Otravné Captchas Cloudflare

[temari-nichan]

Dobrý den,
Potřebovala bych poradit. Týden mě zlobí na zahraničích stránkách Captchas Cloudflare ... předtím to 100% nedělalo. Dnes jsem zkusila tovární nastavení ntb, které problém nevyřešilo a tak proběhlo obnovení systému s formátováním disku a instalace z bitové kopie z výroby. Do prvního restartu se stálo, že je problém vyřešen.. po aktualizaci je opět zpátky. Jsem na domácí wifi - k ní je připojen i mobilní telefon a ten se zahraničními servery nemá problém. V ntb je nainstalovaný chrome, mozila, adobe reader a eset (původní McAfee šel do koše) + aktualiazce win. Nevím zda je to problém ntb a nějaké odolné havěti v něm nebo je problém někde jinde ale chtěla bych mít jistotu že v ntb nic není Děkuji. Posílám log z FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.11.2018
Ran by Petra (administrator) on DESKTOP-ITS2SO7 (19-11-2018 21:40:34)
Running from C:\Users\Petra\Desktop
Loaded Profiles: Petra (Available Profiles: Petra)
Platform: Windows 10 Home Version 1703 15063.540 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki120165.inf_amd64_3b2006f0a82a4c14\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki120165.inf_amd64_3b2006f0a82a4c14\IntelCpHDCPSvc.exe
(Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki120165.inf_amd64_3b2006f0a82a4c14\IntelCpHeciSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki120165.inf_amd64_3b2006f0a82a4c14\igfxEM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(DELL) C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.15063.1111_none_b9580e706f668ab0\TiWorker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235464 2017-05-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1494024 2017-05-08] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => c:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [975744 2017-05-01] (Waves Audio Ltd.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [7824848 2016-07-20] (Dell Inc.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [177928 2018-10-12] (ESET)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.154.81.1 10.152.16.116
Tcpip\..\Interfaces\{f8d7289f-768b-4d56-ace9-ed6a4817d222}: [DhcpNameServer] 10.154.81.1 10.152.16.116

