Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-04-2016
Ran by Zdenka (2016-04-18 21:24:20)
Running from C:\Users\Zdenka\Desktop
Windows 7 Professional Service Pack 1 (X64) (2011-09-12 17:18:43)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1435834558-3399890420-224863321-500 - Administrator - Disabled)
Guest (S-1-5-21-1435834558-3399890420-224863321-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1435834558-3399890420-224863321-1003 - Limited - Enabled)
Zdenka (S-1-5-21-1435834558-3399890420-224863321-1001 - Administrator - Enabled) => C:\Users\Zdenka
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Norton Internet Security (Disabled - Out of date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Out of date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Internet Security (Disabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Flash Player 21 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
ArcSoft TotalMedia (HKLM-x32\...\ArcSoft TotalMedia) (Version: 2.0.39.12 - ArcSoft)
ArcSoft TotalMedia (x32 Version: 1.0.48.25 - ArcSoft) Hidden
ArcSoft Webcam Sharing Manager (HKLM-x32\...\{190A7D93-3823-439C-91B9-ADCE3EC2A6A2}) (Version: 2.0.0.30 - ArcSoft)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.02.000.55 - Atheros Communications)
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.57.1051 - Webteh, d.o.o.)
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.18 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 6.0.0.9 - Hewlett-Packard Company)
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
Drive Encryption For HP ProtectTools (HKLM\...\{8A0041CD-277C-4C1F-BFE4-7AC508B20B4C}) (Version: 6.0.33.24411 - Hewlett-Packard Company)
Dropbox (HKU\S-1-5-21-1435834558-3399890420-224863321-1001\...\Dropbox) (Version: 3.18.1 - Dropbox, Inc.)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Face Recognition for HP ProtectTools (HKLM\...\{D3A775F2-2674-4452-8D80-1FC1446052EE}) (Version: 6.00.4303 - Hewlett-Packard Company)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
File Sanitizer For HP ProtectTools (HKLM-x32\...\{6D6ADF03-B257-4EA5-BBC1-1D145AF8D514}) (Version: 6.0.0.8 - Hewlett-Packard Company)
Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.75 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
HP 3D DriveGuard (HKLM\...\{83DA38AB-1014-41C2-A3CD-E2B93832A71A}) (Version: 4.1.4.1 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{4B21E4B2-89B8-499D-803A-34ABF929401E}) (Version: 4.1.10.1 - Hewlett-Packard Company)
HP DayStarter (HKLM\...\{483D5A49-A26B-4CB8-AA2D-0D1811322061}) (Version: 2.0.0.12 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{6A9C9BE1-14A3-42ED-A388-42E30A1412E9}) (Version: 1.2.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{CFC1988A-F492-4BC5-B6F7-683A95718AE9}) (Version: 1.1.11.1 - Hewlett-Packard Company)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.5 - WildTangent)
HP HD Webcam [Fixed] (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.3.4.07 - SunplusIT)
HP HotKey Support (HKLM\...\{7D1C63D1-6520-49DA-B738-958133526E80}) (Version: 4.0.10.1 - Hewlett-Packard Company)
HP Power Assistant (HKLM\...\{3D8EDF72-13CC-4E51-AAB6-32A20524D2E0}) (Version: 2.0.2.0 - Hewlett-Packard Company)
HP ProtectTools Security Manager (HKLM\...\HPProtectTools) (Version: 6.00.888 - Hewlett-Packard Company)
HP QuickWeb (HKLM-x32\...\{20976B1F-E910-404D-9261-C16EE7E12DC8}) (Version: 3.0.0.9057 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{03046EBB-CB7C-4B98-BEFB-690EB955DA22}) (Version: 8.5.4526.3645 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{344A1AA2-AC8E-4741-BDB0-65B68FDA883C}) (Version: 3.2.0.0 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{B7F60A16-7A7B-41FB-9AE3-DE9E324FBA06}) (Version: 4.0.112.1 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{531000B3-DBEE-4115-BBF3-DA48B67C053F}) (Version: 8.2.1.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E02FBF01-0DE3-4BCB-89E8-D300FEFC3289}) (Version: 5.2.3.4 - Hewlett-Packard Company)
HP System Default Settings (HKLM-x32\...\{54C65FE7-83BD-4A5B-A9B4-41F793C5F241}) (Version: 2.1.2 - Hewlett-Packard Company)
HP Wallpaper (HKLM-x32\...\{11C9A461-DD9D-4C71-85A4-6DCE7F99CC44}) (Version: 2.00 - Hewlett-Packard Company)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
ICBCChromeExtension (HKLM-x32\...\{3561742A-2478-4FAB-A44B-38A26E1FE14F}) (Version: 1.0.1.4 - ICBC) <==== ATTENTION
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6325.0 - IDT)
Intel(R) Identity Protection Technology 1.0.71.0 (HKLM-x32\...\{2C43790E-8470-1027-82D3-DF319F3C410F}) (Version: 1.0.71.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.57.2 - JMicron Technology Corp.)
