VIRY.CZ

Záhada, ZTE jsem nikdy neměla, BB již nepoužívám... vše odstraněno.
BING také, dal s tam asi s něčím sám

Fix result of Farbar Recovery Scan Tool (x86) Version: 21.07.2018
Ran by Reny (23-07-2018 22:16:11) Run:2
Running from C:\Users\Reny\Desktop
Loaded Profiles: Reny (Available Profiles: Reny & UpdatusUser & DefaultAppPool)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

C:\Program Files\Super Ovladac
C:\Program Files\Zrychlenie PC
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Ovladac
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zrychlenie PC
C:\Users\Reny\AppData\Roaming\Super Ovladac
C:\Users\Reny\Desktop\Super Ovladac.lnk
C:\Users\Reny\Desktop\Zrychlenie PC.lnk
C:\Users\Reny\Documents\PCSpeedUp
C:\Windows\System32\Tasks\Super Ovladac Schedule
C:\Windows\Tasks\PC SpeedUp Service Deactivator.job

C:\Windows\System32\MRT-KB890830.exe

End
*****************

Processes closed successfully.
Restore point was successfully created.
"C:\Program Files\Super Ovladac" => not found
"C:\Program Files\Zrychlenie PC" => not found
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Ovladac" => not found
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zrychlenie PC" => not found
"C:\Users\Reny\AppData\Roaming\Super Ovladac" => not found
"C:\Users\Reny\Desktop\Super Ovladac.lnk" => not found
"C:\Users\Reny\Desktop\Zrychlenie PC.lnk" => not found
"C:\Users\Reny\Documents\PCSpeedUp" => not found
"C:\Windows\System32\Tasks\Super Ovladac Schedule" => not found
"C:\Windows\Tasks\PC SpeedUp Service Deactivator.job" => not found
C:\Windows\System32\MRT-KB890830.exe => moved successfully


The system needed a reboot.

==== End of Fixlog 22:16:22 ====

Urob v MBAM uplny sken

• Stiahni a nainstaluj Malwarebytes (MBAM): https://www.malwarebytes.com/mwb-download/thankyou/
• Ignoruj skusobnu trial verziu
• Otvor MBAM a vlavo klikni na "Skenovat"
• Klikni na "Vlastne skenovanie" a potom na "Nakonfigurovat skenovanie" (Nastavit sken)
• Vpravo oznac vsetky disky v PC a vlavo oznac moznost "Vyhladavat rootkity"
• Klikni na Skenovat teraz a pockaj na dokoncenie
• Po dokonceni klikni na Exportovat zhrnutie -> Textovy subor, zadaj nejaky nazov suboru a uloz na plochu
• Obsah tohto suboru sem skopiruj
• Obrazkovy navod (bohuzial pre starsiu verziu): https://forum.viry.cz/viewtopic.php?f=29&t=144868

Už to skenuje hodinu... WIN běží věky a je to u X86, cca v půlce (tam je souborů)...
Nechám to běžet a jdu spát, log zítra

OK

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 23.07.18
Čas skenování: 22:37
Logovací soubor: 35c0d0b2-8eb8-11e8-b4bf-0024545a5082.json
Správce: Ano

-Informace o softwaru-
Verze: 3.5.1.2522
Verze komponentů: 1.0.391
Aktualizovat verzi balíku komponent: 1.0.6029
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x86
Systém souborů: NTFS
Uživatel: Reny-PC\Reny

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 352909
Zjištěné hrozby: 1
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 10 hod, 25 min, 25 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 1
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\V1\20180723.072156\68\WINTHRUSTER\WINTHRUSTER.EXE#AD4E08B67A8511D5, Žádná uživatelská akce, [1432], [115897],1.0.6029

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Nalez mozes zmazat, ale viac menej je to jedno, je to v karantene adwcleaneru.

Posli nove logy z FRST (bez pouzitia FRSTLauncheru).

"Velikost slozky "C:\Users\Reny\Desktop" je 12135 MB."

• Medzitym vycisti plochu - presun vsetky subory a zlozky z plochy do dokumentov a na ploche nechaj iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu.

V C:WINDOWS:winsxs je hrozně moooc souborů msil a x86 od roku2009. Mohu to nějak promazat?

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21.07.2018
Ran by Reny (administrator) on RENY-PC (24-07-2018 17:50:21)
Running from C:\Users\Reny\Desktop
Loaded Profiles: Reny (Available Profiles: Reny & UpdatusUser & DefaultAppPool)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ArcSoft, Inc.) C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
() C:\Windows\System32\Rezip.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Program Files\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Software 2000 Limited) C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Stardock) C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
(Dropbox, Inc.) C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10967656 2012-03-27] (Realtek Semiconductor)
HKLM\...\Run: [HPUsageTracking] => C:\Program Files\HP\HP UT\bin\hppusg.exe "C:\Program Files\HP\HP UT\"
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2015-07-02] (Logitech, Inc.)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Run: [Dropbox Update] => C:\Users\Reny\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-19] (Dropbox, Inc.)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Run: [Google Update] => C:\Users\Reny\AppData\Local\Google\Update\1.3.33.17\GoogleUpdateCore.exe [601680 2018-05-18] (Google Inc.)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 0
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Policies\Explorer: [DisableThumbnailsOnNetworkFolders] 1
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Policies\Explorer: [NoStartMenuPinnedList] 1
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [878592 2010-11-20] (Microsoft Corporation)
Startup: C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2018-06-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk [2010-04-12]
ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{40C45D9B-FF03-4D29-A9E8-C7DE15D05D46}: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{E1F9EAA1-125A-4215-8F53-5395620A9F33}: [DhcpNameServer] 10.255.255.10 10.255.255.20

