VIRY.CZ

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27 810736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-15 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-06-27 488176]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27 688880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-15 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-06-27 444656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27 810736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27 688880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10 13671640]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2015-06-27 164080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-02-26 134784]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BacKGround Agent"=C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2014-09-23 62208]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-07 6111312]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-02-26 134784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-21 16:33:09 ----HD---- C:\$SysReset
2015-11-21 12:14:11 ----D---- C:\ProgramData\Malwarebytes
2015-11-21 12:12:56 ----D---- C:\Program Files\CCleaner
2015-11-21 10:27:25 ----D---- C:\Program Files (x86)\HD Tune
2015-11-21 09:29:19 ----D---- C:\AdwCleaner
2015-11-21 00:04:38 ----D---- C:\rsit
2015-11-21 00:04:38 ----D---- C:\Program Files\trend micro
2015-11-19 15:47:33 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft Games
2015-11-19 15:23:21 ----D---- C:\Program Files (x86)\GameSpy Arcade
2015-11-19 15:23:18 ----RA---- C:\Windows\SYSWOW64\drivers\SECDRV.SYS
2015-11-19 15:22:01 ----D---- C:\Program Files (x86)\Microsoft Games
2015-11-19 13:36:46 ----D---- C:\Program Files (x86)\Microsoft Works
2015-11-19 13:36:17 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2015-11-19 13:35:47 ----D---- C:\Windows\PCHEALTH
2015-11-19 13:33:12 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-11-19 13:32:25 ----RHD---- C:\MSOCache
2015-11-19 09:30:03 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\Steam
2015-11-16 17:45:06 ----D---- C:\ProgramData\Blizzard Entertainment
2015-11-16 17:45:04 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\Battle.net
2015-11-16 17:44:07 ----D---- C:\Program Files (x86)\Battle.net
2015-11-16 17:42:49 ----D---- C:\ProgramData\Battle.net
2015-11-13 16:29:56 ----A---- C:\Windows\system32\drivers\tpm.sys
2015-11-13 16:29:41 ----A---- C:\Windows\SYSWOW64\untfs.dll
2015-11-13 16:29:41 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-11-13 16:29:41 ----A---- C:\Windows\system32\untfs.dll
2015-11-13 16:29:41 ----A---- C:\Windows\system32\gdi32.dll
2015-11-13 16:29:41 ----A---- C:\Windows\system32\drivers\tunnel.sys
2015-11-13 16:29:41 ----A---- C:\Windows\system32\AuthHost.exe
2015-11-13 15:19:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-13 15:19:31 ----A---- C:\Windows\SYSWOW64\ncryptsslp.dll
2015-11-13 15:19:31 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-13 15:19:31 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-11-13 15:19:31 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-13 15:19:31 ----A---- C:\Windows\system32\schannel.dll
2015-11-13 15:19:31 ----A---- C:\Windows\system32\ncryptsslp.dll
2015-11-13 15:19:31 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-13 15:19:31 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-13 15:19:31 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-13 15:19:31 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-13 15:19:31 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-13 15:19:31 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-13 15:19:31 ----A---- C:\Windows\system32\certcli.dll
2015-11-13 15:19:31 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-13 15:19:29 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-13 15:19:29 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-13 15:19:27 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2015-11-13 15:19:27 ----A---- C:\Windows\system32\nshwfp.dll
2015-11-13 15:19:27 ----A---- C:\Windows\system32\IKEEXT.DLL
2015-11-13 15:19:27 ----A---- C:\Windows\system32\drivers\wfplwfs.sys
2015-11-13 15:19:26 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2015-11-13 15:19:26 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2015-11-13 15:19:26 ----A---- C:\Windows\system32\BFE.DLL
2015-11-13 15:19:24 ----A---- C:\Windows\system32\kerberos.dll
2015-11-13 15:19:23 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-13 15:19:20 ----A---- C:\Windows\system32\win32k.sys
2015-11-13 15:19:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-13 15:19:16 ----A---- C:\Windows\system32\winresume.exe
2015-11-13 15:19:16 ----A---- C:\Windows\system32\winload.exe
2015-11-13 15:19:03 ----A---- C:\Windows\system32\wucltux.dll
2015-11-13 15:19:03 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-13 15:19:03 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-13 15:19:02 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-13 15:19:02 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-13 15:19:02 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-13 15:19:02 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-13 15:19:02 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-13 15:19:02 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-11-13 15:19:02 ----A---- C:\Windows\system32\wudriver.dll
2015-11-13 15:19:02 ----A---- C:\Windows\system32\wuapp.exe
2015-11-13 15:19:02 ----A---- C:\Windows\system32\wuapi.dll
2015-11-13 15:18:22 ----A---- C:\Windows\system32\localspl.dll
2015-11-13 15:18:21 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2015-11-13 15:18:21 ----A---- C:\Windows\system32\puiobj.dll
2015-11-13 15:18:11 ----A---- C:\Windows\system32\mshtml.dll
2015-11-13 15:18:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-13 15:18:07 ----A---- C:\Windows\system32\ieframe.dll
2015-11-13 15:18:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-13 15:18:04 ----A---- C:\Windows\system32\jscript9.dll
2015-11-13 15:18:03 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-13 15:18:03 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-13 15:18:03 ----A---- C:\Windows\system32\jscript.dll
2015-11-13 15:18:03 ----A---- C:\Windows\system32\iertutil.dll
2015-11-13 15:18:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-13 15:18:02 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-13 15:18:02 ----A---- C:\Windows\system32\wininet.dll
2015-11-13 15:18:02 ----A---- C:\Windows\system32\urlmon.dll
2015-11-13 15:18:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-13 15:18:01 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-13 15:18:01 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-13 15:18:01 ----A---- C:\Windows\system32\inetcomm.dll
2015-11-13 15:18:01 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-13 15:18:00 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-13 15:18:00 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-11-13 15:18:00 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-13 15:18:00 ----A---- C:\Windows\system32\vbscript.dll
2015-11-13 15:18:00 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-08 20:03:55 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-10-29 20:14:39 ----A---- C:\Windows\WiseHDInfo64.dll
2015-10-29 20:14:37 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\Wise Care 365
2015-10-29 20:14:29 ----D---- C:\Program Files (x86)\Wise
2015-10-26 19:20:28 ----A---- C:\Windows\system32\aspnet_counters.dll
2015-10-26 19:20:26 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll

======List of files/folders modified in the last 1 month======

2015-11-21 21:27:29 ----RD---- C:\Program Files
2015-11-21 21:26:58 ----RD---- C:\Program Files (x86)
2015-11-21 21:26:58 ----D---- C:\Windows\system32\drivers
2015-11-21 21:26:27 ----D---- C:\Windows\Temp
2015-11-21 21:25:06 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\TS3Client
2015-11-21 21:00:00 ----D---- C:\Windows\system32\sru
2015-11-21 17:36:48 ----RD---- C:\Windows\System32
2015-11-21 17:36:48 ----D---- C:\Windows\Inf
2015-11-21 17:36:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-21 17:31:41 ----D---- C:\Windows\SoftwareDistribution
2015-11-21 17:31:17 ----SHD---- C:\Windows\Installer
2015-11-21 17:31:16 ----D---- C:\ProgramData\Microsoft Help
2015-11-21 17:29:27 ----D---- C:\Program Files (x86)\Common Files
2015-11-21 17:28:40 ----D---- C:\Windows\SysWOW64
2015-11-21 17:27:22 ----A---- C:\Windows\win.ini
2015-11-21 17:27:15 ----RSD---- C:\Windows\assembly
2015-11-21 16:33:09 ----D---- C:\Windows\Logs
2015-11-21 13:40:21 ----D---- C:\Windows\Microsoft.NET
2015-11-21 12:14:11 ----HD---- C:\ProgramData
2015-11-21 12:12:58 ----D---- C:\Windows\system32\Tasks
2015-11-21 02:26:00 ----D---- C:\Windows\system32\config
2015-11-21 02:22:23 ----D---- C:\Windows\WinSxS
2015-11-21 02:18:41 ----SHD---- C:\System Volume Information
2015-11-21 00:22:59 ----D---- C:\Program Files (x86)\Steam
2015-11-21 00:00:28 ----D---- C:\Windows\system32\Recovery
2015-11-20 23:32:25 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\vlc
2015-11-20 18:31:36 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\uTorrent
2015-11-19 15:23:18 ----D---- C:\Windows\SYSWOW64\drivers
2015-11-19 13:36:30 ----D---- C:\Program Files (x86)\MSBuild
2015-11-19 13:36:25 ----D---- C:\Program Files (x86)\Microsoft Office
2015-11-19 13:36:14 ----D---- C:\Windows\ShellNew
2015-11-19 13:35:53 ----RSD---- C:\Windows\Fonts
2015-11-19 13:35:47 ----SD---- C:\ProgramData\Microsoft
2015-11-19 13:35:47 ----D---- C:\Windows
2015-11-19 13:35:47 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-11-19 13:34:28 ----D---- C:\Program Files\Common Files\microsoft shared
2015-11-19 13:33:17 ----D---- C:\Program Files\Microsoft Office
2015-11-19 13:21:04 ----SD---- C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft
2015-11-19 07:50:04 ----D---- C:\Windows\rescache
2015-11-19 04:30:33 ----D---- C:\Program Files (x86)\Opera
2015-11-17 13:27:17 ----D---- C:\Windows\Tasks
2015-11-16 21:09:46 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\Skype
2015-11-15 19:09:48 ----D---- C:\Windows\system32\DriverStore
2015-11-15 19:06:39 ----RD---- C:\Windows\ToastData
2015-11-15 19:06:38 ----D---- C:\Windows\apppatch
2015-11-14 16:17:09 ----D---- C:\Windows\AppReadiness
2015-11-14 06:00:37 ----D---- C:\Windows\CbsTemp
2015-11-14 05:57:59 ----D---- C:\Windows\system32\MRT
2015-11-14 05:54:55 ----A---- C:\Windows\system32\MRT.exe
2015-11-13 15:16:39 ----D---- C:\Windows\system32\catroot2
2015-11-08 20:49:33 ----D---- C:\Windows\debug
2015-11-08 19:00:56 ----D---- C:\Users\Tomáš Hadaščok\AppData\Roaming\ProfiCAD
2015-11-06 17:46:43 ----HD---- C:\Program Files\WindowsApps
2015-11-03 01:23:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-11-01 19:36:02 ----D---- C:\Windows\system32\catroot
2015-10-31 19:08:11 ----D---- C:\ProgramData\Skype
2015-10-30 16:58:40 ----D---- C:\Windows\Prefetch
2015-10-29 20:15:28 ----D---- C:\Windows\Panther
2015-10-29 20:15:27 ----SD---- C:\Windows\Downloaded Program Files
2015-10-28 22:28:25 ----SHD---- C:\$Recycle.Bin
2015-10-23 16:01:58 ----D---- C:\Windows\system32\drivers\UMDF
2015-10-23 16:01:58 ----D---- C:\Windows\system32\drivers\etc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-08-15 65224]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-08-15 274808]
R0 BTATH_BUS;@oem15.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\Windows\System32\drivers\btath_bus.sys [2014-02-26 35016]
R0 ngvss;ngvss; C:\Windows\system32\drivers\ngvss.sys [2015-08-15 115152]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-08-15 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-11-07 1059656]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-11-07 449992]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-08-15 28656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-08-15 90968]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-08-15 150672]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-08-15 273824]
R3 athr;@oem14.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athwbx.sys [2014-02-14 3888640]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-02-26 598216]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-03-07 3729920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-04-28 3949656]
R3 iwdbus;@oem4.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-03-01 27032]
R3 LMDriver;@oem21.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\Windows\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem10.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-12-10 100312]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2014-12-24 13036232]
R3 RadioShim;@oem21.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\Windows\System32\drivers\RadioShim.sys [2013-07-18 14680]
R3 RTL8168;@oem9.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-03-28 854744]
R3 RTSPER;@oem13.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2014-04-02 476888]
R3 SynRMIHID;@oem12.inf,%SynRMIHID.SVCDESC%;Synaptics HID Service; C:\Windows\system32\DRIVERS\SynRMIHID.sys [2014-07-10 42736]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2015-08-14 303616]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2015-08-14 35328]
S2 MLPTDR_Q;MLPTDR_Q; \??\C:\Windows\system32\ []
S3 AthBTPort;@oem18.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2014-02-26 89800]
S3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
S3 BTATH_A2DP;@oem17.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2014-02-26 355528]
S3 btath_avdt;@oem17.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2014-02-26 118984]
S3 BTATH_HCRP;@oem20.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\Windows\System32\drivers\btath_hcrp.sys [2014-02-26 179432]
S3 BTATH_LWFLT;@oem22.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2014-02-26 77464]
S3 BTATH_RCP;@oem24.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\Windows\System32\drivers\btath_rcp.sys [2014-02-26 137928]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-03-01 38296]
S3 IntcDAud;@oem1.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-03-07 450520]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [2014-02-26 319104]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-08-15 146600]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-03-21 282096]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-10 169432]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-12-31 455912]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-24 934032]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-08-15 4047768]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-07-22 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-10-17 458984]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-10-17 449768]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-07-15 234240]
S2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2014-09-23 3097856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-13 269000]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-03-21 279024]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-04-24 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-11-10 836176]
S3 Survarium-Steam Update Service;Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [2015-10-09 96856]