Internet Explorer:
==================
HKU\S-1-5-21-1370091651-2623390066-2915323599-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE
HKU\S-1-5-21-1370091651-2623390066-2915323599-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-10-13] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-10-13] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-10-13] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-10-13] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-10-13] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-10-13] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: bfeaxe8s.default
FF ProfilePath: C:\Users\Petra\AppData\Roaming\Mozilla\Firefox\Profiles\bfeaxe8s.default [2018-11-19]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-10-13] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-11-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-11-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/"
CHR Profile: C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default [2018-11-19]
CHR Extension: (Prezentace) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-11-19]
CHR Extension: (Dokumenty) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-11-19]
CHR Extension: (Disk Google) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-19]
CHR Extension: (YouTube) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-19]
CHR Extension: (Adblock Plus) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-11-19]
CHR Extension: (Aliexpress SuperStar) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciclollkolafellcaolgccmfjldgpolo [2018-11-19]
CHR Extension: (Video Downloader professional) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2018-11-19]
CHR Extension: (Tabulky) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-11-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-19]
CHR Extension: (Arcane Legends) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmlkgieigeddcedpbijnpojheoddido [2018-11-19]
CHR Extension: (VratnePenize.cz Připomínáček) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiekfaemafmplemocgimeccahephhdgf [2018-11-19]
CHR Extension: (Rozšíření Google Keep pro Chrome) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2018-11-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-19]
CHR Extension: (Gmail) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-19]
CHR Extension: (Chrome Media Router) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-19]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699912 2017-01-31] (Microsoft Corporation)
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [122400 2017-08-23] (Dell)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2302152 2018-10-12] (ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2302152 2018-10-12] (ESET)
R2 esifsvc; C:\Windows\system32\Intel\DPTF\esif_uf.exe [2208888 2016-09-02] (Intel Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17976 2016-09-20] (Intel Corporation)
R2 ibtsiva; C:\Windows\system32\ibtsiva.exe [183568 2016-10-06] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-05] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265864 2018-03-19] ()
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64184 2017-08-01] (CloudBees, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [333320 2017-05-08] (Realtek Semiconductor)
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [1909448 2017-08-01] (Rivet Networks)
R2 WavesSysSvc; c:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [592776 2017-05-01] (Waves Audio Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-10-13] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3848328 2018-03-19] (Intel® Corporation)
S2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [X]
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [71232 2016-08-13] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [66624 2016-08-13] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [143448 2018-10-09] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [107896 2018-10-09] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15872 2018-08-27] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [188832 2018-08-27] (ESET)
S2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50144 2018-08-27] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [82304 2018-08-27] (ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [109864 2018-08-27] (ESET)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [350272 2016-08-13] (Intel Corporation)
R3 HidEventFilter; C:\Windows\System32\drivers\HidEventFilter.sys [54800 2016-08-16] (Intel Corporation)
S3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [89912 2016-08-30] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [249104 2016-10-06] (Intel Corporation)
R3 Netwtw04; C:\Windows\System32\drivers\Netwtw04.sys [8623128 2018-04-04] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_2c7c773e20d8bcfa\nvlddmkm.sys [17538080 2018-06-12] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-05-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48064 2017-05-04] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-05-04] (NVIDIA Corporation)
R2 RfeCoSvc; C:\Windows\system32\DRIVERS\RfeCo10X64.sys [125672 2017-08-01] (Rivet Networks, LLC.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [946696 2016-10-19] (Realtek )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [418784 2016-08-05] (Realsil Semiconductor Corporation)
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
S3 mfesapsn; \??\C:\Program Files\McAfee\WebAdvisor\mfesapsn.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-19 21:40 - 2018-11-19 21:40 - 000018899 _____ C:\Users\Petra\Desktop\FRST.txt
2018-11-19 21:40 - 2018-11-19 21:40 - 000000000 ____D C:\FRST
2018-11-19 21:39 - 2018-11-19 21:40 - 002416128 _____ (Farbar) C:\Users\Petra\Desktop\FRST64.exe
2018-11-19 21:29 - 2018-11-19 21:29 - 015490560 _____ C:\Users\Petra\Downloads\SupportAssistx64.msi
