Kdykoli odstraním NIS, ať už ho na chvíli vypnu, nebo odinstaluju úplně, zhoršuje se kontrola nad pc.
Odinstalováno klasicky a vzápětí znovu nainstalováno. takže jsem nepoužila odinstalátor removal, možná to byla chyba.
Teď jsou aktualizace NIS rušeny. Tedy hlásí že je úspěšně nainstaloval. Ale v úlohách na pozadí, kde se to dá kontrolovat je uvedeno, že např. aktualizace 30.5.16 15:00 - zrušeno. Přitom v historii zabezpeční NIS je napsáno, že byly úspěšně staženy a nainstalovány.
tak nový FRST, ale bez té doplňkové utility. Vystrašilo mě, že stránka je nahlášena
Přikládám Addition do přílohy
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-05-2016 02
Ran by Uživatel (administrator) on UŽIVATEL-PC (30-05-2016 15:47:00)
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel (Available Profiles: Uživatel & Jade & Jad)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.6.0.142\NS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehrec.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.6.0.142\NS.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(ScanSoft, Inc.) C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [56928 2006-11-23] (Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [54832 2006-12-05] ()
HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM\...\Run: [OpwareSE4] => C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKU\S-1-5-21-3204517323-1476771048-2940318784-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3204517323-1476771048-2940318784-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [221184 2008-01-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 02 C:\Windows\system32\napinsp.dll [50176 2008-01-21] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{543E420B-7D72-483E-9F28-BCA2C1829E7F}: [DhcpNameServer] 213.46.172.36 213.46.172.37
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3204517323-1476771048-2940318784-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://
www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://
www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3204517323-1476771048-2940318784-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://
www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-3204517323-1476771048-2940318784-1000 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\jnhehrhl.default
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=1.1.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2011-07-14] (the VideoLAN Team)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-08-27] [not signed]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.6.0.142\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.6.0.142\coFFAddon [2016-05-25]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.6.0.142\Exts\Chrome.crx [2016-02-21]
CHR HKLM\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path\update_url>
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-08-18] (NVIDIA Corporation)
R2 NS; C:\Program Files\Norton Security\Engine\22.6.0.142\NS.exe [289080 2016-02-26] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-08-18] (NVIDIA Corporation)
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [167936 2005-08-08] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 BHDrvx86; C:\Program Files\Norton Security\NortonData\22.6.0.142\Definitions\BASHDefs\20160521.001\BHDrvx86.sys [1317624 2016-05-20] (Symantec Corporation)
R1 ccSet_NS; C:\Windows\system32\drivers\NS\1606000.08E\ccSetx86.sys [137456 2016-02-24] (Symantec Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [388848 2016-05-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [124144 2016-05-25] (Symantec Corporation)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R1 IDSVix86; C:\Program Files\Norton Security\NortonData\22.6.0.142\Definitions\IPSDefs\20160527.001\IDSvix86.sys [667352 2016-05-26] (Symantec Corporation)
R3 NAVENG; C:\Program Files\Norton Security\NortonData\22.6.0.142\Definitions\VirusDefs\20160529.019\NAVENG.SYS [104408 2016-05-27] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton Security\NortonData\22.6.0.142\Definitions\VirusDefs\20160529.019\NAVEX15.SYS [1647192 2016-05-27] (Symantec Corporation)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1131136 2007-04-03] (Philips Semiconductors GmbH)
R3 SRTSP; C:\Windows\System32\Drivers\NS\1606000.08E\SRTSP.SYS [713968 2016-02-24] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NS\1606000.08E\SRTSPX.SYS [44792 2016-02-24] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NS\1606000.08E\SYMEFASI.SYS [1287408 2016-02-24] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [103152 2016-05-25] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NS\1606000.08E\Ironx86.SYS [234736 2016-02-24] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\NS\1606000.08E\SYMTDIV.SYS [358104 2016-02-24] (Symantec Corporation)
S3 usb2vcom; C:\Windows\System32\Drivers\usb2vcom.sys [30368 2006-07-17] () [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-30 15:47 - 2016-05-30 15:47 - 00010559 _____ C:\Users\Uživatel\Desktop\FRST.txt
2016-05-30 15:46 - 2016-05-30 15:47 - 00000000 ____D C:\FRST
2016-05-30 15:45 - 2016-05-30 15:45 - 00000000 ____D C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2016-05-30 15:40 - 2016-05-30 15:40 - 01734656 _____ (Farbar) C:\Users\Uživatel\Desktop\FRST.exe
2016-05-30 13:56 - 2016-05-30 13:57 - 00000000 ____D C:\Users\Jade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2016-05-27 12:23 - 2016-05-27 13:28 - 00017819 _____ C:\Users\Jade\Desktop\p.odt
2016-05-27 12:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-05-27 11:59 - 2016-05-27 12:12 - 00000000 ___SD C:\32788R22FWJFW
2016-05-25 23:14 - 2016-05-25 23:14 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2016-05-25 23:05 - 2016-05-27 11:35 - 00000829 _____ C:\Users\Uživatel\Desktop\Norton Installation Files.lnk
2016-05-25 23:05 - 2016-05-27 11:35 - 00000000 ____D C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2016-05-25 23:03 - 2016-05-25 23:03 - 01089632 _____ (Symantec Corporation) C:\Users\Jade\Downloads\NortonNSDownloader(1).exe
2016-05-25 22:27 - 2016-05-25 23:14 - 00002043 _____ C:\Users\Public\Desktop\Norton Security.LNK