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SKY2&ocid=SKY2DHP&osmkt=en-ww
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> DefaultScope {A3725DC3-6FE3-44EA-856A-212544370786} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> {A3725DC3-6FE3-44EA-856A-212544370786} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2 ... -SearchBox
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-30] (Google Inc.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-30] (Google Inc.)
Toolbar: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-30] (Google Inc.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-08-09] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_30_0_0_134.dll [2018-07-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2013-07-09] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
FF Plugin: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-3670137199-2938631228-624182700-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Reny\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-3670137199-2938631228-624182700-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Reny\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.co ... id=UP97DHP"
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default [2018-07-24]
CHR Extension: (Disk Google) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-23]
CHR Extension: (Adblock Plus) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-07-23]
CHR Extension: (Gmail Offline) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2018-07-23]
CHR Extension: (Dokumenty Google offline) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-07-23]
CHR Extension: (VratnePenize.cz Připomínáček) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiekfaemafmplemocgimeccahephhdgf [2018-07-23]
CHR Extension: (Netpanel) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno [2018-07-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-23]
CHR Extension: (Chrome Media Router) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-07-24]
CHR Profile: C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-07-23]
CHR Profile: C:\Users\Reny\AppData\Local\Google\Chrome\User Data\System Profile [2018-07-23]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Reny\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-06-03]
CHR HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ADExchange; C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43072 2012-03-19] (ArcSoft, Inc.)
S4 BlackBerry Device Manager; C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2013-06-27] (Research In Motion Limited) [File not signed]
R2 FsUsbExService; C:\windows\system32\FsUsbExService.Exe [233472 2013-10-30] (Teruten) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4753104 2018-05-09] (Malwarebytes)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)
R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [583640 2010-08-05] (PC Tools)
R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] () [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 CVirtA; C:\windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S3 dg_ssudbus; C:\windows\System32\DRIVERS\ssudbus.sys [109184 2017-01-16] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\windows\System32\DRIVERS\dtlitescsibus.sys [26168 2015-11-30] (Disc Soft Ltd)
R3 dtliteusbbus; C:\windows\System32\DRIVERS\dtliteusbbus.sys [40504 2015-12-01] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\windows\system32\drivers\mbae.sys [129248 2018-07-22] (Malwarebytes)
R3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [37344 2013-10-30] () [File not signed]
S3 GenericMount; C:\windows\System32\DRIVERS\GenericMount.sys [57840 2010-02-12] (Symantec Corporation)
R0 giveio; C:\windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R1 HWiNFO32; C:\windows\system32\drivers\HWiNFO32.SYS [23840 2018-02-06] (REALiX(tm))
S3 LUsbFilt; C:\windows\System32\Drivers\LUsbFilt.Sys [38416 2015-06-18] (Logitech, Inc.)
R2 MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [165608 2018-07-23] (Malwarebytes)
R3 MBAMFarflt; C:\windows\System32\DRIVERS\farflt.sys [95488 2018-07-24] (Malwarebytes)
R3 MBAMProtection; C:\windows\System32\DRIVERS\mbam.sys [42728 2018-07-24] (Malwarebytes)
R0 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [220896 2018-07-23] (Malwarebytes)
R3 MBAMWebProtection; C:\windows\System32\DRIVERS\mwac.sys [73336 2018-07-24] (Malwarebytes)
R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)
S3 MpNWMon; C:\windows\System32\DRIVERS\MpNWMon.sys [42368 2010-03-25] (Microsoft Corporation)
R0 speedfan; C:\windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
S3 ssudmdm; C:\windows\System32\DRIVERS\ssudmdm.sys [147072 2017-01-16] (Samsung Electronics Co., Ltd.)
R1 StarOpen; C:\windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S3 usbrndis6; C:\windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
S3 vpnva; C:\windows\System32\DRIVERS\vpnva-6.sys [43376 2013-10-10] (Cisco Systems, Inc.)
S3 massfilter; system32\drivers\massfilter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-24 17:50 - 2018-07-24 17:51 - 000017016 _____ C:\Users\Reny\Desktop\FRST.txt
2018-07-24 17:49 - 2018-07-24 17:49 - 000001193 _____ C:\Users\Reny\Desktop\Do telefonu – zástupce.lnk
2018-07-24 17:49 - 2018-07-24 17:49 - 000001166 _____ C:\Users\Reny\Desktop\Nemanice – zástupce.lnk
2018-07-24 17:47 - 2018-07-24 17:49 - 000000000 ____D C:\Users\Reny\Documents\Plocha
2018-07-24 12:09 - 2018-07-24 17:46 - 000073336 _____ (Malwarebytes) C:\windows\system32\Drivers\mwac.sys
2018-07-23 22:20 - 2018-07-24 11:46 - 000095488 _____ (Malwarebytes) C:\windows\system32\Drivers\farflt.sys
2018-07-23 22:20 - 2018-07-24 11:46 - 000042728 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2018-07-23 22:20 - 2018-07-23 22:20 - 000220896 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamswissarmy.sys
2018-07-23 22:20 - 2018-07-23 22:20 - 000165608 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamChameleon.sys
2018-07-23 21:35 - 2018-07-23 21:35 - 000000000 ____D C:\Users\Reny\Documents\SelfMV
2018-07-23 20:58 - 2018-07-23 20:58 - 000000000 ____D C:\ProgramData\Samsung
2018-07-23 18:02 - 2018-07-23 18:02 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-07-23 18:02 - 2018-07-23 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-07-23 18:02 - 2018-07-23 18:02 - 000000000 ____D C:\Program Files\WinRAR
2018-07-23 17:53 - 2018-07-24 17:50 - 000000000 ____D C:\FRST
2018-07-23 17:45 - 2018-07-23 17:46 - 001773056 _____ (Farbar) C:\Users\Reny\Desktop\FRST.exe
2018-07-23 07:03 - 2018-07-23 07:04 - 007417040 _____ (Malwarebytes) C:\Users\Reny\Downloads\adwcleaner_7.2.2.exe
2018-07-22 15:30 - 2018-07-22 15:30 - 000000877 _____ C:\windows\SETUPWEB.INI
2018-07-22 15:30 - 2018-07-22 15:30 - 000000000 ____D C:\Users\Reny\AppData\Roaming\TeamViewer
2018-07-22 15:16 - 2018-07-22 15:30 - 000270474 _____ C:\windows\ntbtlog.txt
2018-07-22 10:56 - 2018-07-22 10:56 - 000001606 _____ C:\Users\Reny\Documents\cc_20180722_105610.reg
2018-07-22 10:55 - 2018-07-22 10:55 - 000003386 _____ C:\Users\Reny\Documents\cc_20180722_105524.reg
2018-07-22 10:54 - 2018-07-22 10:54 - 000027834 _____ C:\Users\Reny\Documents\cc_20180722_105441.reg
2018-07-22 09:44 - 2018-07-22 10:31 - 000129248 _____ (Malwarebytes) C:\windows\system32\Drivers\mbae.sys
2018-07-22 09:44 - 2018-07-22 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-07-22 09:44 - 2018-07-22 09:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-07-22 09:44 - 2018-07-22 09:44 - 000000000 ____D C:\Program Files\Malwarebytes
2018-07-22 09:18 - 2018-07-22 09:26 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Visual Studio Setup
2018-07-22 09:18 - 2018-07-22 09:18 - 000001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2018-07-22 09:18 - 2018-07-22 09:18 - 000000000 ____D C:\Users\Reny\AppData\Roaming\vstelemetry
2018-07-22 09:18 - 2018-07-22 09:18 - 000000000 ____D C:\Users\Reny\AppData\Local\ServiceHub
2018-07-22 09:17 - 2018-07-22 09:17 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Microsoft Visual Studio
2018-07-22 09:16 - 2018-07-22 09:16 - 000000000 ____D C:\ProgramData\Microsoft Visual Studio
2018-07-21 20:26 - 2018-06-13 19:59 - 000122560 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2018-07-21 20:26 - 2018-06-13 17:53 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 002703872 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe
2018-07-21 20:26 - 2018-06-08 15:05 - 001359360 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000619520 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000517120 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000358912 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000353792 _____ (Microsoft Corporation) C:\windows\system32\centel.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000246272 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000202752 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2018-07-21 20:18 - 2018-06-13 17:55 - 012880384 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2018-07-21 20:18 - 2018-06-13 17:54 - 001499648 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2018-07-21 20:18 - 2018-06-13 17:25 - 002404352 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2018-07-21 20:18 - 2018-06-08 18:02 - 004050624 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2018-07-21 20:18 - 2018-06-08 18:02 - 003962048 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2018-07-21 20:18 - 2018-06-08 18:02 - 000189632 _____ (Microsoft Corporation) C:\windows\system32\halmacpi.dll
2018-07-21 20:18 - 2018-06-08 18:02 - 000189632 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2018-07-21 20:18 - 2018-06-08 18:02 - 000137920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2018-07-21 20:18 - 2018-06-08 18:02 - 000136384 _____ (Microsoft Corporation) C:\windows\system32\halacpi.dll
2018-07-21 20:18 - 2018-06-08 18:02 - 000067264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2018-07-21 20:18 - 2018-06-08 17:57 - 001310488 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 001417728 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 001063424 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000377344 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000330240 _____ (Microsoft Corporation) C:\windows\system32\zipfldr.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000070144 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\oleres.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000269824 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000131584 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:29 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\comcat.dll
2018-07-21 20:18 - 2018-06-08 17:28 - 000030720 _____ (Microsoft Corporation) C:\windows\system32\dnscacheugc.exe
2018-07-21 20:18 - 2018-06-08 17:27 - 000097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2018-07-21 20:18 - 2018-06-08 17:27 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2018-07-21 20:18 - 2018-06-08 17:27 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2018-07-21 20:18 - 2018-06-08 17:27 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2018-07-21 20:18 - 2018-06-08 17:27 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2018-07-21 20:18 - 2018-06-08 17:25 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2018-07-21 20:18 - 2018-06-08 17:24 - 000262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2018-07-21 20:18 - 2018-06-08 17:24 - 000107008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys
2018-07-21 20:18 - 2018-06-08 17:21 - 000226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2018-07-21 20:18 - 2018-06-08 17:21 - 000124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2018-07-21 20:18 - 2018-06-08 17:21 - 000098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2018-07-21 20:18 - 2018-06-08 17:19 - 000069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2018-07-21 20:18 - 2018-06-08 17:19 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2018-07-21 20:18 - 2018-06-08 17:19 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-07-21 20:18 - 2018-06-07 17:57 - 000564736 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll
2018-07-21 20:18 - 2018-06-07 17:57 - 000463360 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll
2018-07-21 20:18 - 2018-06-07 17:57 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\icfupgd.dll
2018-07-21 20:18 - 2018-06-07 17:34 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys
2018-07-21 20:18 - 2018-06-07 17:34 - 000018944 _____ (Microsoft Corporation) C:\windows\system32\wfapigp.dll
2018-07-21 20:18 - 2018-05-31 17:56 - 001310912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2018-07-21 20:18 - 2018-05-31 17:56 - 000240832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2018-07-21 20:18 - 2018-05-31 17:56 - 000187584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2018-07-21 19:57 - 2018-07-22 08:52 - 000000000 ____D C:\Program Files\Samsung
2018-07-19 21:04 - 2018-07-19 21:04 - 000000000 ____D C:\Users\Reny\AppData\Local\Downloaded Installations
2018-07-15 08:41 - 2018-07-15 08:41 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-07-14 11:22 - 2018-07-14 11:22 - 000002176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2018-07-02 07:37 - 2018-05-02 17:30 - 000285184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000259584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2018-07-02 07:37 - 2018-05-02 17:29 - 000006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2018-07-02 07:37 - 2018-04-26 15:05 - 000918296 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000065880 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000021848 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000018776 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000017240 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000017240 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000015704 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000015192 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000013656 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000013656 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000013152 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000012120 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000012120 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-07-02 07:37 - 2018-04-25 17:54 - 000088576 _____ (Microsoft Corporation) C:\windows\system32\wkssvc.dll
2018-07-02 07:37 - 2018-04-25 17:17 - 000088576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys
2018-06-28 07:03 - 2018-06-28 07:03 - 000019502 _____ C:\Users\Reny\Documents\cc_20180628_070331.reg
2018-06-27 21:39 - 2018-07-23 07:21 - 000000000 ____D C:\ProgramData\BSD
2018-06-27 21:31 - 2018-06-27 21:31 - 000000000 __RSH C:\MSDOS.SYS
2018-06-27 21:31 - 2018-06-27 21:31 - 000000000 __RSH C:\IO.SYS

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-24 17:49 - 2017-11-12 18:52 - 000687616 ___SH C:\Users\Reny\Desktop\Thumbs.db
2018-07-24 17:45 - 2016-02-19 10:54 - 000000914 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001UA.job
2018-07-24 17:45 - 2010-10-15 15:12 - 000000958 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001UA.job
2018-07-24 17:45 - 2010-04-12 18:01 - 000000940 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2018-07-24 17:44 - 2015-02-05 16:05 - 000000940 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1d0414cdd6b5484.job
2018-07-24 17:44 - 2010-04-12 18:01 - 000000936 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2018-07-24 13:04 - 2016-02-19 10:53 - 000000862 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001Core.job
2018-07-24 11:54 - 2009-07-14 06:34 - 000023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-07-24 11:54 - 2009-07-14 06:34 - 000023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-07-24 11:46 - 2018-02-07 15:09 - 000000000 ___RD C:\Users\Reny\OneDrive
2018-07-24 11:44 - 2010-05-30 11:18 - 000065536 _____ C:\windows\system32\Ikeext.etl
2018-07-24 11:44 - 2009-07-14 06:53 - 000000006 ____H C:\windows\Tasks\SA.DAT
2018-07-24 09:03 - 2014-07-10 11:33 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-07-24 07:40 - 2010-10-15 15:12 - 000000906 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001Core.job
2018-07-24 05:54 - 2010-04-12 23:40 - 000000000 ___RD C:\Users\Reny\Documents\Hudba
2018-07-24 05:48 - 2014-06-03 18:50 - 000000000 ___RD C:\Users\Reny\Disk Google
2018-07-24 05:47 - 2010-01-06 06:17 - 000734026 _____ C:\windows\system32\perfh005.dat
2018-07-24 05:47 - 2010-01-06 06:17 - 000168776 _____ C:\windows\system32\perfc005.dat
2018-07-24 05:47 - 2009-07-26 22:06 - 001740560 _____ C:\windows\system32\PerfStringBackup.INI
2018-07-24 05:47 - 2009-07-14 04:37 - 000000000 ____D C:\windows\inf
2018-07-23 22:18 - 2011-09-18 18:12 - 000118136 _____ C:\windows\system32\GDIPFONTCACHEV1.DAT
2018-07-23 22:17 - 2009-07-14 06:33 - 002416248 _____ C:\windows\system32\FNTCACHE.DAT
2018-07-23 22:13 - 2016-03-25 00:38 - 000000000 ____D C:\Users\Public\Documents\RonyaSoft
2018-07-23 20:58 - 2016-02-27 15:40 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-07-23 20:48 - 2012-02-03 00:47 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Samsung
2018-07-23 20:41 - 2010-12-27 19:02 - 000000000 ____D C:\Users\Reny\AppData\LocalLow\Temp
2018-07-23 20:27 - 2017-06-03 22:24 - 000000000 ____D C:\Users\Reny\AppData\Roaming\vlc
2018-07-23 19:22 - 2012-12-28 11:17 - 000000924 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001UA.job
2018-07-23 12:05 - 2012-12-28 11:17 - 000000902 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001Core.job
2018-07-23 07:21 - 2010-04-14 09:43 - 000000000 ____D C:\ProgramData\ICQ
2018-07-23 07:20 - 2017-11-08 07:55 - 000000000 ____D C:\AdwCleaner
2018-07-23 06:39 - 2009-07-14 04:37 - 000000000 ____D C:\windows\tracing
2018-07-22 21:12 - 2010-04-24 17:32 - 000000000 ____D C:\Users\Reny\Documents\Ostatní
2018-07-22 17:44 - 2009-07-14 04:37 - 000000000 ____D C:\windows\rescache
2018-07-22 14:59 - 2011-12-19 23:57 - 000000000 ____D C:\Qoobox
2018-07-22 10:20 - 2018-02-04 17:35 - 000000000 ____D C:\Users\DefaultAppPool.IIS APPPOOL
2018-07-22 10:20 - 2012-10-10 21:55 - 000000000 ____D C:\Users\UpdatusUser
2018-07-22 09:17 - 2014-10-05 14:07 - 000000000 ____D C:\Program Files\Microsoft Visual Studio
2018-07-22 08:55 - 2010-01-05 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2018-07-22 08:21 - 2014-12-11 10:49 - 000000000 ____D C:\windows\system32\appraiser
2018-07-22 08:15 - 2010-01-05 12:38 - 000000000 ____D C:\windows\system32\Macromed
2018-07-21 19:49 - 2010-04-12 17:04 - 000000000 ____D C:\Users\Reny
2018-07-21 19:46 - 2010-06-12 10:52 - 000000000 ____D C:\audiograbber
2018-07-21 19:46 - 2010-01-05 12:53 - 000000000 ____D C:\ProgramData\WinClon
2018-07-21 19:46 - 2010-01-05 12:40 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2018-07-21 19:46 - 2009-07-14 04:37 - 000000000 ____D C:\windows\system32\NDF
2018-07-21 19:45 - 2009-07-14 04:37 - 000000000 ____D C:\windows\registration
2018-07-21 17:08 - 2010-04-30 10:36 - 000000000 ____D C:\Users\Reny\AppData\Local\ElevatedDiagnostics
2018-07-19 21:20 - 2017-09-22 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-07-17 00:02 - 2010-04-20 11:13 - 000480888 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2018-07-16 06:54 - 2013-07-15 22:47 - 000000000 ____D C:\windows\system32\MRT
2018-07-16 06:46 - 2010-04-14 09:02 - 131626216 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2018-07-15 08:41 - 2012-07-21 18:46 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Dropbox
2018-07-14 12:03 - 2012-03-30 08:57 - 000842240 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2018-07-14 12:03 - 2011-08-12 11:12 - 000175104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2018-07-14 11:21 - 2010-01-05 13:10 - 000000000 ____D C:\Program Files\Google
2018-07-14 11:02 - 2018-02-07 15:09 - 000002176 _____ C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2018-07-02 06:47 - 2009-07-14 04:04 - 000000893 _____ C:\windows\win.ini
2018-06-27 22:07 - 2015-07-26 10:04 - 000000000 ____D C:\Users\Reny\AppData\Local\CrashDumps

