKsla4cc1de8.sys [58120 2017-11-17] (Microsoft Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7218176 2017-03-18] (Intel Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2016-01-22] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [417760 2016-07-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3119872 2016-06-08] (Realtek Semiconductor Corp.)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [196152 2017-08-22] (Duplex Secure Ltd)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R1 wfcre; C:\WINDOWS\System32\drivers\wfcre.sys [124288 2017-07-04] ()
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-20 08:49 - 2017-11-20 08:50 - 000017441 _____ C:\Users\NBuci\Desktop\FRST.txt
2017-11-20 08:49 - 2017-11-20 08:49 - 000000000 ____D C:\FRST
2017-11-20 08:47 - 2017-11-20 08:47 - 002391552 _____ (Farbar) C:\Users\NBuci\Desktop\FRST64.exe
2017-11-20 08:46 - 2017-11-20 08:46 - 000000000 _____ C:\Users\NBuci\Desktop\FRSTLauncher.exe
2017-11-17 21:24 - 2017-11-17 21:26 - 1031215104 _____ C:\Users\NBuci\Downloads\Blízko od sebe August Osage County (2013) CZdub.avi
2017-11-17 19:45 - 2017-11-17 19:46 - 000000000 ____D C:\rsit
2017-11-17 19:45 - 2017-11-17 19:46 - 000000000 ____D C:\Program Files\trend micro
2017-11-17 19:44 - 2017-11-17 19:45 - 001222144 _____ C:\Users\NBuci\Downloads\RSITx64.exe
2017-11-17 19:36 - 2017-11-17 19:36 - 000000000 ___HD C:\OneDriveTemp
2017-11-17 19:03 - 2017-11-17 19:20 - 000000000 ____D C:\Program Files (x86)\Windows Doctor
2017-11-17 19:03 - 2017-11-17 19:03 - 000001146 _____ C:\Users\NBuci\Desktop\Windows Doctor.lnk
2017-11-17 19:03 - 2017-11-17 19:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Doctor
2017-11-17 19:02 - 2017-11-17 19:02 - 000000000 ____D C:\Program Files\Windows Doctor
2017-11-17 19:01 - 2017-11-17 19:01 - 000030208 ___SH C:\Users\NBuci\Downloads\Thumbs.db
2017-11-17 18:59 - 2017-11-17 19:00 - 012274635 _____ C:\Users\NBuci\Downloads\Windows Doctor 2.7.7.0-Aktivováno.rar
2017-11-17 18:28 - 2017-11-19 12:10 - 000035328 ___SH C:\Users\NBuci\Desktop\Thumbs.db
2017-11-17 18:21 - 2017-11-17 18:21 - 000003938 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2017-11-17 18:21 - 2017-11-17 18:21 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-11-17 18:21 - 2017-11-17 18:21 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-11-17 18:21 - 2017-11-17 18:21 - 000000000 ____D C:\Program Files\CCleaner
2017-11-14 22:34 - 2017-11-14 22:34 - 000885382 _____ C:\Users\NBuci\Downloads\Otazka_7_8_9.pdf
2017-11-14 22:33 - 2017-11-14 22:34 - 000817612 _____ C:\Users\NBuci\Downloads\Otazka_4_5_6.pdf
2017-11-14 22:33 - 2017-11-14 22:33 - 000677672 _____ C:\Users\NBuci\Downloads\Otazka_1_2_3.pdf
2017-11-14 22:33 - 2017-11-14 22:33 - 000672521 _____ C:\Users\NBuci\Downloads\Otazka10az20.pdf
2017-11-14 22:33 - 2017-11-14 22:33 - 000558250 _____ C:\Users\NBuci\Downloads\O_Uvod.pdf
2017-11-14 21:53 - 2017-11-02 06:04 - 001292360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-11-14 21:53 - 2017-11-02 06:03 - 000223640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-11-14 21:53 - 2017-11-02 05:49 - 001838848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000613136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000362144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000283544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-11-14 21:53 - 2017-11-02 05:45 - 000172952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-11-14 21:53 - 2017-11-02 05:45 - 000133896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-11-14 21:53 - 2017-11-02 05:44 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-11-14 21:53 - 2017-11-02 05:44 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-11-14 21:53 - 2017-11-02 05:43 - 020372896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-11-14 21:53 - 2017-11-02 05:30 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-11-14 21:53 - 2017-11-02 05:30 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-11-14 21:53 - 2017-11-02 05:30 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-11-14 21:53 - 2017-11-02 05:27 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-11-14 21:53 - 2017-11-02 05:26 - 005963776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-11-14 21:53 - 2017-11-02 05:26 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-11-14 21:53 - 2017-11-02 05:25 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-11-14 21:53 - 2017-11-02 05:25 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-11-14 21:53 - 2017-11-02 05:24 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-11-14 21:53 - 2017-11-02 05:24 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-11-14 21:53 - 2017-11-02 05:23 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-11-14 21:53 - 2017-11-02 05:22 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-11-14 21:53 - 2017-11-02 05:22 - 001494528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2017-11-14 21:53 - 2017-11-02 05:21 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-11-14 21:53 - 2017-11-02 05:21 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-11-14 21:53 - 2017-10-15 16:09 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-11-14 21:53 - 2017-10-15 16:03 - 006765728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-11-14 21:53 - 2017-10-15 16:01 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-11-14 21:53 - 2017-10-15 15:49 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-11-14 21:53 - 2017-10-15 15:45 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-11-14 21:53 - 2017-10-15 15:44 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-11-14 21:53 - 2017-10-15 15:42 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-11-14 21:53 - 2017-10-15 15:42 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-11-14 21:53 - 2017-10-15 15:41 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-11-14 21:53 - 2017-10-15 15:41 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-11-14 21:53 - 2017-10-15 15:38 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-11-14 21:52 - 2017-11-02 06:16 - 008319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-11-14 21:52 - 2017-11-02 06:16 - 002398696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-11-14 21:52 - 2017-11-02 06:16 - 002327448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-11-14 21:52 - 2017-11-02 06:15 - 001239448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-11-14 21:52 - 2017-11-02 06:13 - 000546712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-11-14 21:52 - 2017-11-02 06:13 - 000212888 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-11-14 21:52 - 2017-11-02 06:13 - 000095640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-11-14 21:52 - 2017-11-02 06:12 - 000727336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-11-14 21:52 - 2017-11-02 06:12 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-11-14 21:52 - 2017-11-02 06:12 - 000412752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-11-14 21:52 - 2017-11-02 06:12 - 000319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-11-14 21:52 - 2017-11-02 06:12 - 000144248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-11-14 21:52 - 2017-11-02 06:10 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-11-14 21:52 - 2017-11-02 06:05 - 000187800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-11-14 21:52 - 2017-11-02 05:44 - 023680000 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-11-14 21:52 - 2017-11-02 05:36 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2017-11-14 21:52 - 2017-11-02 05:35 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-11-14 21:52 - 2017-11-02 05:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 012803072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-11-14 21:52 - 2017-11-02 05:34 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-11-14 21:52 - 2017-11-02 05:34 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-11-14 21:52 - 2017-11-02 05:32 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-11-14 21:52 - 2017-11-02 05:31 - 020512256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-11-14 21:52 - 2017-11-02 05:30 - 013381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-11-14 21:52 - 2017-11-02 05:30 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-11-14 21:52 - 2017-11-02 05:30 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-11-14 21:52 - 2017-11-02 05:30 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 019338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-11-14 21:52 - 2017-11-02 05:28 - 023684096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-11-14 21:52 - 2017-11-02 05:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-11-14 21:52 - 2017-11-02 05:27 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-11-14 21:52 - 2017-11-02 05:27 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-11-14 21:52 - 2017-11-02 05:27 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-11-14 21:52 - 2017-11-02 05:27 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPKICmdlet.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 008197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 001937408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 012227072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 011888128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 004727808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-11-14 21:52 - 2017-11-02 05:24 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-11-14 21:52 - 2017-11-02 05:24 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2017-11-14 21:52 - 2017-11-02 05:24 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 000680960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2017-11-14 21:52 - 2017-11-02 05:22 - 006254080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-11-14 21:52 - 2017-11-02 05:22 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-11-14 21:52 - 2017-11-02 05:22 - 001884160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2017-11-14 21:52 - 2017-11-02 05:21 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-11-14 21:52 - 2017-11-02 05:21 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-11-14 21:52 - 2017-10-25 08:40 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-11-14 21:52 - 2017-10-15 15:53 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-11-14 21:52 - 2017-10-15 15:53 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-11-14 21:52 - 2017-10-15 15:49 - 000094616 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-11-14 21:52 - 2017-10-15 15:45 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-11-14 21:52 - 2017-10-15 15:44 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-11-14 21:52 - 2017-10-15 15:14 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll
2017-11-14 21:52 - 2017-10-15 15:13 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-11-14 21:52 - 2017-10-15 15:10 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-11-14 21:52 - 2017-10-15 15:05 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-11-14 21:52 - 2017-10-15 15:04 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 001578904 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000678808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000379288 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000190360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000136088 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 002032536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 001144728 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 001015704 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 000965016 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-11-14 21:51 - 2017-11-02 06:20 - 000821656 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 000613784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 000484248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000469568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000259992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000034712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-11-14 21:51 - 2017-11-02 06:15 - 000503704 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2017-11-14 21:51 - 2017-11-02 06:14 - 000667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-11-14 21:51 - 2017-11-02 06:14 - 000067992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2017-11-14 21:51 - 2017-11-02 06:13 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-11-14 21:51 - 2017-11-02 06:13 - 002443672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-11-14 21:51 - 2017-11-02 06:13 - 001345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-11-14 21:51 - 2017-11-02 06:12 - 000714648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-11-14 21:51 - 2017-11-02 06:12 - 000643192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-11-14 21:51 - 2017-11-02 06:12 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-11-14 21:51 - 2017-11-02 06:12 - 000038808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys
2017-11-14 21:51 - 2017-11-02 06:12 - 000026472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-11-14 21:51 - 2017-11-02 06:11 - 021353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-11-14 21:51 - 2017-11-02 06:05 - 000871408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-11-14 21:51 - 2017-11-02 05:37 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-11-14 21:51 - 2017-11-02 05:37 - 001278976 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-11-14 21:51 - 2017-11-02 05:37 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-11-14 21:51 - 2017-11-02 05:37 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-11-14 21:51 - 2017-11-02 05:37 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-11-14 21:51 - 2017-11-02 05:36 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-11-14 21:51 - 2017-11-02 05:35 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-11-14 21:51 - 2017-11-02 05:35 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2017-11-14 21:51 - 2017-11-02 05:35 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-11-14 21:51 - 2017-11-02 05:34 - 000438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2017-11-14 21:51 - 2017-11-02 05:34 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2017-11-14 21:51 - 2017-11-02 05:34 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPKICmdlet.dll
2017-11-14 21:51 - 2017-11-02 05:32 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2017-11-14 21:51 - 2017-11-02 05:32 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2017-11-14 21:51 - 2017-11-02 05:31 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-11-14 21:51 - 2017-11-02 05:31 - 000411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2017-11-14 21:51 - 2017-11-02 05:31 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 007339008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000719872 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000635392 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-11-14 21:51 - 2017-11-02 05:29 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-11-14 21:51 - 2017-11-02 05:29 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-11-14 21:51 - 2017-11-02 05:27 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2017-11-14 21:51 - 2017-11-02 05:27 - 000537600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 003060224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 002809344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 002052608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-11-14 21:51 - 2017-11-02 05:25 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 001713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-11-14 21:51 - 2017-11-02 05:24 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-11-14 21:51 - 2017-11-02 05:23 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-11-14 21:51 - 2017-11-02 05:23 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-11-14 21:51 - 2017-11-02 05:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-11-14 21:51 - 2017-10-15 15:59 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-11-14 21:51 - 2017-10-15 15:57 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-11-14 21:51 - 2017-10-15 15:57 - 000409496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-11-14 21:51 - 2017-10-15 15:56 - 000872464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-11-14 21:51 - 2017-10-15 15:55 - 007910960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-11-14 21:51 - 2017-10-15 15:51 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-11-14 21:51 - 2017-10-15 15:15 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-11-14 21:51 - 2017-10-15 15:09 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-11-14 21:51 - 2017-10-15 15:09 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-11-14 21:51 - 2017-10-15 15:08 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-11-14 21:51 - 2017-10-15 15:08 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-11-14 21:51 - 2017-10-15 15:07 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-11-14 21:51 - 2017-10-15 15:05 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-11-14 21:51 - 2017-10-15 15:02 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-11-14 21:51 - 2017-10-15 15:00 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2017-11-13 18:15 - 2017-11-13 18:15 - 000001328 _____ C:\Users\NBuci\Desktop\Farming Simulator 2013 Demo.lnk
2017-11-13 18:15 - 2017-11-13 18:15 - 000000000 ____D C:\Users\NBuci\Documents\My Games
2017-11-13 18:15 - 2017-11-13 18:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farming Simulator 2013 Demo
2017-11-13 18:15 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2017-11-13 18:15 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2017-11-13 18:15 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2017-11-13 18:15 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2017-11-13 18:15 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2017-11-13 18:15 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2017-11-13 18:14 - 2017-11-13 18:15 - 000000000 ____D C:\Program Files (x86)\Farming Simulator 2013 Demo
2017-11-13 18:13 - 2017-11-13 18:13 - 221525984 _____ C:\Users\NBuci\Downloads\FarmingSimulator2013DemoEN.exe
2017-11-09 20:52 - 2017-11-09 20:52 - 000579693 _____ C:\Users\NBuci\Downloads\VSB - zajištění a likvidace dolů - vypracované otázky.pdf
2017-11-04 11:17 - 2017-11-04 11:17 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ElastoMania111
2017-11-04 11:16 - 2017-11-04 11:16 - 001148755 _____ C:\Users\NBuci\Downloads\elma.exe
2017-11-03 20:32 - 2017-11-03 20:32 - 000000000 _____ C:\WINDOWS\system32\last.dump
2017-11-03 19:42 - 2017-11-03 19:42 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-11-03 19:37 - 2017-11-03 19:37 - 000000000 ____D C:\Users\NBuci\AppData\Local\AVAST Software
2017-11-03 19:31 - 2017-11-03 19:31 - 000000000 ___HD C:\$AV_ASW
2017-11-03 19:22 - 2017-11-03 19:22 - 007161304 _____ (AVAST Software) C:\Users\NBuci\Downloads\avast_free_antivirus_setup_online(1).exe
2017-11-03 19:09 - 2017-11-20 08:49 - 000000000 ____D C:\Users\NBuci\AppData\Local\minergate