Malwarebytes Anti-Malware verze 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM-x32\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
MKV Player 2.0 (HKLM-x32\...\MKV Player_is1) (Version: - vsevensoft.com)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Norton Internet Security (HKLM-x32\...\NIS) (Version: 18.7.2.3 - Symantec Corporation)
Opera Stable 36.0.2130.65 (HKLM-x32\...\Opera 36.0.2130.65) (Version: 36.0.2130.65 - Opera Software)
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.33 - PDF Complete, Inc)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.)
Privacy Manager for HP ProtectTools (HKLM\...\{ACA53F68-B003-4D0E-9C3D-0C4EE09D08A8}) (Version: 6.00.831 - Hewlett-Packard Company)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: - RealNetworks)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
SDK (x32 Version: 2.24.025 - Portrait Displays, Inc.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.11.1 - Synaptics Incorporated)
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: - )
Theft Recovery for HP ProtectTools (HKLM-x32\...\InstallShield_{ADC70B7A-530B-46E3-8384-48D22681A41E}) (Version: 6.0.0.30 - Hewlett-Packard Company)
Theft Recovery for HP ProtectTools (x32 Version: 6.0.0.30 - Hewlett-Packard Company) Hidden
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.56a - Ghisler Software GmbH)
Údržba Samsung ML-1660 Series (HKLM-x32\...\Samsung ML-1660 Series) (Version: - Samsung Electronics Co., Ltd.)
Validity Fingerprint Sensor Driver (HKLM\...\{FFC3E41D-2C2B-45B7-9AD9-5EA19572DD26}) (Version: 4.3.117.0 - Validity Sensors, Inc.)
VIP Access SDK x64(1.0.0.50) (HKLM-x32\...\VIP Access SDK) (Version: 1.0.0.50 - Symantec Inc.)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
World Cup Cricket 20-20 (x32 Version: 2.2.0.95 - WildTangent) Hidden
XMind 6 (v3.5.1) (HKLM-x32\...\XMind_is1) (Version: 3.5.1.201411201906 - XMind Ltd.)
Xobni (HKLM-x32\...\XobniMain) (Version: 1.9.5.13282 - Xobni Corp.)
Xobni Core (x32 Version: 1.0.0 - Xobni, Inc.) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Zdenka\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Zdenka\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1435834558-3399890420-224863321-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0F80A18F-9572-42E3-B272-837ABDEFB3E7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2016-04-12] (Microsoft)
Task: {136899AE-2706-405B-A16D-B8BBFD92EC3D} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1435834558-3399890420-224863321-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-01-30] (RealNetworks, Inc.)
Task: {1502997B-CCD1-4321-973C-D0EBCD4B71D1} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-08] (Symantec Corporation)
Task: {2102BEAA-6675-4C9F-8CC4-C74D4AF54BB4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-12-10] (Hewlett-Packard Company)
Task: {329979D7-6900-407F-8E91-14B90C296DED} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {412E9D77-B202-4B9D-A67B-B883A48D184E} - System32\Tasks\HPCeeScheduleForZdenka => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {5C6D2C7B-F668-4068-92FE-67AB0719EFBE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-12-10] (Hewlett-Packard Company)
Task: {5FFBED6A-BA96-4124-96E9-5D30AE6F8E56} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1435834558-3399890420-224863321-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-01-30] (RealNetworks, Inc.)
Task: {62ADE325-BACA-410A-92DB-B9C359884369} - System32\Tasks\Browser Updater Task(Core) => C:\Program Files (x86)\QQBrowser\Update\F279080C6EA158F5E52E6868A8CC77FC\Update\BrowserUpdate.exe [2016-04-08] (Tencent) <==== ATTENTION
Task: {7305D3CA-00BA-49CC-B3E5-978E9D11CC83} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-14] (Google Inc.)
Task: {78ED005D-BCF1-4008-B50F-B80B1A9E4443} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)
Task: {7EB63894-5248-4947-8A3A-09331AC31FB3} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe [2016-04-08] (Adobe Systems Incorporated)
Task: {7F0D6699-1833-47E1-8C2A-1752D4D30043} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-14] (Google Inc.)
Task: {7F2B03F9-1C01-4CE8-9500-0B276AAD3C07} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1435834558-3399890420-224863321-1001Core => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {9DCCBD29-B188-40D6-941A-AF9E353D604C} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08] (Adobe Systems Incorporated)
Task: {BC4AE030-7BA3-45FA-A88C-2BB9DD58D336} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1435834558-3399890420-224863321-1001UA => C:\Users\Zdenka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {BE8EB6B9-A6E3-46B0-BBED-7B4C61757B7D} - System32\Tasks\HPCeeScheduleForZDENKA-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {C3B03923-E7FB-465B-9846-71EC2A4F1F24} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-08] (Symantec Corporation)
Task: {C620CAF9-C4F9-4959-A6FA-7A9FDF7BD877} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1435834558-3399890420-224863321-1001UA => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {C764B549-E565-4627-AAD6-EBE7AC928999} - System32\Tasks\Opera scheduled Autoupdate 1432737268 => C:\Program Files (x86)\Opera\launcher.exe [2016-04-11] (Opera Software)
Task: {E4219423-A76B-4AFC-BA1A-80C0677A5B97} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2016-04-12] (Microsoft)
Task: {EBC4B0AE-79C9-4A01-B3DA-E52AEEF14B9E} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1435834558-3399890420-224863321-1001Core => C:\Users\Zdenka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {FAF1A6B7-1162-457C-9F90-66AE3D065814} - System32\Tasks\{CA38A947-594B-434F-BBC1-0E624362ADAA} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2015-10-14] (Skype Technologies S.A.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1435834558-3399890420-224863321-1001Core.job => C:\Users\Zdenka\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1435834558-3399890420-224863321-1001UA.job => C:\Users\Zdenka\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForZdenka.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2011-09-13 16:43 - 2009-08-10 09:08 - 00027648 _____ () C:\windows\System32\ssp7ml6.dll
2011-09-13 16:43 - 2009-12-15 10:26 - 00749568 _____ () C:\windows\system32\spool\DRIVERS\x64\3\ssp7mdu.dll
2011-01-31 20:54 - 2011-01-31 20:54 - 00107008 _____ () c:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2011-02-09 21:04 - 2011-02-09 21:04 - 02905600 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpFve64.dll
2010-09-06 22:18 - 2010-09-06 22:18 - 01412608 _____ () C:\windows\system32\LIBEAY32.dll
2011-02-09 20:27 - 2011-02-09 20:27 - 00141824 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface64.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-02-06 11:11 - 2011-05-28 23:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2011-03-26 05:28 - 2011-03-26 05:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-02-09 20:28 - 2011-02-09 20:28 - 01318912 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
2011-01-27 03:14 - 2011-01-27 03:14 - 00036408 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Remote.dll
2010-11-26 13:31 - 2010-11-26 13:31 - 00267128 _____ () C:\Program Files (x86)\HP HD Webcam [Fixed]\Monitor.exe
2011-09-13 16:42 - 2010-06-07 12:35 - 00618496 _____ () C:\Windows\Samsung\PanelMgr\SSMMgr.exe
2010-06-24 12:21 - 2010-06-24 12:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2011-09-13 16:42 - 2009-07-29 12:13 - 00306688 _____ () C:\Windows\Samsung\PanelMgr\caller64.exe
2011-01-27 03:13 - 2011-01-27 03:13 - 00080440 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HardwareAccess.dll
2011-01-27 03:13 - 2011-01-27 03:13 - 00047160 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\Graphs.dll
2011-05-12 02:07 - 2011-01-27 02:34 - 01083392 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll
2016-04-16 18:28 - 2016-03-21 23:50 - 00034768 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-04-16 18:27 - 2016-03-21 23:51 - 00019408 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2016-04-16 18:27 - 2016-03-21 23:50 - 00116688 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2016-04-16 18:28 - 2016-03-21 23:50 - 00093640 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2016-04-16 18:28 - 2016-03-21 23:50 - 00018376 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\select.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00019760 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00105928 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-04-16 18:27 - 2016-03-21 23:50 - 00392144 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2016-04-16 18:28 - 2016-04-08 20:20 - 00381752 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2016-04-16 18:28 - 2016-03-21 23:50 - 00692688 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00020816 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2016-04-16 18:28 - 2016-03-21 23:51 - 00112592 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 01682760 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00020808 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00021840 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00038696 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\fastpath.pyd