==================== Files in the root of some directories =======

2012-01-20 19:12 - 2011-12-29 00:00 - 117440512 _____ () C:\Program Files\clonezilla-live-20111125-oneiric.iso
2010-04-24 17:32 - 2006-11-02 11:21 - 000416768 _____ () C:\Program Files\HDDScan.exe
2012-07-28 22:31 - 2011-08-12 21:29 - 093733376 _____ () C:\Program Files\realspeaksoloczc.msi
2013-05-22 22:41 - 2013-04-24 16:22 - 009226470 _____ () C:\Program Files\_2013-4-24_02-45-55.amr
2012-02-03 00:25 - 2012-02-06 22:22 - 000037009 _____ () C:\Users\Reny\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2013-01-07 22:54 - 2016-12-28 07:15 - 000001771 _____ () C:\Users\Reny\AppData\Roaming\Rim.Desktop.Exception.log
2013-02-14 20:26 - 2013-08-06 08:01 - 000002196 _____ () C:\Users\Reny\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2013-01-07 22:54 - 2016-12-28 07:15 - 000001848 _____ () C:\Users\Reny\AppData\Roaming\Rim.DesktopHelper.Exception.log
2011-02-13 01:59 - 2014-07-24 17:03 - 000012288 _____ () C:\Users\Reny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-06-09 13:07 - 2012-06-09 13:07 - 000034764 _____ () C:\Users\Reny\AppData\Local\dt.dat
2010-04-12 22:22 - 2010-04-12 22:22 - 000000092 _____ () C:\Users\Reny\AppData\Local\fusioncache.dat
2012-06-17 22:54 - 2013-09-30 10:37 - 000004096 ____H () C:\Users\Reny\AppData\Local\keyfile3.drm
2015-08-17 17:37 - 2015-08-17 17:37 - 000003258 _____ () C:\Users\Reny\AppData\Local\recently-used.xbel
2014-02-05 10:47 - 2014-07-20 10:56 - 000007625 _____ () C:\Users\Reny\AppData\Local\resmon.resmoncfg
2013-03-31 18:04 - 2013-03-31 18:04 - 000001040 _____ () C:\Users\Reny\AppData\Local\SRDownloader.nast

Some files in TEMP:
====================
2018-07-23 21:36 - 2018-07-23 21:35 - 000066048 _____ () C:\Users\Reny\AppData\Local\Temp\Execute2App.exe
2018-07-23 21:36 - 2014-05-07 17:43 - 000568832 _____ (Microsoft Corporation) C:\Users\Reny\AppData\Local\Temp\msvcp90.dll
2018-07-23 21:36 - 2014-05-07 17:43 - 000655872 _____ (Microsoft Corporation) C:\Users\Reny\AppData\Local\Temp\msvcr90.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-19 23:59

==================== End of FRST.txt ============================

Zo zlozky C:\Windows nic neodstranuj, moze dojst k poskodeniu systemu. Ta zlozka WinSxS sa da precistit prikazom, ale to nechame az nakoniec.

Este nebol odinstalovany "Google Toolbar for Internet Explorer" - odinstaluj aj to.

Zresetuj Chrome na predvolene nastavenia: Nastavenia -> Rozsirene -> Obnovenie povodnych predvolenych nastaveni (predposledna polozka uplne na konci) -> Resetovat nastavenia.

V tomto fixliste je opat prikaz EmptyTemp:, ktory premaze docasne a nepotrebne subory, vratane historie prehliadacov a vysypania kosa. Uisti sa, ze mas ulozene vsetky potrebne stranky v zalozkach.
Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  VirusTotal: C:\Windows\System32\StikyNot.exe
  File: C:\Windows\System32\StikyNot.exe
  
  HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
  HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SKY2&ocid=SKY2DHP&osmkt=en-ww
  HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
  SearchScopes: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> DefaultScope {A3725DC3-6FE3-44EA-856A-212544370786} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox
  SearchScopes: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> {A3725DC3-6FE3-44EA-856A-212544370786} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox
  CHR HomePage: Default -> msn.com
  CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.com/","hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP"
  CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
  CHR DefaultSearchKeyword: Default -> bing.com
  CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
  CHR HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
  S4 BlackBerry Device Manager; C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2013-06-27] (Research In Motion Limited) [File not signed]
  S3 massfilter; system32\drivers\massfilter.sys [X]
  
  Task: {2B54459F-0D35-48A5-B7DD-E90BC53EAE1E} - System32\Tasks\{BAED10AF-6538-4B94-B030-AA1C0787E566} => C:\windows\system32\pcalua.exe -a "C:\Program Files\Research In Motion\BlackBerry Desktop\InstallerUtils\InstallerUtils.exe" -c /UninstallDesktop
  Task: {DEB8B08A-87E5-43B6-AAFD-D4AA7CD01BE2} - System32\Tasks\RealCreateProcessScheduledTask342383755S-1-5-21-3670137199-2938631228-624182700-1001 => c:\program files\real\realplayer\update\realsched.exe
  MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
  MSCONFIG\startupreg: cz.seznam.software.szndesktop => "C:\Users\Reny\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe"  -q
  
  C:\Program Files\Driver-Soft
  C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno
  
  CMD: dir /a "C:\PROGRA~1"
  CMD: dir /a "C:\PROGRA~2"
  CMD: dir /a "C:\PROGRA~3"
  CMD: dir /a "%localappdata%"
  CMD: dir /a "%appdata%"
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Po restartu spuštění pozn.bloku a google neodpovídalo, jinak start dost rychlý

Fix result of Farbar Recovery Scan Tool (x86) Version: 21.07.2018
Ran by Reny (24-07-2018 23:33:40) Run:3
Running from C:\Users\Reny\Desktop
Loaded Profiles: Reny (Available Profiles: Reny & UpdatusUser & DefaultAppPool)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

VirusTotal: C:\Windows\System32\StikyNot.exe
File: C:\Windows\System32\StikyNot.exe

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SKY2&ocid=SKY2DHP&osmkt=en-ww
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> DefaultScope {A3725DC3-6FE3-44EA-856A-212544370786} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> {A3725DC3-6FE3-44EA-856A-212544370786} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2 ... -SearchBox
CHR HomePage: Default -> msn.com
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.co ... id=UP97DHP"
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
S4 BlackBerry Device Manager; C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2013-06-27] (Research In Motion Limited) [File not signed]
S3 massfilter; system32\drivers\massfilter.sys [X]

Task: {2B54459F-0D35-48A5-B7DD-E90BC53EAE1E} - System32\Tasks\{BAED10AF-6538-4B94-B030-AA1C0787E566} => C:\windows\system32\pcalua.exe -a "C:\Program Files\Research In Motion\BlackBerry Desktop\InstallerUtils\InstallerUtils.exe" -c /UninstallDesktop
Task: {DEB8B08A-87E5-43B6-AAFD-D4AA7CD01BE2} - System32\Tasks\RealCreateProcessScheduledTask342383755S-1-5-21-3670137199-2938631228-624182700-1001 => c:\program files\real\realplayer\update\realsched.exe
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: cz.seznam.software.szndesktop => "C:\Users\Reny\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q

C:\Program Files\Driver-Soft
C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno

CMD: dir /a "C:\PROGRA~1"
CMD: dir /a "C:\PROGRA~2"
CMD: dir /a "C:\PROGRA~3"
CMD: dir /a "%localappdata%"
CMD: dir /a "%appdata%"

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
VirusTotal: C:\Windows\System32\StikyNot.exe => https://www.virustotal.com/file/6075e8a ... 531874975/

========================= File: C:\Windows\System32\StikyNot.exe ========================

C:\Windows\System32\StikyNot.exe
File is digitally signed
MD5: 2F0EAAF91FC7A5C70D1F4BE9B18A1CF5
Creation and modification date: 2009-07-14 01:41 - 2009-07-14 03:14
Size: 000354304
Attributes: ----A
Company Name: Microsoft Corporation
Internal Name: Sticky
Original Name: StikyNot.exe
Product: Microsoft® Windows® Operating System
Description: Sticky Notes
File Version: 6.1.7600.16385 (win7_rtm.090713-1255)
Product Version: 6.1.7600.16385
Copyright: © Microsoft Corporation. All rights reserved.
VirusTotal: https://www.virustotal.com/file/6075e8a ... 531874975/

====== End of File: ======

"HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page" => removed successfully.
"HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page" => removed successfully.
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
"HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully.
"HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A3725DC3-6FE3-44EA-856A-212544370786}" => removed successfully.
HKLM\Software\Classes\CLSID\{A3725DC3-6FE3-44EA-856A-212544370786} => not found
"Chrome HomePage" => removed successfully.
"Chrome StartupUrls" => removed successfully.
"Chrome DefaultSearchURL" => removed successfully.
"Chrome DefaultSearchKeyword" => removed successfully.
"Chrome DefaultSuggestURL" => removed successfully.
"HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd" => removed successfully.
"HKLM\System\CurrentControlSet\Services\BlackBerry Device Manager" => removed successfully.
BlackBerry Device Manager => service removed successfully.
"HKLM\System\CurrentControlSet\Services\massfilter" => removed successfully.
massfilter => service removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2B54459F-0D35-48A5-B7DD-E90BC53EAE1E}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2B54459F-0D35-48A5-B7DD-E90BC53EAE1E}" => removed successfully.
C:\Windows\System32\Tasks\{BAED10AF-6538-4B94-B030-AA1C0787E566} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BAED10AF-6538-4B94-B030-AA1C0787E566}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DEB8B08A-87E5-43B6-AAFD-D4AA7CD01BE2}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DEB8B08A-87E5-43B6-AAFD-D4AA7CD01BE2}" => removed successfully.
C:\Windows\System32\Tasks\RealCreateProcessScheduledTask342383755S-1-5-21-3670137199-2938631228-624182700-1001 => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RealCreateProcessScheduledTask342383755S-1-5-21-3670137199-2938631228-624182700-1001" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk" => removed successfully.
C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup => moved successfully
"HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\cz.seznam.software.szndesktop" => removed successfully.
"C:\Program Files\Driver-Soft" => not found
C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno => moved successfully

========= dir /a "C:\PROGRA~1" =========

Svazek v jednotce C nem  § dnou jmenovku.
S‚riov‚ źˇslo svazku je D212-7F40.