-----------------EOF-----------------

omlouvám se zase na 2 části, je toho moc

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-11-2015
Ran by Tomáš Hadaščok (administrator) on ACER (21-11-2015 21:38:04)
Running from C:\Users\Tomáš Hadaščok\Desktop
Loaded Profiles: Tomáš Hadaščok (Available Profiles: Tomáš Hadaščok)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Pokki) C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Pokki) C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Pokki) C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(Pokki) C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWMPRemoteCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.115\opera.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 2014-04-10] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [164080 2015-06-27] (IvoSoft)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-09-23] (Acer Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111312 2015-11-07] (AVAST Software)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] (Qualcomm®Atheros®)
HKU\S-1-5-21-288663317-922532562-1067544128-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [1769312 2015-07-27] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-15] (AVAST Software)
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll [2014-08-22] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll [2014-08-22] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll [2014-08-22] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll [2014-08-22] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{2E45274B-C201-4576-8A4A-8C159CC3D1AA}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{909766DD-30D8-4365-861B-E6BE1ECDDB46}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-288663317-922532562-1067544128-1001 -> DefaultScope {ED86519C-5F52-4323-A67F-A5BF6D50B1FC} URL =
SearchScopes: HKU\S-1-5-21-288663317-922532562-1067544128-1001 -> {ED86519C-5F52-4323-A67F-A5BF6D50B1FC} URL =
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-15] (AVAST Software)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-06-27] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-15] (AVAST Software)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-06-27] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

FireFox:
========
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-288663317-922532562-1067544128-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-08-12] ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-03] [not signed]

Chrome:
=======
CHR HomePage: Default -> hxxp://google.cz/
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-05]
CHR Extension: (Disk Google) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-28]
CHR Extension: (YouTube) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-17]
CHR Extension: (Adblock Plus) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-10-17]
CHR Extension: (Vyhledávání Google) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Avast SafePrice) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-01]
CHR Extension: (Tabulky Google) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-21]
CHR Extension: (Avast Online Security) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-09]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-05]
CHR Extension: (Gmail) - C:\Users\Tomáš Hadaščok\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-02]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-15]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-15]

