VIRY.CZ

hezký den,
mám ve správni úloh spuštěný "popwndexe" s tím že v popisu jsou čínské znaky, včera něco našel MSE, a raděj jsem doinstaloval AVIRU prosím o kontrolu jesli tu mám ještě nějaké zmetky

díky

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-07-2015
Ran by Kvapi (administrator) on KVAPI-PC on 18-07-2015 09:39:26
Running from C:\Users\Kvapi\Desktop
Loaded Profiles: Kvapi (Available Profiles: Kvapi & Pro všechny)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Beijing Rising Information Technology Co., Ltd.) C:\Program Files (x86)\Rising\RSD\RsMgrSvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Beijing Rising Information Technology Co., Ltd.) C:\Program Files (x86)\Rising\RSD\popwndexe.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(The Pidgin developer community) C:\Program Files (x86)\Pidgin\pidgin.exe
(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avcenter.exe
(forum.viry.cz) C:\Users\Kvapi\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [730416 2015-06-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\...\MountPoints2: {2d0b7ecb-a911-11e3-8a07-9f3c29efce42} - G:\Startme.exe
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\...\MountPoints2: {5456391e-4216-11e1-9446-002243a41992} - F:\Autorun.exe
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\...\MountPoints2: {5456392a-4216-11e1-9446-002243a41992} - F:\Autorun.exe
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation)
Startup: C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-14]
ShortcutTarget: Dropbox.lnk -> C:\Users\Kvapi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID= ... M%3DIE11SR
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2578} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2578} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKU\S-1-5-21-1314728291-1035760696-3768504872-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1314728291-1035760696-3768504872-1000 -> {6A8F5889-4A4E-4D73-BA5F-9A53856518A6} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
SearchScopes: HKU\S-1-5-21-1314728291-1035760696-3768504872-1000 -> {7514ED0C-8E41-478A-A2FD-2810A1B39961} URL = http://websearch.ask.com/redirect?clien ... D4CEC963BB
SearchScopes: HKU\S-1-5-21-1314728291-1035760696-3768504872-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2578} URL = http://www.default-search.net/search?si ... earchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-13] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: Ó¦Óñ¦Ň»Ľü°˛×°˛ĺĽţ -> {50F4150A-48B2-417A-BE4C-C83F580FB904} -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-04] (Microsoft Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-04] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{E4ED5967-171A-4B50-BC40-D8A3AF2E5D63}: [DhcpNameServer] 213.46.172.37 213.46.172.36