2016-05-25 22:27 - 2016-05-25 22:52 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-05-25 22:27 - 2016-05-25 22:41 - 00103152 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2016-05-25 22:27 - 2016-05-25 22:41 - 00008178 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2016-05-25 22:26 - 2016-05-25 23:14 - 00000000 ____D C:\Windows\system32\Drivers\NS
2016-05-25 22:26 - 2016-05-25 22:26 - 00000000 ____D C:\Program Files\NortonInstaller
2016-05-25 22:26 - 2016-05-25 22:26 - 00000000 ____D C:\Program Files\Norton Security
2016-05-25 22:24 - 2016-05-25 22:24 - 00005670 _____ C:\Users\Public\Downloads\nový log combo.txt
2016-05-25 22:23 - 2016-05-25 22:23 - 00005670 _____ C:\ComboFix.txt
2016-05-23 19:52 - 2016-05-27 12:11 - 00000000 ____D C:\Windows\erdnt
2016-05-11 11:27 - 2016-05-25 22:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-05-11 10:53 - 2016-05-11 10:53 - 00021108 _____ C:\Users\Jade\Desktop\kombinace augsburg.odt
2016-05-09 21:39 - 2016-05-09 21:39 - 00001151 _____ C:\Users\Public\Downloads\AdwCleaner[S4].txt
2016-05-09 21:02 - 2016-05-09 21:02 - 03640384 _____ C:\Users\Public\Downloads\adwcleaner_5.116.exe
2016-05-04 08:27 - 2016-03-24 22:40 - 01815552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-04 08:27 - 2016-03-24 22:38 - 12841472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-04 08:27 - 2016-03-24 22:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-04 08:27 - 2016-03-24 22:35 - 09753600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-04 08:27 - 2016-03-24 22:35 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-04 08:27 - 2016-03-24 22:34 - 01129984 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-04 08:27 - 2016-03-24 22:33 - 01804800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-04 08:27 - 2016-03-24 22:33 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-04 08:27 - 2016-03-24 22:33 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-04 08:27 - 2016-03-24 22:33 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-04 08:27 - 2016-03-24 22:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-05-04 08:27 - 2016-03-24 22:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-04 08:27 - 2016-03-24 22:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-04 08:27 - 2016-03-24 22:32 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 00354304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-05-04 08:27 - 2016-03-24 22:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-05-04 08:27 - 2016-03-24 22:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-05-04 07:48 - 2016-03-04 18:52 - 01253376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-04 07:47 - 2016-03-18 19:10 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-04 07:47 - 2016-03-18 19:10 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-04 07:47 - 2016-03-18 19:10 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-04 07:47 - 2016-03-18 19:10 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-05-04 07:47 - 2016-03-18 19:09 - 01259520 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-04 07:46 - 2016-03-18 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-04 07:45 - 2016-03-29 22:30 - 02070016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-30 19:21 - 2016-04-30 19:22 - 00302011 _____ C:\Users\Jade\Downloads\WindowsUpdateDiagnostic(1).diagcab
2016-04-30 19:20 - 2016-04-30 19:20 - 00302011 _____ C:\Users\Jade\Downloads\WindowsUpdateDiagnostic.diagcab
2016-04-30 17:19 - 2016-04-30 17:19 - 00001163 _____ C:\Users\Jade\Desktop\mbam log.txt
2016-04-30 16:35 - 2016-04-30 16:35 - 00001177 _____ C:\Users\Public\Documents\mbam log 30_4_2016
2016-04-30 11:11 - 2016-04-30 16:19 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-30 11:11 - 2016-04-30 11:11 - 00000899 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-30 11:10 - 2016-04-30 11:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-30 11:10 - 2016-04-30 11:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-30 11:10 - 2016-04-30 11:10 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-04-30 11:10 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-04-30 11:10 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-30 11:10 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-30 15:32 - 2006-11-02 14:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-05-30 13:55 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-30 13:55 - 2006-11-02 14:47 - 00004160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-30 13:55 - 2006-11-02 14:47 - 00004160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-30 09:38 - 2006-11-02 15:01 - 00032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-05-27 14:58 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Movie Maker
2016-05-27 11:35 - 2015-08-31 10:13 - 00000000 ____D C:\ProgramData\Norton
2016-05-25 22:26 - 2015-08-31 10:13 - 00000000 ____D C:\ProgramData\NortonInstaller
2016-05-25 22:19 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2016-05-18 14:06 - 2006-11-02 14:47 - 00254968 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-18 14:02 - 2016-04-17 21:40 - 00000000 ____D C:\AdwCleaner
2016-05-18 14:02 - 2015-09-07 16:39 - 00779472 _____ C:\Windows\ntbtlog.txt
2016-05-12 07:46 - 2015-08-31 13:51 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-05-04 08:47 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2016-05-04 07:44 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-05-02 13:34 - 2008-05-26 17:48 - 01530430 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-02 13:34 - 2008-05-26 12:35 - 00644310 _____ C:\Windows\system32\perfh005.dat
2016-05-02 13:34 - 2008-05-26 12:35 - 00136980 _____ C:\Windows\system32\perfc005.dat
2016-05-02 13:34 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\inf
2016-04-30 16:33 - 2015-08-27 10:05 - 00001356 _____ C:\Users\Uživatel\AppData\Local\d3d9caps.dat
2016-04-30 11:09 - 2015-08-27 10:06 - 00055176 _____ C:\Users\Uživatel\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Files in the root of some directories =======
2015-08-27 10:05 - 2016-04-30 16:33 - 0001356 _____ () C:\Users\Uživatel\AppData\Local\d3d9caps.dat
2015-08-27 12:17 - 2015-08-28 12:59 - 0035180 _____ () C:\ProgramData\nvModes.001
2015-08-27 11:52 - 2015-08-28 12:59 - 0035180 _____ () C:\ProgramData\nvModes.dat
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-05-30 14:01
==================== End of FRST.txt ============================