2018-11-19 21:28 - 2018-11-19 21:28 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-11-19 21:28 - 2018-11-19 21:28 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-11-19 21:28 - 2018-11-19 21:28 - 000000000 ____D C:\Users\Petra\AppData\LocalLow\Adobe
2018-11-19 21:28 - 2018-11-19 21:28 - 000000000 ____D C:\Program Files (x86)\Adobe
2018-11-19 21:27 - 2018-11-19 21:27 - 000000000 ____D C:\ProgramData\Adobe
2018-11-19 21:26 - 2018-11-19 21:28 - 000000000 ____D C:\Users\Petra\AppData\Local\Adobe
2018-11-19 21:23 - 2018-11-19 21:29 - 000000000 ____D C:\Users\Petra\Documents\Programy
2018-11-19 21:22 - 2018-11-19 21:23 - 000000000 ____D C:\Users\Petra\AppData\LocalLow\Mozilla
2018-11-19 21:22 - 2018-11-19 21:22 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-11-19 21:22 - 2018-11-19 21:22 - 000000000 ____D C:\Users\Petra\AppData\Roaming\Mozilla
2018-11-19 21:22 - 2018-11-19 21:22 - 000000000 ____D C:\Users\Petra\AppData\Local\Mozilla
2018-11-19 21:22 - 2018-11-19 21:22 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-11-19 21:22 - 2018-11-19 21:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-11-19 21:10 - 2018-11-19 21:10 - 000000000 ____D C:\Users\Petra\AppData\Local\ESET
2018-11-19 21:10 - 2018-11-19 21:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2018-11-19 21:10 - 2018-11-19 21:10 - 000000000 ____D C:\ProgramData\ESET
2018-11-19 21:10 - 2018-11-19 21:10 - 000000000 ____D C:\Program Files\ESET
2018-11-19 21:06 - 2018-11-19 21:06 - 000000000 ____D C:\Program Files\rempl
2018-11-19 21:06 - 2018-11-19 21:06 - 000000000 ____D C:\Program Files\Common Files\Intel
2018-11-19 21:05 - 2018-06-27 12:10 - 000131288 _____ (Microsoft Corporation) C:\Windows\system32\osrss.dll
2018-11-19 21:04 - 2018-03-16 08:47 - 000138312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-11-19 21:03 - 2018-11-19 21:03 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2018-11-19 21:03 - 2018-11-19 21:03 - 000000000 ____D C:\Users\Petra\AppData\Local\DBG
2018-11-19 21:01 - 2018-11-19 21:02 - 000000000 ____D C:\Windows\system32\MRT
2018-11-19 21:01 - 2018-11-19 21:01 - 137810048 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-11-19 20:54 - 2018-11-19 20:59 - 000000000 ____D C:\Users\Petra\Documents\Fotografie
2018-11-19 20:54 - 2018-11-19 20:54 - 000000000 ____D C:\Users\Petra\Downloads\Státnice zima
2018-11-19 20:53 - 2018-11-19 20:54 - 000000000 ____D C:\Users\Petra\Downloads\Správko henych 9.vydání
2018-11-19 20:53 - 2018-11-07 09:24 - 069183008 _____ C:\Users\Petra\Downloads\Státnice.zip
2018-11-19 20:52 - 2018-11-19 20:56 - 000000000 ____D C:\Users\Petra\Documents\Vysoká škola
2018-11-19 20:37 - 2018-05-03 08:16 - 000278960 _____ (Microsoft Corporation) C:\Windows\system32\Notifier.exe
2018-11-19 20:28 - 2018-11-19 20:28 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2018-11-19 20:28 - 2018-07-18 00:55 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2018-11-19 20:28 - 2018-07-18 00:53 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2018-11-19 20:28 - 2018-07-18 00:53 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2018-11-19 20:28 - 2018-07-18 00:52 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2018-11-19 20:28 - 2018-07-18 00:47 - 002449920 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-11-19 20:28 - 2018-07-18 00:47 - 000408064 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2018-11-19 20:28 - 2018-07-13 05:19 - 000986624 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-11-19 20:28 - 2018-07-13 05:08 - 000788480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-11-19 20:28 - 2018-06-12 02:20 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2018-11-19 20:28 - 2018-06-08 06:34 - 000416768 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2018-11-19 20:28 - 2018-06-08 06:33 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2018-11-19 20:28 - 2018-06-08 06:32 - 001078272 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2018-11-19 20:28 - 2018-06-08 06:31 - 000383488 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2018-11-19 20:28 - 2018-06-08 06:30 - 000693248 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2018-11-19 20:28 - 2018-06-08 06:29 - 001307136 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2018-11-19 20:28 - 2018-06-08 06:25 - 001161728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2018-11-19 20:28 - 2018-06-08 06:20 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2018-11-19 20:28 - 2018-06-08 06:17 - 000337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2018-11-19 20:28 - 2018-03-05 02:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-11-19 20:28 - 2018-03-05 02:56 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-11-19 20:28 - 2018-03-05 02:55 - 000207872 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2018-11-19 20:28 - 2018-03-05 02:53 - 000740352 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2018-11-19 20:28 - 2018-03-02 07:43 - 000807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2018-11-19 20:28 - 2018-02-12 23:58 - 000026464 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-11-19 20:28 - 2018-02-12 23:17 - 000029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-11-19 20:28 - 2018-02-12 23:10 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2018-11-19 20:28 - 2018-02-10 05:35 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2018-11-19 20:28 - 2018-01-01 02:41 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2018-11-19 20:28 - 2018-01-01 02:40 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2018-11-19 20:28 - 2018-01-01 02:35 - 000060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2018-11-19 20:28 - 2017-11-02 05:34 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-11-19 20:28 - 2017-11-02 05:27 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-11-19 20:27 - 2018-02-18 12:53 - 001568672 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-11-19 