FireFox:
========
FF ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [2015-05-12] ()
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [2015-04-29] (爱奇艺公司)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-13] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [2015-05-12] ()
FF Plugin-x32: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [2015-04-29] (爱奇艺公司)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @client.dropbox.com/Dropbox Update;version=3 -> C:\Users\Kvapi\AppData\Local\Dropbox\Update\1.3.27.15\npDropboxUpdate3.dll [2015-05-15] (Dropbox, Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @client.dropbox.com/Dropbox Update;version=9 -> C:\Users\Kvapi\AppData\Local\Dropbox\Update\1.3.27.15\npDropboxUpdate3.dll [2015-05-15] (Dropbox, Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [2015-04-29] (爱奇艺公司)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Kvapi\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Kvapi\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Kvapi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml [2014-03-06]
FF Extension: Avira Browser Safety - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\abs@avira.com [2015-07-17]
FF Extension: YouTube Advertisement Blocker - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\jid1-ldg27hkUG7neaA@jetpack.xpi [2015-07-17]
FF Extension: uBlock Origin - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\uBlock0@raymondhill.net.xpi [2015-07-17]
FF Extension: YouTube MP3 Downloader for Firefox - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\youtubemp3downloaderextension2014_mozilafirefox@jetpack.xpi [2015-07-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-22]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-06-15]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Seznam Lištička - Email) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2015-07-01]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2015-07-01]
CHR Extension: (Adblock Plus) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-07-01]
CHR Extension: (WhiatueCOUaPon) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednbingfaojkecahihanfpgkglgeldo [2015-07-06]
CHR Extension: (PhotoLive - Download Facebook Photos!) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpjnpabklnaaifclgealaepelncljadk [2015-07-01]
CHR Extension: (AdBlock) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-01]
CHR Extension: (Wizmage Image Blocker) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifoggbfaoakkojipahnplnbfnhhhnmlp [2015-07-15]
CHR Extension: (Google Wallet) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2015-07-01]
CHR Extension: (电脑管家上网防护) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooebklgpfnbcnpokahmdidgbmlcdepkm [2015-07-16]
CHR Extension: (SnapMyScreen) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnacmlfckijnmogihjeaojfnfiplhhpj [2015-07-06]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fpmeembnagmagppkgghhfjfdfajdfcah] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.GIA5IPZO3PDICRYRRKCHS7Y5OM - C:\Users\Kvapi\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827184 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [450808 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [450808 2015-06-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1188360 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 RsMgrSvc; C:\Program Files (x86)\Rising\RSD\RsMgrSvc.exe [184088 2015-07-16] (Beijing Rising Information Technology Co., Ltd.)
S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 4dd8d474; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\RelayDouble\RelayDouble.dll",serv
S2 fd0bb12c; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\SectionStasis\SectionStasis.dll",serv
S2 Filthy Complaint; "C:\Program Files (x86)\Filthy Complaint\Filthy Complaint.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [X]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [X]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-06-16] (Avira Operations GmbH & Co. KG)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATK64AMD.sys [13680 2007-08-09] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 smserial; C:\Windows\System32\DRIVERS\SmSerl64.sys [1227776 2009-06-10] (Motorola Inc.)
S3 TSSKX64; C:\Windows\System32\drivers\tsskx64.sys [38200 2015-07-16] (电脑管家)
S3 cpuz134; \??\C:\Users\Kvapi\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 easytether; system32\DRIVERS\easytthr.sys [X]
S1 hiepyjfk; \??\C:\Windows\system32\drivers\hiepyjfk.sys [X]
S1 QMUdisk; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16434.218\QMUdisk64.sys [X]
S3 TS888x64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16434.218\TS888x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2042-10-17 20:05 - 2042-10-17 20:05 - 00008192 __RSH C:\BOOTSECT.BAK
2042-10-17 20:05 - 2013-12-29 13:32 - 00000000 ____D C:\Windows\Panther
2042-10-17 20:05 - 2010-11-20 04:40 - 00383786 __RSH C:\bootmgr
2042-10-17 19:57 - 2015-05-15 22:48 - 00001912 _____ C:\Windows\epplauncher.mif
2042-10-17 19:57 - 2015-04-17 15:38 - 01642486 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2042-10-17 19:56 - 2015-07-07 22:30 - 00000000 ____D C:\Program Files\Java
2042-10-17 19:55 - 2042-10-17 19:55 - 00000000 ____D C:\ProgramData\Sun
2042-10-17 19:51 - 2042-10-17 19:51 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\LibreOffice
2042-10-17 19:49 - 2042-10-17 19:50 - 00000000 ____D C:\Temp
2042-10-17 19:49 - 2011-11-11 16:10 - 00000000 ____D C:\Program Files (x86)\LibreOffice 3.4
2042-10-17 19:43 - 2015-07-16 12:58 - 00117432 _____ C:\Users\Kvapi\AppData\Local\GDIPFONTCACHEV1.DAT
2042-10-17 19:42 - 2042-10-17 19:42 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\GHISLER
2042-10-17 19:42 - 2042-10-17 19:42 - 00000000 ____D C:\totalcmd
2042-10-17 19:42 - 2042-10-17 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\UC.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\RAR.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\PKZIP.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\PKUNZIP.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\NOCLOSE.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\LHA.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\ARJ.PIF
2042-10-17 19:39 - 2042-10-17 19:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\Notes
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\NeroVision
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\ICQ
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\ASUS
2042-10-17 19:37 - 2011-10-17 19:25 - 00000000 ____D C:\Users\Kvapi\Documents\Bluetooth Exchange Folder
2042-10-17 19:37 - 2011-08-21 21:59 - 00000000 _____ C:\Users\Kvapi\Documents\ww.youtube..avi_
2042-10-17 19:37 - 2011-08-21 21:45 - 00000000 _____ C:\Users\Kvapi\Documents\YouTube - KAREL GOTT - BT STLE MLD amp M POU g.avi_
2042-10-17 19:37 - 2011-08-21 21:44 - 00000000 _____ C:\Users\Kvapi\Documents\YouTube - KAREL GOTT - BT STLE MLD amp M POU g.mpeg_
2042-10-17 19:37 - 2011-03-20 15:35 - 00004130 _____ C:\Users\Kvapi\Documents\Profile-2-Intermediate-teachers-book.htm
2042-10-17 19:35 - 2042-10-17 19:35 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Mozilla
2042-10-17 19:35 - 2013-09-20 23:01 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Mozilla
2042-10-17 19:29 - 2011-04-18 20:08 - 01553408 _____ C:\Users\Kvapi\Ekonomicke_rozhodovani.ppt
2042-10-17 19:29 - 2011-04-18 20:08 - 00003820 _____ C:\Users\Kvapi\__CONTENT__.html
2042-10-17 19:29 - 2011-04-18 20:08 - 00000637 _____ C:\Users\Kvapi\__CONTENT__.txt
2042-10-17 19:29 - 2011-03-27 14:21 - 01225122 _____ C:\Users\Kvapi\ja 063.avi
2042-10-17 19:29 - 2010-12-07 16:45 - 03641856 _____ C:\Users\Kvapi\02_EFEKTIVNOST_MANAZERSKEJ_KOMUNIKACIE.ppt
2042-10-17 19:29 - 2010-12-07 16:45 - 00693248 _____ C:\Users\Kvapi\Komunikace_2010.ppt
2042-10-17 19:29 - 2010-12-07 16:45 - 00134656 _____ C:\Users\Kvapi\T1_Recova_komunikacia.ppt
2042-10-17 19:29 - 2010-11-18 12:50 - 00000165 ____H C:\Users\Kvapi\Desktop\~$Vysvětlete obecně pojem „efektivnost.pptx
2042-10-17 19:29 - 2009-11-01 17:39 - 00000162 ____H C:\Users\Kvapi\Desktop\~$Tahák.odt
2042-10-17 19:14 - 2015-07-16 12:18 - 00000000 ____D C:\Users\Kvapi\AppData\Local\VirtualStore
2042-10-17 19:14 - 2015-06-02 16:27 - 00001282 _____ C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2042-10-17 19:13 - 2042-10-17 19:13 - 00000020 ___SH C:\Users\Kvapi\ntuser.ini
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Šablony
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Soubory cookie
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Poslední
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Okolní tiskárny
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Okolní síť
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Nabídka Start
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Dokumenty
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\AppData\Local\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Šablony
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Poslední
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Okolní síť
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Dokumenty
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Šablony
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Plocha
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Oblíbené položky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Dokumenty
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 __SHD C:\Recovery
2042-10-17 19:13 - 2015-07-07 22:29 - 00000000 ____D C:\Users\Kvapi
2042-10-17 19:13 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2042-10-17 19:13 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2042-10-17 19:09 - 2042-10-17 19:09 - 00000000 _____ C:\Windows\ativpsrm.bin
2042-10-17 19:09 - 2015-07-18 08:36 - 01394900 _____ C:\Windows\WindowsUpdate.log
2015-07-18 09:39 - 2015-07-18 09:41 - 00020791 _____ C:\Users\Kvapi\Desktop\FRST.txt
2015-07-18 09:38 - 2015-07-18 09:39 - 00000000 ____D C:\FRST
2015-07-18 09:34 - 2015-07-18 09:36 - 02133504 _____ (Farbar) C:\Users\Kvapi\Desktop\FRST64.exe
2015-07-18 09:34 - 2015-07-18 09:35 - 00112640 _____ (forum.viry.cz) C:\Users\Kvapi\Desktop\FRSTLauncher.exe
2015-07-18 09:12 - 2015-07-18 09:13 - 02248704 _____ C:\Users\Kvapi\Downloads\adwcleaner_4.208.exe
2015-07-18 08:31 - 2015-07-18 08:31 - 00000000 ____D C:\Windows\LastGood
2015-07-17 10:50 - 2015-07-17 10:50 - 00000000 ____D C:\Users\Kvapi\Desktop\Původní data aplikace Firefox
2015-07-17 03:06 - 2015-07-17 03:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-07-17 03:03 - 2015-07-17 03:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-07-17 03:03 - 2015-07-17 03:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-07-16 16:48 - 2015-07-16 16:48 - 00000000 ____D C:\Users\Kvapi\AppData\Local\CEF
2015-07-16 15:45 - 2015-07-16 15:45 - 00003432 _____ C:\Windows\System32\Tasks\Avira Browser Safety Updater Task
2015-07-16 15:39 - 2015-07-16 15:39 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Avira
2015-07-16 15:32 - 2015-06-16 09:36 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-16 15:32 - 2015-06-16 09:36 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-07-16 15:32 - 2015-06-16 09:36 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-07-16 15:31 - 2015-06-16 09:36 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-16 15:25 - 2015-07-16 15:25 - 00001199 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-16 15:23 - 2015-07-16 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-16 15:22 - 2015-07-16 15:44 - 00000000 ____D C:\Program Files (x86)\Avira
2015-07-16 15:22 - 2015-07-16 15:31 - 00000000 ____D C:\ProgramData\Avira
2015-07-16 15:21 - 2015-07-16 15:21 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-16 15:19 - 2015-07-16 15:19 - 04721376 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kvapi\Downloads\avira_en_av_55a7af1a822a7__ws1.exe
2015-07-16 14:47 - 2015-07-16 14:47 - 00001170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-16 14:47 - 2015-07-16 14:47 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-16 14:44 - 2015-07-16 14:45 - 00242992 _____ C:\Users\Kvapi\Documents\Firefox Setup Stub 39.0.exe
2015-07-16 14:36 - 2015-07-17 07:46 - 00000000 ____D C:\Program Files (x86)\Internet Speed Checker
2015-07-16 14:36 - 2015-07-16 14:36 - 00000000 ____D C:\Program Files (x86)\66e9ea3c-0cce-4211-9b3d-34b44b8fbc78
2015-07-16 14:28 - 2015-07-16 15:06 - 00028984 _____ (Tencent) C:\Windows\SysWOW64\Drivers\TS888x64.sys
2015-07-16 14:27 - 2015-07-16 15:05 - 00003314 _____ C:\Windows\System32\Tasks\RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380}
2015-07-16 14:21 - 2015-07-16 14:21 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Crossbrowse
2015-07-16 14:07 - 2015-07-18 08:25 - 00001056 _____ C:\Windows\Tasks\Crossbrowse.job
2015-07-16 14:07 - 2015-07-16 14:07 - 00004082 _____ C:\Windows\System32\Tasks\Crossbrowse
2015-07-16 13:47 - 2015-07-16 13:47 - 00000000 ____D C:\ProgramData\TXQMPC
2015-07-16 13:45 - 2015-07-16 13:46 - 00000000 ___RD C:\Users\Kvapi\Desktop\To co hoří
2015-07-16 13:44 - 2015-07-16 15:51 - 00000000 ___RD C:\Users\Kvapi\Desktop\na dodělání
2015-07-16 13:34 - 2015-07-16 13:34 - 00000000 ____D C:\Users\Kvapi\Desktop\Generali a Axa
2015-07-16 13:18 - 2015-07-16 13:18 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\VSRevoGroup
2015-07-16 13:10 - 2015-07-16 13:10 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-07-16 13:08 - 2015-07-16 13:08 - 00000000 ____D C:\Program Files (x86)\fd7b9372-463c-4d96-8dbe-a0613e672c27
2015-07-16 12:56 - 2014-07-30 04:44 - 00091928 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\SysWOW64\vpatch.dll
2015-07-16 12:55 - 2015-07-17 10:23 - 00000000 ___RD C:\RavBin
2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\ProgramData\Rising
2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\Program Files (x86)\Rising
2015-07-16 12:18 - 2015-07-16 12:18 - 00000000 ____D C:\Program Files\Common Files\Tencent
2015-07-16 12:17 - 2015-07-16 12:10 - 00087864 _____ (电脑管家) C:\Windows\system32\Drivers\TFsFltX64.sys
2015-07-16 12:17 - 2015-07-16 12:10 - 00038200 _____ (电脑管家) C:\Windows\system32\Drivers\TSSKX64.sys
2015-07-16 12:16 - 2015-07-16 14:20 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2015-07-16 12:07 - 2015-07-16 12:52 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Tencent
2015-07-16 12:07 - 2015-07-16 12:07 - 00000000 ____D C:\Program Files (x86)\Tencent
2015-07-16 12:06 - 2015-07-16 13:31 - 00000000 ____D C:\ProgramData\Tencent
2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\Qiyi
2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\ProgramData\LocalStorage
2015-07-16 11:42 - 2015-07-16 11:43 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\ppslog
2015-07-16 11:35 - 2015-07-16 11:47 - 00000000 ____D C:\qycache
2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\Users\Kvapi\AppData\Local\SysassistByHotWheel
2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\ppsfile
2015-07-16 11:34 - 2015-07-16 11:41 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Unity
2015-07-16 11:33 - 2015-07-16 12:12 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\IQIYI Video
2015-07-16 11:33 - 2015-07-16 11:40 - 00000000 ____D C:\IQIYI Video
2015-07-16 11:33 - 2015-07-16 11:33 - 00000000 ____D C:\Users\Public\QiYi