Opera:
=======
OPR Session Restore: -> is enabled.
OPR Extension: (Adblock Plus) - C:\Users\Tomáš Hadaščok\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-09-24]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows (R) Win 7 DDK provider) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-15] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768 2015-08-15] (Avast Software)
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3097856 2014-09-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-31] (Acer Incorporate)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-10-17] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-10-17] (Acer Incorporate)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [96856 2015-10-09] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580144 2015-08-06] (WiseCleaner.com)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-15] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-07] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-15] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2015-08-14] () [File not signed]
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-26] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2015-08-14] () [File not signed]
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S2 MLPTDR_Q; \??\C:\Windows\SysWOW64\ [0 ] () <==== ATTENTION (zero byte File/Folder)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [115152 2015-08-15] (AVAST Software)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [476888 2014-04-02] (Realsil Semiconductor Corporation)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2003-04-19] () [File not signed]
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42736 2014-07-10] (Synaptics Incorporated)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-08-15] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14800 2015-10-29] (wisecleaner.com)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-21 21:38 - 2015-11-21 21:38 - 00023733 _____ C:\Users\Tomáš Hadaščok\Desktop\FRST.txt
2015-11-21 21:37 - 2015-11-21 21:38 - 00000000 ____D C:\FRST
2015-11-21 21:36 - 2015-11-21 21:36 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš Hadaščok\Desktop\FRSTLauncher.exe
2015-11-21 21:36 - 2015-11-21 21:36 - 00029696 _____ C:\Users\Tomáš Hadaščok\AppData\Local\MSGBOX.EXE
2015-11-21 21:36 - 2015-11-21 21:36 - 00015327 _____ C:\Users\Tomáš Hadaščok\Desktop\LM.bat
2015-11-21 21:32 - 2015-11-21 21:32 - 02345984 _____ (Farbar) C:\Users\Tomáš Hadaščok\Desktop\FRST64.exe
2015-11-21 21:28 - 2015-11-21 21:29 - 31017664 _____ (TeamSpeak Systems GmbH) C:\Users\Tomáš Hadaščok\Downloads\TeamSpeak3-Client-win64-3.0.18.2.exe
2015-11-21 21:23 - 2015-11-21 21:24 - 00000081 _____ C:\Users\Tomáš Hadaščok\Desktop\Nový textový dokument.txt
2015-11-21 16:33 - 2015-11-21 16:33 - 00000000 ___HD C:\$SysReset
2015-11-21 15:49 - 2015-11-21 15:49 - 00008356 _____ C:\Users\Tomáš Hadaščok\Desktop\MBAM scan.txt
2015-11-21 15:31 - 2015-11-21 15:31 - 00130194 _____ C:\Users\Tomáš Hadaščok\Desktop\CITE.jpeg
2015-11-21 12:35 - 2015-11-21 12:36 - 18865802 _____ C:\Users\Tomáš Hadaščok\Desktop\Low Poly Wallpapers (Desk & Phone) - Imgur.zip
2015-11-21 12:14 - 2015-11-21 12:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-21 12:13 - 2015-11-21 12:13 - 22908888 _____ (Malwarebytes ) C:\Users\Tomáš Hadaščok\Desktop\mbam-setup-2.2.0.1024.exe
2015-11-21 12:12 - 2015-11-21 17:33 - 00000876 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-11-21 12:12 - 2015-11-21 12:12 - 00002800 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-11-21 12:12 - 2015-11-21 12:12 - 00000000 ____D C:\Program Files\CCleaner
2015-11-21 10:27 - 2015-11-21 17:32 - 00000942 _____ C:\Users\Tomáš Hadaščok\Desktop\HD Tune.lnk
2015-11-21 10:27 - 2015-11-21 10:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2015-11-21 10:27 - 2015-11-21 10:27 - 00000000 ____D C:\Program Files (x86)\HD Tune
2015-11-21 10:26 - 2015-11-21 10:27 - 00642632 _____ (EFD Software ) C:\Users\Tomáš Hadaščok\Desktop\hdtune_255.exe
2015-11-21 09:35 - 2015-11-21 17:33 - 00002265 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Menu.lnk
2015-11-21 09:29 - 2015-11-21 09:30 - 00000000 ____D C:\AdwCleaner
2015-11-21 09:26 - 2015-11-21 09:26 - 01732096 _____ C:\Users\Tomáš Hadaščok\Desktop\adwcleaner_5.021.exe
2015-11-21 09:24 - 2015-11-21 09:24 - 01496172 _____ C:\Users\Tomáš Hadaščok\Desktop\CrystalDiskInfo5_0_0.zip
2015-11-21 00:04 - 2015-11-21 21:29 - 00000000 ____D C:\Program Files\trend micro
2015-11-21 00:04 - 2015-11-21 00:05 - 00000000 ____D C:\rsit
2015-11-21 00:04 - 2015-11-21 00:04 - 01222144 _____ C:\Users\Tomáš Hadaščok\Desktop\RSITx64.exe
2015-11-20 17:54 - 2015-11-21 19:46 - 00000000 ____D C:\Users\Tomáš Hadaščok\Desktop\WoW Cata
2015-11-20 16:21 - 2015-11-20 16:21 - 00001720 _____ C:\Users\Tomáš Hadaščok\Downloads\[Zazush-una] Trap for fox [English].zip.torrent
2015-11-20 16:20 - 2015-11-20 16:20 - 00014033 _____ C:\Users\Tomáš Hadaščok\Downloads\[StudioFOW] Coliseum of Lust Animated GIF Set.zip.torrent
2015-11-20 15:25 - 2015-11-20 18:33 - 1791969280 _____ C:\Users\Tomáš Hadaščok\Desktop\Vlk-z-Wall-Street-Cz-Dabing.avi
2015-11-19 15:48 - 2015-11-19 15:48 - 00003254 _____ C:\Windows\System32\Tasks\{94AE2776-CA90-46BD-AE66-E3CA5C4CA531}
2015-11-19 15:47 - 2015-11-19 15:47 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft Games
2015-11-19 15:23 - 2015-11-19 15:23 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameSpy Arcade
2015-11-19 15:23 - 2015-11-19 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2015-11-19 15:23 - 2015-11-19 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameSpy Arcade
2015-11-19 15:23 - 2015-11-19 15:23 - 00000000 ____D C:\Program Files (x86)\GameSpy Arcade
2015-11-19 15:23 - 2003-04-19 18:17 - 00011376 ____R C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2015-11-19 15:22 - 2015-11-19 15:22 - 00000000 ____D C:\Program Files (x86)\Microsoft Games
2015-11-19 13:38 - 2015-11-19 13:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-11-19 13:36 - 2015-11-21 02:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2015-11-19 13:36 - 2015-11-19 13:36 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2015-11-19 13:35 - 2015-11-19 13:35 - 00000000 ____D C:\Windows\PCHEALTH
2015-11-19 13:33 - 2015-11-19 13:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-11-19 13:32 - 2015-11-19 13:32 - 00000000 __RHD C:\MSOCache
2015-11-19 09:39 - 2015-11-19 09:39 - 00000000 ____D C:\Users\Tomáš Hadaščok\Desktop\Fallout4 2
2015-11-19 09:30 - 2015-11-20 18:35 - 00000000 ____D C:\Users\Tomáš Hadaščok\Documents\My Games
2015-11-19 09:30 - 2015-11-19 09:30 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Steam
2015-11-19 09:30 - 2015-11-19 09:30 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\Fallout4
2015-11-16 23:51 - 2015-11-16 23:51 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\Blizzard
2015-11-16 17:48 - 2015-11-16 17:48 - 02950200 _____ (Blizzard Entertainment) C:\Users\Tomáš Hadaščok\Downloads\Battle.net-Setup.exe
2015-11-16 17:45 - 2015-11-19 17:20 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\Battle.net
2015-11-16 17:45 - 2015-11-16 22:48 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Battle.net
2015-11-16 17:45 - 2015-11-16 17:45 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\Blizzard Entertainment
2015-11-16 17:45 - 2015-11-16 17:45 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-11-16 17:44 - 2015-11-21 17:33 - 00001154 _____ C:\Users\Public\Desktop\Battle.net.lnk
2015-11-16 17:44 - 2015-11-19 16:12 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-11-16 17:44 - 2015-11-16 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-11-16 17:42 - 2015-11-16 17:43 - 00000000 ____D C:\ProgramData\Battle.net