20:27 - 2018-02-18 12:53 - 000138144 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-11-19 20:27 - 2018-02-18 12:47 - 000389536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-11-19 20:27 - 2018-02-18 12:46 - 000749472 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-11-19 20:27 - 2018-02-18 12:46 - 000609184 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-11-19 20:27 - 2018-02-18 12:45 - 000664480 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-11-19 20:27 - 2018-02-18 12:45 - 000461720 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2018-11-19 20:27 - 2018-02-18 12:44 - 000273312 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-11-19 20:27 - 2018-02-18 12:36 - 000528288 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-11-19 20:27 - 2018-02-18 12:24 - 000213400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2018-11-19 20:27 - 2018-02-10 06:49 - 000070040 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2018-11-19 20:27 - 2018-02-10 06:47 - 000270744 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-11-19 20:27 - 2018-02-10 06:41 - 002003352 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-11-19 20:27 - 2018-02-10 06:40 - 000035224 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2018-11-19 20:27 - 2018-01-01 02:23 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2018-11-19 20:27 - 2018-01-01 02:23 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2018-11-19 20:20 - 2018-11-19 20:20 - 000000000 ____D C:\Users\Petra\AppData\Roaming\Google
2018-11-19 20:19 - 2018-11-19 20:19 - 000002379 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-19 20:19 - 2018-11-19 20:19 - 000002338 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-19 20:18 - 2018-11-19 21:18 - 000000000 ____D C:\Users\Petra\AppData\Local\Google
2018-11-19 20:18 - 2018-11-19 20:19 - 000000000 ____D C:\Program Files (x86)\Google
2018-11-19 20:18 - 2018-11-19 20:18 - 000003472 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-11-19 20:18 - 2018-11-19 20:18 - 000003348 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-11-19 20:18 - 2018-11-19 20:18 - 000000000 ____D C:\Users\Petra\AppData\Local\Dell
2018-11-19 20:18 - 2018-11-19 20:18 - 000000000 ____D C:\Users\Petra\AppData\Local\Comms
2018-11-19 20:14 - 2018-11-19 20:14 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1370091651-2623390066-2915323599-1001
2018-11-19 20:14 - 2018-11-19 20:14 - 000000000 ____D C:\Users\Petra\AppData\Local\OneDrive
2018-11-19 20:13 - 2018-11-19 20:13 - 000000000 ____D C:\Users\Petra\AppData\Roaming\Macromedia
2018-11-19 20:13 - 2018-11-19 20:13 - 000000000 ____D C:\Users\Petra\AppData\Roaming\Intel Corporation
2018-11-19 20:13 - 2018-11-19 20:13 - 000000000 ____D C:\Users\Petra\AppData\Local\CEF
2018-11-19 20:12 - 2018-11-19 20:14 - 000002393 _____ C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-11-19 20:12 - 2018-11-19 20:14 - 000000000 ___RD C:\Users\Petra\OneDrive
2018-11-19 20:12 - 2018-11-19 20:13 - 000000000 ____D C:\Users\Petra\AppData\Local\NVIDIA Corporation
2018-11-19 20:11 - 2018-11-19 20:11 - 000000000 ____D C:\Users\Petra\AppData\Local\MicrosoftEdge
2018-11-19 20:10 - 2018-11-19 21:37 - 000000000 ____D C:\Users\Petra\AppData\Local\Packages
2018-11-19 20:10 - 2018-11-19 21:28 - 000000000 ____D C:\Users\Petra\AppData\Roaming\Adobe
2018-11-19 20:10 - 2018-11-19 21:08 - 000000000 __SHD C:\Users\Petra\IntelGraphicsProfiles
2018-11-19 20:10 - 2018-11-19 20:10 - 000000000 ____D C:\Users\Petra\AppData\Roaming\Intel
2018-11-19 20:10 - 2018-11-19 20:10 - 000000000 ____D C:\Users\Petra\AppData\Local\VirtualStore
2018-11-19 20:10 - 2018-11-19 20:10 - 000000000 ____D C:\Users\Petra\AppData\Local\Publishers
2018-11-19 20:10 - 2018-11-19 20:10 - 000000000 ____D C:\Users\Petra\AppData\Local\ConnectedDevicesPlatform
2018-11-19 20:09 - 2018-11-19 21:18 - 000000000 ____D C:\Users\Petra
2018-11-19 20:09 - 2018-11-19 20:09 - 000000020 ___SH C:\Users\Petra\ntuser.ini
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Šablony
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Soubory cookie
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Poslední
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Okolní tiskárny
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Okolní síť
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Nabídka Start
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Dokumenty
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Documents\Obrázky
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Documents\Hudba
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Documents\Filmy
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\Data aplikací
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 _SHDL C:\Users\Petra\AppData\Local\Data aplikací
2018-11-19 20:09 - 2018-11-19 20:09 - 000000000 ____D C:\Users\Petra\AppData\Local\TileDataLayer
2018-11-19 19:58 - 2018-11-19 20:01 - 000000000 ____D C:\tmp
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Šablony
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Poslední
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Okolní síť
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Dokumenty
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\Data aplikací
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default User\Documents\Obrázky
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default User\Documents\Hudba
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default User\Documents\Filmy
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\ProgramData\Šablony
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\ProgramData\Plocha
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\ProgramData\Dokumenty
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\ProgramData\Data aplikací
2018-11-19 19:07 - 2018-11-19 19:07 - 000000000 _SHDL C:\Documents and Settings