Věpis adres ýe C:\PROGRA~1

23.07.2018 22:13 <DIR> .
23.07.2018 22:13 <DIR> ..
18.06.2012 07:16 <DIR> 7-Zip
17.08.2014 10:01 <DIR> Acapela Group
27.02.2016 15:40 <DIR> Adobe
13.04.2010 20:56 <DIR> Adobe Media Player
11.11.2015 08:51 <DIR> All History Cleaner
04.09.2011 15:37 <DIR> aMetaGeek
09.11.2017 18:19 <DIR> ArcSoft
16.11.2017 08:29 <DIR> Ashampoo
12.06.2010 11:07 <DIR> Audacity 1.3 Beta (Unicode)
09.11.2017 16:13 <DIR> Autoruns
09.11.2017 09:00 <DIR> Avago-HP
09.11.2017 09:00 <DIR> Canon
10.06.2012 20:51 <DIR> CCleaner
29.12.2011 00:00 117˙440˙512 clonezilla-live-20111125-oneiric.iso
23.07.2018 07:22 <DIR> Common Files
12.07.2010 19:34 <DIR> CyberLink
14.07.2009 06:41 174 desktop.ini
11.07.2014 07:38 <DIR> DIFX
16.03.2017 08:14 <DIR> DVD Maker
29.11.2017 19:24 <DIR> Fotolab
29.08.2015 04:10 <DIR> GetWare
01.03.2012 11:36 <DIR> ghostscript
24.07.2018 23:28 <DIR> Google
02.11.2006 11:21 416˙768 HDDScan.exe
12.11.2010 09:46 <DIR> HP
06.02.2018 19:00 <DIR> HWiNFO32
21.07.2018 19:46 <DIR> InstallShield Installation Information
06.08.2010 08:00 <DIR> Intel
12.04.2018 08:10 <DIR> Internet Explorer
08.07.2011 23:07 <DIR> InternetExplorer
26.04.2016 20:28 <DIR> Java
21.10.2012 09:18 <DIR> K-Lite Codec Pack
27.10.2010 21:30 <DIR> Lame for Audacity
27.07.2014 15:38 <DIR> Lavalys
09.08.2016 21:13 <DIR> Logitech
22.07.2018 09:44 <DIR> Malwarebytes
04.02.2012 19:29 <DIR> MarkAny
30.01.2012 20:59 <DIR> Marvell
02.11.2010 08:53 <DIR> Media Art
25.11.2011 14:02 <DIR> Microsoft Games
08.10.2014 09:52 <DIR> Microsoft Office
07.02.2018 15:09 <DIR> Microsoft OneDrive
16.12.2016 06:59 <DIR> Microsoft Security Client
15.06.2017 11:20 <DIR> Microsoft Silverlight
12.04.2010 17:25 <DIR> Microsoft SQL Server Compact Edition
22.07.2018 09:17 <DIR> Microsoft Visual Studio
05.10.2014 14:04 <DIR> Microsoft Visual Studio 8
08.10.2014 07:08 <DIR> Microsoft Works
05.10.2014 14:06 <DIR> Microsoft.NET
29.08.2011 10:25 <DIR> MS Office 2007
05.10.2014 14:07 <DIR> MSBuild
30.08.2011 20:01 <DIR> MSECache
03.02.2012 01:25 <DIR> MSXML 4.0
03.06.2013 17:34 <DIR> My Company Name
28.05.2014 09:57 <DIR> NVIDIA Corporation
05.08.2012 15:42 <DIR> Oracle
03.11.2012 13:51 <DIR> PDFCreator
12.04.2010 17:30 <DIR> Phoenix Technologies Ltd
30.01.2012 21:00 <DIR> Qualcomm Atheros WiFi Driver Installation
13.03.2011 11:28 <DIR> QuickTime
14.06.2015 08:25 <DIR> Real
12.08.2011 21:29 93˙733˙376 realspeaksoloczc.msi
05.01.2010 12:41 <DIR> Realtek
05.01.2010 12:43 <DIR> REALTEK Wireless LAN Software
14.07.2009 06:52 <DIR> Reference Assemblies
22.07.2018 08:52 <DIR> Samsung
17.02.2013 11:27 <DIR> Samsung Casual Games
20.09.2010 14:59 <DIR> SomePDF
12.02.2011 23:11 <DIR> Sony Media Go Install
09.11.2017 09:01 <DIR> SpeedFan
09.11.2017 09:00 <DIR> Spyware Terminator
12.04.2010 19:42 <DIR> Stardock
12.12.2011 23:17 <DIR> Symantec
18.02.2014 13:29 <DIR> T-Mobile
09.11.2017 16:18 <DIR> TeamViewer
13.05.2012 11:02 <DIR> Temp
29.11.2017 19:29 <DIR> Teta CEWE fotosvet
12.04.2010 21:24 <DIR> TRANSLAT
14.07.2009 06:53 <DIR> Uninstall Information
26.05.2014 08:53 <DIR> VideoLAN
12.04.2010 22:25 <DIR> VS Revo Group
07.03.2014 12:05 <DIR> Webcam Simulator 7.3
16.12.2013 19:03 <DIR> Webcam Video Capture 7.0
04.09.2011 16:12 <DIR> Wifi radar
11.07.2013 03:28 <DIR> Windows Defender
27.04.2016 11:03 <DIR> Windows Live
10.03.2011 00:52 <DIR> Windows Mail
16.11.2017 08:28 <DIR> Windows Media Player
14.07.2009 06:52 <DIR> Windows NT
10.03.2011 00:52 <DIR> Windows Photo Viewer
10.03.2011 00:52 <DIR> Windows Portable Devices
10.03.2011 00:52 <DIR> Windows Sidebar
23.07.2018 18:02 <DIR> WinRAR
24.04.2013 16:22 9˙226˙470 _2013-4-24_02-45-55.amr
Soubor…: 5, Bajt…: 220˙817˙300
Adres ý…: 91, Volněch bajt…: 87˙537˙745˙920

========= End of CMD: =========


========= dir /a "C:\PROGRA~2" =========

Svazek v jednotce C nem  § dnou jmenovku.
S‚riov‚ źˇslo svazku je D212-7F40.

Věpis adres ýe C:\PROGRA~2

24.07.2018 23:32 <DIR> .
24.07.2018 23:32 <DIR> ..
27.02.2016 15:40 <DIR> Adobe
29.10.2010 18:24 <DIR> Alwil Software
19.06.2010 20:54 <DIR> Apple
07.03.2014 12:11 <DIR> Apple Computer
14.07.2009 06:53 <JUNCTION> Application Data [C:\ProgramData]
09.11.2017 15:19 <DIR> ArcSoft
21.02.2014 10:34 <DIR> Ashampoo
13.10.2010 08:42 <DIR> Avanquest Bluetooth SDK
30.11.2015 21:59 <DIR> AVG
24.11.2013 10:13 <DIR> AVG2014
31.03.2013 18:03 <DIR> Babylon
23.07.2018 07:21 <DIR> BSD
17.02.2013 11:12 <DIR> BVRP Software
09.11.2017 18:31 <DIR> CanonIJScan
02.10.2014 10:33 <DIR> Citrix
15.12.2011 17:47 <DIR> Common Files
29.08.2015 00:54 <DIR> CyberLink
01.12.2015 16:22 <DIR> DAEMON Tools Lite
14.07.2009 06:53 <JUNCTION> Desktop [C:\Users\Public\Desktop]
14.07.2009 06:53 <JUNCTION> Documents [C:\Users\Public\Documents]
19.02.2016 10:53 <DIR> Dropbox
11.04.2016 18:12 <DIR> F-Secure
29.08.2010 08:28 <DIR> FarmFrenzy2
14.07.2009 06:53 <JUNCTION> Favorites [C:\Users\Public\Favorites]
02.06.2014 11:22 <DIR> firebird
02.01.2013 16:09 <DIR> FLEXnet
13.09.2015 10:52 <DIR> Gemfor
14.04.2010 06:54 <DIR> Hewlett-Packard
14.04.2010 06:54 <DIR> HP
29.11.2017 21:46 <DIR> hps
23.07.2018 07:21 <DIR> ICQ
13.02.2012 20:49 <DIR> Installations
02.10.2014 11:58 <DIR> Kerio
04.02.2012 21:20 0 LauncherAccess.dt
28.01.2012 18:18 <DIR> Logishrd
22.07.2018 09:44 <DIR> Malwarebytes
29.05.2010 15:57 <DIR> McAfee
24.11.2013 10:10 <DIR> MFAData
22.07.2018 09:16 <DIR> Microsoft
12.04.2018 07:01 <DIR> Microsoft Help
07.02.2018 15:07 <DIR> Microsoft OneDrive
22.07.2018 09:16 <DIR> Microsoft Visual Studio
20.03.2011 18:21 <DIR> Norton
11.03.2011 15:40 <DIR> NortonInstaller
28.05.2014 10:26 <DIR> NVIDIA
10.10.2012 21:53 <DIR> NVIDIA Corporation
28.05.2014 15:36 <DIR> Oracle
09.11.2017 20:13 <DIR> Package Cache
03.02.2012 01:34 <DIR> PC Suite
28.01.2012 18:46 <DIR> Qualcomm Atheros
14.06.2015 08:25 <DIR> Real
12.07.2015 15:15 <DIR> RogueKiller
23.07.2018 20:58 <DIR> Samsung
05.01.2010 13:09 <DIR> SiteAdvisor
04.07.2011 21:55 <DIR> Skype Extras
04.02.2012 21:13 <DIR> Sony Ericsson
09.11.2017 09:00 <DIR> Spyware Terminator
14.07.2009 06:53 <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
22.05.2010 12:19 <DIR> Sun
28.01.2012 11:49 <DIR> Symantec
17.02.2014 18:13 <DIR> T-Mobile
30.11.2015 22:37 <DIR> Temp
14.07.2009 06:53 <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
29.11.2017 21:46 <DIR> tmp
12.04.2010 23:29 <DIR> TuneUp Software
21.07.2018 19:46 <DIR> WinClon
27.10.2012 17:15 <DIR> Windows Genuine Advantage
Soubor…: 1, Bajt…: 0
Adres ý…: 68, Volněch bajt…: 87˙537˙680˙384

========= End of CMD: =========


========= dir /a "C:\PROGRA~3" =========

Svazek v jednotce C nem  § dnou jmenovku.
S‚riov‚ źˇslo svazku je D212-7F40.

Věpis adres ýe C:\

Soubor nebyl nalezen.

========= End of CMD: =========


========= dir /a "%localappdata%" =========

Svazek v jednotce C nem  § dnou jmenovku.
S‚riov‚ źˇslo svazku je D212-7F40.