2015-07-16 11:32 - 2015-07-16 18:35 - 00000000 ____D C:\Program Files (x86)\baidu
2015-07-16 11:32 - 2015-07-16 11:58 - 00000000 ____D C:\ProgramData\IQIYI Video
2015-07-16 11:16 - 2015-07-16 11:16 - 00772016 _____ (Reimage®) C:\Users\Kvapi\Downloads\ReimageRepair.exe
2015-07-16 09:31 - 2015-07-16 09:31 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-15 17:32 - 2015-07-16 18:34 - 00000000 ____D C:\Program Files (x86)\GoreAtSuaVe4aU
2015-07-15 17:31 - 2015-07-16 18:35 - 00000000 ____D C:\Program Files (x86)\GriEautSavE4U
2015-07-15 17:31 - 2015-07-16 18:32 - 00000000 ____D C:\Program Files (x86)\GReatSAve4U
2015-07-15 17:11 - 2015-07-16 12:35 - 00000000 ____D C:\Program Files (x86)\Filthy Complaint
2015-07-14 23:16 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 23:16 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-14 23:16 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 23:16 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 23:16 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 23:16 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-14 23:16 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 23:16 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 23:16 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 23:16 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 23:16 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 23:16 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-14 23:16 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-14 23:16 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-14 23:16 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-14 23:16 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-14 23:15 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-14 23:15 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-14 23:15 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-14 23:15 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-14 23:15 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-14 23:14 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 23:14 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 23:14 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-14 23:14 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 23:14 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-14 23:14 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 23:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-14 23:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 23:14 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-14 23:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-14 23:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-14 23:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 23:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-14 23:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-14 23:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-14 23:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-14 23:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-14 23:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-14 23:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-14 23:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-14 23:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 23:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 23:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 23:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-14 23:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 23:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-14 23:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 23:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 23:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-14 23:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-14 23:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-14 23:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 23:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-14 23:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-14 23:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 23:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-14 23:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-14 23:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-14 23:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 23:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 23:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 23:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 23:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 23:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-14 23:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 23:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 23:14 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 23:14 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 23:14 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-14 23:14 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-14 23:13 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-14 23:13 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-14 23:13 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-14 23:13 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-14 23:13 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 23:13 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 23:13 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 23:13 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 23:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-14 23:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-14 23:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-14 23:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-14 23:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-14 23:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-14 23:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-14 23:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-14 23:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-14 23:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-14 23:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-14 23:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-14 23:11 - 2015-07-03 19:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-14 23:11 - 2015-07-03 19:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-14 23:11 - 2015-07-03 19:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-14 23:11 - 2015-07-03 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-14 23:11 - 2015-07-03 18:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-14 23:11 - 2015-07-03 18:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-14 23:11 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-14 23:11 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-14 23:11 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-14 23:11 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-14 23:11 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-14 23:11 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-14 23:11 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-14 23:11 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-14 23:11 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-14 23:11 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-14 23:11 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-14 23:11 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-14 23:11 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-14 23:11 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-14 23:11 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-14 23:11 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-14 23:11 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-14 23:11 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-14 23:11 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-14 22:06 - 2015-07-14 22:06 - 00000079 _____ C:\Program Files (x86)\prefs.js
2015-07-07 22:29 - 2015-07-16 11:46 - 00000000 ____D C:\Users\Kvapi\.android
2015-07-07 22:26 - 2015-02-13 21:09 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-07-07 22:26 - 2015-02-13 21:09 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-07-07 22:26 - 2015-02-13 21:09 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-07-07 21:38 - 2015-07-07 21:38 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\JetBrains
2015-07-07 21:36 - 2015-07-07 21:36 - 00000000 ____D C:\Users\Kvapi\.AndroidStudio1.2
2015-07-07 21:36 - 2015-07-07 21:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2015-07-07 21:20 - 2015-07-07 21:20 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Android
2015-07-07 21:17 - 2015-07-07 22:12 - 00000000 ____D C:\Program Files\Android
2015-07-07 21:15 - 2015-02-13 21:09 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-07-07 21:06 - 2015-07-07 21:07 - 146861984 _____ (Oracle Corporation) C:\Users\Kvapi\Downloads\jdk-7u79-windows-x64.exe
2015-07-07 20:51 - 2015-07-07 20:58 - 930456592 _____ (Google Inc.) C:\Users\Kvapi\Downloads\android-studio-bundle-141.1980579-windows.exe
2015-07-06 22:17 - 2015-07-16 12:35 - 00000000 ____D C:\Program Files (x86)\RelayDouble
2015-07-06 22:12 - 2015-07-17 16:12 - 00000354 _____ C:\Windows\Tasks\GreenSignal.job
2015-07-06 22:12 - 2015-07-16 16:16 - 00000000 ____D C:\ProgramData\{230cf87b-8193-b06e-230c-cf87b819e1ee}
2015-07-06 22:12 - 2015-07-06 22:12 - 00003266 _____ C:\Windows\System32\Tasks\GreenSignal
2015-07-02 23:43 - 2015-07-16 13:34 - 00000000 ____D C:\Users\Kvapi\Desktop\Stáž Werek Media
2015-07-01 19:34 - 2015-07-16 14:41 - 00000024 _____ C:\Users\Kvapi\AppData\Roaming\appdataFr25.bin
2015-07-01 10:57 - 2015-07-01 10:57 - 00413629 _____ C:\Users\Kvapi\Downloads\lcvse.zip
2015-06-27 17:59 - 2015-06-27 17:59 - 00551344 _____ C:\Users\Kvapi\Downloads\Bezpečný podnik, Fialová Denisa, 12-3OB-C.pptx
2015-06-27 17:58 - 2015-06-27 17:58 - 00135400 _____ C:\Users\Kvapi\Downloads\Společenská odpovědnost firem.pptx
2015-06-27 17:58 - 2015-06-27 17:58 - 00135400 _____ C:\Users\Kvapi\Downloads\Společenská odpovědnost firem(1).pptx
2015-06-24 14:46 - 2015-07-14 22:28 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-06-24 14:43 - 2015-07-14 21:48 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2042-10-17 20:05 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2042-10-17 20:05 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2042-10-17 19:45 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2042-10-17 19:13 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2042-10-17 19:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2042-10-17 19:13 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2042-10-17 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2042-10-17 19:07 - 2009-07-14 17:37 - 00000000 ____D C:\Windows\CSC
2015-07-18 09:39 - 2009-07-14 06:45 - 00018976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-18 09:39 - 2009-07-14 06:45 - 00018976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-18 09:28 - 2015-05-15 13:23 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job
2015-07-18 09:02 - 2011-10-22 11:09 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\.purple
2015-07-18 08:50 - 2012-08-15 11:20 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-18 08:44 - 2015-06-02 20:44 - 00000520 _____ C:\Windows\Tasks\alpha_shopper_helper_service.job
2015-07-18 08:37 - 2011-10-18 16:03 - 00000000 ___RD C:\Users\Kvapi\Dropbox
2015-07-18 08:36 - 2014-10-29 18:45 - 00016744 _____ C:\Windows\setupact.log
2015-07-18 08:29 - 2011-10-18 15:59 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Dropbox
2015-07-18 08:25 - 2015-06-02 20:37 - 00001334 _____ C:\Windows\Tasks\GNOK.job
2015-07-18 08:25 - 2015-06-02 20:36 - 00001686 _____ C:\Windows\Tasks\BYAIAMUF.job
2015-07-18 08:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-17 13:28 - 2015-05-15 13:23 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job
2015-07-17 10:35 - 2009-07-14 17:18 - 00704904 _____ C:\Windows\system32\perfh005.dat
2015-07-17 10:35 - 2009-07-14 17:18 - 00154476 _____ C:\Windows\system32\perfc005.dat
2015-07-17 10:35 - 2009-07-14 07:13 - 01666836 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-17 10:23 - 2012-08-17 11:52 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job
2015-07-17 03:07 - 2015-04-06 22:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-17 03:07 - 2015-04-06 22:22 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-16 20:44 - 2015-04-18 09:49 - 00197576 _____ C:\Windows\PFRO.log
2015-07-16 18:31 - 2015-06-14 21:40 - 00000000 ____D C:\Program Files (x86)\BitoSaviEr
2015-07-16 16:15 - 2015-05-06 15:17 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\vlc
2015-07-16 16:14 - 2015-04-22 07:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-16 16:01 - 2015-06-02 16:12 - 00000000 ____D C:\ProgramData\{3e4b4551-cc9c-03ad-3e4b-b4551cc91547}
2015-07-16 15:47 - 2015-06-02 20:44 - 00000000 ____D C:\Program Files (x86)\Alpha Shopper
2015-07-16 15:03 - 2012-04-26 22:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-16 14:25 - 2009-07-14 06:45 - 05000720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-16 13:47 - 2012-05-02 10:10 - 00000000 ____D C:\Users\Kvapi\Desktop\Tak všechno možný
2015-07-16 13:40 - 2013-07-14 15:37 - 00000000 ___RD C:\Users\Kvapi\Desktop\Programy
2015-07-16 13:03 - 2013-09-15 17:23 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Seznam.cz
2015-07-16 11:46 - 2015-03-17 00:42 - 00000000 ____D C:\Users\Kvapi\AppData\Local\CrashDumps
2015-07-16 11:36 - 2015-06-04 12:02 - 00000000 ____D C:\Program Files\Recuva
2015-07-16 11:34 - 2015-06-04 11:48 - 00000165 _____ C:\Windows\Reimage.ini
2015-07-15 21:11 - 2012-08-17 11:52 - 00003536 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core
2015-07-15 18:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-15 17:34 - 2015-06-02 16:13 - 00000000 ____D C:\ProgramData\6034368370515782917
2015-07-15 15:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-15 15:02 - 2015-04-16 07:48 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 15:02 - 2014-05-07 08:53 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-15 00:11 - 2011-10-25 14:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-14 23:56 - 2013-08-09 07:34 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 21:51 - 2012-08-15 11:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-14 21:51 - 2012-08-15 11:20 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-14 21:51 - 2011-10-17 22:52 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-07 21:16 - 2014-05-30 15:43 - 00000000 ____D C:\ProgramData\Oracle
2015-07-05 12:08 - 2011-10-17 20:06 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 08:43 - 2011-10-17 22:12 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 23:37 - 2011-10-19 14:12 - 00091648 ___SH C:\Users\Kvapi\Thumbs.db
2015-07-01 23:00 - 2014-12-18 18:25 - 00000000 ____D C:\Users\Kvapi\Desktop\stalker
2015-07-01 20:08 - 2011-11-04 11:30 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Google
2015-06-27 01:44 - 2015-05-30 00:41 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\AIMP3
2015-06-24 14:49 - 2011-10-19 14:18 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Adobe
2015-06-24 14:49 - 2011-10-17 22:52 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Adobe
2015-06-24 14:46 - 2011-10-19 14:14 - 00000000 ____D C:\Program Files (x86)\Adobe