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-19 21:40 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-19 21:40 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\AppReadiness
2018-11-19 21:38 - 2017-03-18 21:51 - 000000000 ____D C:\Windows\CbsTemp
2018-11-19 21:32 - 2017-03-18 22:01 - 000000000 ____D C:\Windows\INF
2018-11-19 21:15 - 2017-10-13 11:26 - 002050160 _____ C:\Windows\system32\PerfStringBackup.INI
2018-11-19 21:15 - 2017-04-05 16:36 - 000890170 _____ C:\Windows\system32\perfh005.dat
2018-11-19 21:15 - 2017-04-05 16:36 - 000191600 _____ C:\Windows\system32\perfc005.dat
2018-11-19 21:10 - 2017-03-18 22:03 - 000000000 ___HD C:\Windows\ELAMBKUP
2018-11-19 21:08 - 2017-10-13 11:29 - 000000000 ____D C:\ProgramData\NVIDIA
2018-11-19 21:08 - 2017-10-13 11:29 - 000000000 ____D C:\ProgramData\McAfee
2018-11-19 21:08 - 2017-10-13 11:29 - 000000000 ____D C:\Program Files\mcafee
2018-11-19 21:08 - 2017-10-13 11:29 - 000000000 ____D C:\Program Files\Common Files\mcafee
2018-11-19 21:08 - 2017-10-13 11:21 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-11-19 21:08 - 2017-10-13 11:20 - 000383704 _____ C:\Windows\system32\FNTCACHE.DAT
2018-11-19 21:07 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\system32\appraiser
2018-11-19 21:07 - 2017-03-18 12:40 - 000524288 _____ C:\Windows\system32\config\BBI
2018-11-19 21:06 - 2017-10-13 11:25 - 000000000 ____D C:\ProgramData\Intel
2018-11-19 21:06 - 2017-10-13 11:25 - 000000000 ____D C:\Program Files (x86)\Intel
2018-11-19 21:06 - 2017-10-13 11:25 - 000000000 ____D C:\Intel
2018-11-19 21:06 - 2017-10-13 11:24 - 000000000 ____D C:\ProgramData\Package Cache
2018-11-19 21:05 - 2017-10-13 11:24 - 000000000 ____D C:\Program Files\Intel
2018-11-19 21:04 - 2017-10-13 11:29 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-11-19 21:04 - 2017-10-13 11:29 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-11-19 21:04 - 2017-10-13 11:27 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-11-19 21:04 - 2017-10-13 11:27 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-11-19 20:18 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2018-11-19 20:10 - 2017-10-13 11:31 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-11-19 19:07 - 2017-10-13 11:41 - 000002246 _____ C:\Windows\System32\Tasks\SmartByte Telemetry
2018-11-19 19:07 - 2017-10-13 11:29 - 000003398 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000003176 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000002984 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000002968 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000002956 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000002838 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000002786 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:29 - 000002744 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-11-19 19:07 - 2017-10-13 11:25 - 000003118 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification
2018-11-19 19:07 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Windows NT