Věpis adres ýe C:\Users\Reny\AppData\Local

24.07.2018 11:44 <DIR> .
24.07.2018 11:44 <DIR> ..
27.02.2016 15:43 <DIR> Adobe
14.04.2010 09:42 <DIR> AOL
19.06.2010 20:54 <DIR> Apple
12.10.2010 18:38 <DIR> Apple Computer
24.06.2010 16:13 <DIR> Apps
22.11.2016 08:20 <DIR> ArcSoft
30.11.2015 22:05 <DIR> AVG
27.02.2016 15:43 <DIR> CEF
25.11.2011 18:32 <DIR> Cooliris
27.06.2018 22:07 <DIR> CrashDumps
12.04.2010 17:04 <JUNCTION> Data aplikacˇ [C:\Users\Reny\AppData\Local]
24.07.2014 17:03 12˙288 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
19.07.2018 21:04 <DIR> Downloaded Installations
28.05.2018 06:17 <DIR> Dropbox
09.06.2012 13:07 34˙764 dt.dat
21.07.2018 17:08 <DIR> ElevatedDiagnostics
14.04.2016 07:29 <DIR> FSDART
12.04.2010 22:22 92 fusioncache.dat
18.09.2011 18:12 8˙224 GDIPFONTCACHEV1.DAT
26.06.2017 10:41 <DIR> GHISLER
24.07.2018 23:28 <DIR> Google
12.04.2010 17:04 <JUNCTION> History [C:\Users\Reny\AppData\Local\Microsoft\Windows\History]
24.07.2018 11:43 1˙441˙258 IconCache.db
30.09.2013 10:37 4˙096 keyfile3.drm
09.08.2016 21:15 <DIR> Logishrd
04.09.2011 16:11 <DIR> MetaGeek,_LLC
22.07.2018 09:18 <DIR> Microsoft
12.04.2010 17:14 <DIR> Microsoft Help
12.04.2010 20:15 <DIR> Mozilla
12.04.2010 17:31 <DIR> Power2Go
18.04.2018 23:41 <DIR> Programs
17.08.2015 17:37 3˙258 recently-used.xbel
20.07.2014 10:56 7˙625 resmon.resmoncfg
22.07.2018 09:18 <DIR> ServiceHub
12.10.2010 22:02 <DIR> Sony
04.09.2011 20:45 <DIR> Sony Ericsson
03.10.2010 22:23 <DIR> Speedchecker
31.03.2013 18:04 1˙040 SRDownloader.nast
12.04.2010 19:45 <DIR> Stardock
13.12.2011 01:17 <DIR> Symantec_Corporation
24.07.2018 23:33 <DIR> Temp
12.04.2010 17:04 <JUNCTION> Temporary Internet Files [C:\Users\Reny\AppData\Local\Microsoft\Windows\Temporary Internet Files]
29.11.2017 21:05 <DIR> Teta CEWE fotosvet
12.04.2010 21:51 <DIR> VirtualStore
27.04.2016 12:26 <DIR> Windows Live
20.04.2016 19:38 <DIR> {00F90512-B74B-4BD3-BB01-989B2B995620}
04.02.2016 09:11 <DIR> {01B9FAD0-B16C-4E19-9B87-F3D4AFA71B58}
31.03.2016 08:11 <DIR> {01C22CB0-036E-4775-A5EC-20725E4BD6F9}
08.01.2016 08:52 <DIR> {028A4066-F065-465E-B66A-38EC53418B9C}
29.02.2016 11:00 <DIR> {0402CA43-4C34-404A-831F-E3D220FC7F63}
30.03.2016 06:39 <DIR> {04A59074-51DD-4A96-A5A7-9D6052F98451}
14.02.2016 22:35 <DIR> {0711A689-7393-4202-A25F-CFF0DCFED89F}
18.04.2016 14:41 <DIR> {0B88D07F-20A3-40C4-8C48-0E059D2913F0}
23.04.2016 22:35 <DIR> {0C6A9602-EE2C-4CE3-9AE0-FC4ECD85ECC3}
31.01.2016 09:56 <DIR> {1183DDC1-2D0E-4420-9C0B-8115D0A90D4A}
16.03.2016 08:22 <DIR> {11A95EC0-7666-467F-BBD5-89836B29B52D}
01.04.2016 23:39 <DIR> {1259E9DA-7307-4615-A9C2-E84AC5A09169}
17.02.2016 21:04 <DIR> {132638AB-AA73-48FC-BAEA-0457EF56662E}
14.02.2016 10:09 <DIR> {14A86009-2965-4DB3-8620-13A34F692F43}
25.03.2016 10:56 <DIR> {16AFE55B-2446-4A40-8C8C-4C89F7E5C723}
03.02.2016 08:27 <DIR> {1808CC58-C49F-4527-B500-05B0B3794288}
26.01.2016 21:22 <DIR> {18D602BE-AC66-4387-A881-B0C2F9C2937F}
07.04.2016 07:57 <DIR> {191411EE-8073-4ECE-9CA8-0F23D824F416}
04.01.2016 09:38 <DIR> {19FAD953-811F-4CF0-98FE-A0FE8241C5EF}
21.03.2016 23:36 <DIR> {1AE3AF1C-134B-4A23-A6DD-A9A23E511395}
15.02.2016 11:55 <DIR> {2049C725-CDCC-41A8-AD3B-E73CE711EF60}
16.03.2016 20:23 <DIR> {229AB2DD-213E-47D5-AD98-3367439ED7B8}
07.02.2016 10:06 <DIR> {239E91B9-9151-4FDA-9303-0C26A149CC3D}
03.04.2016 22:49 <DIR> {23D51174-16BF-4795-B28E-58432B2CF321}
13.02.2016 13:18 <DIR> {2512C1BC-E64B-448E-BFC2-3D4901D50508}
14.01.2016 08:07 <DIR> {25651921-27B3-487E-A574-122587CF24FA}
18.02.2016 13:07 <DIR> {2963F382-A803-48E2-B7AC-E27D915AD81A}
28.01.2016 20:31 <DIR> {29952B26-7704-4A35-8EA2-495E0E2AF19F}
21.03.2016 11:21 <DIR> {29BE6D16-7211-4CC0-812D-0A779CFB735D}
07.03.2016 21:06 <DIR> {2AB70398-89CC-4B7E-A203-ACCDD3FBFE39}
22.04.2016 08:35 <DIR> {2BC284C7-CF07-4C7D-8A36-D385DB49C23C}
17.04.2016 08:26 <DIR> {2D2F4E53-4070-4A7B-B2D6-54EDA46DBEBF}
27.04.2016 09:37 <DIR> {2D70C5B2-9A7E-458C-95A8-10A4688FE88B}
03.04.2016 09:45 <DIR> {2DCF3FDC-CA25-4531-9F82-D810B7899F10}
27.03.2016 19:54 <DIR> {2EB90DF3-B107-4A43-8528-22BAEEC8CC7B}
24.03.2016 08:48 <DIR> {2F2FD436-C523-4FF8-B3C2-6CAA28DAEF53}
08.02.2016 10:06 <DIR> {30C9E139-094C-4F32-B126-504D8C26A01A}
08.04.2016 12:25 <DIR> {32B22873-4F57-4774-B0DF-7B62A70B7D9F}
10.02.2016 21:22 <DIR> {35FD508B-0E54-4297-8EA5-C3CC06DCF5D1}
09.03.2016 21:25 <DIR> {377686E6-7C45-46E1-829E-4EB7C024A162}
24.04.2016 16:56 <DIR> {3B67AA47-59E6-40B5-AE8F-8BC05792BCBF}
10.02.2016 09:22 <DIR> {3C898DA8-BA58-4CE4-B78F-2B0105ACC44F}
01.03.2016 11:49 <DIR> {3CEE503D-4750-41DA-9D86-5D5E14661666}
16.05.2011 15:18 <DIR> {3E456EB1-B4DB-4F18-A158-CDB731910B92}
07.01.2016 18:46 <DIR> {3E749B7A-D50F-48BE-A8D7-D648EE009F6E}
25.04.2016 19:22 <DIR> {3EDFF1D4-EA32-4EEA-A783-DEE65F7D6DB6}
20.04.2016 07:38 <DIR> {3F47998C-5FB9-4F88-8E17-E6769A669FC6}
02.02.2016 16:01 <DIR> {405D498E-9C19-4B47-8065-63F91885BFED}
18.01.2016 08:54 <DIR> {414A57B4-55EE-404A-9245-7F2D32610700}
18.03.2016 20:31 <DIR> {41F2C4B9-616F-48F8-B524-E90E707D76AF}
08.04.2016 00:25 <DIR> {47637361-C9CF-4AE4-8611-E1EC4228D6E5}
21.04.2016 20:34 <DIR> {49A6559F-0B99-4966-B000-96A6A35CF8E6}
03.01.2016 09:15 <DIR> {4BEA24B2-228E-4B48-836F-F993ACDFF121}
16.01.2016 09:36 <DIR> {4CE6F62F-ED5D-4AFD-99E4-C15A83645739}
25.04.2016 07:22 <DIR> {4F31B22A-EB06-4C59-BB34-916E9EB39153}
06.03.2016 14:29 <DIR> {512FB588-D2D7-44FD-B598-E29AFF481367}
03.03.2016 11:18 <DIR> {5368E8D8-D2D3-460A-A376-D9B6D29F279B}
24.03.2016 20:48 <DIR> {543BF0CE-ADDC-41A8-8F0B-689A8E1C6145}
21.02.2016 21:25 <DIR> {54548741-AF78-4B87-B817-FC05AA965ED8}
26.04.2016 07:22 <DIR> {56B2EEFC-96B8-4B57-9338-AD6C4D651AEF}
29.02.2016 23:49 <DIR> {5767A052-2FF0-4E2D-93DC-F5973D8BF08A}
04.04.2016 18:08 <DIR> {58BF67DD-8C93-45C0-9595-DAE8290069E8}
04.01.2016 21:38 <DIR> {5A7E1838-C4FE-4F90-886D-0E63C914F6EA}
19.02.2016 10:39 <DIR> {5AEE5328-BDD4-4C2F-B9D0-087A2ED7E126}
27.01.2016 18:19 <DIR> {5AFBF04C-7A87-4D1B-810C-808046EEE03D}
06.04.2016 19:57 <DIR> {5D58F196-7B43-48EB-A64A-63A77AF966E3}
12.01.2016 08:37 <DIR> {61C9E7F3-6990-48F5-8E33-59583BFE5180}
28.03.2016 09:58 <DIR> {659DC0BF-6A8C-4909-A7DA-EC858BF53C37}
25.01.2016 09:22 <DIR> {68C33B85-E647-44ED-9C51-FEE1EEE9565E}
11.01.2016 13:18 <DIR> {699309E3-8FD7-418B-9AF3-DE8237AF218F}
30.03.2016 18:39 <DIR> {6C05A99B-D7A2-4DB8-A3D6-B7FA926FCB2F}
19.01.2016 20:54 <DIR> {6CEF4CD5-BC1B-4576-9689-D352E157A51B}
05.04.2016 19:57 <DIR> {6D48B00B-C896-4352-8A06-71E2105F23A2}
09.04.2016 08:07 <DIR> {6D6E4B4C-DD54-4FA0-91E9-5C54A3D78A61}
01.02.2016 09:14 <DIR> {72AF268B-11E7-4C92-9AD8-D3511550E75A}
01.04.2016 08:24 <DIR> {72BA3D66-BF70-43EB-977F-194674482130}
02.03.2016 22:38 <DIR> {73BBADF2-7165-43DB-B4E3-F0E1A6846ED6}
12.04.2016 08:14 <DIR> {76825E99-0EB3-4E01-8D24-090BE77A0504}
06.10.2011 15:42 <DIR> {76ADE7B2-D5FE-46C6-A2B1-3D0B9A624EFC}
22.03.2016 11:37 <DIR> {77365F6A-AC6D-4571-AF32-15251BACE65E}
22.04.2016 20:46 <DIR> {78739559-6F2E-47C5-B3BD-C56356A83D72}
27.02.2016 11:18 <DIR> {7C0B6CC5-07F7-4502-BA0C-E84A926A3D43}
28.03.2016 21:58 <DIR> {7C3DC638-9B5E-47E9-AA9A-0E23D3DA2B0E}
19.04.2016 07:49 <DIR> {7D6CD856-1E02-4B1C-85E0-57A26B542444}
02.04.2016 11:59 <DIR> {7D982C07-0575-45E1-BC9B-3907C1A67A23}
10.03.2016 23:50 <DIR> {7E735D66-FE7D-43C0-B608-8C75B7A43BCE}
19.03.2016 09:15 <DIR> {7EFE5140-57E5-45A2-9AAF-92D17CB7829C}
18.01.2016 20:54 <DIR> {7FA3AD57-4B89-419B-A51E-4C7E3522B6FA}
29.03.2016 10:07 <DIR> {808C30CC-AB96-4E81-9C2A-D823D7E8C1F9}
10.03.2016 09:25 <DIR> {810F9522-9D3F-408A-A527-86726E8E8B7F}
23.01.2016 11:54 <DIR> {83CBA91F-78F6-4C7E-986C-1E9A5E29BAD1}
31.03.2016 20:24 <DIR> {86C29B94-2E09-431A-B9DE-DD61AAE3831E}
05.01.2016 11:09 <DIR> {89124208-95AF-46AF-9933-DA4631E3DB1A}
25.02.2016 10:03 <DIR> {8B094602-8970-4B72-96BC-E026A840F35E}
28.02.2016 09:20 <DIR> {8CDB288F-13A9-42D6-9A44-7D5904FBB3EE}
21.01.2016 21:03 <DIR> {8FB9BDD1-221A-4483-BAC4-12A5910F23AE}
25.01.2016 21:22 <DIR> {96098605-632F-4859-80BC-874291BC9DC1}
17.03.2016 20:23 <DIR> {961AD065-4710-4275-8435-9D9E6C40617D}
15.03.2016 12:10 <DIR> {97B96588-9EEA-4CF7-B244-002DFDB4C191}
07.02.2016 22:06 <DIR> {982EA0EE-AC6D-4EFD-93A4-A189F600E698}
20.02.2016 19:21 <DIR> {9BE36F82-D3ED-495E-B6FA-3925469BDC00}
24.01.2016 10:32 <DIR> {9D0B9B0B-5F68-43E7-BA50-BC8D5CC47A2F}
17.02.2016 09:04 <DIR> {9D183CD5-67E1-4D45-A588-F72A38F20345}
23.04.2016 10:35 <DIR> {A0661083-A0DA-4CE2-8926-7E993F89F697}
17.03.2016 08:23 <DIR> {A0D5843F-B679-496F-99AF-BCE8EED32A22}
11.03.2016 11:50 <DIR> {A159ECD6-8413-4CEA-B2BE-3DD005BBAA58}
12.03.2016 18:29 <DIR> {A1EC56FA-52DA-402B-9B90-F0C2CBB46A31}
05.04.2016 07:56 <DIR> {A5A1D7EE-8645-4012-90FD-D6232739ABA1}
13.03.2016 08:46 <DIR> {A737CC47-4D5B-47FE-86A8-553E49550005}
08.03.2016 12:38 <DIR> {A7DEB297-3D17-408F-9C38-3B71F6A23823}
21.01.2016 09:02 <DIR> {AD8060DE-1422-4FE9-BFF2-C49C096B7384}
20.03.2016 09:21 <DIR> {AE76003A-8A82-49AE-BC6D-B4A08F672005}
14.03.2016 13:12 <DIR> {AF10A0F1-7308-49D9-8FBC-08C5D7311634}
10.04.2016 19:45 <DIR> {B1B94D29-9DA4-440C-9F2D-719F1E81A6DE}
16.04.2016 11:44 <DIR> {B433705F-6B6F-426A-9E5A-90D89DF93C1C}
09.02.2016 14:03 <DIR> {B643739A-21A0-47CF-B323-3A765FFAD654}
16.02.2016 08:55 <DIR> {B9E3E4F5-C7F6-44E8-BA71-1C4C36F6FAD9}
01.01.2016 11:33 <DIR> {BF5FFF51-DFAA-46B0-8F9C-DE34FB4A8902}
23.03.2016 07:50 <DIR> {C0AAA6B7-2FD5-43CC-8914-CB5713EDABF6}
06.04.2016 07:57 <DIR> {C5BBA6B5-3C6A-40A9-A054-DA09D2AF4E23}
15.01.2016 08:35 <DIR> {C7417BA4-ED7E-4003-8680-0475224B369D}
05.02.2016 10:00 <DIR> {C807E383-BBB0-4FEB-B155-4C310B4F9679}
09.03.2016 09:25 <DIR> {C9B3D60C-DF7B-46F4-8392-9C9D9A91F9BC}
20.01.2016 08:55 <DIR> {CA381E3B-5937-4526-A47C-79D3E1FB64FD}
26.01.2016 09:22 <DIR> {CC280A8F-7C03-4596-B828-1B16502F0AA7}
14.04.2016 20:01 <DIR> {CCD6367B-2153-4390-BE83-8D4AF40C8ED3}
23.03.2016 20:04 <DIR> {CD1C2666-CC95-4D10-ACE6-DD12DA693A3B}
21.04.2016 08:34 <DIR> {CE4A86DB-20E1-4486-8E9A-534C48243260}
02.03.2016 09:22 <DIR> {CED209AF-3B03-4E41-8892-B73C270CC53B}
19.02.2016 22:39 <DIR> {D0194DDF-B94C-4BF8-8B3F-8F5AA2977EE7}
11.04.2016 20:01 <DIR> {D3159093-3DAF-4225-801F-6DFEFC03962C}
06.01.2016 09:04 <DIR> {D3E5D630-7CF2-47AC-80BC-3CD2696441A1}
07.03.2016 09:06 <DIR> {D475AA6E-4AFB-471D-9169-50F590A7146F}
25.08.2011 12:02 <DIR> {D946A418-C1F8-4961-B8EB-D005118CB73F}
28.01.2016 08:04 <DIR> {D9D77A01-B079-406C-B972-653FB955847D}
15.04.2016 08:45 <DIR> {DD60BB59-6381-422C-9CCB-AC1306462F34}
17.04.2016 22:09 <DIR> {DD60F53B-BD87-4512-8B07-AAD17581B7BA}
20.03.2016 22:14 <DIR> {DD752AAE-1F81-4B1F-9536-D77EFC6C0669}
03.01.2016 21:37 <DIR> {DEF6A1C5-1F95-45DF-9FA5-F995733F4180}
08.02.2016 22:06 <DIR> {DFC89AE2-7AE8-4387-A44C-FAC5296CFF79}
14.03.2016 00:29 <DIR> {E323B51F-4C82-4EB4-85F4-9BD047A9BC49}
03.02.2016 20:27 <DIR> {E42AA83F-4475-489A-8EF1-2F3E1B20F3B1}
17.01.2016 10:09 <DIR> {E4EA847A-1FC8-43D1-99D1-C1B9DDF81024}
11.04.2016 07:45 <DIR> {E7AA1539-B46F-4532-8B2A-C22F0B6439C9}
15.04.2016 20:45 <DIR> {E7C33991-A292-4539-9F20-531F3AE30B5A}
22.01.2016 09:16 <DIR> {EAA7B34A-8CDA-4014-85C7-307B81992FF1}
11.02.2016 16:04 <DIR> {EFD72005-1F19-482B-B96C-FFECF7C9D66F}
04.03.2016 09:15 <DIR> {F0CECABD-70E2-4B14-B7D0-D1C3D6DC09EB}
06.01.2016 22:15 <DIR> {F3739A00-BB42-4E2E-A4C2-144CD3400E84}
02.02.2016 00:09 <DIR> {F3AAAB3A-EF1A-41A0-80A8-C017258F9B21}
18.03.2016 08:30 <DIR> {F447726C-0B07-41F9-8089-691085D36603}
02.01.2016 10:51 <DIR> {F5335E01-1BAC-4495-A876-10B8DD9FC799}
13.04.2016 20:01 <DIR> {F5397222-A545-4D1E-AA0F-80F1EA9890CC}
12.02.2016 09:50 <DIR> {F6F4BD70-08CF-44AB-B6C1-094242BF3449}
13.01.2016 14:41 <DIR> {FAC5778B-E504-467F-892F-CE8F7E4B6D6E}
12.01.2016 22:12 <DIR> {FB787D24-DBA4-4C46-8499-268F54BB901F}
14.04.2016 08:01 <DIR> {FD54F7ED-8072-47F8-9FED-C01E079B2A5C}
13.04.2016 08:01 <DIR> {FDC2EA50-1FB8-4780-B5E6-6B9C15ECA319}
19.01.2016 08:54 <DIR> {FDC70742-11B6-483B-AED9-967A38F995FE}
26.04.2016 21:15 <DIR> {FFC5504E-D61F-4081-9E44-97721DB8ED1A}
29.01.2016 14:54 <DIR> {FFFAB78C-4CFD-4AC7-AD6E-3F663FA9683E}
Soubor…: 9, Bajt…: 1˙512˙645
Adres ý…: 199, Volněch bajt…: 87˙528˙534˙016

========= End of CMD: =========


========= dir /a "%appdata%" =========

Svazek v jednotce C nem  § dnou jmenovku.
S‚riov‚ źˇslo svazku je D212-7F40.

Věpis adres ýe C:\Users\Reny\AppData\Roaming

23.07.2018 07:22 <DIR> .
23.07.2018 07:22 <DIR> ..
08.06.2017 22:13 <DIR> Adobe
09.11.2017 18:19 <DIR> ArcSoft
16.11.2017 23:18 <DIR> Audacity
16.02.2017 09:07 <DIR> CyberLink
19.02.2016 10:05 <DIR> DAEMON Tools Lite
15.07.2018 08:41 <DIR> Dropbox
26.06.2017 10:45 <DIR> GHISLER
29.09.2017 07:35 <DIR> Google
06.02.2012 22:22 37˙009 Hodnoty oddŘlen‚ ź rkami (Windows).ADR
14.03.2017 07:49 <DIR> Macromedia
26.05.2016 19:00 <DIR> Microsoft
22.07.2018 09:17 <DIR> Microsoft Visual Studio
08.06.2017 22:11 <DIR> NVIDIA
28.12.2016 07:15 1˙771 Rim.Desktop.Exception.log
06.08.2013 08:01 2˙196 Rim.Desktop.HttpServerSetup.log
28.12.2016 07:15 1˙848 Rim.DesktopHelper.Exception.log
23.07.2018 20:48 <DIR> Samsung
08.11.2017 21:54 <DIR> Spyware Terminator
22.07.2018 15:30 <DIR> TeamViewer
22.07.2018 09:26 <DIR> Visual Studio Setup
23.07.2018 20:27 <DIR> vlc
22.07.2018 09:18 <DIR> vstelemetry
16.05.2018 15:51 <DIR> XnView
25.03.2016 10:32 <DIR> Zoner
Soubor…: 4, Bajt…: 42˙824
Adres ý…: 22, Volněch bajt…: 87˙529˙537˙536

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 21476676 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 6783537 B
Edge => 0 B
Chrome => 19324526 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 66228 B
Public => 0 B
ProgramData => 0 B
systemprofile => 692 B
LocalService => 66228 B
NetworkService => 4174 B
Reny => 3703662 B
UpdatusUser => 0 B
UpdatusUser => 0 B
DefaultAppPool.IIS APPPOOL => 0 B

RecycleBin => 1131615916 B
EmptyTemp: => 1.1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 23:34:36 ====

To ale vyžvaní vše, co jsem kdy používala
Co je 21.07.2018 19:46 <DIR> WinClon? Kam se můj win naclonoval?

WinClon je zrejme nejaky zalohovaci program.

Ako to vyzera s PC? Chrome si resetovala? Bing sa uz zmizol z Chrome?

Poprosim o obidva nove logy z FRST.

Přes Start mi to nějaký program win clone najde, ale nachází se se v system32:win, ale po zobrazení cesty neví vidět. Snad to tam patří, ve VS Revo není.
PC je rychkejší, vše OK a bez problémů, smaet switch funguje, telefon zálohován, zítra jdu pro nový
Díky moc za spoustu tvého času, ji machr, forum jsem menší částkou podpřila.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21.07.2018
Ran by Reny (administrator) on RENY-PC (25-07-2018 22:05:00)
Running from C:\Users\Reny\Desktop
Loaded Profiles: Reny (Available Profiles: Reny & UpdatusUser & DefaultAppPool)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ArcSoft, Inc.) C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.17\GoogleCrashHandler.exe
() C:\Windows\System32\Rezip.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Software 2000 Limited) C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Stardock) C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
(Dropbox, Inc.) C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10967656 2012-03-27] (Realtek Semiconductor)
HKLM\...\Run: [HPUsageTracking] => C:\Program Files\HP\HP UT\bin\hppusg.exe "C:\Program Files\HP\HP UT\"
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2015-07-02] (Logitech, Inc.)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Run: [Dropbox Update] => C:\Users\Reny\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-19] (Dropbox, Inc.)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Run: [Google Update] => C:\Users\Reny\AppData\Local\Google\Update\1.3.33.17\GoogleUpdateCore.exe [601680 2018-05-18] (Google Inc.)
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 0
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Policies\Explorer: [DisableThumbnailsOnNetworkFolders] 1
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\...\Policies\Explorer: [NoStartMenuPinnedList] 1
HKU\S-1-5-21-3670137199-2938631228-624182700-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [878592 2010-11-20] (Microsoft Corporation)
Startup: C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2018-06-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\Reny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk [2010-04-12]
ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{40C45D9B-FF03-4D29-A9E8-C7DE15D05D46}: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{E1F9EAA1-125A-4215-8F53-5395620A9F33}: [DhcpNameServer] 10.255.255.10 10.255.255.20

Internet Explorer:
==================
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
Toolbar: HKU\S-1-5-21-3670137199-2938631228-624182700-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-08-09] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_30_0_0_134.dll [2018-07-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2013-07-09] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
FF Plugin: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-3670137199-2938631228-624182700-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Reny\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-3670137199-2938631228-624182700-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Reny\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default [2018-07-25]
CHR Extension: (Disk Google) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-24]
CHR Extension: (Chrome Media Router) - C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-07-24]
CHR Profile: C:\Users\Reny\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-07-23]
CHR Profile: C:\Users\Reny\AppData\Local\Google\Chrome\User Data\System Profile [2018-07-23]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3670137199-2938631228-624182700-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Reny\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-06-03]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ADExchange; C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43072 2012-03-19] (ArcSoft, Inc.)
R2 FsUsbExService; C:\windows\system32\FsUsbExService.Exe [233472 2013-10-30] (Teruten) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4753104 2018-05-09] (Malwarebytes)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)
R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [583640 2010-08-05] (PC Tools)
R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] () [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 CVirtA; C:\windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S3 dg_ssudbus; C:\windows\System32\DRIVERS\ssudbus.sys [109184 2017-01-16] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\windows\System32\DRIVERS\dtlitescsibus.sys [26168 2015-11-30] (Disc Soft Ltd)
R3 dtliteusbbus; C:\windows\System32\DRIVERS\dtliteusbbus.sys [40504 2015-12-01] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\windows\system32\drivers\mbae.sys [129248 2018-07-22] (Malwarebytes)
R3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [37344 2013-10-30] () [File not signed]
S3 GenericMount; C:\windows\System32\DRIVERS\GenericMount.sys [57840 2010-02-12] (Symantec Corporation)
R0 giveio; C:\windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R1 HWiNFO32; C:\windows\system32\drivers\HWiNFO32.SYS [23840 2018-02-06] (REALiX(tm))
S3 LUsbFilt; C:\windows\System32\Drivers\LUsbFilt.Sys [38416 2015-06-18] (Logitech, Inc.)
R2 MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [165608 2018-07-23] (Malwarebytes)
R3 MBAMFarflt; C:\windows\System32\DRIVERS\farflt.sys [95488 2018-07-24] (Malwarebytes)
R3 MBAMProtection; C:\windows\System32\DRIVERS\mbam.sys [42728 2018-07-24] (Malwarebytes)
R0 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [220896 2018-07-23] (Malwarebytes)
R3 MBAMWebProtection; C:\windows\System32\DRIVERS\mwac.sys [73336 2018-07-25] (Malwarebytes)
R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)
S3 MpNWMon; C:\windows\System32\DRIVERS\MpNWMon.sys [42368 2010-03-25] (Microsoft Corporation)
R0 speedfan; C:\windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
S3 ssudmdm; C:\windows\System32\DRIVERS\ssudmdm.sys [147072 2017-01-16] (Samsung Electronics Co., Ltd.)
R1 StarOpen; C:\windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S3 usbrndis6; C:\windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
S3 vpnva; C:\windows\System32\DRIVERS\vpnva-6.sys [43376 2013-10-10] (Cisco Systems, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-25 22:05 - 2018-07-25 22:07 - 000013469 _____ C:\Users\Reny\Desktop\FRST.txt
2018-07-24 17:49 - 2018-07-24 17:49 - 000001193 _____ C:\Users\Reny\Desktop\Do telefonu – zástupce.lnk
2018-07-24 17:49 - 2018-07-24 17:49 - 000001166 _____ C:\Users\Reny\Desktop\Nemanice – zástupce.lnk
2018-07-24 17:47 - 2018-07-24 17:49 - 000000000 ____D C:\Users\Reny\Documents\Plocha
2018-07-24 12:09 - 2018-07-25 22:07 - 000073336 _____ (Malwarebytes) C:\windows\system32\Drivers\mwac.sys
2018-07-23 22:20 - 2018-07-24 23:39 - 000095488 _____ (Malwarebytes) C:\windows\system32\Drivers\farflt.sys
2018-07-23 22:20 - 2018-07-24 23:39 - 000042728 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2018-07-23 22:20 - 2018-07-23 22:20 - 000220896 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamswissarmy.sys
2018-07-23 22:20 - 2018-07-23 22:20 - 000165608 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamChameleon.sys
2018-07-23 21:35 - 2018-07-23 21:35 - 000000000 ____D C:\Users\Reny\Documents\SelfMV
2018-07-23 20:58 - 2018-07-23 20:58 - 000000000 ____D C:\ProgramData\Samsung
2018-07-23 18:02 - 2018-07-23 18:02 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-07-23 18:02 - 2018-07-23 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-07-23 18:02 - 2018-07-23 18:02 - 000000000 ____D C:\Program Files\WinRAR
2018-07-23 17:53 - 2018-07-25 22:05 - 000000000 ____D C:\FRST
2018-07-23 17:45 - 2018-07-23 17:46 - 001773056 _____ (Farbar) C:\Users\Reny\Desktop\FRST.exe
2018-07-23 07:03 - 2018-07-23 07:04 - 007417040 _____ (Malwarebytes) C:\Users\Reny\Downloads\adwcleaner_7.2.2.exe
2018-07-22 15:30 - 2018-07-22 15:30 - 000000877 _____ C:\windows\SETUPWEB.INI
2018-07-22 15:30 - 2018-07-22 15:30 - 000000000 ____D C:\Users\Reny\AppData\Roaming\TeamViewer
2018-07-22 15:16 - 2018-07-22 15:30 - 000270474 _____ C:\windows\ntbtlog.txt
2018-07-22 10:56 - 2018-07-22 10:56 - 000001606 _____ C:\Users\Reny\Documents\cc_20180722_105610.reg
2018-07-22 10:55 - 2018-07-22 10:55 - 000003386 _____ C:\Users\Reny\Documents\cc_20180722_105524.reg
2018-07-22 10:54 - 2018-07-22 10:54 - 000027834 _____ C:\Users\Reny\Documents\cc_20180722_105441.reg
2018-07-22 09:44 - 2018-07-22 10:31 - 000129248 _____ (Malwarebytes) C:\windows\system32\Drivers\mbae.sys
2018-07-22 09:44 - 2018-07-22 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-07-22 09:44 - 2018-07-22 09:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-07-22 09:44 - 2018-07-22 09:44 - 000000000 ____D C:\Program Files\Malwarebytes
2018-07-22 09:18 - 2018-07-22 09:26 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Visual Studio Setup
2018-07-22 09:18 - 2018-07-22 09:18 - 000001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2018-07-22 09:18 - 2018-07-22 09:18 - 000000000 ____D C:\Users\Reny\AppData\Roaming\vstelemetry
2018-07-22 09:18 - 2018-07-22 09:18 - 000000000 ____D C:\Users\Reny\AppData\Local\ServiceHub
2018-07-22 09:17 - 2018-07-22 09:17 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Microsoft Visual Studio
2018-07-22 09:16 - 2018-07-22 09:16 - 000000000 ____D C:\ProgramData\Microsoft Visual Studio
2018-07-21 20:26 - 2018-06-13 19:59 - 000122560 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2018-07-21 20:26 - 2018-06-13 17:53 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 002703872 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe
2018-07-21 20:26 - 2018-06-08 15:05 - 001359360 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000619520 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000517120 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000358912 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000353792 _____ (Microsoft Corporation) C:\windows\system32\centel.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000246272 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2018-07-21 20:26 - 2018-06-08 15:05 - 000202752 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2018-07-21 20:18 - 2018-06-13 17:55 - 012880384 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2018-07-21 20:18 - 2018-06-13 17:54 - 001499648 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2018-07-21 20:18 - 2018-06-13 17:25 - 002404352 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2018-07-21 20:18 - 2018-06-08 18:02 - 004050624 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2018-07-21 20:18 - 2018-06-08 18:02 - 003962048 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2018-07-21 20:18 - 2018-06-08 18:02 - 000189632 _____ (Microsoft Corporation) C:\windows\system32\halmacpi.dll
2018-07-21 20:18 - 2018-06-08 18:02 - 000189632 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2018-07-21 20:18 - 2018-06-08 18:02 - 000137920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2018-07-21 20:18 - 2018-06-08 18:02 - 000136384 _____ (Microsoft Corporation) C:\windows\system32\halacpi.dll
2018-07-21 20:18 - 2018-06-08 18:02 - 000067264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2018-07-21 20:18 - 2018-06-08 17:57 - 001310488 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 001417728 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 001063424 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000377344 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000330240 _____ (Microsoft Corporation) C:\windows\system32\zipfldr.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000070144 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\oleres.dll
2018-07-21 20:18 - 2018-06-08 17:55 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000269824 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000131584 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:54 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:29 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\comcat.dll
2018-07-21 20:18 - 2018-06-08 17:28 - 000030720 _____ (Microsoft Corporation) C:\windows\system32\dnscacheugc.exe
2018-07-21 20:18 - 2018-06-08 17:27 - 000097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2018-07-21 20:18 - 2018-06-08 17:27 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2018-07-21 20:18 - 2018-06-08 17:27 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2018-07-21 20:18 - 2018-06-08 17:27 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2018-07-21 20:18 - 2018-06-08 17:27 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2018-07-21 20:18 - 2018-06-08 17:25 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2018-07-21 20:18 - 2018-06-08 17:24 - 000262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2018-07-21 20:18 - 2018-06-08 17:24 - 000107008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys
2018-07-21 20:18 - 2018-06-08 17:21 - 000226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2018-07-21 20:18 - 2018-06-08 17:21 - 000124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2018-07-21 20:18 - 2018-06-08 17:21 - 000098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2018-07-21 20:18 - 2018-06-08 17:19 - 000069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2018-07-21 20:18 - 2018-06-08 17:19 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2018-07-21 20:18 - 2018-06-08 17:19 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-07-21 20:18 - 2018-06-08 17:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-07-21 20:18 - 2018-06-07 17:57 - 000564736 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll
2018-07-21 20:18 - 2018-06-07 17:57 - 000463360 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll
2018-07-21 20:18 - 2018-06-07 17:57 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\icfupgd.dll
2018-07-21 20:18 - 2018-06-07 17:34 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys
2018-07-21 20:18 - 2018-06-07 17:34 - 000018944 _____ (Microsoft Corporation) C:\windows\system32\wfapigp.dll
2018-07-21 20:18 - 2018-05-31 17:56 - 001310912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2018-07-21 20:18 - 2018-05-31 17:56 - 000240832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2018-07-21 20:18 - 2018-05-31 17:56 - 000187584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2018-07-21 19:57 - 2018-07-22 08:52 - 000000000 ____D C:\Program Files\Samsung
2018-07-19 21:04 - 2018-07-19 21:04 - 000000000 ____D C:\Users\Reny\AppData\Local\Downloaded Installations
2018-07-15 08:41 - 2018-07-15 08:41 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-07-14 11:22 - 2018-07-14 11:22 - 000002176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2018-07-02 07:37 - 2018-05-02 17:30 - 000285184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000259584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2018-07-02 07:37 - 2018-05-02 17:30 - 000020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2018-07-02 07:37 - 2018-05-02 17:29 - 000006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2018-07-02 07:37 - 2018-04-26 15:05 - 000918296 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000065880 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000021848 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000018776 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000017240 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000017240 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000015704 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000015192 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000013656 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000013656 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000013152 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000012120 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000012120 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011608 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-07-02 07:37 - 2018-04-26 15:05 - 000011096 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-07-02 07:37 - 2018-04-25 17:54 - 000088576 _____ (Microsoft Corporation) C:\windows\system32\wkssvc.dll
2018-07-02 07:37 - 2018-04-25 17:17 - 000088576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys
2018-06-28 07:03 - 2018-06-28 07:03 - 000019502 _____ C:\Users\Reny\Documents\cc_20180628_070331.reg
2018-06-27 21:39 - 2018-07-23 07:21 - 000000000 ____D C:\ProgramData\BSD
2018-06-27 21:31 - 2018-06-27 21:31 - 000000000 __RSH C:\MSDOS.SYS
2018-06-27 21:31 - 2018-06-27 21:31 - 000000000 __RSH C:\IO.SYS