2015-11-14 11:07 - 2015-11-14 11:07 - 00000799 _____ C:\Users\Tomáš Hadaščok\Downloads\[kat.cr]anno.2205.crack.only.fixed.ali213.cpul.torrent
2015-11-13 16:29 - 2015-09-29 13:24 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2015-11-13 16:29 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2015-11-13 16:29 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2015-11-13 16:29 - 2015-08-20 21:45 - 01380048 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-11-13 16:29 - 2015-08-20 18:48 - 01096704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-11-13 16:29 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-11-13 16:29 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-11-13 15:19 - 2015-10-20 22:54 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-13 15:19 - 2015-10-20 15:53 - 03705856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-13 15:19 - 2015-10-20 15:36 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-13 15:19 - 2015-10-20 15:35 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-13 15:19 - 2015-10-20 15:34 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-11-13 15:19 - 2015-10-20 15:34 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-13 15:19 - 2015-10-20 15:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-13 15:19 - 2015-10-20 15:33 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-13 15:19 - 2015-10-20 15:14 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-11-13 15:19 - 2015-10-20 15:13 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-11-13 15:19 - 2015-10-20 15:13 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-11-13 15:19 - 2015-10-20 15:13 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-11-13 15:19 - 2015-10-17 15:19 - 04176384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-11-13 15:19 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-13 15:19 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-11-13 15:19 - 2015-10-15 00:02 - 07455064 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-13 15:19 - 2015-10-15 00:02 - 01659560 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-11-13 15:19 - 2015-10-15 00:02 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-11-13 15:19 - 2015-10-15 00:02 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-11-13 15:19 - 2015-10-15 00:02 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-11-13 15:19 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-11-13 15:19 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-11-13 15:19 - 2015-10-13 16:59 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-11-13 15:19 - 2015-10-13 16:59 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-11-13 15:19 - 2015-10-13 16:59 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-13 15:19 - 2015-10-13 16:59 - 00120376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-11-13 15:19 - 2015-10-13 16:59 - 00106952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2015-11-13 15:19 - 2015-10-13 16:59 - 00091416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2015-11-13 15:19 - 2015-10-11 07:36 - 00561952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-13 15:19 - 2015-10-11 07:36 - 00177496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-13 15:19 - 2015-10-10 19:40 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-11-13 15:19 - 2015-10-10 19:39 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-11-13 15:19 - 2015-10-10 19:07 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-11-13 15:19 - 2015-10-10 18:33 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-13 15:19 - 2015-10-10 18:27 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-13 15:19 - 2015-10-10 18:11 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-11-13 15:19 - 2015-10-10 17:45 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-11-13 15:19 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-11-13 15:19 - 2015-09-12 14:47 - 00414559 _____ C:\Windows\system32\ApnDatabase.xml
2015-11-13 15:19 - 2015-08-10 19:15 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2015-11-13 15:19 - 2015-08-10 19:06 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-11-13 15:19 - 2015-08-10 18:49 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-11-13 15:19 - 2015-08-10 17:56 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-11-13 15:19 - 2015-08-10 17:46 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-11-13 15:19 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2015-11-13 15:18 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-11-13 15:18 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-11-13 15:18 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-11-13 15:18 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-11-13 15:18 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-11-13 15:18 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-11-13 15:18 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-11-13 15:18 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-11-13 15:18 - 2015-10-30 23:39 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-11-13 15:18 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-11-13 15:18 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-11-13 15:18 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-11-13 15:18 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-11-13 15:18 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-11-13 15:18 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-11-13 15:18 - 2015-10-30 23:14 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-11-13 15:18 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-11-13 15:18 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-11-13 15:18 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-11-13 15:18 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-11-13 15:18 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-11-13 15:18 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-11-13 15:18 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-11-13 15:18 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-11-13 15:18 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-11-13 15:18 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-11-08 20:04 - 2015-11-21 18:23 - 01277091 _____ C:\Windows\WindowsUpdate.log
2015-11-08 20:04 - 2015-11-21 17:32 - 00005380 _____ C:\Windows\setupact.log
2015-11-08 20:04 - 2015-11-08 20:04 - 00000000 _____ C:\Windows\setuperr.log
2015-11-08 20:03 - 2015-11-21 17:31 - 00053380 _____ C:\Windows\PFRO.log
2015-11-08 20:03 - 2015-11-19 15:27 - 00494464 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-07 11:47 - 2015-11-21 13:43 - 00000000 ____D C:\Users\Tomáš Hadaščok\Desktop\Nová složka
2015-10-31 19:11 - 2015-11-21 09:34 - 00003324 _____ C:\Windows\System32\Tasks\SweetLabs App Platform
2015-10-29 20:16 - 2015-11-21 20:44 - 00000456 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2015-10-29 20:16 - 2015-10-29 20:16 - 00003122 _____ C:\Windows\System32\Tasks\Wise Turbo Checker
2015-10-29 20:14 - 2015-11-21 17:33 - 00002068 _____ C:\Users\Public\Desktop\Wise Care 365.lnk
2015-10-29 20:14 - 2015-11-21 17:33 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Wise Care 365
2015-10-29 20:14 - 2015-10-29 20:14 - 00014800 _____ (wisecleaner.com) C:\Windows\WiseHDInfo64.dll
2015-10-29 20:14 - 2015-10-29 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365
2015-10-29 20:14 - 2015-10-29 20:14 - 00000000 ____D C:\Program Files (x86)\Wise
2015-10-29 19:53 - 2015-10-29 19:53 - 06762072 _____ (Piriform Ltd) C:\Users\Tomáš Hadaščok\Downloads\ccsetup511.exe
2015-10-29 19:52 - 2015-10-29 19:52 - 06256440 _____ (WiseCleaner.com ) C:\Users\Tomáš Hadaščok\Downloads\WiseCare365.exe