==================== Files in the root of some directories =======

2015-07-14 22:06 - 2015-07-14 22:06 - 0000079 _____ () C:\Program Files (x86)\prefs.js
2013-05-19 19:47 - 2013-05-19 19:47 - 0000132 _____ () C:\Users\Kvapi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-07-01 19:34 - 2015-07-16 14:41 - 0000024 _____ () C:\Users\Kvapi\AppData\Roaming\appdataFr25.bin
2015-03-09 23:30 - 2015-03-09 23:30 - 0005487 _____ () C:\Users\Kvapi\AppData\Roaming\BYAIAMUF
2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Kvapi\AppData\Roaming\GNOK
2012-10-09 18:16 - 2012-10-09 18:52 - 0001422 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader(1).err
2012-10-09 18:16 - 2012-10-09 18:50 - 0001496 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader(1).nast
2012-10-08 22:34 - 2012-10-09 18:56 - 0004043 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader.err
2012-10-08 22:33 - 2012-10-09 18:58 - 0002992 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader.nast
2015-06-02 16:29 - 2015-06-02 16:29 - 0000000 _____ () C:\Users\Kvapi\AppData\Local\Temp.dat
2011-10-25 22:00 - 2011-10-25 22:07 - 0001584 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\Kvapi\AppData\Local\Temp\18508.exe
C:\Users\Kvapi\AppData\Local\Temp\avgnt.exe
C:\Users\Kvapi\AppData\Local\Temp\default-search.DLL
C:\Users\Kvapi\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdrsqw9.dll
C:\Users\Kvapi\AppData\Local\Temp\install1804741.exe
C:\Users\Kvapi\AppData\Local\Temp\IQIYIsetup_l_spl004@kb005.exe
C:\Users\Kvapi\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Kvapi\AppData\Local\Temp\listicka-partner-16194-1.1.8-offline.exe
C:\Users\Kvapi\AppData\Local\Temp\masauto_runxx.dl.dll
C:\Users\Kvapi\AppData\Local\Temp\masblog_runxx.dl.dll
C:\Users\Kvapi\AppData\Local\Temp\masflag_runxx.dl.dll
C:\Users\Kvapi\AppData\Local\Temp\mpam-ee5156c6.exe
C:\Users\Kvapi\AppData\Local\Temp\mytmpinstaller.exe
C:\Users\Kvapi\AppData\Local\Temp\ppstreamsetup_unfix.exe
C:\Users\Kvapi\AppData\Local\Temp\qqpcmgr_v10.10.16434.218_72819_Silence.exe
C:\Users\Kvapi\AppData\Local\Temp\QYAgent_runxx.dl.dll
C:\Users\Kvapi\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Kvapi\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Kvapi\AppData\Local\Temp\sqlite3.exe
C:\Users\Kvapi\AppData\Local\Temp\UninstallES.exe
C:\Users\Kvapi\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Kvapi\AppData\Local\Temp\vlc-2.2.1-win32.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\alpha_shopper_helper_service.job => C:\Program Files (x86)\Alpha Shopper\alpha_shopper_helper_service.exe
Task: C:\Windows\Tasks\BYAIAMUF.job => C:\Users\Kvapi\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GNOK.job => C:\Users\Kvapi\AppData\Roaming\GNOK.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GreenSignal.job => c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}\3864521017300541606b.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Disabled - Up to date) {108DAC43-C256-20B7-BB05-914135DA5160}
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Microsoft Security Essentials (Disabled - Up to date) {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Kvapi\Desktop" je 12989 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Kvapi\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YTDownloader
"C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate
"C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Kvapi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk
C:\PROGRA~2\MICROS~2\Office12\ONENOTEM.EXE


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravim

Vyberte si, bud MSE nebo Avira - oboji tam mit nelze. Jeden z nich odinstalujte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

# AdwCleaner v3.020 - Report created 06/03/2014 at 11:01:14
# Updated 27/02/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Kvapi - KVAPI-PC
# Running from : C:\Users\Kvapi\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : RelevantKnowledge

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\~0
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
Folder Deleted : C:\Program Files (x86)\BearShare Applications
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\RelevantKnowledge
Folder Deleted : C:\Users\Kvapi\AppData\Local\Babylon
Folder Deleted : C:\Users\Kvapi\AppData\Local\DProtect
Folder Deleted : C:\Users\Kvapi\AppData\Local\PackageAware
Folder Deleted : C:\Users\Kvapi\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Kvapi\AppData\Roaming\ExpressFiles
Folder Deleted : C:\Users\Pro všechny\AppData\LocalLow\SweetIM
Folder Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\ICQToolbarData
File Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\searchplugins\askcomsearch.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\searchplugins\icqplugin.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\qvo6.xml
File Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\searchplugins\SearchResults.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchResults.xml
File Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\searchplugins\SweetIm.xml
File Deleted : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\user.js
File Deleted : C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
File Deleted : C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.qvo6.com_0.localstorage
File Deleted : C:\Windows\System32\Tasks\Express FilesUpdate

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Kvapi\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\Kvapi\Desktop\Programy\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Kvapi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Kvapi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Kvapi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ExpressFiles
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\delta-homesSoftware
Key Deleted : HKLM\Software\eSafeSecControl
Key Deleted : HKLM\Software\ExpressFiles
Key Deleted : HKLM\Software\qvo6Software
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D08D9F98-1C78-4704-87E6-368B0023D831}
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v24.0 (cs)

[ File : C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\6jq3tco9.default\prefs.js ]

Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Line Deleted : user_pref("browser.newtab.url", "hxxp://www.qvo6.com/?utm_source=b&utm_medium=a ... 1222475609");
Line Deleted : user_pref("browser.search.defaultenginename", "qvo6");
Line Deleted : user_pref("browser.search.order.1", "qvo6");
Line Deleted : user_pref("browser.search.selectedEngine", "qvo6");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.qvo6.com/?utm_source=b&utm_medium=a ... 1222475609");
Line Deleted : user_pref("extensions.BabylonToolbar.admin", false);
Line Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Line Deleted : user_pref("extensions.BabylonToolbar.babExt", "");
Line Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=108602");
Line Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 2);
Line Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", false);
Line Deleted : user_pref("extensions.BabylonToolbar.hmpg", false);
Line Deleted : user_pref("extensions.BabylonToolbar.id", "36939799000000000000020054746872");
Line Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15432");
Line Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Line Deleted : user_pref("extensions.BabylonToolbar.lastDP", 2);
Line Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1722:30:29");
Line Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "11.0");
Line Deleted : user_pref("extensions.BabylonToolbar.newTab", true);
Line Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Line Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Line Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Line Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 71959038);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Line Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Line Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Line Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Line Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Line Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Line Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1722:30:29");
Line Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108602");
Line Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "36939799000000000000020054746872");
Line Deleted : user_pref("extensions.BabylonToolbar_i.id", "36939799000000000000020054746872");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15432");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=108602&tt=290312_bexdll&babsrc=NT_ss&mntrId=36939799000000000000020054746872");
Line Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Line Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Line Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Line Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Line Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1722:30:29");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Line Deleted : user_pref("icqtoolbar.allowSendURL", false);
Line Deleted : user_pref("icqtoolbar.defSearchChange", true);
Line Deleted : user_pref("icqtoolbar.engineVerified", true);
Line Deleted : user_pref("icqtoolbar.geolastmodified", 1319004596);
Line Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Deleted : user_pref("icqtoolbar.history", "facebook||prvn%C3%AD%20rande||jak%20zjist%C3%ADm%20na%20skype%2C%20jakou%20pou%C5%BE%C3%ADv%C3%A1m%20kameru%3F||kamera%20asus%201.3%20mp%20ovlada%C4%8De||kamera%20Assu[...]
Line Deleted : user_pref("icqtoolbar.hpChange", true);
Line Deleted : user_pref("icqtoolbar.icqgeo", 42);
Line Deleted : user_pref("icqtoolbar.installTime", "1319004596");
Line Deleted : user_pref("icqtoolbar.newtab_state", "1");
Line Deleted : user_pref("icqtoolbar.numberOfSearches", 0);
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "7.0.1");
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.suggestions", false);
Line Deleted : user_pref("icqtoolbar.uninstStatSent", true);
Line Deleted : user_pref("icqtoolbar.uniqueID", "131897859113188792421319004596766");
Line Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1319243174);
Line Deleted : user_pref("icqtoolbar.userEngineApproved", true);
Line Deleted : user_pref("icqtoolbar.userHpApproved", true);
Line Deleted : user_pref("icqtoolbar.voucherHideClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherWasShown", 0);
Line Deleted : user_pref("icqtoolbar.xmlEnableHomePageDsGuard", true);
Line Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");

[ File : C:\Users\Pro všechny\AppData\Roaming\Mozilla\Firefox\Profiles\mdhzxfzr.default\prefs.js ]

Line Deleted : user_pref("browser.search.selectedEngine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.defaultenginename", "Ask.com");
Line Deleted : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&locale=en_EU&apn_uid=FE7BE783-5695-4953-ACEC-4ADB468CC5F7&apn_ptnrs=U3&apn_sauid=30E1E1FB-F883-4472-B911[...]
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "");

-\\ Google Chrome v

[ File : C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [16759 octets] - [06/03/2014 10:59:19]
AdwCleaner[S0].txt - [14402 octets] - [06/03/2014 11:01:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14463 octets] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

log z AdwCleaner co jsem sem dával prvně byl před tím než jsem klikl na clear :/

všiml jsem si že ve ff po použití zoek.exe zmizel zásuvný modul který se jevil jako nežádoucí

níž je log po čitění AdwCleaner zde je log z zoek

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Kvapi on so 18.07.2015 at 11:41:24,79.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Kvapi\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

18.7.2015 11:44:29 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\66e9ea3c-0cce-4211-9b3d-34b44b8fbc78 deleted successfully
C:\PROGRA~2\Alpha Shopper deleted successfully
C:\PROGRA~2\fd7b9372-463c-4d96-8dbe-a0613e672c27 deleted successfully
C:\PROGRA~2\HP deleted successfully
C:\PROGRA~2\Seznam.cz deleted successfully
C:\Program Files\Android deleted successfully
C:\Program Files\Nitro deleted successfully
C:\PROGRA~3\Deskshare deleted successfully
C:\Users\Kvapi\AppData\Roaming\Opera Software deleted successfully
C:\Users\Kvapi\AppData\Local\GHISLER deleted successfully
C:\Users\Kvapi\AppData\Local\Opera Software deleted successfully
C:\Users\PROVEC~1\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{50F4150A-48B2-417A-BE4C-C83F580FB904} deleted successfully
HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully
HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully
HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B5D5DBD-C857-4377-A755-06E50B4AC2B0} deleted successfully
HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6A8DA1-1731-465B-B036-B9E16EF26CAC} deleted successfully
HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6A8DA1-2731-465B-B036-B9E16EF26CAC} deleted successfully
HKEY_USERS\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{639B74F1-0594-432C-97C8-68C8C17A1E1D} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{50F4150A-48B2-417A-BE4C-C83F580FB904} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50F4150A-48B2-417A-BE4C-C83F580FB904} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\prefs.js:

Added to C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\PROVEC~1\AppData\Roaming\Mozilla\Firefox\Profiles\mdhzxfzr.default\prefs.js:

Added to C:\Users\PROVEC~1\AppData\Roaming\Mozilla\Firefox\Profiles\mdhzxfzr.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\3KE5Tvf2.default\prefs.js:

Added to C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\3KE5Tvf2.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- FireFox user.js and prefs.js backups ----

prefs_18.07.2015_1216_.backup

ProfilePath: C:\Users\PROVEC~1\AppData\Roaming\Mozilla\Firefox\Profiles\mdhzxfzr.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_18.07.2015_1216_.backup

ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\3KE5Tvf2.default

user.js not found
---- FireFox user.js and prefs.js backups ----


==== Deleting Files \ Folders ======================

C:\PROGRA~2\66e9ea3c-0cce-4211-9b3d-34b44b8fbc78 not found
C:\PROGRA~2\Alpha Shopper not found
C:\PROGRA~2\fd7b9372-463c-4d96-8dbe-a0613e672c27 not found
C:\PROGRA~2\HP not found
C:\PROGRA~2\Seznam.cz not found
C:\PROGRA~2\Filthy Complaint deleted
C:\Windows\syswow64\appdata deleted
C:\windows\SysNative\Tasks\GreenSignal deleted
C:\Users\Kvapi\.android deleted
C:\user.js deleted
C:\install.exe deleted
C:\PROGRA~3\ICQ deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Kvapi\AppData\Local\CrashRpt deleted
C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\Users\Kvapi\Downloads\android-studio-bundle-141.1980579-windows.exe deleted
C:\Users\Kvapi\Downloads\ReimageRepair.exe deleted
C:\Users\Kvapi\AppData\LocalLow\DataMngr deleted
C:\Windows\SysNative\rlls64.dll deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\is-UKQMF.tmp deleted
C:\Users\PROVEC~1\AppData\Roaming\Mozilla\Firefox\Profiles\mdhzxfzr.default\extensions\staged deleted
C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\extensions\abs@avira.com deleted
C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\3KE5Tvf2.default\extensions\abs@avira.com deleted
"C:\Users\Kvapi\AppData\Roaming\enchant\cs.dic" deleted
"C:\Users\Kvapi\AppData\Roaming\enchant\cs.exc" deleted
"C:\Users\Kvapi\AppData\Roaming\enchant" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\PROVEC~1\AppData\Roaming\Mozilla\Firefox\Profiles\mdhzxfzr.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\3KE5Tvf2.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046
- YouTube Advertisement Blocker - %ProfilePath%\extensions\jid1-ldg27hkUG7neaA@jetpack.xpi
- Undetermined - %ProfilePath%\extensions\uBlock0@raymondhill.net.xpi
- YouTube MP3 Downloader for Firefox - %ProfilePath%\extensions\youtubemp3downloaderextension2014_mozilafirefox@jetpack.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046
FD82108FD60B63010325D9AF6F00AF99 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll - Shockwave Flash
5950D438CD3DDF2DD50D9FA4E07A6C1C - C:\Users\Kvapi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
1F352B5944AF5C2204D9EFF7F845C5AF - C:\Users\Kvapi\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll - Google Update
866AF505904EA86C4590A8EF5C4C91BE - C:\Users\Kvapi\AppData\Local\Dropbox\Update\1.3.27.15\npDropboxUpdate3.dll - Dropbox Update


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
flliilndjeohchalpbbcdekjklbdgfkk - No path found[]

Seznam Lištička - Email - Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
Seznam Lištička - Slovník - Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
PhotoLive - Download Facebook Photos - Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpjnpabklnaaifclgealaepelncljadk
AdBlock - Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Seznam Lištička - Rychlá volba - Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A8F5889-4A4E-4D73-BA5F-9A53856518A6} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_16194"

==== Reset Google Chrome ======================

C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Preferences.bak was reset successfully
C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YTDownloader deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Kvapi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Kvapi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\PROVEC~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\PROVEC~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\PROVEC~1\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Kvapi\AppData\Local\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\cache2 emptied successfully
C:\Users\PROVEC~1\AppData\Local\Mozilla\Firefox\Profiles\mdhzxfzr.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=272 folders=75 943224723 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Kvapi\AppData\Local\Temp will be emptied at reboot
C:\Users\PROVEC~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Kvapi\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on so 18.07.2015 at 12:30:00,31 ======================

Poprosim nyni o novy log z FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-07-2015
Ran by Kvapi (administrator) on KVAPI-PC on 18-07-2015 13:10:34
Running from C:\Users\Kvapi\Desktop
Loaded Profiles: Kvapi (Available Profiles: Kvapi & Pro všechny)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Beijing Rising Information Technology Co., Ltd.) C:\Program Files (x86)\Rising\RSD\RsMgrSvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Beijing Rising Information Technology Co., Ltd.) C:\Program Files (x86)\Rising\RSD\popwndexe.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\Kvapi\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(forum.viry.cz) C:\Users\Kvapi\Desktop\FRST-OlderVersion\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-14]
ShortcutTarget: Dropbox.lnk -> C:\Users\Kvapi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID= ... M%3DIE11SR
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1314728291-1035760696-3768504872-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1314728291-1035760696-3768504872-1000 -> {6A8F5889-4A4E-4D73-BA5F-9A53856518A6} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-04] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-04] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{E4ED5967-171A-4B50-BC40-D8A3AF2E5D63}: [DhcpNameServer] 213.46.172.37 213.46.172.36