2016-04-16 18:27 - 2016-03-21 23:52 - 00020936 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00024528 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32event.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00114640 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32security.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00124880 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00021832 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00024016 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00175560 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32gui.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00030160 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00043472 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32process.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00028616 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32ts.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00048592 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00026456 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00057808 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00024016 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00117056 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00023376 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2016-04-16 18:28 - 2016-03-21 23:50 - 00134608 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2016-04-16 18:27 - 2016-03-21 23:50 - 00134088 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-04-16 18:27 - 2016-03-21 23:51 - 00240584 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00024392 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-04-16 18:27 - 2016-03-21 23:52 - 00036296 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\librsync.dll
2016-04-16 18:27 - 2016-04-08 20:19 - 00052024 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00020800 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00021824 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00019776 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00020800 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00020280 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2016-04-16 18:28 - 2016-03-21 23:52 - 00350152 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-04-16 18:28 - 2016-04-08 20:20 - 00022352 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-04-16 18:27 - 2016-04-08 20:19 - 00084280 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2016-04-16 18:27 - 2016-04-08 20:20 - 01826096 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2016-04-16 18:28 - 2016-03-21 23:51 - 00083912 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\sip.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 03928880 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 01971504 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00531248 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00132912 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00223544 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00207672 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00158008 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00042808 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2016-04-16 18:27 - 2016-03-21 23:54 - 00017864 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\libEGL.dll
2016-04-16 18:27 - 2016-03-21 23:54 - 01631184 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2016-04-16 18:28 - 2016-04-08 20:20 - 00024904 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00546096 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2016-04-16 18:27 - 2016-04-08 20:20 - 00357680 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2015-10-20 22:34 - 2016-03-21 23:56 - 00697304 _____ () C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2011-02-09 20:48 - 2011-02-09 20:48 - 02637824 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcEncryptionProviderPlugin.dll
2011-02-09 20:27 - 2011-02-09 20:27 - 00126976 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface.dll
2011-02-09 20:51 - 2011-02-09 20:51 - 02650112 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpDpHostPlugin.dll
2011-02-09 20:29 - 2011-02-09 20:29 - 02035712 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeCoreEncryptionPlugin.dll
2011-02-09 20:30 - 2011-02-09 20:30 - 01929216 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeProductDetectionPlugin.dll
2010-06-24 12:19 - 2010-06-24 12:19 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2014-08-14 21:33 - 2014-08-14 21:33 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1e70f9aada009e40c4f131cfdbe52126\IsdiInterop.ni.dll
2011-08-23 16:06 - 2011-01-13 03:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2016-04-14 16:51 - 2016-04-13 10:37 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.75\libglesv2.dll
2016-04-14 16:51 - 2016-04-13 10:36 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.75\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1435834558-3399890420-224863321-1001\...\mojebanka.cz -> hxxps://
www.mojebanka.cz
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2016-04-15 18:30 - 00000035 ____A C:\windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1435834558-3399890420-224863321-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Zdenka\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Zdenka\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: HPQuickWebProxy => "c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
MSCONFIG\startupreg: MfeEpePcMonitor => "C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe"
MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe
MSCONFIG\startupreg: TkBellExe => "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [{26BF4BD7-019E-4B1F-8E41-CAB70586A44A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{E8D16D2C-1296-483B-AAFD-4CD58A6DCB27}] => (Allow) LPort=2869
FirewallRules: [{915EDE72-61AA-4668-B29E-D43DBEEF312E}] => (Allow) LPort=1900
FirewallRules: [{F09D0B13-139F-4163-9662-DD458D7C44D9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A7A37516-8B3E-425E-9F93-3544B5A49EE7}] => (Allow) C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7AB5FA31-AFF9-46A5-9874-4CE8AB6B4B13}] => (Allow) C:\Users\Zdenka\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{AE346BCA-BC09-4BCE-BC8A-8DB22DA5C2B8}C:\users\zdenka\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\zdenka\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{FC2FEFDC-1D84-4077-9DB6-5FB3F1CDF1A6}C:\users\zdenka\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\zdenka\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{09EA4EA5-5AC2-4912-8DB9-B3247A904ED8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
28-03-2016 14:52:39 Naplánovaný kontrolní bod
03-04-2016 23:37:58 Nainstalováno FormApps Signing Extension.
13-04-2016 12:17:17 Naplánovaný kontrolní bod
14-04-2016 20:32:57 Windows Update
14-04-2016 20:39:24 Chrome Cleanup Tool
14-04-2016 20:48:06 Windows Defender Checkpoint
15-04-2016 17:58:26 Removed Java 8 Update 40
15-04-2016 18:04:50 Windows Update
15-04-2016 18:16:41 Removed Skype Click to Call
15-04-2016 18:30:31 Restore Point Created by FRST
17-04-2016 18:27:24 Restore Point Created by FRST
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/17/2016 09:37:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: desktop154.exe, verze: 1.0.0.10, časové razítko: 0x56e96567
Název chybujícího modulu: desktop154.exe, verze: 1.0.0.10, časové razítko: 0x56e96567
Kód výjimky: 0x40000015
Posun chyby: 0x00013cf7
ID chybujícího procesu: 0xa5c
Čas spuštění chybující aplikace: 0xdesktop154.exe0
Cesta k chybující aplikaci: desktop154.exe1
Cesta k chybujícímu modulu: desktop154.exe2
ID zprávy: desktop154.exe3
Error: (04/17/2016 06:27:24 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x80070005, Přístup byl odepřen.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.
Operace:
Shromažďování dat modulu pro zápis
Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {42659bc2-1f5f-4176-ade8-67358d54af73}
Error: (04/15/2016 09:38:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: desktop154.exe, verze: 1.0.0.10, časové razítko: 0x56e96567
Název chybujícího modulu: desktop154.exe, verze: 1.0.0.10, časové razítko: 0x56e96567
Kód výjimky: 0x40000015
Posun chyby: 0x00013cf7
ID chybujícího procesu: 0x808
Čas spuštění chybující aplikace: 0xdesktop154.exe0
Cesta k chybující aplikaci: desktop154.exe1
Cesta k chybujícímu modulu: desktop154.exe2
ID zprávy: desktop154.exe3
Error: (04/15/2016 05:23:06 PM) (Source: SideBySide) (EventID: 75) (User: )
Description: Selhalo generování kontextu aktivace pro: 1. Chyba v souboru manifestu nebo zásad 2 na řádku 3.
V manifestu není povoleno více prvků requestedPrivileges.
Error: (04/14/2016 10:54:38 PM) (Source: XobniService) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač
Error: (04/14/2016 10:47:50 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Index nebyl inicializován.
Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/14/2016 10:47:49 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Aplikace nebyla inicializována.
Kontext: aplikace Windows
Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/14/2016 10:47:49 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Objekt indexování nebyl inicializován.
Kontext: aplikace Windows, katalog SystemIndex
Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/14/2016 10:47:49 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Modul plug-in v <Search.TripoliIndexer> nebyl inicializován.
Kontext: aplikace Windows, katalog SystemIndex
Podrobnosti:
Prvek nebyl nalezen. (HRESULT : 0x80070490) (0x80070490)
Error: (04/14/2016 10:47:49 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Modul plug-in v <Search.JetPropStore> nebyl inicializován.
Kontext: aplikace Windows, katalog SystemIndex
Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (04/18/2016 09:18:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2
Error: (04/18/2016 09:18:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Norton Internet Security neuspěla při spuštění v důsledku následující chyby:
%%109
Error: (04/18/2016 09:11:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2
Error: (04/18/2016 07:02:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x800f081f): Windows Update Core.
Error: (04/18/2016 06:51:24 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Atheros Bt&Wlan Coex Agent bylo dosaženo časového limitu (30000 ms).
Error: (04/18/2016 01:34:28 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x800f081f): Windows Update Core.
Error: (04/18/2016 12:54:22 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby hpqwmiex bylo dosaženo časového limitu (30000 ms).
Error: (04/18/2016 08:33:22 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x800f081f): Windows Update Core.
Error: (04/18/2016 08:22:39 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby hpqwmiex bylo dosaženo časového limitu (30000 ms).
Error: (04/17/2016 09:37:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba DeskTop DispalyName byla neočekávaně ukončena. Tento stav nastal již 1krát.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Percentage of memory in use: 68%
Total physical RAM: 4030.37 MB
Available physical RAM: 1272.19 MB
Total Virtual: 8058.91 MB
Available Virtual: 5110.55 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:573.96 GB) (Free:340.83 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:16.92 GB) (Free:2.56 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:4.98 GB) (Free:2.13 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: C2E30232)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=574 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=5 GB) - (Type=0C)
==================== End of Addition.txt ============================
Pribyla nova infekce, pouzijte prosim znovu AdwCleaner.