2015-10-26 23:08 - 2015-10-26 23:08 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\Anno Online
2015-10-26 20:50 - 2015-11-18 00:19 - 00000000 ____D C:\Users\Tomáš Hadaščok\Desktop\Junk
2015-10-26 19:20 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2015-10-26 19:20 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2015-10-23 16:01 - 2015-10-28 17:08 - 00000496 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-10-23 04:44 - 2015-10-23 04:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-21 21:35 - 2015-08-14 10:16 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-21 21:32 - 2015-08-14 02:45 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-288663317-922532562-1067544128-1001
2015-11-21 21:26 - 2015-08-14 02:50 - 00003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{752FBD46-4D21-4DF6-B786-848FD546B286}
2015-11-21 21:26 - 2015-08-13 10:55 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\ClassicShell
2015-11-21 21:25 - 2015-08-13 15:40 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\TS3Client
2015-11-21 21:15 - 2015-08-14 10:16 - 00000958 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-11-21 21:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\sru
2015-11-21 17:36 - 2015-02-10 05:24 - 00739924 _____ C:\Windows\system32\perfh005.dat
2015-11-21 17:36 - 2015-02-10 05:24 - 00151610 _____ C:\Windows\system32\perfc005.dat
2015-11-21 17:36 - 2014-03-18 11:03 - 01745984 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-21 17:34 - 2015-08-14 02:40 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform
2015-11-21 17:33 - 2015-10-13 19:14 - 00001426 _____ C:\Users\Public\Desktop\Micro-Cap 11 Evaluation.lnk
2015-11-21 17:33 - 2015-09-21 15:06 - 00000808 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Stažené soubory.lnk
2015-11-21 17:33 - 2015-09-20 18:49 - 00001017 _____ C:\Users\Public\Desktop\ProfiCAD.lnk
2015-11-21 17:33 - 2015-09-09 23:15 - 00000819 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wow.lnk
2015-11-21 17:33 - 2015-09-06 17:47 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-21 17:33 - 2015-08-26 22:43 - 00000645 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Coronus.lnk
2015-11-21 17:33 - 2015-08-15 10:30 - 00001980 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-11-21 17:33 - 2015-08-14 18:13 - 00000973 _____ C:\Users\Public\Desktop\Steam.lnk
2015-11-21 17:33 - 2015-08-14 10:25 - 00001963 _____ C:\Users\Public\Desktop\abDocs.lnk
2015-11-21 17:33 - 2015-08-14 10:24 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-21 17:33 - 2015-08-14 10:24 - 00002065 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-11-21 17:33 - 2015-08-14 03:00 - 00002741 _____ C:\Users\Public\Desktop\Skype.lnk
2015-11-21 17:33 - 2015-08-14 02:52 - 00001008 _____ C:\Users\Public\Desktop\IrfanView.lnk
2015-11-21 17:33 - 2015-08-14 02:50 - 00001205 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 6 FREE.lnk
2015-11-21 17:33 - 2015-08-14 02:49 - 00001080 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-11-21 17:33 - 2015-08-14 02:42 - 00002345 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2015-11-21 17:33 - 2015-08-14 02:40 - 00001426 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-11-21 17:33 - 2015-08-14 02:40 - 00001276 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Správce zvuku HD.lnk
2015-11-21 17:33 - 2015-08-14 02:40 - 00000469 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-11-21 17:33 - 2015-08-14 02:40 - 00000467 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-11-21 17:33 - 2015-08-13 15:29 - 00001121 _____ C:\Users\Public\Desktop\Opera.lnk
2015-11-21 17:33 - 2015-08-13 15:29 - 00001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-11-21 17:33 - 2015-02-10 06:54 - 00001939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-11-21 17:33 - 2015-01-13 07:39 - 00002486 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk
2015-11-21 17:32 - 2015-08-14 21:32 - 00001221 _____ C:\Users\Tomáš Hadaščok\Desktop\Uplay.lnk
2015-11-21 17:32 - 2015-08-13 10:55 - 00002246 _____ C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk
2015-11-21 17:32 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-21 17:31 - 2015-08-21 10:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-21 17:31 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-11-21 17:27 - 2013-08-22 14:25 - 00000199 _____ C:\Windows\win.ini
2015-11-21 17:25 - 2015-08-13 15:40 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2015-11-21 08:07 - 2015-08-13 12:51 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\CrashDumps
2015-11-21 00:22 - 2015-08-14 18:13 - 00000000 ____D C:\Program Files (x86)\Steam
2015-11-21 00:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Recovery
2015-11-20 23:32 - 2015-08-14 02:49 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\vlc
2015-11-20 19:48 - 2015-08-18 16:32 - 00000000 ____D C:\Users\Tomáš Hadaščok\Documents\Survarium-Steam
2015-11-20 18:31 - 2015-08-13 15:40 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\uTorrent
2015-11-20 17:17 - 2015-10-19 18:20 - 00005632 _____ C:\Users\Tomáš Hadaščok\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-19 13:36 - 2015-02-10 06:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-11-19 13:36 - 2015-01-13 06:52 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-19 13:36 - 2014-03-18 10:45 - 00000000 ____D C:\Windows\ShellNew
2015-11-19 13:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-19 13:33 - 2015-10-18 13:58 - 00000000 ____D C:\Program Files\Microsoft Office
2015-11-19 10:28 - 2015-08-14 02:40 - 00000000 ____D C:\Users\Tomáš Hadaščok
2015-11-19 07:50 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2015-11-19 04:30 - 2015-08-13 15:29 - 00003822 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1439476152
2015-11-19 04:30 - 2015-08-13 15:28 - 00000000 ____D C:\Program Files (x86)\Opera
2015-11-18 00:21 - 2015-08-13 16:02 - 00000000 ____D C:\Users\Tomáš Hadaščok\Desktop\Coronus
2015-11-16 21:09 - 2015-08-14 03:00 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\Skype
2015-11-16 16:38 - 2015-08-15 10:30 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-11-15 19:06 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2015-11-14 16:17 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2015-11-14 06:00 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2015-11-14 05:57 - 2015-08-17 11:51 - 00000000 ____D C:\Windows\system32\MRT
2015-11-14 05:54 - 2015-08-17 11:51 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-13 15:35 - 2015-08-14 10:16 - 00003932 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-11-13 15:35 - 2015-08-14 10:16 - 00003802 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-08 19:23 - 2015-09-20 18:49 - 00000000 ____D C:\Users\Public\Documents\ProfiCAD Library
2015-11-08 19:00 - 2015-09-20 18:49 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Roaming\ProfiCAD
2015-11-07 14:22 - 2015-08-15 10:30 - 01059656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-11-07 14:22 - 2015-08-15 10:30 - 00449992 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-11-03 01:23 - 2015-08-18 03:07 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-03 01:23 - 2015-08-18 03:07 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-31 19:21 - 2015-08-14 10:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-31 19:08 - 2015-08-14 03:00 - 00000000 ____D C:\ProgramData\Skype
2015-10-29 20:15 - 2015-01-13 06:50 - 00000000 ____D C:\Windows\Panther
2015-10-29 19:37 - 2015-08-21 10:10 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\Microsoft Help
2015-10-23 21:01 - 2015-10-04 23:09 - 00000000 ____D C:\Users\Tomáš Hadaščok\Desktop\Music - Protaction