FireFox:
========
FF ProfilePath: C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
FF Plugin-x32: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @client.dropbox.com/Dropbox Update;version=3 -> C:\Users\Kvapi\AppData\Local\Dropbox\Update\1.3.27.15\npDropboxUpdate3.dll [2015-05-15] (Dropbox, Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @client.dropbox.com/Dropbox Update;version=9 -> C:\Users\Kvapi\AppData\Local\Dropbox\Update\1.3.27.15\npDropboxUpdate3.dll [2015-05-15] (Dropbox, Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Kvapi\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Kvapi\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-1314728291-1035760696-3768504872-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Kvapi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml [2014-03-06]
FF Extension: YouTube Advertisement Blocker - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\jid1-ldg27hkUG7neaA@jetpack.xpi [2015-07-17]
FF Extension: uBlock Origin - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\uBlock0@raymondhill.net.xpi [2015-07-17]
FF Extension: YouTube MP3 Downloader for Firefox - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\youtubemp3downloaderextension2014_mozilafirefox@jetpack.xpi [2015-07-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-22]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-06-15]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Seznam Lištička - Email) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2015-07-01]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2015-07-01]
CHR Extension: (Adblock Plus) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-07-01]
CHR Extension: (PhotoLive - Download Facebook Photos!) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpjnpabklnaaifclgealaepelncljadk [2015-07-01]
CHR Extension: (AdBlock) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-01]
CHR Extension: (Google Wallet) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Kvapi\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2015-07-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.GIA5IPZO3PDICRYRRKCHS7Y5OM - C:\Users\Kvapi\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 RsMgrSvc; C:\Program Files (x86)\Rising\RSD\RsMgrSvc.exe [184088 2015-07-16] (Beijing Rising Information Technology Co., Ltd.)
S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Filthy Complaint; "C:\Program Files (x86)\Filthy Complaint\Filthy Complaint.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [X]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [X]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATK64AMD.sys [13680 2007-08-09] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 smserial; C:\Windows\System32\DRIVERS\SmSerl64.sys [1227776 2009-06-10] (Motorola Inc.)
S3 cpuz134; \??\C:\Users\Kvapi\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 easytether; system32\DRIVERS\easytthr.sys [X]
S1 hiepyjfk; \??\C:\Windows\system32\drivers\hiepyjfk.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2042-10-17 20:05 - 2042-10-17 20:05 - 00008192 __RSH C:\BOOTSECT.BAK
2042-10-17 20:05 - 2013-12-29 13:32 - 00000000 ____D C:\Windows\Panther
2042-10-17 20:05 - 2010-11-20 04:40 - 00383786 __RSH C:\bootmgr
2042-10-17 19:57 - 2015-05-15 22:48 - 00001912 _____ C:\Windows\epplauncher.mif
2042-10-17 19:57 - 2015-04-17 15:38 - 01642486 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2042-10-17 19:56 - 2015-07-18 10:13 - 00000000 ____D C:\Program Files\Java
2042-10-17 19:55 - 2042-10-17 19:55 - 00000000 ____D C:\ProgramData\Sun
2042-10-17 19:51 - 2042-10-17 19:51 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\LibreOffice
2042-10-17 19:49 - 2042-10-17 19:50 - 00000000 ____D C:\Temp
2042-10-17 19:49 - 2011-11-11 16:10 - 00000000 ____D C:\Program Files (x86)\LibreOffice 3.4
2042-10-17 19:43 - 2015-07-16 12:58 - 00117432 _____ C:\Users\Kvapi\AppData\Local\GDIPFONTCACHEV1.DAT
2042-10-17 19:42 - 2042-10-17 19:42 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\GHISLER
2042-10-17 19:42 - 2042-10-17 19:42 - 00000000 ____D C:\totalcmd
2042-10-17 19:42 - 2042-10-17 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\UC.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\RAR.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\PKZIP.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\PKUNZIP.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\NOCLOSE.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\LHA.PIF
2042-10-17 19:42 - 2010-12-17 07:56 - 00000545 _____ C:\Windows\ARJ.PIF
2042-10-17 19:39 - 2042-10-17 19:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\Notes
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\NeroVision
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\ICQ
2042-10-17 19:37 - 2042-10-17 19:37 - 00000000 ____D C:\Users\Kvapi\Documents\ASUS
2042-10-17 19:37 - 2011-10-17 19:25 - 00000000 ____D C:\Users\Kvapi\Documents\Bluetooth Exchange Folder
2042-10-17 19:37 - 2011-08-21 21:59 - 00000000 _____ C:\Users\Kvapi\Documents\ww.youtube..avi_
2042-10-17 19:37 - 2011-08-21 21:45 - 00000000 _____ C:\Users\Kvapi\Documents\YouTube - KAREL GOTT - BT STLE MLD amp M POU g.avi_
2042-10-17 19:37 - 2011-08-21 21:44 - 00000000 _____ C:\Users\Kvapi\Documents\YouTube - KAREL GOTT - BT STLE MLD amp M POU g.mpeg_
2042-10-17 19:37 - 2011-03-20 15:35 - 00004130 _____ C:\Users\Kvapi\Documents\Profile-2-Intermediate-teachers-book.htm
2042-10-17 19:35 - 2042-10-17 19:35 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Mozilla
2042-10-17 19:35 - 2013-09-20 23:01 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Mozilla
2042-10-17 19:29 - 2011-04-18 20:08 - 01553408 _____ C:\Users\Kvapi\Ekonomicke_rozhodovani.ppt
2042-10-17 19:29 - 2011-04-18 20:08 - 00003820 _____ C:\Users\Kvapi\__CONTENT__.html
2042-10-17 19:29 - 2011-04-18 20:08 - 00000637 _____ C:\Users\Kvapi\__CONTENT__.txt
2042-10-17 19:29 - 2011-03-27 14:21 - 01225122 _____ C:\Users\Kvapi\ja 063.avi
2042-10-17 19:29 - 2010-12-07 16:45 - 03641856 _____ C:\Users\Kvapi\02_EFEKTIVNOST_MANAZERSKEJ_KOMUNIKACIE.ppt
2042-10-17 19:29 - 2010-12-07 16:45 - 00693248 _____ C:\Users\Kvapi\Komunikace_2010.ppt
2042-10-17 19:29 - 2010-12-07 16:45 - 00134656 _____ C:\Users\Kvapi\T1_Recova_komunikacia.ppt
2042-10-17 19:29 - 2010-11-18 12:50 - 00000165 ____H C:\Users\Kvapi\Desktop\~$Vysvětlete obecně pojem „efektivnost.pptx
2042-10-17 19:29 - 2009-11-01 17:39 - 00000162 ____H C:\Users\Kvapi\Desktop\~$Tahák.odt
2042-10-17 19:14 - 2015-07-16 12:18 - 00000000 ____D C:\Users\Kvapi\AppData\Local\VirtualStore
2042-10-17 19:14 - 2015-06-02 16:27 - 00001282 _____ C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2042-10-17 19:13 - 2042-10-17 19:13 - 00000020 ___SH C:\Users\Kvapi\ntuser.ini
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Šablony
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Soubory cookie
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Poslední
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Okolní tiskárny
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Okolní síť
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Nabídka Start
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Dokumenty
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Kvapi\AppData\Local\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Šablony
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Poslední
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Okolní síť
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Dokumenty
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Šablony
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Plocha
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Oblíbené položky
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Dokumenty
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 _SHDL C:\ProgramData\Data aplikací
2042-10-17 19:13 - 2042-10-17 19:13 - 00000000 __SHD C:\Recovery
2042-10-17 19:13 - 2015-07-18 12:17 - 00000000 ____D C:\Users\Kvapi
2042-10-17 19:13 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2042-10-17 19:13 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2042-10-17 19:09 - 2042-10-17 19:09 - 00000000 _____ C:\Windows\ativpsrm.bin
2042-10-17 19:09 - 2015-07-18 12:38 - 01445326 _____ C:\Windows\WindowsUpdate.log
2015-07-18 13:10 - 2015-07-18 13:12 - 00015455 _____ C:\Users\Kvapi\Desktop\FRST.txt
2015-07-18 13:10 - 2015-07-18 13:10 - 00000000 ____D C:\Users\Kvapi\Desktop\FRST-OlderVersion
2015-07-18 12:27 - 2015-07-18 11:40 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-07-18 11:43 - 2015-07-18 12:30 - 00015853 _____ C:\zoek-results.log
2015-07-18 11:40 - 2015-07-18 12:17 - 00000000 ____D C:\zoek_backup
2015-07-18 11:27 - 2015-07-18 11:29 - 01308672 _____ C:\Users\Kvapi\Desktop\zoek.exe
2015-07-18 09:52 - 2015-07-18 09:52 - 00005461 _____ C:\Users\Kvapi\Desktop\Addition.rar
2015-07-18 09:38 - 2015-07-18 13:10 - 00000000 ____D C:\FRST
2015-07-18 09:34 - 2015-07-18 13:10 - 02134016 _____ (Farbar) C:\Users\Kvapi\Desktop\FRST64.exe
2015-07-18 09:12 - 2015-07-18 09:13 - 02248704 _____ C:\Users\Kvapi\Desktop\adwcleaner_4.208.exe
2015-07-17 10:50 - 2015-07-17 10:50 - 00000000 ____D C:\Users\Kvapi\Desktop\Původní data aplikace Firefox
2015-07-17 03:06 - 2015-07-17 03:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-07-17 03:03 - 2015-07-17 03:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-07-17 03:03 - 2015-07-17 03:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-07-16 16:48 - 2015-07-16 16:48 - 00000000 ____D C:\Users\Kvapi\AppData\Local\CEF
2015-07-16 15:45 - 2015-07-16 15:45 - 00003432 _____ C:\Windows\System32\Tasks\Avira Browser Safety Updater Task
2015-07-16 15:25 - 2015-07-16 15:25 - 00001199 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-16 15:23 - 2015-07-18 10:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-16 15:22 - 2015-07-18 10:19 - 00000000 ____D C:\Program Files (x86)\Avira
2015-07-16 15:22 - 2015-07-16 15:31 - 00000000 ____D C:\ProgramData\Avira
2015-07-16 15:19 - 2015-07-16 15:19 - 04721376 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kvapi\Downloads\avira_en_av_55a7af1a822a7__ws1.exe
2015-07-16 14:47 - 2015-07-16 14:47 - 00001170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-16 14:47 - 2015-07-16 14:47 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-16 14:44 - 2015-07-16 14:45 - 00242992 _____ C:\Users\Kvapi\Documents\Firefox Setup Stub 39.0.exe
2015-07-16 14:27 - 2015-07-16 15:05 - 00003314 _____ C:\Windows\System32\Tasks\RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380}
2015-07-16 13:45 - 2015-07-16 13:46 - 00000000 ___RD C:\Users\Kvapi\Desktop\To co hoří
2015-07-16 13:44 - 2015-07-16 15:51 - 00000000 ___RD C:\Users\Kvapi\Desktop\na dodělání
2015-07-16 13:34 - 2015-07-16 13:34 - 00000000 ____D C:\Users\Kvapi\Desktop\Generali a Axa
2015-07-16 13:18 - 2015-07-16 13:18 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\VSRevoGroup
2015-07-16 12:56 - 2014-07-30 04:44 - 00091928 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\SysWOW64\vpatch.dll
2015-07-16 12:55 - 2015-07-17 10:23 - 00000000 ___RD C:\RavBin
2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\ProgramData\Rising
2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\Program Files (x86)\Rising
2015-07-16 12:16 - 2015-07-16 14:20 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\Qiyi
2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\ProgramData\LocalStorage
2015-07-16 11:42 - 2015-07-16 11:43 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\ppslog
2015-07-16 11:35 - 2015-07-16 11:47 - 00000000 ____D C:\qycache
2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\Users\Kvapi\AppData\Local\SysassistByHotWheel
2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\ppsfile
2015-07-16 11:34 - 2015-07-16 11:41 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Unity
2015-07-16 11:33 - 2015-07-16 11:33 - 00000000 ____D C:\Users\Public\QiYi
2015-07-16 11:32 - 2015-07-16 18:35 - 00000000 ____D C:\Program Files (x86)\baidu
2015-07-16 09:31 - 2015-07-16 09:31 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-14 23:16 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 23:16 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-14 23:16 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 23:16 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 23:16 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 23:16 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-14 23:16 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 23:16 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 23:16 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 23:16 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 23:16 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 23:16 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-14 23:16 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-14 23:16 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-14 23:16 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-14 23:16 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-14 23:16 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-14 23:15 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-14 23:15 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-14 23:15 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-14 23:15 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-14 23:15 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-14 23:15 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-14 23:15 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-14 23:14 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 23:14 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 23:14 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-14 23:14 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 23:14 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-14 23:14 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 23:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-14 23:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 23:14 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-14 23:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-14 23:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-14 23:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 23:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-14 23:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-14 23:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-14 23:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-14 23:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-14 23:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-14 23:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-14 23:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-14 23:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 23:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 23:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 23:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-14 23:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 23:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-14 23:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 23:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 23:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-14 23:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-14 23:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-14 23:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 23:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-14 23:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-14 23:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 23:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-14 23:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-14 23:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-14 23:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 23:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 23:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 23:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 23:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 23:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-14 23:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 23:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 23:14 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 23:14 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 23:14 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-14 23:14 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-14 23:13 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-14 23:13 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-14 23:13 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-14 23:13 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-14 23:13 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-14 23:13 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 23:13 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 23:13 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 23:13 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 23:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-14 23:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-14 23:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-14 23:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-14 23:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-14 23:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-14 23:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-14 23:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-14 23:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-14 23:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-14 23:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-14 23:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-14 23:11 - 2015-07-03 20:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-14 23:11 - 2015-07-03 19:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-14 23:11 - 2015-07-03 19:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-14 23:11 - 2015-07-03 19:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-14 23:11 - 2015-07-03 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-14 23:11 - 2015-07-03 18:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-14 23:11 - 2015-07-03 18:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-14 23:11 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-14 23:11 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-14 23:11 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-14 23:11 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-14 23:11 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-14 23:11 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-14 23:11 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-14 23:11 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-14 23:11 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-14 23:11 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-14 23:11 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-14 23:11 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-14 23:11 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-14 23:11 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-14 23:11 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-14 23:11 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-14 23:11 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-14 23:11 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-14 23:11 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-14 23:11 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-14 23:11 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-07 22:26 - 2015-07-18 10:14 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-07-07 22:26 - 2015-02-13 21:09 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-07-07 22:26 - 2015-02-13 21:09 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-07-07 21:38 - 2015-07-07 21:38 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\JetBrains
2015-07-07 21:36 - 2015-07-07 21:36 - 00000000 ____D C:\Users\Kvapi\.AndroidStudio1.2
2015-07-07 21:36 - 2015-07-07 21:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2015-07-07 21:20 - 2015-07-07 21:20 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Android
2015-07-07 21:15 - 2015-02-13 21:09 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-07-07 21:06 - 2015-07-07 21:07 - 146861984 _____ (Oracle Corporation) C:\Users\Kvapi\Downloads\jdk-7u79-windows-x64.exe
2015-07-06 22:12 - 2015-07-18 10:12 - 00000354 _____ C:\Windows\Tasks\GreenSignal.job
2015-07-02 23:43 - 2015-07-16 13:34 - 00000000 ____D C:\Users\Kvapi\Desktop\Stáž Werek Media
2015-07-01 19:34 - 2015-07-16 14:41 - 00000024 _____ C:\Users\Kvapi\AppData\Roaming\appdataFr25.bin
2015-07-01 10:57 - 2015-07-01 10:57 - 00413629 _____ C:\Users\Kvapi\Downloads\lcvse.zip
2015-06-27 17:59 - 2015-06-27 17:59 - 00551344 _____ C:\Users\Kvapi\Downloads\Bezpečný podnik, Fialová Denisa, 12-3OB-C.pptx
2015-06-27 17:58 - 2015-06-27 17:58 - 00135400 _____ C:\Users\Kvapi\Downloads\Společenská odpovědnost firem.pptx
2015-06-27 17:58 - 2015-06-27 17:58 - 00135400 _____ C:\Users\Kvapi\Downloads\Společenská odpovědnost firem(1).pptx
2015-06-24 14:46 - 2015-07-14 22:28 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-06-24 14:43 - 2015-07-14 21:48 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2042-10-17 20:05 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2042-10-17 20:05 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2042-10-17 19:45 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2042-10-17 19:13 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2042-10-17 19:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2042-10-17 19:13 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2042-10-17 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2042-10-17 19:07 - 2009-07-14 17:37 - 00000000 ____D C:\Windows\CSC
2015-07-18 12:50 - 2012-08-15 11:20 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-18 12:38 - 2009-07-14 06:45 - 00018976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-18 12:38 - 2009-07-14 06:45 - 00018976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-18 12:32 - 2011-10-18 16:03 - 00000000 ___RD C:\Users\Kvapi\Dropbox
2015-07-18 12:32 - 2011-10-18 15:59 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Dropbox
2015-07-18 12:29 - 2015-06-02 20:44 - 00000520 _____ C:\Windows\Tasks\alpha_shopper_helper_service.job
2015-07-18 12:28 - 2015-04-18 09:49 - 00198234 _____ C:\Windows\PFRO.log
2015-07-18 12:28 - 2014-10-29 18:45 - 00016912 _____ C:\Windows\setupact.log
2015-07-18 12:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-18 12:17 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-07-18 12:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-07-18 11:30 - 2014-03-06 11:59 - 00000000 ____D C:\AdwCleaner
2015-07-18 11:28 - 2015-05-15 13:23 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job
2015-07-18 10:17 - 2014-05-30 15:43 - 00000000 ____D C:\ProgramData\Oracle
2015-07-18 10:17 - 2013-06-24 18:49 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-18 10:11 - 2015-02-13 21:12 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-18 09:02 - 2011-10-22 11:09 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\.purple
2015-07-17 13:28 - 2015-05-15 13:23 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job
2015-07-17 10:35 - 2009-07-14 17:18 - 00704904 _____ C:\Windows\system32\perfh005.dat
2015-07-17 10:35 - 2009-07-14 17:18 - 00154476 _____ C:\Windows\system32\perfc005.dat
2015-07-17 10:35 - 2009-07-14 07:13 - 01666836 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-17 10:23 - 2012-08-17 11:52 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job
2015-07-17 03:07 - 2015-04-06 22:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-17 03:07 - 2015-04-06 22:22 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-16 16:15 - 2015-05-06 15:17 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\vlc
2015-07-16 16:14 - 2015-04-22 07:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-16 15:03 - 2012-04-26 22:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-16 14:25 - 2009-07-14 06:45 - 05000720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-16 13:47 - 2012-05-02 10:10 - 00000000 ____D C:\Users\Kvapi\Desktop\Tak všechno možný
2015-07-16 13:40 - 2013-07-14 15:37 - 00000000 ___RD C:\Users\Kvapi\Desktop\Programy
2015-07-16 13:03 - 2013-09-15 17:23 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Seznam.cz
2015-07-16 11:46 - 2015-03-17 00:42 - 00000000 ____D C:\Users\Kvapi\AppData\Local\CrashDumps
2015-07-16 11:36 - 2015-06-04 12:02 - 00000000 ____D C:\Program Files\Recuva
2015-07-15 21:11 - 2012-08-17 11:52 - 00003536 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core
2015-07-15 18:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-15 15:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-15 15:02 - 2015-04-16 07:48 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 15:02 - 2014-05-07 08:53 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-15 00:11 - 2011-10-25 14:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-14 23:56 - 2013-08-09 07:34 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 21:51 - 2012-08-15 11:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-14 21:51 - 2012-08-15 11:20 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-14 21:51 - 2011-10-17 22:52 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-05 12:08 - 2011-10-17 20:06 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 08:43 - 2011-10-17 22:12 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 23:37 - 2011-10-19 14:12 - 00091648 ___SH C:\Users\Kvapi\Thumbs.db
2015-07-01 23:00 - 2014-12-18 18:25 - 00000000 ____D C:\Users\Kvapi\Desktop\stalker
2015-07-01 20:08 - 2011-11-04 11:30 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Google
2015-06-27 01:44 - 2015-05-30 00:41 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\AIMP3
2015-06-24 14:49 - 2011-10-19 14:18 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Adobe
2015-06-24 14:49 - 2011-10-17 22:52 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Adobe
2015-06-24 14:46 - 2011-10-19 14:14 - 00000000 ____D C:\Program Files (x86)\Adobe