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-25 22:04 - 2016-02-19 10:54 - 000000914 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001UA.job
2018-07-25 21:40 - 2010-10-15 15:12 - 000000958 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001UA.job
2018-07-25 21:15 - 2015-02-05 16:05 - 000000940 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1d0414cdd6b5484.job
2018-07-25 21:10 - 2010-04-12 18:01 - 000000940 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2018-07-25 15:10 - 2010-04-12 18:01 - 000000936 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2018-07-25 13:04 - 2016-02-19 10:53 - 000000862 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001Core.job
2018-07-25 07:40 - 2010-10-15 15:12 - 000000906 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001Core.job
2018-07-25 06:58 - 2009-07-14 06:34 - 000023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-07-25 06:58 - 2009-07-14 06:34 - 000023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-07-24 23:39 - 2018-02-07 15:09 - 000000000 ___RD C:\Users\Reny\OneDrive
2018-07-24 23:37 - 2017-11-12 18:52 - 000726016 ___SH C:\Users\Reny\Desktop\Thumbs.db
2018-07-24 23:36 - 2010-05-30 11:18 - 000065536 _____ C:\windows\system32\Ikeext.etl
2018-07-24 23:36 - 2009-07-14 06:53 - 000000006 ____H C:\windows\Tasks\SA.DAT
2018-07-24 23:35 - 2010-01-05 13:10 - 000000000 ____D C:\Program Files\Google
2018-07-24 23:33 - 2011-12-11 19:43 - 000000000 ____D C:\windows\pss
2018-07-24 23:28 - 2010-04-12 17:56 - 000000000 ____D C:\Users\Reny\AppData\Local\Google
2018-07-24 09:03 - 2014-07-10 11:33 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-07-24 05:54 - 2010-04-12 23:40 - 000000000 ___RD C:\Users\Reny\Documents\Hudba
2018-07-24 05:48 - 2014-06-03 18:50 - 000000000 ___RD C:\Users\Reny\Disk Google
2018-07-24 05:47 - 2010-01-06 06:17 - 000734026 _____ C:\windows\system32\perfh005.dat
2018-07-24 05:47 - 2010-01-06 06:17 - 000168776 _____ C:\windows\system32\perfc005.dat
2018-07-24 05:47 - 2009-07-26 22:06 - 001740560 _____ C:\windows\system32\PerfStringBackup.INI
2018-07-24 05:47 - 2009-07-14 04:37 - 000000000 ____D C:\windows\inf
2018-07-23 22:18 - 2011-09-18 18:12 - 000118136 _____ C:\windows\system32\GDIPFONTCACHEV1.DAT
2018-07-23 22:17 - 2009-07-14 06:33 - 002416248 _____ C:\windows\system32\FNTCACHE.DAT
2018-07-23 22:13 - 2016-03-25 00:38 - 000000000 ____D C:\Users\Public\Documents\RonyaSoft
2018-07-23 20:58 - 2016-02-27 15:40 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-07-23 20:48 - 2012-02-03 00:47 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Samsung
2018-07-23 20:41 - 2010-12-27 19:02 - 000000000 ____D C:\Users\Reny\AppData\LocalLow\Temp
2018-07-23 20:27 - 2017-06-03 22:24 - 000000000 ____D C:\Users\Reny\AppData\Roaming\vlc
2018-07-23 19:22 - 2012-12-28 11:17 - 000000924 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001UA.job
2018-07-23 12:05 - 2012-12-28 11:17 - 000000902 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3670137199-2938631228-624182700-1001Core.job
2018-07-23 07:21 - 2010-04-14 09:43 - 000000000 ____D C:\ProgramData\ICQ
2018-07-23 07:20 - 2017-11-08 07:55 - 000000000 ____D C:\AdwCleaner
2018-07-23 06:39 - 2009-07-14 04:37 - 000000000 ____D C:\windows\tracing
2018-07-22 21:12 - 2010-04-24 17:32 - 000000000 ____D C:\Users\Reny\Documents\Ostatní
2018-07-22 17:44 - 2009-07-14 04:37 - 000000000 ____D C:\windows\rescache
2018-07-22 14:59 - 2011-12-19 23:57 - 000000000 ____D C:\Qoobox
2018-07-22 10:20 - 2018-02-04 17:35 - 000000000 ____D C:\Users\DefaultAppPool.IIS APPPOOL
2018-07-22 10:20 - 2012-10-10 21:55 - 000000000 ____D C:\Users\UpdatusUser
2018-07-22 09:17 - 2014-10-05 14:07 - 000000000 ____D C:\Program Files\Microsoft Visual Studio
2018-07-22 08:55 - 2010-01-05 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2018-07-22 08:21 - 2014-12-11 10:49 - 000000000 ____D C:\windows\system32\appraiser
2018-07-22 08:15 - 2010-01-05 12:38 - 000000000 ____D C:\windows\system32\Macromed
2018-07-21 19:49 - 2010-04-12 17:04 - 000000000 ____D C:\Users\Reny
2018-07-21 19:46 - 2010-06-12 10:52 - 000000000 ____D C:\audiograbber
2018-07-21 19:46 - 2010-01-05 12:53 - 000000000 ____D C:\ProgramData\WinClon
2018-07-21 19:46 - 2010-01-05 12:40 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2018-07-21 19:46 - 2009-07-14 04:37 - 000000000 ____D C:\windows\system32\NDF
2018-07-21 19:45 - 2009-07-14 04:37 - 000000000 ____D C:\windows\registration
2018-07-21 17:08 - 2010-04-30 10:36 - 000000000 ____D C:\Users\Reny\AppData\Local\ElevatedDiagnostics
2018-07-19 21:20 - 2017-09-22 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-07-17 00:02 - 2010-04-20 11:13 - 000480888 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2018-07-16 06:54 - 2013-07-15 22:47 - 000000000 ____D C:\windows\system32\MRT
2018-07-16 06:46 - 2010-04-14 09:02 - 131626216 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2018-07-15 08:41 - 2012-07-21 18:46 - 000000000 ____D C:\Users\Reny\AppData\Roaming\Dropbox
2018-07-14 12:03 - 2012-03-30 08:57 - 000842240 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2018-07-14 12:03 - 2011-08-12 11:12 - 000175104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2018-07-14 11:02 - 2018-02-07 15:09 - 000002176 _____ C:\Users\Reny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2018-07-02 06:47 - 2009-07-14 04:04 - 000000893 _____ C:\windows\win.ini
2018-06-27 22:07 - 2015-07-26 10:04 - 000000000 ____D C:\Users\Reny\AppData\Local\CrashDumps

==================== Files in the root of some directories =======

2012-01-20 19:12 - 2011-12-29 00:00 - 117440512 _____ () C:\Program Files\clonezilla-live-20111125-oneiric.iso
2010-04-24 17:32 - 2006-11-02 11:21 - 000416768 _____ () C:\Program Files\HDDScan.exe
2012-07-28 22:31 - 2011-08-12 21:29 - 093733376 _____ () C:\Program Files\realspeaksoloczc.msi
2013-05-22 22:41 - 2013-04-24 16:22 - 009226470 _____ () C:\Program Files\_2013-4-24_02-45-55.amr
2012-02-03 00:25 - 2012-02-06 22:22 - 000037009 _____ () C:\Users\Reny\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2013-01-07 22:54 - 2016-12-28 07:15 - 000001771 _____ () C:\Users\Reny\AppData\Roaming\Rim.Desktop.Exception.log
2013-02-14 20:26 - 2013-08-06 08:01 - 000002196 _____ () C:\Users\Reny\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2013-01-07 22:54 - 2016-12-28 07:15 - 000001848 _____ () C:\Users\Reny\AppData\Roaming\Rim.DesktopHelper.Exception.log
2011-02-13 01:59 - 2014-07-24 17:03 - 000012288 _____ () C:\Users\Reny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-06-09 13:07 - 2012-06-09 13:07 - 000034764 _____ () C:\Users\Reny\AppData\Local\dt.dat
2010-04-12 22:22 - 2010-04-12 22:22 - 000000092 _____ () C:\Users\Reny\AppData\Local\fusioncache.dat
2012-06-17 22:54 - 2013-09-30 10:37 - 000004096 ____H () C:\Users\Reny\AppData\Local\keyfile3.drm
2015-08-17 17:37 - 2015-08-17 17:37 - 000003258 _____ () C:\Users\Reny\AppData\Local\recently-used.xbel
2014-02-05 10:47 - 2014-07-20 10:56 - 000007625 _____ () C:\Users\Reny\AppData\Local\resmon.resmoncfg
2013-03-31 18:04 - 2013-03-31 18:04 - 000001040 _____ () C:\Users\Reny\AppData\Local\SRDownloader.nast

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-19 23:59

==================== End of FRST.txt ============================

BING je pryč, už mi ani chrom nedává výběr povolit zakázat
"Co je WinClon.exe?
WinClon.exe je typem souboru EXE, který se spájá s Third-Party Software vytvořeným Samsung Electronics Co., Ltd. pro operační systém Windows. Poslední známá verze WinClon.exe je 4.2.0.6, která byla vytvořena Windows. Tento soubor EXE dosáhl v hodnocení oblíbenosti 1 hvězdiček a v hodnocení bezpečnosti "Neznámý"."
Tak něco ze Samsungácké apky

Za prispevok dakujeme.

Spusti kontrolu integrity systemovych suborov:

• Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na polozku cmd a klikni na Spustit ako spravca
• Skopiruj a spusti prikaz:

  Kód: Vybrat vše

  sfc /scannow

• Po dokonceni skopiruj a spusti tento prikaz:

  Kód: Vybrat vše

  findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"

• Na ploche sa vytvori subor sfcdetails.txt, zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
• Restartuj PC a napis ci je vsetko ok / ako sa chova PC

Po konzultacii s kolegom poslem este jeden fixlist.

Druhý příkaz nic nepsal, zjevně nic nedělal, ale soubor na ploše byl
Vše OK, jen Outook asi minutu neodpovídal