2017-11-03 19:09 - 2017-11-17 19:17 - 000000000 ____D C:\Program Files (x86)\OneSystemCare
2017-11-03 19:09 - 2017-11-08 17:04 - 000000000 ____D C:\ProgramData\1c77ccb2-7057-1
2017-11-03 19:09 - 2017-11-08 17:04 - 000000000 ____D C:\ProgramData\1c77ccb2-4551-0
2017-11-03 19:09 - 2017-11-04 10:48 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\CpuzApp4
2017-11-03 19:09 - 2017-11-03 19:09 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\server
2017-11-03 19:08 - 2017-11-03 19:08 - 000032256 _____ C:\WINDOWS\SysWOW64\fhjxhfbgf.exe
2017-11-03 19:08 - 2017-11-03 19:08 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Faloemitator
2017-11-03 19:08 - 2017-11-03 19:08 - 000000000 ____D C:\Program Files (x86)\PQwick
2017-11-03 19:08 - 2017-11-03 19:08 - 000000000 ____D C:\Program Files (x86)\Alcine
2017-11-03 19:07 - 2017-11-17 19:18 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\BrowserModule
2017-11-03 19:07 - 2017-11-03 19:37 - 000000000 ____D C:\Users\NBuci\AppData\Local\AdService
2017-11-03 19:07 - 2017-11-03 19:07 - 000000000 ____D C:\Users\Public\Documents\XMUpdate
2017-11-03 19:06 - 2017-11-03 19:35 - 000001945 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
2017-11-03 19:06 - 2017-11-03 19:35 - 000001933 _____ C:\Users\Public\Desktop\Моzillа Firеfох.lnk
2017-11-03 18:47 - 2017-11-03 18:47 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\sixteen tons entertainment
2017-11-03 18:38 - 2017-11-03 18:38 - 000000000 ____D C:\Users\NBuci\AppData\Local\UnrealEngine
2017-11-03 18:38 - 2017-11-03 18:38 - 000000000 ____D C:\Users\NBuci\AppData\Local\ShowR
2017-11-03 18:32 - 2017-11-03 18:32 - 000000222 _____ C:\Users\NBuci\Desktop\Firefighting Simulator Showroom.url
2017-10-31 14:28 - 2017-10-31 14:28 - 000001091 _____ C:\Users\Public\Desktop\IQ Option.lnk
2017-10-31 14:28 - 2017-10-31 14:28 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\IQ Option
2017-10-31 14:28 - 2017-10-31 14:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IQ Option
2017-10-31 14:28 - 2017-10-31 14:28 - 000000000 ____D C:\Program Files (x86)\IQ Option
2017-10-31 14:25 - 2017-10-31 14:25 - 012508440 _____ (IQOption) C:\Users\NBuci\Downloads\IQOption.exe
2017-10-27 19:01 - 2017-10-27 19:02 - 386902791 _____ C:\Users\NBuci\Downloads\Zajištění a likvidace dolů a lomů.zip
2017-10-27 19:00 - 2017-10-27 19:00 - 005333393 _____ C:\Users\NBuci\Downloads\Hornická geomechanika.zip
2017-10-27 18:54 - 2017-10-27 18:54 - 003441272 _____ C:\Users\NBuci\Downloads\Chemie.rar
2017-10-26 11:50 - 2017-10-26 11:50 - 000134507 _____ C:\Users\NBuci\Downloads\Zapocet1718v3.pdf
2017-10-26 08:24 - 2017-10-26 08:24 - 206723217 _____ C:\Users\NBuci\Downloads\Micro Machines V4.zip
2017-10-25 19:29 - 2017-10-25 19:29 - 000438445 _____ C:\Users\NBuci\Desktop\fixservis---odstúpenie-od-zmluvy-s-prip..pdf
2017-10-25 19:15 - 2017-10-25 19:15 - 000166340 _____ C:\Users\NBuci\Downloads\fixservis---odstúpenie-od-zmluvy-s-prip..pdf
2017-10-23 14:27 - 2017-10-23 14:28 - 001603163 _____ C:\Users\NBuci\Downloads\prilohyboky_20247.zip
2017-10-22 19:52 - 2017-10-22 19:52 - 003942983 _____ C:\Users\NBuci\Downloads\vypocitane-zapoctove-priklady-pro-vkm-most.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-20 08:17 - 2017-05-27 20:35 - 000000000 ____D C:\Users\NBuci\AppData\Local\Host App Service
2017-11-19 23:15 - 2017-06-26 19:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-11-19 20:21 - 2017-05-30 10:20 - 000000000 ____D C:\Users\NBuci\AppData\LocalLow\Mozilla
2017-11-19 20:14 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-19 20:14 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-11-18 23:18 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\rescache
2017-11-18 23:12 - 2017-05-28 16:53 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-18 13:19 - 2017-03-18 22:01 - 000000000 ____D C:\WINDOWS\INF
2017-11-17 23:02 - 2017-06-26 19:38 - 000000000 ____D C:\Users\NBuci
2017-11-17 19:41 - 2017-07-11 14:19 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Seznam.cz
2017-11-17 19:40 - 2017-05-30 11:55 - 000032495 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-11-17 19:36 - 2017-05-27 20:40 - 000000000 ___RD C:\Users\NBuci\OneDrive
2017-11-17 19:34 - 2017-06-26 19:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-11-17 19:34 - 2017-05-27 20:37 - 000000000 __SHD C:\Users\NBuci\IntelGraphicsProfiles
2017-11-17 19:31 - 2017-03-20 05:40 - 109314048 _____ C:\WINDOWS\system32\config\software.bak
2017-11-17 19:31 - 2017-03-18 12:40 - 023592960 _____ C:\WINDOWS\system32\config\system.bak
2017-11-17 19:31 - 2017-03-18 12:40 - 001835008 _____ C:\WINDOWS\system32\config\BBI
2017-11-17 19:31 - 2017-03-18 12:40 - 000524288 _____ C:\WINDOWS\system32\config\default.bak
2017-11-17 19:31 - 2017-03-18 12:40 - 000049152 _____ C:\WINDOWS\system32\config\security.bak
2017-11-17 19:21 - 2017-06-26 19:55 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-11-17 19:20 - 2017-06-02 22:08 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-17 19:18 - 2017-06-07 15:27 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\WhatsApp
2017-11-17 19:18 - 2017-06-04 19:55 - 000000000 ____D C:\Users\NBuci\AppData\Local\tkdata
2017-11-17 19:18 - 2017-05-31 18:39 - 000000000 ____D C:\Users\NBuci\AppData\Local\UNP
2017-11-17 19:17 - 2017-07-05 21:36 - 000000000 ____D C:\Nová složka
2017-11-17 19:17 - 2017-05-31 00:19 - 000000000 __SHD C:\found.000
2017-11-17 19:17 - 2017-05-30 10:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-17 19:13 - 2017-08-22 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart File Advisor
2017-11-17 18:53 - 2017-05-28 06:42 - 000000000 ____D C:\Users\NBuci\AppData\Local\Google
2017-11-17 18:53 - 2017-05-28 06:41 - 000000000 ____D C:\Program Files (x86)\Google
2017-11-17 18:45 - 2017-06-26 19:55 - 002473074 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-11-17 18:45 - 2017-03-20 05:43 - 001112636 _____ C:\WINDOWS\system32\perfh005.dat
2017-11-17 18:45 - 2017-03-20 05:43 - 000257344 _____ C:\WINDOWS\system32\perfc005.dat
2017-11-17 18:44 - 2017-07-06 20:23 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2017-11-17 18:44 - 2017-07-06 20:23 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\ICQ
2017-11-17 18:39 - 2017-05-28 06:35 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-17 18:27 - 2017-08-27 14:29 - 000000000 ____D C:\WINDOWS\Minidump
2017-11-17 18:27 - 2017-06-26 10:59 - 000000000 ___DC C:\WINDOWS\Panther
2017-11-17 18:27 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-11-17 18:04 - 2016-07-29 18:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-11-17 17:51 - 2017-06-26 19:23 - 000390784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\Provisioning
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-11-17 17:11 - 2017-05-30 10:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-15 21:16 - 2017-05-30 10:19 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Mozilla
2017-11-15 19:46 - 2017-03-18 21:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-11-14 22:34 - 2017-05-30 14:31 - 000000000 ____D C:\Users\NBuci\AppData\Local\GHISLER
2017-11-14 22:30 - 2017-05-30 19:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-11-14 21:58 - 2017-10-10 21:03 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-11-14 21:58 - 2017-05-30 19:47 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-11-14 21:07 - 2017-06-26 19:55 - 000004506 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-11-14 21:07 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-11-14 21:07 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-11-13 21:46 - 2017-09-19 21:58 - 000000000 ____D C:\Hudba
2017-11-13 20:40 - 2017-06-26 19:35 - 000310722 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-11-13 20:36 - 2017-08-08 18:45 - 000000000 ____D C:\WINDOWS\system32\DAX3
2017-11-13 20:36 - 2017-06-26 19:34 - 000000000 ____D C:\WINDOWS\system32\DAX2
2017-11-13 20:35 - 2017-06-26 19:34 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-11-12 19:36 - 2017-05-30 14:32 - 000000000 ____D C:\Škola
2017-11-09 21:01 - 2017-08-11 19:17 - 000091216 _____ C:\Users\NBuci\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-09 16:35 - 2017-06-07 15:26 - 000000000 ____D C:\Users\NBuci\AppData\Local\WhatsApp
2017-11-09 16:34 - 2017-06-07 15:27 - 000002264 _____ C:\Users\NBuci\Desktop\WhatsApp.lnk
2017-11-09 16:34 - 2017-06-07 15:27 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2017-11-09 16:34 - 2017-06-07 15:26 - 000000000 ____D C:\Users\NBuci\AppData\Local\SquirrelTemp
2017-11-07 05:50 - 2017-07-15 06:22 - 000000000 ____D C:\Filmy
2017-11-07 04:00 - 2017-03-18 22:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-11-07 03:59 - 2017-01-06 09:30 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-05 02:40 - 2017-03-18 22:06 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-11-05 02:40 - 2017-03-18 22:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-04 11:17 - 2017-07-05 21:34 - 000000000 ____D C:\HRY
2017-11-03 20:27 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-11-03 20:01 - 2017-01-06 09:28 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-03 19:31 - 2017-08-22 20:28 - 000000000 ____D C:\Program Files (x86)\Smart File Advisor
2017-11-03 19:28 - 2017-06-12 22:54 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-11-03 13:06 - 2017-07-25 11:31 - 000003370 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-501279221-122349768-22643688-1001
2017-11-03 13:06 - 2017-05-27 20:40 - 000002390 _____ C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== Files in the root of some directories =======

2017-07-11 14:21 - 2017-07-12 12:51 - 000085504 _____ () C:\Users\NBuci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-11-17 21:28

==================== End of FRST.txt ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119666
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Lone wolf

#4 Příspěvek od Rudy »

Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
nbuci
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 17 lis 2017 19:49

Re: Lone wolf

#5 Příspěvek od nbuci »

# AdwCleaner 7.0.4.0 - Logfile created on Tue Nov 21 13:04:35 2017
# Updated on 2017/27/10 by Malwarebytes
# Database: 11-21-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy, C:\ProgramData\Host App Service
PUP.Optional.Legacy, C:\Users\All Users\Host App Service
PUP.Optional.Legacy, C:\Users\Default\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\Default User\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\defaultuser0\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\NBuci\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\Public\Documents\XMUpdate
PUP.Optional.OneSystemCare, C:\Program Files (x86)\OneSystemCare
PUP.Optional.UpService, C:\Users\NBuci\AppData\Local\AdService
PUP.Optional.StartPage, C:\Users\NBuci\AppData\Roaming\BROWSERMODULE
Adware.Agent, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Doctor
Adware.Agent, C:\Program Files\Windows Doctor
Adware.Agent, C:\Program Files (x86)\Windows Doctor
Adware.HPDefender, C:\Users\NBuci\AppData\Roaming\CpuzApp4
PUP.Optional.MirageISO, C:\Users\Public\Documents\XMUpdate
PUP.Optional.Alcine, C:\Program Files (x86)\Alcine
PUP.Adware.Heuristic, C:\ProgramData\1c77ccb2-4551-0
PUP.Adware.Heuristic, C:\ProgramData\1c77ccb2-7057-1


***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\NBuci\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Doctor.lnk
PUP.Optional.Legacy, C:\Users\NBuci\Desktop\Windows Doctor.lnk
PUP.Optional.ChinAd, C:\Windows\SysNative\drivers\wfcre.sys


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy, App Explorer


***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart File Advisor_is1
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Host App Service
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
PUP.Optional.Legacy, [Key] - HKCU\Software\Host App Service
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
PUP.Optional.BitCoinMiner, [Key] - HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\MinerGate
PUP.Optional.BitCoinMiner, [Key] - HKCU\Software\MinerGate
PUP.Optional.OneSystemCare, [Key] - HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\One System Care
PUP.Optional.OneSystemCare, [Key] - HKCU\Software\One System Care
PUP.Optional.UpService, [Value] - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost | AdsServiceGroup
Adware.DNSUnlocker, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
PUP.Optional.CPUGuardian, [Key] - HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\CpuzApp
PUP.Optional.CPUGuardian, [Key] - HKCU\Software\CpuzApp
PUP.Optional.AdService, [Key] - HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\SetupCompany
PUP.Optional.AdService, [Key] - HKCU\Software\SetupCompany
PUP.Optional.AdService, [Value] - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost | AdsServiceGroup


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119666
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Lone wolf

#6 Příspěvek od Rudy »

V ADW ještě klikněte na mazání, restartujte a dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
nbuci
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 17 lis 2017 19:49

Re: Lone wolf

#7 Příspěvek od nbuci »

Tak vkládám nový log FRST a mám novinku, před pár hodinami v práci při spuštění PC bez připojení jsem neviděl kurzor myši a touchpad nereagoval. Klávesnicí jsem se dostal na nastavení zařízení a v ovladačích byl touchpad zakázán. Povolil jsem ho a po restartování opět zakázán.

Mimo jiné se mi načítala aplikace u které jsem stihl postřehnout jen nadpis "Mining gate" která ihned po otevření zmizela.

Teď jsem připojen přes hotspot. tak chvilku trvalo než se chytl signál.



Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2017
Ran by NBuci (administrator) on LAPTOP-2U6OQUKL (21-11-2017 22:01:46)
Running from C:\Users\NBuci\Desktop
Loaded Profiles: NBuci (Available Profiles: defaultuser0 & NBuci)
Platform: Windows 10 Home Version 1703 15063.726 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_60fa5db9825af077\igfxCUIService.exe
(Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_60fa5db9825af077\igfxEM.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD14\PDVD14Serv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Users\NBuci\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\NBuci\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
() C:\Users\NBuci\AppData\Roaming\server\runhosts.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
() C:\Users\NBuci\AppData\Roaming\server\minergate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18382816 2017-08-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1493992 2017-08-17] (Realtek Semiconductor)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AdobeReader] => C:\Users\NBuci\AppData\Roaming\server\runhosts.exe [4533248 2017-11-01] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3102496 2017-10-31] (Valve Corporation)
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\NBuci\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\NBuci\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [runhosts] => C:\Users\NBuci\AppData\Roaming\server\runhosts.exe [4533248 2017-11-01] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {60b7fee3-d3e7-11e6-83d4-806e6f6e6963} - "E:\Launcher.exe"
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {70d92191-5d03-11e7-a936-54ee75c11626} - "G:\HiSuiteDownLoader.exe"
Lsa: [Notification Packages] scecli "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Deskjet 1050 J410 series.lnk [2017-11-21]
ShortcutTarget: Sledovat výstrahy inkoustu - HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{212916e8-df55-4a48-9791-fb26c2b0cc99}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{a306e5e8-9100-4a0f-8ca7-27d2edaedbd1}: [DhcpNameServer] 192.168.43.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.cz/?gfe_rd=cr&ei=dKHbV9_YJ6z ... gws_rd=ssl
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-501279221-122349768-22643688-1001 -> DefaultScope {C975260D-3A97-496C-9C59-CEC6832AFE74} URL =
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-05] (Intel Security)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-11-07] (Microsoft Corporation)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-05] (Intel Security)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-05] (Intel Security)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-05] (Intel Security)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-07] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 7e4ddurd.default-1509736305825
FF ProfilePath: C:\Users\NBuci\AppData\Roaming\Mozilla\Firefox\Profiles\7e4ddurd.default-1509736305825 [2017-11-21]
FF NewTabOverride: Mozilla\Firefox\Profiles\7e4ddurd.default-1509736305825 -> Enabled: "id":"{ea614400-e918-4741-9a97-7a972ff7c30b
FF Extension: (Seznam pro Firefox - Email) - C:\Users\NBuci\AppData\Roaming\Mozilla\Firefox\Profiles\7e4ddurd.default-1509736305825\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}.xpi [2017-11-03]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-10-20] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome:
=======
CHR HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3715208 2015-12-14] (Intel Corporation)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
R2 AxVirtualAHCISrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe [99712 2015-12-04] (Alcohol Soft Development Team)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [666608 2016-03-22] (Lenovo)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8063656 2017-10-31] (Microsoft Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [134888 2016-10-19] (ELAN Microelectronics Corp.)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1210352 2016-03-23] (Lenovo)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68416 2017-09-08] (Lenovo Group Limited)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2016-01-21] (Intel Corporation)
S2 SecurityHost Windows; C:\Users\NBuci\AppData\Roaming\Microsoft\SecurityHost Service\SecurityHostWarrner.exe [8192 2017-11-03] () [File not signed]
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-05-26] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-05-26] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-05-26] (McAfee, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [100624 2015-06-09] (CyberLink)
R3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [32344 2016-10-19] (ELAN Microelectronic Corp.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [244744 2017-04-13] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7218176 2017-03-18] (Intel Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2016-01-22] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [417760 2016-07-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3119872 2016-06-08] (Realtek Semiconductor Corp.)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [196152 2017-08-22] (Duplex Secure Ltd)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R1 wfcre; C:\WINDOWS\System32\drivers\wfcre.sys [124288 2017-07-04] ()
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-21 21:22 - 2017-11-21 21:22 - 000000000 ___HD C:\OneDriveTemp
2017-11-21 15:47 - 2017-11-21 15:59 - 000000000 ____D C:\Users\NBuci\Documents\TrackMania
2017-11-21 15:47 - 2017-11-21 15:49 - 000000000 ____D C:\ProgramData\TrackMania
2017-11-21 15:47 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2017-11-21 15:47 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2017-11-21 15:47 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2017-11-21 15:47 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2017-11-21 15:47 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2017-11-21 15:47 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2017-11-21 15:47 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2017-11-21 15:47 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2017-11-21 15:47 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2017-11-21 15:47 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2017-11-21 15:47 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2017-11-21 15:47 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2017-11-21 15:47 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2017-11-21 15:47 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2017-11-21 15:47 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2017-11-21 15:47 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2017-11-21 15:47 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2017-11-21 15:47 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2017-11-21 15:47 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2017-11-21 15:47 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2017-11-21 15:47 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2017-11-21 15:47 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2017-11-21 15:47 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2017-11-21 15:47 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2017-11-21 15:46 - 2017-11-21 15:46 - 000000845 _____ C:\Users\Public\Desktop\TmNationsForever.lnk
2017-11-21 15:46 - 2017-11-21 15:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
2017-11-21 15:40 - 2017-11-21 15:42 - 525832856 _____ C:\Users\NBuci\Downloads\trackmania_nations_forever.zip
2017-11-21 15:28 - 2017-11-21 15:33 - 000000446 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2017-11-21 14:02 - 2017-11-21 21:29 - 000000000 ____D C:\AdwCleaner
2017-11-21 14:02 - 2017-11-21 14:02 - 008261584 _____ (Malwarebytes) C:\Users\NBuci\Downloads\adwcleaner_7.0.4.0.exe
2017-11-20 08:51 - 2017-11-20 08:52 - 000043797 _____ C:\Users\NBuci\Desktop\Addition.txt
2017-11-20 08:49 - 2017-11-21 22:02 - 000017094 _____ C:\Users\NBuci\Desktop\FRST.txt
2017-11-20 08:49 - 2017-11-21 22:01 - 000000000 ____D C:\FRST
2017-11-20 08:47 - 2017-11-20 08:47 - 002391552 _____ (Farbar) C:\Users\NBuci\Desktop\FRST64.exe
2017-11-20 08:46 - 2017-11-20 08:46 - 000000000 _____ C:\Users\NBuci\Desktop\FRSTLauncher.exe
2017-11-17 21:24 - 2017-11-17 21:26 - 1031215104 _____ C:\Users\NBuci\Downloads\Blízko od sebe August Osage County (2013) CZdub.avi
2017-11-17 19:45 - 2017-11-17 19:46 - 000000000 ____D C:\rsit
2017-11-17 19:45 - 2017-11-17 19:46 - 000000000 ____D C:\Program Files\trend micro
2017-11-17 19:44 - 2017-11-17 19:45 - 001222144 _____ C:\Users\NBuci\Downloads\RSITx64.exe
2017-11-17 19:01 - 2017-11-17 19:01 - 000030208 ___SH C:\Users\NBuci\Downloads\Thumbs.db
2017-11-17 18:59 - 2017-11-17 19:00 - 012274635 _____ C:\Users\NBuci\Downloads\Windows Doctor 2.7.7.0-Aktivováno.rar
2017-11-17 18:28 - 2017-11-19 12:10 - 000035328 ___SH C:\Users\NBuci\Desktop\Thumbs.db
2017-11-17 18:21 - 2017-11-17 18:21 - 000003938 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2017-11-17 18:21 - 2017-11-17 18:21 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-11-17 18:21 - 2017-11-17 18:21 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-11-17 18:21 - 2017-11-17 18:21 - 000000000 ____D C:\Program Files\CCleaner
2017-11-14 22:34 - 2017-11-14 22:34 - 000885382 _____ C:\Users\NBuci\Downloads\Otazka_7_8_9.pdf
2017-11-14 22:33 - 2017-11-14 22:34 - 000817612 _____ C:\Users\NBuci\Downloads\Otazka_4_5_6.pdf
2017-11-14 22:33 - 2017-11-14 22:33 - 000677672 _____ C:\Users\NBuci\Downloads\Otazka_1_2_3.pdf
2017-11-14 22:33 - 2017-11-14 22:33 - 000672521 _____ C:\Users\NBuci\Downloads\Otazka10az20.pdf
2017-11-14 22:33 - 2017-11-14 22:33 - 000558250 _____ C:\Users\NBuci\Downloads\O_Uvod.pdf
2017-11-14 21:53 - 2017-11-02 06:04 - 001292360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-11-14 21:53 - 2017-11-02 06:03 - 000223640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-11-14 21:53 - 2017-11-02 05:49 - 001838848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000613136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000362144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-11-14 21:53 - 2017-11-02 05:45 - 000283544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-11-14 21:53 - 2017-11-02 05:45 - 000172952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-11-14 21:53 - 2017-11-02 05:45 - 000133896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-11-14 21:53 - 2017-11-02 05:44 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-11-14 21:53 - 2017-11-02 05:44 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-11-14 21:53 - 2017-11-02 05:43 - 020372896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-11-14 21:53 - 2017-11-02 05:30 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-11-14 21:53 - 2017-11-02 05:30 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-11-14 21:53 - 2017-11-02 05:30 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-11-14 21:53 - 2017-11-02 05:27 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-11-14 21:53 - 2017-11-02 05:26 - 005963776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-11-14 21:53 - 2017-11-02 05:26 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-11-14 21:53 - 2017-11-02 05:25 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-11-14 21:53 - 2017-11-02 05:25 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-11-14 21:53 - 2017-11-02 05:24 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-11-14 21:53 - 2017-11-02 05:24 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-11-14 21:53 - 2017-11-02 05:23 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-11-14 21:53 - 2017-11-02 05:22 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-11-14 21:53 - 2017-11-02 05:22 - 001494528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2017-11-14 21:53 - 2017-11-02 05:21 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-11-14 21:53 - 2017-11-02 05:21 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-11-14 21:53 - 2017-10-15 16:09 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-11-14 21:53 - 2017-10-15 16:03 - 006765728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-11-14 21:53 - 2017-10-15 16:01 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-11-14 21:53 - 2017-10-15 15:49 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-11-14 21:53 - 2017-10-15 15:45 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-11-14 21:53 - 2017-10-15 15:44 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-11-14 21:53 - 2017-10-15 15:42 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-11-14 21:53 - 2017-10-15 15:42 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-11-14 21:53 - 2017-10-15 15:41 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-11-14 21:53 - 2017-10-15 15:41 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-11-14 21:53 - 2017-10-15 15:38 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-11-14 21:52 - 2017-11-02 06:16 - 008319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-11-14 21:52 - 2017-11-02 06:16 - 002398696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-11-14 21:52 - 2017-11-02 06:16 - 002327448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-11-14 21:52 - 2017-11-02 06:15 - 001239448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-11-14 21:52 - 2017-11-02 06:13 - 000546712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-11-14 21:52 - 2017-11-02 06:13 - 000212888 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-11-14 21:52 - 2017-11-02 06:13 - 000095640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-11-14 21:52 - 2017-11-02 06:12 - 000727336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-11-14 21:52 - 2017-11-02 06:12 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-11-14 21:52 - 2017-11-02 06:12 - 000412752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-11-14 21:52 - 2017-11-02 06:12 - 000319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-11-14 21:52 - 2017-11-02 06:12 - 000144248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-11-14 21:52 - 2017-11-02 06:10 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-11-14 21:52 - 2017-11-02 06:05 - 000187800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-11-14 21:52 - 2017-11-02 05:44 - 023680000 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-11-14 21:52 - 2017-11-02 05:36 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2017-11-14 21:52 - 2017-11-02 05:35 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-11-14 21:52 - 2017-11-02 05:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 012803072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-11-14 21:52 - 2017-11-02 05:34 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-11-14 21:52 - 2017-11-02 05:34 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-11-14 21:52 - 2017-11-02 05:34 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-11-14 21:52 - 2017-11-02 05:32 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-11-14 21:52 - 2017-11-02 05:31 - 020512256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-11-14 21:52 - 2017-11-02 05:30 - 013381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-11-14 21:52 - 2017-11-02 05:30 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-11-14 21:52 - 2017-11-02 05:30 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-11-14 21:52 - 2017-11-02 05:30 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 019338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-11-14 21:52 - 2017-11-02 05:29 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-11-14 21:52 - 2017-11-02 05:28 - 023684096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-11-14 21:52 - 2017-11-02 05:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-11-14 21:52 - 2017-11-02 05:27 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-11-14 21:52 - 2017-11-02 05:27 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-11-14 21:52 - 2017-11-02 05:27 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-11-14 21:52 - 2017-11-02 05:27 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPKICmdlet.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 008197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 001937408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-11-14 21:52 - 2017-11-02 05:26 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 012227072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 011888128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 004727808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-11-14 21:52 - 2017-11-02 05:25 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-11-14 21:52 - 2017-11-02 05:24 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-11-14 21:52 - 2017-11-02 05:24 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2017-11-14 21:52 - 2017-11-02 05:24 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 000680960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-11-14 21:52 - 2017-11-02 05:23 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2017-11-14 21:52 - 2017-11-02 05:22 - 006254080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-11-14 21:52 - 2017-11-02 05:22 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-11-14 21:52 - 2017-11-02 05:22 - 001884160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2017-11-14 21:52 - 2017-11-02 05:21 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-11-14 21:52 - 2017-11-02 05:21 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-11-14 21:52 - 2017-10-25 08:40 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-11-14 21:52 - 2017-10-15 15:53 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-11-14 21:52 - 2017-10-15 15:53 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-11-14 21:52 - 2017-10-15 15:49 - 000094616 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-11-14 21:52 - 2017-10-15 15:45 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-11-14 21:52 - 2017-10-15 15:44 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-11-14 21:52 - 2017-10-15 15:14 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll
2017-11-14 21:52 - 2017-10-15 15:13 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-11-14 21:52 - 2017-10-15 15:10 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-11-14 21:52 - 2017-10-15 15:05 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-11-14 21:52 - 2017-10-15 15:04 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 001578904 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000678808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000379288 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000190360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-11-14 21:51 - 2017-11-02 06:21 - 000136088 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 002032536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 001144728 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 001015704 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 000965016 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-11-14 21:51 - 2017-11-02 06:20 - 000821656 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 000613784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-11-14 21:51 - 2017-11-02 06:20 - 000484248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000469568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000259992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-11-14 21:51 - 2017-11-02 06:20 - 000034712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-11-14 21:51 - 2017-11-02 06:15 - 000503704 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2017-11-14 21:51 - 2017-11-02 06:14 - 000667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-11-14 21:51 - 2017-11-02 06:14 - 000067992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2017-11-14 21:51 - 2017-11-02 06:13 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-11-14 21:51 - 2017-11-02 06:13 - 002443672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-11-14 21:51 - 2017-11-02 06:13 - 001345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-11-14 21:51 - 2017-11-02 06:12 - 000714648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-11-14 21:51 - 2017-11-02 06:12 - 000643192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-11-14 21:51 - 2017-11-02 06:12 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-11-14 21:51 - 2017-11-02 06:12 - 000038808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys
2017-11-14 21:51 - 2017-11-02 06:12 - 000026472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-11-14 21:51 - 2017-11-02 06:11 - 021353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-11-14 21:51 - 2017-11-02 06:05 - 000871408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-11-14 21:51 - 2017-11-02 05:37 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-11-14 21:51 - 2017-11-02 05:37 - 001278976 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-11-14 21:51 - 2017-11-02 05:37 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-11-14 21:51 - 2017-11-02 05:37 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-11-14 21:51 - 2017-11-02 05:37 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-11-14 21:51 - 2017-11-02 05:36 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-11-14 21:51 - 2017-11-02 05:35 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-11-14 21:51 - 2017-11-02 05:35 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2017-11-14 21:51 - 2017-11-02 05:35 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-11-14 21:51 - 2017-11-02 05:34 - 000438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2017-11-14 21:51 - 2017-11-02 05:34 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2017-11-14 21:51 - 2017-11-02 05:34 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-11-14 21:51 - 2017-11-02 05:33 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPKICmdlet.dll
2017-11-14 21:51 - 2017-11-02 05:32 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2017-11-14 21:51 - 2017-11-02 05:32 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2017-11-14 21:51 - 2017-11-02 05:31 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-11-14 21:51 - 2017-11-02 05:31 - 000411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2017-11-14 21:51 - 2017-11-02 05:31 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 007339008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000719872 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000635392 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2017-11-14 21:51 - 2017-11-02 05:30 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-11-14 21:51 - 2017-11-02 05:29 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-11-14 21:51 - 2017-11-02 05:29 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2017-11-14 21:51 - 2017-11-02 05:28 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-11-14 21:51 - 2017-11-02 05:27 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2017-11-14 21:51 - 2017-11-02 05:27 - 000537600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 003060224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 002809344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-11-14 21:51 - 2017-11-02 05:26 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 002052608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-11-14 21:51 - 2017-11-02 05:25 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 001713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-11-14 21:51 - 2017-11-02 05:25 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-11-14 21:51 - 2017-11-02 05:24 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-11-14 21:51 - 2017-11-02 05:23 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-11-14 21:51 - 2017-11-02 05:23 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-11-14 21:51 - 2017-11-02 05:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-11-14 21:51 - 2017-10-15 15:59 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-11-14 21:51 - 2017-10-15 15:57 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-11-14 21:51 - 2017-10-15 15:57 - 000409496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-11-14 21:51 - 2017-10-15 15:56 - 000872464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-11-14 21:51 - 2017-10-15 15:55 - 007910960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-11-14 21:51 - 2017-10-15 15:51 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-11-14 21:51 - 2017-10-15 15:15 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-11-14 21:51 - 2017-10-15 15:09 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-11-14 21:51 - 2017-10-15 15:09 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-11-14 21:51 - 2017-10-15 15:08 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-11-14 21:51 - 2017-10-15 15:08 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-11-14 21:51 - 2017-10-15 15:07 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-11-14 21:51 - 2017-10-15 15:05 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-11-14 21:51 - 2017-10-15 15:02 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-11-14 21:51 - 2017-10-15 15:00 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2017-11-13 18:15 - 2017-11-13 18:15 - 000001328 _____ C:\Users\NBuci\Desktop\Farming Simulator 2013 Demo.lnk
2017-11-13 18:15 - 2017-11-13 18:15 - 000000000 ____D C:\Users\NBuci\Documents\My Games
2017-11-13 18:15 - 2017-11-13 18:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farming Simulator 2013 Demo
2017-11-13 18:15 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2017-11-13 18:15 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2017-11-13 18:15 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2017-11-13 18:15 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2017-11-13 18:15 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2017-11-13 18:15 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2017-11-13 18:14 - 2017-11-13 18:15 - 000000000 ____D C:\Program Files (x86)\Farming Simulator 2013 Demo
2017-11-13 18:13 - 2017-11-13 18:13 - 221525984 _____ C:\Users\NBuci\Downloads\FarmingSimulator2013DemoEN.exe
2017-11-09 20:52 - 2017-11-09 20:52 - 000579693 _____ C:\Users\NBuci\Downloads\VSB - zajištění a likvidace dolů - vypracované otázky.pdf
2017-11-04 11:17 - 2017-11-04 11:17 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ElastoMania111
2017-11-04 11:16 - 2017-11-04 11:16 - 001148755 _____ C:\Users\NBuci\Downloads\elma.exe
2017-11-03 20:32 - 2017-11-03 20:32 - 000000000 _____ C:\WINDOWS\system32\last.dump
2017-11-03 19:42 - 2017-11-03 19:42 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-11-03 19:37 - 2017-11-03 19:37 - 000000000 ____D C:\Users\NBuci\AppData\Local\AVAST Software
2017-11-03 19:31 - 2017-11-03 19:31 - 000000000 ___HD C:\$AV_ASW
2017-11-03 19:22 - 2017-11-03 19:22 - 007161304 _____ (AVAST Software) C:\Users\NBuci\Downloads\avast_free_antivirus_setup_online(1).exe
2017-11-03 19:09 - 2017-11-21 22:02 - 000000000 ____D C:\Users\NBuci\AppData\Local\minergate
2017-11-03 19:09 - 2017-11-03 19:09 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\server
2017-11-03 19:08 - 2017-11-03 19:08 - 000032256 _____ C:\WINDOWS\SysWOW64\fhjxhfbgf.exe
2017-11-03 19:08 - 2017-11-03 19:08 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Faloemitator
2017-11-03 19:08 - 2017-11-03 19:08 - 000000000 ____D C:\Program Files (x86)\PQwick
2017-11-03 19:08 - 2017-11-03 19:08 - 000000000 ____D C:\Program Files (x86)\Alcine
2017-11-03 19:06 - 2017-11-03 19:35 - 000001945 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
2017-11-03 19:06 - 2017-11-03 19:35 - 000001933 _____ C:\Users\Public\Desktop\Моzillа Firеfох.lnk
2017-11-03 18:47 - 2017-11-03 18:47 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\sixteen tons entertainment
2017-11-03 18:38 - 2017-11-03 18:38 - 000000000 ____D C:\Users\NBuci\AppData\Local\UnrealEngine
2017-11-03 18:38 - 2017-11-03 18:38 - 000000000 ____D C:\Users\NBuci\AppData\Local\ShowR
2017-11-03 18:32 - 2017-11-03 18:32 - 000000222 _____ C:\Users\NBuci\Desktop\Firefighting Simulator Showroom.url
2017-10-31 14:28 - 2017-10-31 14:28 - 000001091 _____ C:\Users\Public\Desktop\IQ Option.lnk
2017-10-31 14:28 - 2017-10-31 14:28 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\IQ Option
2017-10-31 14:28 - 2017-10-31 14:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IQ Option
2017-10-31 14:28 - 2017-10-31 14:28 - 000000000 ____D C:\Program Files (x86)\IQ Option
2017-10-31 14:25 - 2017-10-31 14:25 - 012508440 _____ (IQOption) C:\Users\NBuci\Downloads\IQOption.exe
2017-10-27 19:01 - 2017-10-27 19:02 - 386902791 _____ C:\Users\NBuci\Downloads\Zajištění a likvidace dolů a lomů.zip
2017-10-27 19:00 - 2017-10-27 19:00 - 005333393 _____ C:\Users\NBuci\Downloads\Hornická geomechanika.zip
2017-10-27 18:54 - 2017-10-27 18:54 - 003441272 _____ C:\Users\NBuci\Downloads\Chemie.rar
2017-10-26 11:50 - 2017-10-26 11:50 - 000134507 _____ C:\Users\NBuci\Downloads\Zapocet1718v3.pdf
2017-10-26 08:24 - 2017-10-26 08:24 - 206723217 _____ C:\Users\NBuci\Downloads\Micro Machines V4.zip
2017-10-25 19:29 - 2017-10-25 19:29 - 000438445 _____ C:\Users\NBuci\Desktop\fixservis---odstúpenie-od-zmluvy-s-prip..pdf
2017-10-25 19:15 - 2017-10-25 19:15 - 000166340 _____ C:\Users\NBuci\Downloads\fixservis---odstúpenie-od-zmluvy-s-prip..pdf
2017-10-23 14:27 - 2017-10-23 14:28 - 001603163 _____ C:\Users\NBuci\Downloads\prilohyboky_20247.zip
2017-10-22 19:52 - 2017-10-22 19:52 - 003942983 _____ C:\Users\NBuci\Downloads\vypocitane-zapoctove-priklady-pro-vkm-most.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-21 21:59 - 2017-05-30 10:20 - 000000000 ____D C:\Users\NBuci\AppData\LocalLow\Mozilla
2017-11-21 21:43 - 2017-06-26 19:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-11-21 21:40 - 2017-07-11 14:19 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Seznam.cz
2017-11-21 21:40 - 2017-05-30 11:55 - 000034307 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-11-21 21:35 - 2017-05-28 16:53 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-21 21:35 - 2017-05-27 20:40 - 000000000 ___RD C:\Users\NBuci\OneDrive
2017-11-21 21:34 - 2017-05-27 20:37 - 000000000 __SHD C:\Users\NBuci\IntelGraphicsProfiles
2017-11-21 21:33 - 2017-06-26 19:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-11-21 21:31 - 2017-03-18 12:40 - 001835008 _____ C:\WINDOWS\system32\config\BBI
2017-11-21 21:30 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-11-21 21:18 - 2017-06-26 19:38 - 000000000 ____D C:\Users\NBuci
2017-11-21 15:44 - 2017-07-05 21:34 - 000000000 ____D C:\HRY
2017-11-21 15:30 - 2017-06-26 19:55 - 002501724 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-11-21 15:30 - 2017-03-20 05:43 - 001127434 _____ C:\WINDOWS\system32\perfh005.dat
2017-11-21 15:30 - 2017-03-20 05:43 - 000261744 _____ C:\WINDOWS\system32\perfc005.dat
2017-11-21 14:01 - 2017-06-26 10:58 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-11-21 14:01 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-11-19 20:14 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-18 23:18 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\rescache
2017-11-18 13:19 - 2017-03-18 22:01 - 000000000 ____D C:\WINDOWS\INF
2017-11-17 19:31 - 2017-03-20 05:40 - 109314048 _____ C:\WINDOWS\system32\config\software.bak
2017-11-17 19:31 - 2017-03-18 12:40 - 023592960 _____ C:\WINDOWS\system32\config\system.bak
2017-11-17 19:31 - 2017-03-18 12:40 - 000524288 _____ C:\WINDOWS\system32\config\default.bak
2017-11-17 19:31 - 2017-03-18 12:40 - 000049152 _____ C:\WINDOWS\system32\config\security.bak
2017-11-17 19:21 - 2017-06-26 19:55 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-11-17 19:20 - 2017-06-02 22:08 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-17 19:18 - 2017-06-07 15:27 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\WhatsApp
2017-11-17 19:18 - 2017-06-04 19:55 - 000000000 ____D C:\Users\NBuci\AppData\Local\tkdata
2017-11-17 19:18 - 2017-05-31 18:39 - 000000000 ____D C:\Users\NBuci\AppData\Local\UNP
2017-11-17 19:17 - 2017-07-05 21:36 - 000000000 ____D C:\Nová složka
2017-11-17 19:17 - 2017-05-31 00:19 - 000000000 __SHD C:\found.000
2017-11-17 19:17 - 2017-05-30 10:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-17 19:13 - 2017-08-22 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart File Advisor
2017-11-17 18:53 - 2017-05-28 06:42 - 000000000 ____D C:\Users\NBuci\AppData\Local\Google
2017-11-17 18:53 - 2017-05-28 06:41 - 000000000 ____D C:\Program Files (x86)\Google
2017-11-17 18:44 - 2017-07-06 20:23 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2017-11-17 18:44 - 2017-07-06 20:23 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\ICQ
2017-11-17 18:39 - 2017-05-28 06:35 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-17 18:27 - 2017-08-27 14:29 - 000000000 ____D C:\WINDOWS\Minidump
2017-11-17 18:27 - 2017-06-26 10:59 - 000000000 ___DC C:\WINDOWS\Panther
2017-11-17 18:27 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-11-17 18:04 - 2016-07-29 18:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-11-17 17:51 - 2017-06-26 19:23 - 000390784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\Provisioning
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-11-17 17:26 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-11-17 17:11 - 2017-05-30 10:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-15 21:16 - 2017-05-30 10:19 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Mozilla
2017-11-15 19:46 - 2017-03-18 21:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-11-14 22:34 - 2017-05-30 14:31 - 000000000 ____D C:\Users\NBuci\AppData\Local\GHISLER
2017-11-14 22:30 - 2017-05-30 19:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-11-14 21:58 - 2017-10-10 21:03 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-11-14 21:58 - 2017-05-30 19:47 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-11-14 21:07 - 2017-06-26 19:55 - 000004506 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-11-14 21:07 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-11-14 21:07 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-11-13 21:46 - 2017-09-19 21:58 - 000000000 ____D C:\Hudba
2017-11-13 20:40 - 2017-06-26 19:35 - 000310722 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-11-13 20:36 - 2017-08-08 18:45 - 000000000 ____D C:\WINDOWS\system32\DAX3
2017-11-13 20:36 - 2017-06-26 19:34 - 000000000 ____D C:\WINDOWS\system32\DAX2
2017-11-13 20:35 - 2017-06-26 19:34 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-11-12 19:36 - 2017-05-30 14:32 - 000000000 ____D C:\Škola
2017-11-09 21:01 - 2017-08-11 19:17 - 000091216 _____ C:\Users\NBuci\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-09 16:35 - 2017-06-07 15:26 - 000000000 ____D C:\Users\NBuci\AppData\Local\WhatsApp
2017-11-09 16:34 - 2017-06-07 15:27 - 000002264 _____ C:\Users\NBuci\Desktop\WhatsApp.lnk
2017-11-09 16:34 - 2017-06-07 15:27 - 000000000 ____D C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2017-11-09 16:34 - 2017-06-07 15:26 - 000000000 ____D C:\Users\NBuci\AppData\Local\SquirrelTemp
2017-11-07 05:50 - 2017-07-15 06:22 - 000000000 ____D C:\Filmy
2017-11-07 04:00 - 2017-03-18 22:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-11-07 03:59 - 2017-01-06 09:30 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-05 02:40 - 2017-03-18 22:06 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-11-05 02:40 - 2017-03-18 22:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-03 20:27 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-11-03 20:01 - 2017-01-06 09:28 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-03 19:31 - 2017-08-22 20:28 - 000000000 ____D C:\Program Files (x86)\Smart File Advisor
2017-11-03 19:28 - 2017-06-12 22:54 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-11-03 13:06 - 2017-07-25 11:31 - 000003370 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-501279221-122349768-22643688-1001
2017-11-03 13:06 - 2017-05-27 20:40 - 000002390 _____ C:\Users\NBuci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== Files in the root of some directories =======

2017-07-11 14:21 - 2017-07-12 12:51 - 000085504 _____ () C:\Users\NBuci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-11-17 21:28

==================== End of FRST.txt ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119666
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Lone wolf

#8 Příspěvek od Rudy »

OK, dočistíme to a pak se uvidí. Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [runhosts] => C:\Users\NBuci\AppData\Roaming\server\runhosts.exe [4533248 2017-11-01] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {60b7fee3-d3e7-11e6-83d4-806e6f6e6963} - "E:\Launcher.exe"
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {70d92191-5d03-11e7-a936-54ee75c11626} - "G:\HiSuiteDownLoader.exe"
C:\Users\NBuci\AppData\Roaming\server
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-501279221-122349768-22643688-1001 -> DefaultScope {C975260D-3A97-496C-9C59-CEC6832AFE74} URL =
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
C:\Program Files (x86)\Microsoft\BingBar
C:\Users\NBuci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
nbuci
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 17 lis 2017 19:49

Re: Lone wolf

#9 Příspěvek od nbuci »

Fix result of Farbar Recovery Scan Tool (x64) Version: 22-11-2017
Ran by NBuci (22-11-2017 20:31:10) Run:1
Running from C:\Users\NBuci\Desktop
Loaded Profiles: NBuci (Available Profiles: defaultuser0 & NBuci)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\Run: [runhosts] => C:\Users\NBuci\AppData\Roaming\server\runhosts.exe [4533248 2017-11-01] ()
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {60b7fee3-d3e7-11e6-83d4-806e6f6e6963} - "E:\Launcher.exe"
HKU\S-1-5-21-501279221-122349768-22643688-1001\...\MountPoints2: {70d92191-5d03-11e7-a936-54ee75c11626} - "G:\HiSuiteDownLoader.exe"
C:\Users\NBuci\AppData\Roaming\server
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-501279221-122349768-22643688-1001 -> DefaultScope {C975260D-3A97-496C-9C59-CEC6832AFE74} URL =
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
C:\Program Files (x86)\Microsoft\BingBar
C:\Users\NBuci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Windows\CurrentVersion\Run\\runhosts => value removed successfully
HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{60b7fee3-d3e7-11e6-83d4-806e6f6e6963} => key removed successfully
HKLM\Software\Classes\CLSID\{60b7fee3-d3e7-11e6-83d4-806e6f6e6963} => key not found.
HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70d92191-5d03-11e7-a936-54ee75c11626} => key removed successfully
HKLM\Software\Classes\CLSID\{70d92191-5d03-11e7-a936-54ee75c11626} => key not found.

"C:\Users\NBuci\AppData\Roaming\server" folder move:

Could not move "C:\Users\NBuci\AppData\Roaming\server" => Scheduled to move on reboot.

HKU\S-1-5-21-501279221-122349768-22643688-1001\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value removed successfully
HKU\S-1-5-21-501279221-122349768-22643688-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} => value removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} => key removed successfully
C:\Program Files (x86)\Microsoft\BingBar => moved successfully
C:\Users\NBuci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 43604052 B
Java, Flash, Steam htmlcache => 252018732 B
Windows/system/drivers => 640326 B
Edge => 614238 B
Chrome => 0 B
Firefox => 336334589 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 908096 B
defaultuser0 => 7168 B
NBuci => 16793271 B

RecycleBin => 0 B
EmptyTemp: => 631 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 22-11-2017 20:34:13)

C:\Users\NBuci\AppData\Roaming\server => Is moved successfully

==== End of Fixlog 20:34:13 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119666
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Lone wolf

#10 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
nbuci
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 17 lis 2017 19:49

Re: Lone wolf

#11 Příspěvek od nbuci »

Neobjevila se ani ikona ani start aplikace. Budu to sledovat následující 3 dny a pokud se nic neobjeví můžete považovat za vyřešené.

Můžu vědět nějaké info o tom co to bylo a co to dělalo?

Mockrát vám děkuji, jste skuteční odborníci.

S pozdravem, Nemček Matěj.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119666
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Lone wolf

#12 Příspěvek od Rudy »

Pravděpodobně toto: C:\Users\NBuci\AppData\Roaming\server\runhosts.exe a jeho registry klíč. Obojí bylo smazáno, je to troják. Ostatní byly víceméně zbytečnosti. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“