==================== Files in the root of some directories =======

2013-05-19 19:47 - 2013-05-19 19:47 - 0000132 _____ () C:\Users\Kvapi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-07-01 19:34 - 2015-07-16 14:41 - 0000024 _____ () C:\Users\Kvapi\AppData\Roaming\appdataFr25.bin
2012-10-09 18:16 - 2012-10-09 18:52 - 0001422 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader(1).err
2012-10-09 18:16 - 2012-10-09 18:50 - 0001496 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader(1).nast
2012-10-08 22:34 - 2012-10-09 18:56 - 0004043 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader.err
2012-10-08 22:33 - 2012-10-09 18:58 - 0002992 _____ () C:\Users\Kvapi\AppData\Local\SRDownloader.nast
2015-06-02 16:29 - 2015-06-02 16:29 - 0000000 _____ () C:\Users\Kvapi\AppData\Local\Temp.dat
2011-10-25 22:00 - 2011-10-25 22:07 - 0001584 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\Kvapi\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpufasrw.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\alpha_shopper_helper_service.job => C:\Program Files (x86)\Alpha Shopper\alpha_shopper_helper_service.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GreenSignal.job => c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}\3864521017300541606b.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Microsoft Security Essentials (Disabled - Up to date) {108DAC43-C256-20B7-BB05-914135DA5160}
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Microsoft Security Essentials (Disabled - Up to date) {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Kvapi\Desktop" je 12994 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Kvapi\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate
"C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Kvapi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk
C:\PROGRA~2\MICROS~2\Office12\ONENOTEM.EXE


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Porad tam mate Aviru i MSE - jeden z nich jeste pred aplikaci fixlist-u odinstalujte

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
  
  HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID= ... M%3DIE11SR
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  
  FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
  FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
  FF Plugin-x32: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
  FF Plugin-x32: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
  FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll No File
  FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml [2014-03-06]
  FF Extension: YouTube Advertisement Blocker - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\jid1-ldg27hkUG7neaA@jetpack.xpi [2015-07-17]
  FF Extension: uBlock Origin - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\uBlock0@raymondhill.net.xpi [2015-07-17]
  FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-22]
  FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-06-15]
  FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  
  S2 Filthy Complaint; "C:\Program Files (x86)\Filthy Complaint\Filthy Complaint.exe" [X]
  S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
  S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
  S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [X]
  S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [X]
  S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [X]
  S3 cpuz134; \??\C:\Users\Kvapi\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
  S3 easytether; system32\DRIVERS\easytthr.sys [X]
  S1 hiepyjfk; \??\C:\Windows\system32\drivers\hiepyjfk.sys [X]
  