==================== Files in the root of some directories =======

2015-10-19 18:20 - 2015-11-20 17:17 - 0005632 _____ () C:\Users\Tomáš Hadaščok\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-21 21:36 - 2015-11-21 21:36 - 0029696 _____ () C:\Users\Tomáš Hadaščok\AppData\Local\MSGBOX.EXE
2015-02-10 06:46 - 2015-02-10 06:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-09-01 20:51 - 2015-09-02 22:12 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Some files in TEMP:
====================
C:\Users\Tomáš Hadaščok\AppData\Local\Temp\comver.dll
C:\Users\Tomáš Hadaščok\AppData\Local\Temp\EBU4F87.EXE
C:\Users\Tomáš Hadaščok\AppData\Local\Temp\oct8D48.tmp.exe
C:\Users\Tomáš Hadaščok\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-11-13 17:55

==================== End of FRST.txt ============================

Napiste mi velikost adresare plochy (C:\Users\Tomáš Hadaščok\Plocha)

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKU\S-1-5-21-288663317-922532562-1067544128-1001 -> DefaultScope {ED86519C-5F52-4323-A67F-A5BF6D50B1FC} URL =
SearchScopes: HKU\S-1-5-21-288663317-922532562-1067544128-1001 -> {ED86519C-5F52-4323-A67F-A5BF6D50B1FC} URL =

S2 MLPTDR_Q; \??\C:\Windows\SysWOW64\ [0 ] () <==== ATTENTION (zero byte File/Folder)
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]

2015-11-21 12:14 - 2015-11-21 12:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-21 12:13 - 2015-11-21 12:13 - 22908888 _____ (Malwarebytes ) C:\Users\Tomáš Hadaščok\Desktop\mbam-setup-2.2.0.1024.exe
2015-10-31 19:11 - 2015-11-21 09:34 - 00003324 _____ C:\Windows\System32\Tasks\SweetLabs App Platform
2015-11-21 17:34 - 2015-08-14 02:40 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_245_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe

Hosts:
EmptyTemp:
Reboot:
End

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

Velikost Plochy je 96,2GB

Fix result of Farbar Recovery Scan Tool (x64) Version:20-11-2015
Ran by Tomáš Hadaščok (2015-11-22 08:24:15) Run:1
Running from C:\Users\Tomáš Hadaščok\Desktop
Loaded Profiles: Tomáš Hadaščok (Available Profiles: Tomáš Hadaščok)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKU\S-1-5-21-288663317-922532562-1067544128-1001 -> DefaultScope {ED86519C-5F52-4323-A67F-A5BF6D50B1FC} URL =
SearchScopes: HKU\S-1-5-21-288663317-922532562-1067544128-1001 -> {ED86519C-5F52-4323-A67F-A5BF6D50B1FC} URL =

S2 MLPTDR_Q; \??\C:\Windows\SysWOW64\ [0 ] () <==== ATTENTION (zero byte File/Folder)
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]

2015-11-21 12:14 - 2015-11-21 12:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-21 12:13 - 2015-11-21 12:13 - 22908888 _____ (Malwarebytes ) C:\Users\Tomáš Hadaščok\Desktop\mbam-setup-2.2.0.1024.exe
2015-10-31 19:11 - 2015-11-21 09:34 - 00003324 _____ C:\Windows\System32\Tasks\SweetLabs App Platform
2015-11-21 17:34 - 2015-08-14 02:40 - 00000000 ____D C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_245_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value removed successfully
HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-288663317-922532562-1067544128-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKU\S-1-5-21-288663317-922532562-1067544128-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-288663317-922532562-1067544128-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ED86519C-5F52-4323-A67F-A5BF6D50B1FC}" => key removed successfully
HKCR\CLSID\{ED86519C-5F52-4323-A67F-A5BF6D50B1FC} => key not found.
MLPTDR_Q => service removed successfully
AdobeARMservice => service removed successfully
gupdate => service removed successfully
SkypeUpdate => service removed successfully
gupdatem => service removed successfully
C:\ProgramData\Malwarebytes => moved successfully
C:\Users\Tomáš Hadaščok\Desktop\mbam-setup-2.2.0.1024.exe => moved successfully
C:\Windows\System32\Tasks\SweetLabs App Platform => moved successfully
C:\Users\Tomáš Hadaščok\AppData\Local\SweetLabs App Platform => moved successfully
C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => moved successfully
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Windows\Tasks\Wise Turbo Checker.job => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 1.1 GB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 08:25:01 ====

Coronus píše:Velikost Plochy je 96,2GB

Velikost plochy by nemela presahovat 200 - 300 MB! Brzdi to chod pc. Cili ji trosku uklidte a na plochu dejte jen zastupce. Jen pozor na obcasnou chybu, ze uzivatele maji na plose slozku, v ni dalsi a v ni dalsi a do te to schovaji. To je sice hezke, ale plochu to nezmensi, jen je to v jinem supliku

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

vyosek píše: DelFix https://toolslib.net/downloads/finish/2/
Stahnete a spustte

Ponechte zatrzitkou pouze u volby Remove disinfection tools

Kliknete na Run

Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak to s pc vypada.

CCleanerem vyčištěno, Delfixem taky, věci z plochy si pak přeházím jinam, nechám prvně defragmentovat. Měl sem tam Fragmentováno 7%, ale i tak jsem to spustil. Sice to píše zbývající čas 18h, ale věřím že to bude podstatně dříve

Pak si disky rozdělím a soubory z plochy přeházím na nový disk

OK, tak pak pisnete, jak to s pc vypada a popiste podrobneji pripadne potize

No rád bych se zeptal co přesně mám napsat a za jak dlouho případně, ať tady pak nezmatkuji

Na zacatku jste psal, ze mate nejake problemy

Prvně to byly věci jako když se mi programy samy shazovaly na plochu, ty přetrvávají do teď. Ovšem nyní už jso zde další, jako extrémně spomalené načítání windowsu a další věci.

Takze az dobehne defragmentace, zmensite tu plochu, restartujete znovu pc a vyzkousite, jak se chova, napisete, zda problemy pretvavaji a pokud ano, tak je trosku podrobneji popiste. K cemu presne dochazi, pri cem, jak casto, atd.

Bože, to zase perlím, na něco se zeptám a hned zapomenu

Každopádně systém defragmentován, disk rozdělen a plocha zredukována. Vše se chová stabilně, nic už se mi neshazuje na plochu a vše se zdá být i rychlejší. Děkuji tedy za pomoc a za čas, který jste mi věnoval

To jsem rad, ze je to v poradku

Nemate zac!

Pozor na ten disk, neni v poradku, tak ho obcas zkontrolujte, zda se to nezhorsuje (bud tady na foru, nebo i sam, zda neni vic cervenych policek). Idealni by samozrejme byla vymena. A zalohovat, zalohovat a zalohovat. Hlavne fotky.

Mejte se a treba zase nekdy

VIRY.CZ

Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy

Re: Stupňující se SW problémy