Some files in TEMP:
====================
2017-05-31 02:21 - 2017-05-31 02:21 - 000243240 _____ (McAfee, Inc.) C:\Users\Petra\AppData\Local\Temp\McCSPInstall.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-10-13 11:20

==================== End of FRST.txt ============================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15.11.2018
Ran by Petra (19-11-2018 21:41:07)
Running from C:\Users\Petra\Desktop
Windows 10 Home Version 1703 15063.540 (X64) (2018-11-19 18:07:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1370091651-2623390066-2915323599-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1370091651-2623390066-2915323599-503 - Limited - Disabled)
Guest (S-1-5-21-1370091651-2623390066-2915323599-501 - Limited - Disabled)
Petra (S-1-5-21-1370091651-2623390066-2915323599-1001 - Administrator - Enabled) => C:\Users\Petra

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.008.20071 - Adobe Systems Incorporated)
Aktualizace NVIDIA 25.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 25.0.0.0 - NVIDIA Corporation) Hidden
Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{8c595286-0f9e-42de-a0d4-969aba282637}) (Version: 20.50.0 - Intel Corporation)
Dell SupportAssist Remediation (HKLM\...\{EEB1E6AD-5E5E-46C0-B60C-BF208CE755A3}) (Version: 3.1.1.3834 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32\...\{61737d36-07ae-47a4-a2f5-3f2979f77e50}) (Version: 3.1.1.3834 - Dell Inc.)
Dell Update - SupportAssist Update Plugin (HKLM\...\{C7EE237C-1350-409E-8681-993C74E48757}) (Version: 3.1.1.3834 - Dell Inc.)
ESET Security (HKLM\...\{30AAEA0C-2993-4ED6-8ABC-48499DA53D87}) (Version: 12.0.27.0 - ESET, spol. s r.o.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.110 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11000.2996 - Intel Corporation)
Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 1.1.0.317 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1035 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4574 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{BB0C4AC6-0E52-4956-8245-4C715E85FF09}) (Version: 19.11.1639.0649 - Intel Corporation)
Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9177.0 - Waves Audio Ltd.) Hidden
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.7571.2122 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1370091651-2623390066-2915323599-1001\...\OneDriveSetup.exe) (Version: 18.192.0920.0015 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 63.0.3 (x64 cs) (HKLM\...\Mozilla Firefox 63.0.3 (x64 cs)) (Version: 63.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0.3 - Mozilla)
NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 391.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.25 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 391.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.25 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.10.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.7571.2122 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.7571.2122 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.7571.2122 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.7571.2122 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 391.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 391.25 - NVIDIA Corporation) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.17.018 - Dell Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 10.11.923.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8142 - Realtek Semiconductor Corp.)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0370 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
SmartByte Drivers and Services (HKLM\...\{5EEAAB90-D722-48E9-ABF4-877B82A085CA}) (Version: 1.1.502 - Název společnosti:)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}) (Version: 2.51.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-10-12] (ESET)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-10-12] (ESET)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\System32\DriverStore\FileRepository\ki120165.inf_amd64_3b2006f0a82a4c14\igfxDTCM.dll [2017-01-10] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-03-16] (NVIDIA Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-10-12] (ESET)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05F2F0DC-8AA3-40D6-8D70-F8AC6F849F08} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-05-04] (NVIDIA Corporation)
Task: {13257E1E-7423-4FFF-868B-AB634CCC3B39} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-04] (NVIDIA Corporation)
Task: {31C2AFE1-BB21-464C-B1D5-DBCCD45436C9} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [2017-08-01] (DELL)
Task: {33C99EDD-FA44-4487-B187-BFDE465D7938} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel(R) Corporation)
Task: {3A91873A-0D07-4D86-BDB0-7FA3529FCB34} - System32\Tasks\McAfee\McAfee Idle Detection Task
Task: {4AEFF579-BEB5-4F07-9C14-B08B754D0186} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-01-31] (Microsoft Corporation)
Task: {4B74CB7F-CD0C-4A9F-ABF2-1B1525B8A731} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-11-19] (Google Inc.)
Task: {59A97CF6-E57D-4AEA-B82E-ACD6F8FA131B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-04] (NVIDIA Corporation)
Task: {6625402B-794C-4E08-A2A8-BAB4A9403A0D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-04] (NVIDIA Corporation)
Task: {7998EC53-412E-4AA1-BCFC-BA2DE71CBCC7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-05-04] (NVIDIA Corporation)
Task: {856C253B-6F56-4FBA-A9FD-DBA1D152BD64} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {90D39C74-BE6B-4F1E-A525-0721DEF5D84D} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-04] (NVIDIA Corporation)
Task: {B0BD499D-D953-439A-91F1-A6A7759714D6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-01-31] (Microsoft Corporation)
Task: {DA354A98-F7A8-4581-8720-0BA230215BCB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-11-19] (Google Inc.)
Task: {DC889409-8024-4DAE-8941-F16001372571} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-05-04] (NVIDIA Corporation)
Task: {F5C44629-62F1-4450-BBDA-D410E13E70DF} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-04] (NVIDIA Corporation)
Task: {FA2AEB71-3E1D-4A57-941F-0AF6F24ED709} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 21:59 - 2017-03-19 03:32 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-18 21:58 - 2017-03-18 21:58 - 000047616 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUITelemetry.dll
2017-10-13 21:16 - 2017-10-13 21:16 - 002331136 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIViewModels.dll
2017-10-13 21:16 - 2017-10-13 21:16 - 002836480 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIDataModel.dll
2018-11-19 20:19 - 2018-11-16 06:43 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.110\libglesv2.dll
2018-11-19 20:19 - 2018-11-16 06:43 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.110\libegl.dll
2018-11-19 21:37 - 2018-11-19 21:38 - 000070144 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll
2018-11-19 21:37 - 2018-11-19 21:38 - 000194048 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2018-11-19 21:38 - 2018-11-19 21:39 - 000494080 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_3.37.23004.0_x64__8wekyb3d8bbwe\MessagingNativeStubExternal.dll
2018-11-19 21:38 - 2018-11-19 21:39 - 004542976 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_3.37.23004.0_x64__8wekyb3d8bbwe\MessagingNativeCore.dll
2018-11-19 21:38 - 2018-11-19 21:39 - 000792064 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_3.37.23004.0_x64__8wekyb3d8bbwe\MessagingEntityExtractionProxy.dll
2018-11-19 21:38 - 2018-11-19 21:39 - 002354176 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_3.37.23004.0_x64__8wekyb3d8bbwe\MessagingNativeBase.dll
2016-10-05 20:17 - 2016-10-05 20:17 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 22:03 - 2017-03-18 22:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1370091651-2623390066-2915323599-1001\Control Panel\Desktop\\Wallpaper -> D:\Petra\Obrázky\ws_Windows_7_-_21_1920x1200.jpg
DNS Servers: 10.154.81.1 - 10.152.16.116
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{57375567-AE9A-403B-8C1C-C725EA16368E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{247DFDFD-E8F9-41CD-B0E1-BD6F0FE9E662}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{6153EA97-472F-4B2B-B129-F3082C5AA5DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{B46B991D-142A-4E31-AD8D-3DE207BD7E86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A973686D-3565-4BB3-9C02-81704C2380AE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{EEFD5BD9-7C0C-41FF-933A-18AD0DEBB239}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{7D456641-7AF7-4582-871A-9162E1AE8D0D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{CE716776-BD2F-436C-9815-1D2DEC7A10A9}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{17C8E3C1-F23B-4B96-B46F-E593C8E9C897}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0DB42273-62BA-4E26-A050-2C7E2739BB9B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/19/2018 09:30:02 PM) (Source: MsiInstaller) (EventID: 1013) (User: DESKTOP-ITS2SO7)
Description: Product: Dell SupportAssist -- Installer User Interface mode not supported.

Error: (11/19/2018 09:28:45 PM) (Source: Dell SupportAssist Remediation Service) (EventID: 0) (User: )
Description: Službu nelze spustit. Proces služby se nemohl připojit k síťovému řadiči

Error: (11/19/2018 09:03:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program mcuihost.exe verze 16.1.160.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 3540

Čas spuštění: 01d480427b158b53

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\mcafee\msc\mcuihost.exe

ID hlášení: 27c50160-3249-40fe-89dd-06579dcedeb7

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:

Error: (11/19/2018 08:37:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: svchost.exe, verze: 10.0.15063.0, časové razítko: 0x02799ef5
Název chybujícího modulu: ntdll.dll, verze: 10.0.15063.447, časové razítko: 0xa329d3a8
Kód výjimky: 0xc0000409
Posun chyby: 0x00000000000aa020
ID chybujícího procesu: 0x21d0
Čas spuštění chybující aplikace: 0x01d48032c680d053
Cesta k chybující aplikaci: c:\windows\system32\svchost.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 44ca0fbb-a7e1-465f-a59a-df70c8776cce
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/19/2018 07:07:47 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80072EE7
Argument příkazového řádku:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=8db63db6-4f8f-46d6-a448-66444faaaa72;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (11/19/2018 07:07:47 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Získání licence koncového uživatele se nezdařilo. hr=0x80072EE7
ID SKU=8db63db6-4f8f-46d6-a448-66444faaaa72

Error: (11/19/2018 07:07:47 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Podrobnosti chyby získávání licence
hr=0x80072EE7

Error: (10/13/2017 11:52:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ZeroConfigService.exe, verze: 19.60.0.0, časové razítko: 0x58d16fa6
Název chybujícího modulu: ZeroConfigService.exe, verze: 19.60.0.0, časové razítko: 0x58d16fa6
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000022af80
ID chybujícího procesu: 0xebc
Čas spuštění chybující aplikace: 0x01d3441029aa837a
Cesta k chybující aplikaci: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
Cesta k chybujícímu modulu: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
ID zprávy: ed1a0533-f60d-4c63-aab6-2e0a5194fad8
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (11/19/2018 09:34:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (11/19/2018 09:11:12 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-ITS2SO7)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
a APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
uživateli DESKTOP-ITS2SO7\Petra (SID: S-1-5-21-1370091651-2623390066-2915323599-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy – SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/19/2018 09:10:39 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba ESET Service je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/19/2018 09:08:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba McAfee WebAdvisor neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (11/19/2018 09:08:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CldFlt neuspěla při spuštění v důsledku následující chyby:
Požadavek není podporován.

Error: (11/19/2018 09:05:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba McAfee Firewall Core Service závisí na službě McAfee Validation Trust Protection Service, která neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (11/19/2018 09:05:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba McAfee Validation Trust Protection Service neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (11/19/2018 09:04:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba McAfee WebAdvisor byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1 milisekund: Restartovat službu.


Windows Defender:
===================================
Date: 2018-11-19 21:16:02.990
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Virus:DOS/EICAR_Test_File
ID: 2147519003
Závažnost: Vážné
Kategorie: Vir
Cesta: file:_C:\Users\Petra\Downloads\Nepotvrzeno 32326.crdownload
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-ITS2SO7\Petra
Název procesu: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Verze podpisu: AV: 1.237.0.0, AS: 1.237.0.0, NIS: 116.1.0.0
Verze modulu: AM: 1.1.13504.0, NIS: 2.1.12706.0

Date: 2018-11-19 21:17:11.801
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Windows Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Systém kontroly sítě
Kód chyby: 0x80070006
Popis chyby: Neplatný popisovač.
Důvod: Ovladač filtru byl úspěšně restartován.

Date: 2018-11-19 21:17:11.783
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Windows Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Systém kontroly sítě
Kód chyby: 0x80070006
Popis chyby: Neplatný popisovač.
Důvod: Neočekávaně bylo zrušeno zavedení ovladače filtru.

Date: 2018-11-19 21:17:11.783
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Windows Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Monitorování chování
Kód chyby: 0x80070006
Popis chyby: Neplatný popisovač.
Důvod: Neočekávaně bylo zrušeno zavedení ovladače filtru.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz
Percentage of memory in use: 51%
Total physical RAM: 8058.27 MB
Available physical RAM: 3868.45 MB
Total Virtual: 9978.27 MB
Available Virtual: 5559.68 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:104.55 GB) (Free:48.84 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.39 GB) (Free:920.64 GB) NTFS

\\?\Volume{dd012ea4-cac5-4e35-8854-1e5e617a890b}\ (WINRETOOLS) (Fixed) (Total:0.78 GB) (Free:0.37 GB) NTFS
\\?\Volume{e50e0e23-a493-4a55-aaf9-811db060303e}\ (Image) (Fixed) (Total:12.18 GB) (Free:0.16 GB) NTFS
\\?\Volume{a305bde1-e5e6-4644-bbef-50af8c2195d6}\ (DELLSUPPORT) (Fixed) (Total:1.11 GB) (Free:0.48 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: BC1A7ACC)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: BC1A474D)

Partition: GPT.

==================== End of Addition.txt ============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[temari-nichan]

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-11-19.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-20-2018
# Duration: 00:00:01
# OS: Windows 10 Home
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1250 octets] - [20/11/2018 07:20:47]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[Rudy]

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Petra\AppData\Local\Temp
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {4B74CB7F-CD0C-4A9F-ABF2-1B1525B8A731} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-11-19] (Google Inc.)
Task: {DA354A98-F7A8-4581-8720-0BA230215BCB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-11-19] (Google Inc.)
Task: {FA2AEB71-3E1D-4A57-941F-0AF6F24ED709} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte. V PC jsou zbytka po antiviru Mcafee. Odstraňte je pomocí tohoto nástroje: https://www.antivirovecentrum.cz/navody ... cafee.aspx .

[temari-nichan]

Na McAfee se pracuje

Fix result of Farbar Recovery Scan Tool (x64) Version: 15.11.2018
Ran by Petra (20-11-2018 10:33:56) Run:1
Running from C:\Users\Petra\Desktop
Loaded Profiles: Petra (Available Profiles: Petra)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Petra\AppData\Local\Temp
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {4B74CB7F-CD0C-4A9F-ABF2-1B1525B8A731} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-11-19] (Google Inc.)
Task: {DA354A98-F7A8-4581-8720-0BA230215BCB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-11-19] (Google Inc.)
Task: {FA2AEB71-3E1D-4A57-941F-0AF6F24ED709} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent

EmptyTemp:
End
*****************

Processes closed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Users\Petra\AppData\Local\Temp => moved successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B74CB7F-CD0C-4A9F-ABF2-1B1525B8A731}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B74CB7F-CD0C-4A9F-ABF2-1B1525B8A731}" => removed successfully
"C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DA354A98-F7A8-4581-8720-0BA230215BCB}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA354A98-F7A8-4581-8720-0BA230215BCB}" => removed successfully
"C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FA2AEB71-3E1D-4A57-941F-0AF6F24ED709}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FA2AEB71-3E1D-4A57-941F-0AF6F24ED709}" => removed successfully
C:\Windows\System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfee\McAfee Auto Maintenance Task Agent" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 6578176 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 90607223 B
Java, Flash, Steam htmlcache => 29601261 B
Windows/system/drivers => 166668595 B
Edge => 56557817 B
Chrome => 286324368 B
Firefox => 13433559 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 6003135 B
systemprofile32 => 128 B
LocalService => 13876 B
NetworkService => 1604 B
Petra => 4302712 B

RecycleBin => 0 B
EmptyTemp: => 629.5 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 10:34:13 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[temari-nichan]

Bohužel nepomohlo tak to asi nebude problém ntb.

[Rudy]

Captcha se běžně používá na ověření toho, kdo k dané stránce přistupuje. Nejsem si tak zcela jistý, že je to virový problém, pravděpodobně nebude. Když si třeba ověřuji IP na whois.com, vyhodí mito captcha také.

[temari-nichan]

No zrovna na té stránce ji nemám ale http://unilad.co.uk/ zde třeba ano a asi před týdnem tam nebyla, do toho se mi začala svévolně vypínat wifi i když jsem věděla že jede (na jiném zařízení šla) ale eset samozřejmě nic nenašel no a bylo mi doporučeno to teda dát do továrního nastavení a pak i zformátovat disk a nahrát znova z bitove kopie z výroby... wifi neblbne což je fajn ale tohle zůstalo tak mi to přišlo divné a radši napsala jsem at se na to podívá někdo zkušený.. abych třeba za týden zase nemusela vše mazat.

Děkuji za pomoc a snad to časem zmizí samo

[Rudy]

Ještě můžete pro jistotu udělat kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dát log (předem nic nemažte). Myslím ale, že tam nic není. Na http://unilad.co.uk/ se mi captcha neobjeví. Nejsem tam ale přihlášen. Normálně ba se captcha měla objevit vždy, pokud promažete cookies (server vás pak neidentifikuje). Stálo by za to prověřit, zda nemáte v prohlížeči nastaveno automatické mazaání cookies po zavření.