  C:\IQIYI Video
  C:\Program Files (x86)\Common Files\Tencent
  C:\Program Files (x86)\Rising
  c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}
  2015-07-18 13:10 - 2015-07-18 13:12 - 00015455 _____ C:\Users\Kvapi\Desktop\FRST.txt
  2015-07-18 13:10 - 2015-07-18 13:10 - 00000000 ____D C:\Users\Kvapi\Desktop\FRST-OlderVersion
  2015-07-18 12:27 - 2015-07-18 11:40 - 00024064 _____ C:\Windows\zoek-delete.exe
  2015-07-18 11:43 - 2015-07-18 12:30 - 00015853 _____ C:\zoek-results.log
  2015-07-18 11:40 - 2015-07-18 12:17 - 00000000 ____D C:\zoek_backup
  2015-07-18 11:27 - 2015-07-18 11:29 - 01308672 _____ C:\Users\Kvapi\Desktop\zoek.exe
  2015-07-18 09:52 - 2015-07-18 09:52 - 00005461 _____ C:\Users\Kvapi\Desktop\Addition.rar
  2015-07-18 09:12 - 2015-07-18 09:13 - 02248704 _____ C:\Users\Kvapi\Desktop\adwcleaner_4.208.exe
  2015-07-16 12:55 - 2015-07-17 10:23 - 00000000 ___RD C:\RavBin
  2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\ProgramData\Rising
  2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\Program Files (x86)\Rising
  2015-07-16 12:16 - 2015-07-16 14:20 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
  2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\Qiyi
  2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\ProgramData\LocalStorage
  2015-07-16 11:42 - 2015-07-16 11:43 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\ppslog
  2015-07-16 11:35 - 2015-07-16 11:47 - 00000000 ____D C:\qycache
  2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\Users\Kvapi\AppData\Local\SysassistByHotWheel
  2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\ppsfile
  2015-07-16 11:34 - 2015-07-16 11:41 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Unity
  2015-07-16 11:33 - 2015-07-16 11:33 - 00000000 ____D C:\Users\Public\QiYi
  2015-07-16 11:32 - 2015-07-16 18:35 - 00000000 ____D C:\Program Files (x86)\baidu
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\alpha_shopper_helper_service.job => C:\Program Files (x86)\Alpha Shopper\alpha_shopper_helper_service.exe
  Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
  Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GreenSignal.job => c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}\3864521017300541606b.exe <==== ATTENTION
  Task: {3718BB1D-4A39-4B8B-AF33-201321D0878D} - \GreenSignal No Task File <==== ATTENTION
  Task: {F48C0561-7481-4756-A762-AF8767E1C20F} - System32\Tasks\alpha_shopper_helper_service => C:\Program Files (x86)\Alpha Shopper\alpha_shopper_helper_service.exe
  
  DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
  DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
  DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
  DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
  DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
  DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

ta avira byla launcher nebo Browser Safety nejspíš protože odinstlaci jsem prováděl, ale už by to mělo být totálně pryč

Fix result of Farbar Recovery Scan Tool (x64) Version:18-07-2015 01
Ran by Kvapi at 2015-07-18 19:32:10 Run:1
Running from C:\Users\Kvapi\Desktop
Loaded Profiles: Kvapi (Available Profiles: Kvapi & Pro všechny)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID= ... M%3DIE11SR
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin-x32: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll No File
FF Plugin-x32: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml [2014-03-06]
FF Extension: YouTube Advertisement Blocker - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\jid1-ldg27hkUG7neaA@jetpack.xpi [2015-07-17]
FF Extension: uBlock Origin - C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\uBlock0@raymondhill.net.xpi [2015-07-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-22]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-06-15]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

S2 Filthy Complaint; "C:\Program Files (x86)\Filthy Complaint\Filthy Complaint.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [X]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [X]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [X]
S3 cpuz134; \??\C:\Users\Kvapi\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 easytether; system32\DRIVERS\easytthr.sys [X]
S1 hiepyjfk; \??\C:\Windows\system32\drivers\hiepyjfk.sys [X]

C:\IQIYI Video
C:\Program Files (x86)\Common Files\Tencent
C:\Program Files (x86)\Rising
c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}
2015-07-18 13:10 - 2015-07-18 13:12 - 00015455 _____ C:\Users\Kvapi\Desktop\FRST.txt
2015-07-18 13:10 - 2015-07-18 13:10 - 00000000 ____D C:\Users\Kvapi\Desktop\FRST-OlderVersion
2015-07-18 12:27 - 2015-07-18 11:40 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-07-18 11:43 - 2015-07-18 12:30 - 00015853 _____ C:\zoek-results.log
2015-07-18 11:40 - 2015-07-18 12:17 - 00000000 ____D C:\zoek_backup
2015-07-18 11:27 - 2015-07-18 11:29 - 01308672 _____ C:\Users\Kvapi\Desktop\zoek.exe
2015-07-18 09:52 - 2015-07-18 09:52 - 00005461 _____ C:\Users\Kvapi\Desktop\Addition.rar
2015-07-18 09:12 - 2015-07-18 09:13 - 02248704 _____ C:\Users\Kvapi\Desktop\adwcleaner_4.208.exe
2015-07-16 12:55 - 2015-07-17 10:23 - 00000000 ___RD C:\RavBin
2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\ProgramData\Rising
2015-07-16 12:21 - 2015-07-17 10:28 - 00000000 ____D C:\Program Files (x86)\Rising
2015-07-16 12:16 - 2015-07-16 14:20 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\Qiyi
2015-07-16 11:46 - 2015-07-16 11:46 - 00000000 ____D C:\ProgramData\LocalStorage
2015-07-16 11:42 - 2015-07-16 11:43 - 00000000 ____D C:\Users\Kvapi\AppData\Roaming\ppslog
2015-07-16 11:35 - 2015-07-16 11:47 - 00000000 ____D C:\qycache
2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\Users\Kvapi\AppData\Local\SysassistByHotWheel
2015-07-16 11:35 - 2015-07-16 11:35 - 00000000 ____D C:\ppsfile
2015-07-16 11:34 - 2015-07-16 11:41 - 00000000 ____D C:\Users\Kvapi\AppData\Local\Unity
2015-07-16 11:33 - 2015-07-16 11:33 - 00000000 ____D C:\Users\Public\QiYi
2015-07-16 11:32 - 2015-07-16 18:35 - 00000000 ____D C:\Program Files (x86)\baidu

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\alpha_shopper_helper_service.job => C:\Program Files (x86)\Alpha Shopper\alpha_shopper_helper_service.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job => C:\Users\Kvapi\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => C:\Users\Kvapi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GreenSignal.job => c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}\3864521017300541606b.exe <==== ATTENTION
Task: {3718BB1D-4A39-4B8B-AF33-201321D0878D} - \GreenSignal No Task File <==== ATTENTION
Task: {F48C0561-7481-4756-A762-AF8767E1C20F} - System32\Tasks\alpha_shopper_helper_service => C:\Program Files (x86)\Alpha Shopper\alpha_shopper_helper_service.exe

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-1314728291-1035760696-3768504872-1000\Software\Microsoft\Internet Explorer\Main\\First Home Page => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKLM\Software\MozillaPlugins\@iqiyi.com/npclient" => key removed successfully
"HKLM\Software\MozillaPlugins\@iqiyi.com/npWebPlayer" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@iqiyi.com/npclient" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@iqiyi.com/npWebPlayer" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@qq.com/npAndroidAssistant" => key removed successfully
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml => moved successfully.
C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\jid1-ldg27hkUG7neaA@jetpack.xpi => moved successfully.
C:\Users\Kvapi\AppData\Roaming\Mozilla\Firefox\Profiles\fvhi96ir.default-1437123011046\Extensions\uBlock0@raymondhill.net.xpi => moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => moved successfully.
HKLM\Software\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value removed successfully
C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value removed successfully
Filthy Complaint => Service removed successfully
gupdate => Service removed successfully
gupdatem => Service removed successfully
HPSLPSVC => Service removed successfully
Net Driver HPZ12 => Service removed successfully
Pml Driver HPZ12 => Service removed successfully
cpuz134 => Service removed successfully
easytether => Service removed successfully
hiepyjfk => Service removed successfully
"C:\IQIYI Video" => File/Folder not found.
"C:\Program Files (x86)\Common Files\Tencent" => File/Folder not found.
C:\Program Files (x86)\Rising => moved successfully.
"c:\programdata\{230cf87b-8193-b06e-230c-cf87b819e1ee}" => File/Folder not found.
C:\Users\Kvapi\Desktop\FRST.txt => moved successfully.
C:\Users\Kvapi\Desktop\FRST-OlderVersion => moved successfully.
C:\Windows\zoek-delete.exe => moved successfully.
C:\zoek-results.log => moved successfully.
C:\zoek_backup => moved successfully.
C:\Users\Kvapi\Desktop\zoek.exe => moved successfully.
C:\Users\Kvapi\Desktop\Addition.rar => moved successfully.
C:\Users\Kvapi\Desktop\adwcleaner_4.208.exe => moved successfully.
C:\RavBin => moved successfully.
C:\ProgramData\Rising => moved successfully.
"C:\Program Files (x86)\Rising" => File/Folder not found.
C:\Users\Kvapi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 => moved successfully.
C:\Qiyi => moved successfully.
C:\ProgramData\LocalStorage => moved successfully.
C:\Users\Kvapi\AppData\Roaming\ppslog => moved successfully.
C:\qycache => moved successfully.
C:\Users\Kvapi\AppData\Local\SysassistByHotWheel => moved successfully.
C:\ppsfile => moved successfully.
C:\Users\Kvapi\AppData\Local\Unity => moved successfully.
C:\Users\Public\QiYi => moved successfully.
C:\Program Files (x86)\baidu => moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully.
C:\Windows\Tasks\alpha_shopper_helper_service.job => moved successfully.
C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => moved successfully.
C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000UA.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1314728291-1035760696-3768504872-1000Core.job => moved successfully.
C:\Windows\Tasks\GreenSignal.job => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3718BB1D-4A39-4B8B-AF33-201321D0878D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3718BB1D-4A39-4B8B-AF33-201321D0878D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GreenSignal" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F48C0561-7481-4756-A762-AF8767E1C20F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F48C0561-7481-4756-A762-AF8767E1C20F}" => key removed successfully
C:\Windows\System32\Tasks\alpha_shopper_helper_service => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\alpha_shopper_helper_service" => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0 => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate => key removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 90.7 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 19:34:02 ====

Jak se chova PC?

se správce úloh zmize proces co obsahoval čínské znaky a ničeho podezřeného si
postup fungoval děkuji

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remove disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse