Zavírený, spomaleý notebook
Napsal: 27 pro 2015 17:59
Zdravím ... prosím o kontrolu bratovho notebooku ... keď zapne java script tak na kazdej stránke mu zacne ukazovat reklamy po celej obrazovke ... aj notebook má velmi pomalý ... ďakujem
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-12-2015
Ran by Od Ježiška (administrator) on OdJežiška-PC (27-12-2015 17:33:12)
Running from C:\Users\Od Ježiška\Downloads
Loaded Profiles: Od Ježiška (Available Profiles: Od Ježiška)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\ProgramData\Avg_Update_1215tb\AVG-Secure-Search-Update_1215tb.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\ProgramData\cab4fbb2-1ac7-44d2-9b7d-0c921d8827f4\maintainer.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(© 2015 Microsoft Corporation) C:\Users\Od Ježiška\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Program Files (x86)\allgenius\tmp845C.tmp
() C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
() C:\Program Files (x86)\allgenius\bin\utilallgenius.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\loggingserver.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.BrowserAdapter.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.BrowserAdapter64.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
() C:\Program Files (x86)\allgenius\updateallgenius.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.PurBrowse64.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.expext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-09] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-09] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2886416 2012-03-02] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-08] (Acer Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1436224 2010-11-30] (Microsoft Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2573712 2015-12-13] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111312 2015-11-09] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Run: [Google Update] => C:\Users\Od Ježiška\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31283328 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Run: [BingSvc] => C:\Users\Od Ježiška\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [450048 2011-09-13] ()
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => No File
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-14] (AVAST Software)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B418A64F-E5E7-4294-929C-231D54C693AA}: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{B536E52F-2ED1-479A-8B43-FD9F087DB0DF}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com?cid={297E9CF9-DF2D-48C0-B4BE-C331A8A16B30}&mid=5aa2e7437cf247d3809b952411542751-9f965a21994faede76ec454adbfad66389279595&lang=en&ds=co011&coid=avgtbdisco&cmpid=1015tb&pr=sa&d=2014-02-06 14:43:39&v=19.1.0.285&pid=safeguard&sg=0&sap=hp
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://services.freshy.com/general/newhometab.php?hometab=home&partner=11147&guid={C226278C-D99D-4720-8D71-B0379CCE0035}&i=
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=964C266D57B08442&affID=125144&tsp=5032
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> 52C7D228301038974E972BA0A0112BDE URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> OldSearch URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_ss&mntrId=964C266D57B08442&affID=125144&tsp=5032
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {6F2235F4-2BA2-4510-A7AA-194F11BC75D2} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11147
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={297E9CF9-DF2D-48C0-B4BE-C331A8A16B30}&mid=5aa2e7437cf247d3809b952411542751-9f965a21994faede76ec454adbfad66389279595&lang=en&ds=co011&coid=avgtbdisco&cmpid=1015tb&pr=sa&d=2014-02-06 14:43:39&v=18.9.0.231&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {B1E3FA54-7454-4B05-8E98-59ECCD1C44E3} URL = hxxp://searchsimple-a.akamaihd.net/?affID=mt-tr&q={searchTerms}&r=914
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {DE3CAF3D-51D9-48E5-B069-316A19CBCBBA} URL = hxxp://search.findwide.com/serp?guid={C226278C-D99D-4720-8D71-B0379CCE0035}&action=default_search&k={searchTerms}
BHO: GoHD -> {11111111-1111-1111-1111-110611211180} -> C:\Program Files (x86)\GoHD\GoHD-bho64.dll [2014-10-22] (InstallMoon)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-14] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: BlockAndSurf -> {949350F1-1C0C-4696-7F0C-FAF4F41250C2} -> C:\Program Files (x86)\ver3BlockAndSurf\180_x64.dll [2014-10-21] ()
BHO-x32: Internet Speed Checker -> {11111111-1111-1111-1111-110611171152} -> C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho.dll [2014-10-21] (Speedchecker)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-09] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-14] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: AVG SafeGuard toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG SafeGuard toolbar\19.1.0.285\AVG SafeGuard toolbar_toolbar.dll [2015-12-13] (AVG Secure Search)
BHO-x32: allgenius 1.0.0.7 -> {963e8e8b-052d-46d7-abe6-6728f612ae99} -> C:\Program Files (x86)\allgenius\allgeniusBHO.dll [2015-01-27] (allgenius)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-06-07] (Microsoft Corporation.)
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-06-07] (Microsoft Corporation.)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\19.1.0.285\AVG SafeGuard toolbar_toolbar.dll [2015-12-13] (AVG Secure Search)
Toolbar: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Toolbar: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> FindWide Toolbar - {A369F97E-5B49-41EB-AFB7-8B538290CEE6} - No File
Toolbar: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\19.1.0\ViProtocol.dll [2015-12-13] (AVG Secure Search)
FireFox:
========
FF ProfilePath: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF DefaultSearchEngine: Yahoo! Search
FF SelectedSearchEngine: Yahoo! Search
FF Homepage: hxxp://searchsimple-a.akamaihd.net/?affID=mt-tr
FF Keyword.URL: hxxp://searchsimple-a.akamaihd.net/?q=
FF NewTab: hxxp://searchsimple-a.akamaihd.net/?m=tab&affID=mt-tr
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-08] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-08] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\19.1.0\\npsitesafety.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-10-22] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-10-22] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Od Ježiška\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @talk.google.com/O1DPlugin -> C:\Users\Od Ježiška\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @tnt2npapi.com/Plugin -> C:\Users\Od Ježiška\AppData\Local\TNT2\2.0.0.1868\npTNT2.dll [No File]
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Od Ježiška\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Od Ježiška\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF user.js: detected! => C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js [2014-10-21]
FF Plugin ProgramFiles/Appdata: C:\Users\Od Ježiška\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Od Ježiška\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF SearchPlugin: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\dsrlte.xml [2015-01-18]
FF SearchPlugin: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\dsrlte1.xml [2015-09-12]
FF SearchPlugin: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-195739.xml [2014-10-21]
FF Extension: No Name - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\toolbar11147@findwide.com.xpi [not found]
FF Extension: No Name - C:\Users\Od Je [not found]
FF Extension: Internet Speed Checker - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com [2014-10-22] [not signed]
FF Extension: GoHD - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sonnypenn@aol.com [2014-10-21] [not signed]
FF Extension: FindWide Toolbar - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\toolbar11147@findwide.com [2014-10-21] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.204
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.204 [2014-02-06] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-15]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Firefox\Extensions: [{4C221D56-A54A-A548-2CE6-322758891EDC}] - C:\Program Files (x86)\ver3BlockAndSurf\180.xpi
FF Extension: BlockAndSurf - C:\Program Files (x86)\ver3BlockAndSurf\180.xpi [2014-10-21] [not signed]
Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=703_pr__alt__ddc_dsssyc_bd_com"
CHR StartupUrls: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=703_pr__alt__ddc_dsssyc_bd_com"
CHR DefaultSearchURL: Default -> hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=703_pr__alt__ddc_dss_bd_com&p={searchTerms}
CHR DefaultSearchKeyword: Default -> yahoo.com
CHR DefaultNewTabURL: Default -> hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=703_pr__alt__ddc_dsssyctab_bd_com
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\pdf.dll => No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll => No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll => No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL => No File
CHR Profile: C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (allgenius) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnlagjpcfaabkkapnjhmdeejhjgbeneg [2015-04-12] [UpdateUrl: hxxp://wwwallgeniusinfo-a.akamaihd.net/update/chrome] <==== ATTENTION
CHR Extension: (mr fun) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfhphepmmghimompopllneamgdbelkdd [2015-04-07]
CHR Extension: (Avast SafePrice) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-13]
CHR Extension: (Bing) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-07-26]
CHR Extension: (gcjpefhffmcgplgklffgbebganmhffje) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcjpefhffmcgplgklffgbebganmhffje [2015-04-05]
CHR Extension: (Avast Online Security) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-13]
CHR Extension: (Big Phat Sports) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhjchhljdoccgihhmkmoefiegblmlekk [2015-05-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-26]
CHR Extension: (winter web) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\obbfamljbihbcghcciagdafdpbgcmkne [2015-04-05]
CHR Extension: (phhpajlkjeoakfmckfnogpnfeidgbhil) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\phhpajlkjeoakfmckfnogpnfeidgbhil [2015-04-07]
CHR Extension: () - C:\Users\Od Ježiška\AppData\Local\Comp Bubble\Component [2015-10-15]
CHR Extension: () - C:\Users\Od Ježiška\AppData\Local\Car Form\Component [2015-12-27]
CHR HKU\S-1-5-21-3351076012-2336630952-411980133-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aminlpmkfcdibgpgfajlgnamicjckkjf] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jdkihdhlegcdggknokfekoemkjjnjhgi] - hxxp://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://www.yandex.ru/?win=147&clid=1989595"
OPR Extension: (Internet Speed Checker) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbglkiiiofelplniblholffbhhjmdhhi [2015-12-21]
OPR Extension: (allgenius) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\bnlagjpcfaabkkapnjhmdeejhjgbeneg [2015-04-19]
OPR Extension: (Go HD 1.1) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\bokijhalndhhhikpnaniimagniglonke [2015-08-16]
OPR Extension: (Opera Addons Portal) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\dfhphepmmghimompopllneamgdbelkdd [2015-04-07]
OPR Extension: (Opera Addons Portal) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\phhpajlkjeoakfmckfnogpnfeidgbhil [2015-04-07]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [107648 2012-03-09] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-14] (AVAST Software)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-22] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-22] (globalUpdate) [File not signed] <==== ATTENTION
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-16] (Intel Corporation)
R2 MaintainerSvc3.93.1720192; C:\ProgramData\cab4fbb2-1ac7-44d2-9b7d-0c921d8827f4\maintainer.exe [128240 2015-10-22] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [12784 2010-11-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [282616 2010-11-11] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R2 Update allgenius; C:\Program Files (x86)\allgenius\updateallgenius.exe [647408 2015-12-27] ()
R2 Util allgenius; C:\Program Files (x86)\allgenius\bin\utilallgenius.exe [648432 2015-12-20] ()
R2 vToolbarUpdater19.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\ToolbarUpdater.exe [1864592 2015-12-13] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-28] (Atheros) [File not signed]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-14] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-14] (AVAST Software)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [188928 2010-10-24] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [72064 2010-10-24] (Microsoft Corporation)
R2 webinstrNew; C:\Windows\system32\Drivers\webinstrNew.sys [56504 2014-10-21] (Corsica)
R1 {089a2337-f92c-4fd6-89c4-9869b0ab6644}w64; C:\Windows\System32\drivers\{089a2337-f92c-4fd6-89c4-9869b0ab6644}w64.sys [48832 2014-12-01] (StdLib)
R1 {20028c4e-ef35-4336-a227-afedf096d2a7}w64; C:\Windows\System32\drivers\{20028c4e-ef35-4336-a227-afedf096d2a7}w64.sys [48832 2014-12-31] (StdLib)
R1 {2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}w64; C:\Windows\System32\drivers\{2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}w64.sys [48832 2014-11-22] (StdLib)
R1 {2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}w64; C:\Windows\System32\drivers\{2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}w64.sys [48832 2014-11-30] (StdLib)
R1 {2edd21db-764b-43cd-81b6-eef43c26704a}w64; C:\Windows\System32\drivers\{2edd21db-764b-43cd-81b6-eef43c26704a}w64.sys [48832 2014-12-18] (StdLib)
R1 {3bcd1a06-f942-43b2-83f3-1b446001ad4c}w64; C:\Windows\System32\drivers\{3bcd1a06-f942-43b2-83f3-1b446001ad4c}w64.sys [48832 2014-11-03] (StdLib)
R1 {458639bd-68ee-4273-bbab-5c062f563d3b}w64; C:\Windows\System32\drivers\{458639bd-68ee-4273-bbab-5c062f563d3b}w64.sys [48832 2014-12-25] (StdLib)
R1 {487feb77-84bf-4620-9b7d-e3091f0d8c1a}w64; C:\Windows\System32\drivers\{487feb77-84bf-4620-9b7d-e3091f0d8c1a}w64.sys [48832 2014-11-25] (StdLib)
R1 {5f8e00a8-575d-48e6-8d65-64af80d8d3c1}w64; C:\Windows\System32\drivers\{5f8e00a8-575d-48e6-8d65-64af80d8d3c1}w64.sys [48832 2014-10-29] (StdLib)
R1 {645cdede-1bea-456e-9de9-65f184313502}w64; C:\Windows\System32\drivers\{645cdede-1bea-456e-9de9-65f184313502}w64.sys [48832 2014-12-09] (StdLib)
R1 {64ffc04b-3304-4dd9-a15c-6a0b789ab072}w64; C:\Windows\System32\drivers\{64ffc04b-3304-4dd9-a15c-6a0b789ab072}w64.sys [48832 2015-01-06] (StdLib)
R1 {69344dc5-97c6-446f-ab93-78620f9ce080}w64; C:\Windows\System32\drivers\{69344dc5-97c6-446f-ab93-78620f9ce080}w64.sys [48832 2014-11-16] (StdLib)
R1 {7fe08025-5799-4bbb-b59a-98fc6fb5f287}w64; C:\Windows\System32\drivers\{7fe08025-5799-4bbb-b59a-98fc6fb5f287}w64.sys [48832 2014-12-03] (StdLib)
R1 {8ebc28a2-0eec-4503-8299-d9ab3df68568}w64; C:\Windows\System32\drivers\{8ebc28a2-0eec-4503-8299-d9ab3df68568}w64.sys [48832 2015-01-11] (StdLib)
R1 {918d73e6-344e-4cbd-99f6-1e688461e49b}w64; C:\Windows\System32\drivers\{918d73e6-344e-4cbd-99f6-1e688461e49b}w64.sys [48832 2015-01-03] (StdLib)
R1 {ac0ddd40-091b-4a3f-89cd-5279f84da3bc}w64; C:\Windows\System32\drivers\{ac0ddd40-091b-4a3f-89cd-5279f84da3bc}w64.sys [48832 2014-11-19] (StdLib)
R1 {af16652c-3cdd-4795-b89b-2d9cf16806d6}Gw64; C:\Windows\System32\drivers\{af16652c-3cdd-4795-b89b-2d9cf16806d6}Gw64.sys [48832 2014-10-21] (StdLib)
R1 {b6bca5b8-0633-4bd4-aff8-a8eac231017e}w64; C:\Windows\System32\drivers\{b6bca5b8-0633-4bd4-aff8-a8eac231017e}w64.sys [48832 2014-11-09] (StdLib)
R1 {c1080099-5e1a-43c5-80f0-41cd67821448}w64; C:\Windows\System32\drivers\{c1080099-5e1a-43c5-80f0-41cd67821448}w64.sys [48832 2014-11-27] (StdLib)
R1 {cc1c7882-de6a-4305-8b39-485dcaa147b6}w64; C:\Windows\System32\drivers\{cc1c7882-de6a-4305-8b39-485dcaa147b6}w64.sys [48832 2014-11-13] (StdLib)
R1 {d0e4096d-22f7-4d51-86f7-85e4dcb81f43}Gw64; C:\Windows\System32\drivers\{d0e4096d-22f7-4d51-86f7-85e4dcb81f43}Gw64.sys [48832 2014-10-26] (StdLib)
R1 {d2016952-a5e4-488e-bc66-1499bf686a8a}w64; C:\Windows\System32\drivers\{d2016952-a5e4-488e-bc66-1499bf686a8a}w64.sys [48832 2014-12-16] (StdLib)
R1 {dcdd20f6-dcc3-4788-be49-c9fbacb2dae7}w64; C:\Windows\System32\drivers\{dcdd20f6-dcc3-4788-be49-c9fbacb2dae7}w64.sys [48832 2014-12-06] (StdLib)
R1 {f51668dd-f93c-4fee-a9fd-55c8481780d4}w64; C:\Windows\System32\drivers\{f51668dd-f93c-4fee-a9fd-55c8481780d4}w64.sys [48832 2014-12-28] (StdLib)
R1 {f5598bc7-a9c4-4bd0-8ca5-3b6319e94b10}w64; C:\Windows\System32\drivers\{f5598bc7-a9c4-4bd0-8ca5-3b6319e94b10}w64.sys [48832 2014-12-22] (StdLib)
R1 {f7ba53d8-c3df-4a43-84a3-af76826da955}w64; C:\Windows\System32\drivers\{f7ba53d8-c3df-4a43-84a3-af76826da955}w64.sys [48832 2014-10-31] (StdLib)
R1 {f8625ba0-c2d7-40f8-b773-382964b0698d}w64; C:\Windows\System32\drivers\{f8625ba0-c2d7-40f8-b773-382964b0698d}w64.sys [48832 2014-11-08] (StdLib)
S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-12-27 17:33 - 2015-12-27 17:37 - 00036622 _____ C:\Users\Od Ježiška\Downloads\FRST.txt
2015-12-27 17:30 - 2015-12-27 17:33 - 00000000 ____D C:\FRST
2015-12-27 17:26 - 2015-12-27 17:27 - 02370560 _____ (Farbar) C:\Users\Od Ježiška\Downloads\FRST64.exe
2015-12-27 17:09 - 2015-12-27 17:09 - 00000000 ___RD C:\Users\Od Ježiška\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-12-21 15:50 - 2015-12-21 15:52 - 00000000 ____D C:\Users\Od Ježiška\Desktop\patrik
2015-12-20 22:55 - 2015-12-20 23:33 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Oznamko
2015-12-20 22:31 - 2015-12-20 22:42 - 1142694854 _____ C:\Users\Od Ježiška\Downloads\patrik.rar
2015-12-09 22:33 - 2015-12-09 22:33 - 00106001 _____ C:\Users\Od Ježiška\Downloads\Vianocna nadej.mid
2015-12-09 12:50 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 12:50 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 12:50 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-09 12:50 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-09 12:50 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 12:50 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 12:50 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-09 12:50 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-09 12:50 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 12:50 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 12:50 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 12:50 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-09 12:50 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-09 12:50 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 12:50 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 12:50 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-09 12:50 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 12:50 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-12-09 12:50 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 12:50 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 12:50 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-09 12:50 - 2015-10-09 00:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 12:50 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2015-12-09 12:50 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2015-12-09 12:50 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2015-12-09 12:50 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2015-12-09 12:50 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-09 12:49 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 12:49 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-09 12:49 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 12:49 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-09 12:49 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-09 12:49 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-09 12:49 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-09 12:49 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 12:49 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-09 12:49 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-09 12:49 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-09 12:49 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-09 12:49 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-09 12:49 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-09 12:49 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-09 12:49 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-09 12:49 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-09 12:49 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-09 12:49 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-09 12:49 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-09 12:49 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-09 12:49 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-09 12:49 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 12:49 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-09 12:49 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-09 12:49 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-09 12:49 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-09 12:49 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-09 12:49 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-09 12:49 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-09 12:49 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-09 12:49 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-09 12:49 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-09 12:49 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 12:49 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 12:49 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 12:49 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 12:49 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 12:49 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 12:49 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 12:49 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 12:49 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 12:49 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 12:49 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 12:49 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 12:49 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 12:49 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 12:49 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 12:49 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 12:49 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 12:49 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 12:49 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 12:49 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 12:49 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 12:49 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 12:49 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 12:49 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 12:49 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 12:49 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 12:49 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 12:49 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 12:49 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 12:49 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 12:49 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 12:48 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 12:48 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-07 16:24 - 2015-12-07 16:24 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2015-12-07 16:24 - 2015-12-07 16:24 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-07 13:07 - 2015-12-07 13:07 - 00256540 _____ C:\Users\Od Ježiška\Downloads\T9K-Ballad.ZIP
2015-12-07 13:04 - 2015-12-07 13:05 - 00644128 _____ C:\Users\Od Ježiška\Downloads\T3Ballad_4_PSR9k.zip
2015-12-07 12:58 - 2015-12-07 12:58 - 01759379 _____ C:\Users\Od Ježiška\Downloads\psr-9000 (1).zip
2015-12-07 12:50 - 2015-12-07 12:50 - 01551768 _____ C:\Users\Od Ježiška\Downloads\psr-8000.zip
2015-12-07 12:46 - 2015-12-07 12:46 - 00113366 _____ C:\Users\Od Ježiška\Downloads\730-8Beat-2k.ZIP
2015-12-07 12:42 - 2015-12-07 12:42 - 00376618 _____ C:\Users\Od Ježiška\Downloads\T4ENTERT95O.zip
2015-12-07 12:42 - 2015-12-07 12:42 - 00236014 _____ C:\Users\Od Ježiška\Downloads\T4BALLROOM S950.zip
2015-12-07 12:35 - 2015-12-07 12:36 - 00283907 _____ C:\Users\Od Ježiška\Downloads\T4BALLAD S950.zip
2015-12-06 23:08 - 2015-12-06 23:08 - 03729096 _____ C:\Users\Od Ježiška\Downloads\Tyros_4_T2.ZIP
2015-12-06 22:59 - 2015-12-06 23:00 - 01759379 _____ C:\Users\Od Ježiška\Downloads\psr-9000.zip
2015-12-06 22:54 - 2015-12-06 22:55 - 00554595 _____ C:\Users\Od Ježiška\Downloads\PSR-550Originals.zip
2015-12-06 22:48 - 2015-12-06 22:49 - 00451584 _____ C:\Users\Od Ježiška\Downloads\HenniMegaIndex.xls
2015-12-03 20:53 - 2015-12-27 17:09 - 00000512 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_1215tb_rel.job
2015-12-03 20:53 - 2015-12-27 17:09 - 00000426 _____ C:\Windows\Tasks\AVG_SYS_TASK_1215tb_DELETE.job
2015-12-03 20:53 - 2015-12-03 20:53 - 00002928 _____ C:\Windows\System32\Tasks\AVG_SYS_TASK_1215tb_DELETE
2015-12-03 20:53 - 2015-12-03 20:53 - 00002806 _____ C:\Windows\System32\Tasks\AVG-Secure-Search-Update_1215tb_rel
2015-12-03 20:53 - 2015-12-03 20:53 - 00000000 ____D C:\ProgramData\Avg_Update_1215tb
2015-12-03 18:50 - 2015-12-03 18:50 - 07889679 _____ C:\Users\Od Ježiška\Downloads\Longman Exam Accelerator_promo brochure_recordings.zip
2015-12-02 22:40 - 2015-12-02 22:43 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Kazik Vianoce
2015-12-02 21:58 - 2015-12-02 22:00 - 40136791 _____ C:\Users\Od Ježiška\Downloads\ROBO-KAZIK---Vianoce-(ludovky).rar
2015-11-30 17:29 - 2015-11-30 17:30 - 03172960 _____ C:\Users\Od Ježiška\Downloads\30.Vyberanie_zvonceka_pri_bohosluzbach.pptx
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-12-27 17:37 - 2014-06-22 17:49 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8e39fcb7c00f.job
2015-12-27 17:32 - 2015-04-05 20:51 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-12-27 17:32 - 2015-04-05 19:32 - 00001324 _____ C:\Windows\Tasks\winter_web_notification_service.job
2015-12-27 17:32 - 2011-02-12 08:24 - 00000000 ____D C:\Windows
2015-12-27 17:25 - 2009-07-14 05:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-27 17:25 - 2009-07-14 05:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-27 17:19 - 2014-10-21 20:52 - 00000000 ____D C:\Program Files (x86)\allgenius
2015-12-27 17:18 - 2009-07-14 06:13 - 00785946 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-27 17:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-27 17:18 - 2009-07-14 03:34 - 00000612 _____ C:\Windows\win.ini
2015-12-27 17:15 - 2013-01-22 20:29 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000UA.job
2015-12-27 17:14 - 2014-11-13 20:10 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000UA1cfff758a55a72f.job
2015-12-27 17:14 - 2012-12-21 15:54 - 00000000 ____D C:\Users\Od Ježiška\AppData\Roaming\Skype
2015-12-27 17:13 - 2014-12-11 21:51 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-12-27 17:12 - 2015-04-07 14:11 - 00001300 _____ C:\Windows\Tasks\mr_fun_notification_service.job
2015-12-27 17:09 - 2015-04-07 14:11 - 00000662 _____ C:\Windows\Tasks\mr_fun_updating_service.job
2015-12-27 17:09 - 2015-04-05 19:32 - 00000686 _____ C:\Windows\Tasks\winter_web_updating_service.job
2015-12-27 17:09 - 2014-10-21 18:56 - 00002458 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-5.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00005196 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-11.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00004506 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-4.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00004170 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-6.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00003826 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-7.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00003480 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-1.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00000944 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-12-27 17:09 - 2013-01-09 15:01 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-27 17:09 - 2012-05-26 16:43 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-12-27 17:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-24 18:46 - 2012-03-28 19:36 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-24 16:12 - 2014-11-13 20:10 - 00000914 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000Core1cfff7589a7178c.job
2015-12-24 14:32 - 2014-10-21 18:55 - 00000948 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-12-21 17:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-12-20 23:38 - 2015-04-05 08:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-20 23:38 - 2015-04-05 08:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-20 18:40 - 2009-07-14 05:45 - 00341024 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-16 22:38 - 2013-01-09 15:02 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-15 22:02 - 2014-03-31 17:49 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Škola
2015-12-15 20:14 - 2014-10-09 21:00 - 00000000 ____D C:\Users\Od Ježiška\AppData\Roaming\Mozilla
2015-12-15 10:20 - 2012-05-26 16:43 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-12-14 16:44 - 2013-03-13 22:24 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-14 16:44 - 2013-03-13 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-14 16:02 - 2013-02-11 16:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-14 15:59 - 2013-03-14 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-13 17:25 - 2014-11-11 14:57 - 00003866 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415714265
2015-12-13 17:25 - 2012-12-21 14:29 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-13 17:19 - 2015-10-25 18:08 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2015-12-09 11:52 - 2015-07-26 11:32 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-12-09 04:39 - 2010-11-21 04:27 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-08 22:46 - 2015-07-26 11:32 - 00003904 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-12-08 22:46 - 2012-03-28 19:36 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-08 22:46 - 2012-03-28 19:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-08 22:46 - 2012-03-28 19:36 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-08 18:22 - 2013-10-24 14:08 - 00000000 ____D C:\Users\Od Ježiška\AppData\Local\CrashDumps
2015-12-06 16:31 - 2014-06-22 17:49 - 00003932 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf8e39fcb7c00f
2015-12-06 16:31 - 2013-01-09 15:01 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-03 20:04 - 2014-10-21 17:57 - 00000000 ____D C:\Users\Od Ježiška\Desktop\ANJ
2015-12-02 21:26 - 2013-05-15 12:47 - 00000000 ____D C:\Users\Od Ježiška\Desktop\USB
2015-12-02 16:07 - 2014-11-13 20:10 - 00003946 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000UA1cfff758a55a72f
2015-12-02 16:07 - 2014-11-13 20:10 - 00003550 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000Core1cfff7589a7178c
2015-11-30 21:35 - 2014-10-21 17:58 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Noty
2015-11-30 21:35 - 2013-02-21 20:05 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Dokumenty
2015-11-30 18:42 - 2012-12-31 16:32 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Oltárne plachty
==================== Files in the root of some directories =======
2015-03-31 09:14 - 2015-03-31 09:14 - 0005655 _____ () C:\Users\Od Ježiška\AppData\Roaming\IZx2wn9Hrch6ZeAh8sJQ
2015-04-03 14:49 - 2015-04-03 14:49 - 1577472 _____ () C:\Users\Od Ježiška\AppData\Roaming\IZx2wn9Hrch6ZeAh8sJQ.exe
2015-03-31 09:14 - 2015-03-31 09:14 - 0005655 _____ () C:\Users\Od Ježiška\AppData\Roaming\lRMPD3Yf2xDOO
2015-04-03 14:49 - 2015-04-03 14:49 - 1577472 _____ () C:\Users\Od Ježiška\AppData\Roaming\lRMPD3Yf2xDOO.exe
2013-11-11 18:40 - 2014-05-31 09:40 - 0000038 _____ () C:\Users\Od Ježiška\AppData\Roaming\WB.CFG
2014-01-01 16:14 - 2014-01-03 18:19 - 0000005 _____ () C:\Users\Od Ježiška\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-11-11 18:40 - 2014-01-30 15:40 - 0000005 _____ () C:\Users\Od Ježiška\AppData\Roaming\WBPU-TTL.DAT
2014-10-21 20:03 - 2014-10-21 20:03 - 0612346 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nsaA19F.tmp
2014-10-21 19:58 - 2014-10-21 19:58 - 0627784 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nsdA5A7.tmp
2014-10-21 19:13 - 2014-10-21 19:13 - 0612346 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nsr19AA.tmp
2014-10-22 13:30 - 2014-10-22 13:29 - 0612346 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nssFEF7.tmp
2014-10-29 13:30 - 2014-10-29 13:30 - 0000000 _____ () C:\Users\Od Ježiška\AppData\Local\{58C832AE-29D4-48E7-90E1-F1ED1A190270}
2012-05-26 16:57 - 2012-05-26 17:00 - 0002454 _____ () C:\ProgramData\clear.fiSDK20.log
2012-05-26 16:59 - 2012-05-26 16:59 - 0000032 _____ () C:\ProgramData\PS.log
Some files in TEMP:
====================
C:\Users\Od Ježiška\AppData\Local\Temp\11072.exe
C:\Users\Od Ježiška\AppData\Local\Temp\20147.exe
C:\Users\Od Ježiška\AppData\Local\Temp\26361.exe
C:\Users\Od Ježiška\AppData\Local\Temp\26799.exe
C:\Users\Od Ježiška\AppData\Local\Temp\2786.exe
C:\Users\Od Ježiška\AppData\Local\Temp\4311.exe
C:\Users\Od Ježiška\AppData\Local\Temp\appshat-distribution.exe
C:\Users\Od Ježiška\AppData\Local\Temp\BingSvc.exe
C:\Users\Od Ježiška\AppData\Local\Temp\bitool.dll
C:\Users\Od Ježiška\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Od Ježiška\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Od Ježiška\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp61dabg.dll
C:\Users\Od Ježiška\AppData\Local\Temp\dsrsetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\GURBF0A.exe
C:\Users\Od Ježiška\AppData\Local\Temp\oi_{7437A1E4-F11D-431F-8E13-E19BE6721EC3}.exe
C:\Users\Od Ježiška\AppData\Local\Temp\OnlineBackup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\qUAJ1.exe
C:\Users\Od Ježiška\AppData\Local\Temp\res.dll
C:\Users\Od Ježiška\AppData\Local\Temp\sender.exe
C:\Users\Od Ježiška\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\Softonic_EN_1-5-11_EN-Production_10_CleanRelease.exe
C:\Users\Od Ježiška\AppData\Local\Temp\uninst1.exe
C:\Users\Od Ježiška\AppData\Local\Temp\Uninstall.exe
C:\Users\Od Ježiška\AppData\Local\Temp\uQsT3.dll
C:\Users\Od Ježiška\AppData\Local\Temp\uQsT3.exe
C:\Users\Od Ježiška\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Od Ježiška\AppData\Local\Temp\VideoConverterSetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\{10772FBC-7BB8-4075-AF53-19B725EE4438}-GoogleUpdateSetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\~dl731E.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-12-21 17:12
==================== End of FRST.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-12-2015
Ran by Od Ježiška (administrator) on OdJežiška-PC (27-12-2015 17:33:12)
Running from C:\Users\Od Ježiška\Downloads
Loaded Profiles: Od Ježiška (Available Profiles: Od Ježiška)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\ProgramData\Avg_Update_1215tb\AVG-Secure-Search-Update_1215tb.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\ProgramData\cab4fbb2-1ac7-44d2-9b7d-0c921d8827f4\maintainer.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(© 2015 Microsoft Corporation) C:\Users\Od Ježiška\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Program Files (x86)\allgenius\tmp845C.tmp
() C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
() C:\Program Files (x86)\allgenius\bin\utilallgenius.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\loggingserver.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.BrowserAdapter.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.BrowserAdapter64.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
() C:\Program Files (x86)\allgenius\updateallgenius.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.PurBrowse64.exe
() C:\Program Files (x86)\allgenius\bin\allgenius.expext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-09] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-09] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2886416 2012-03-02] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-08] (Acer Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1436224 2010-11-30] (Microsoft Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2573712 2015-12-13] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111312 2015-11-09] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Run: [Google Update] => C:\Users\Od Ježiška\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31283328 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Run: [BingSvc] => C:\Users\Od Ježiška\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [450048 2011-09-13] ()
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => No File
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-14] (AVAST Software)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B418A64F-E5E7-4294-929C-231D54C693AA}: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{B536E52F-2ED1-479A-8B43-FD9F087DB0DF}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com?cid={297E9CF9-DF2D-48C0-B4BE-C331A8A16B30}&mid=5aa2e7437cf247d3809b952411542751-9f965a21994faede76ec454adbfad66389279595&lang=en&ds=co011&coid=avgtbdisco&cmpid=1015tb&pr=sa&d=2014-02-06 14:43:39&v=19.1.0.285&pid=safeguard&sg=0&sap=hp
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://services.freshy.com/general/newhometab.php?hometab=home&partner=11147&guid={C226278C-D99D-4720-8D71-B0379CCE0035}&i=
HKU\S-1-5-21-3351076012-2336630952-411980133-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=964C266D57B08442&affID=125144&tsp=5032
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> 52C7D228301038974E972BA0A0112BDE URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> OldSearch URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_ss&mntrId=964C266D57B08442&affID=125144&tsp=5032
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {6F2235F4-2BA2-4510-A7AA-194F11BC75D2} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11147
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={297E9CF9-DF2D-48C0-B4BE-C331A8A16B30}&mid=5aa2e7437cf247d3809b952411542751-9f965a21994faede76ec454adbfad66389279595&lang=en&ds=co011&coid=avgtbdisco&cmpid=1015tb&pr=sa&d=2014-02-06 14:43:39&v=18.9.0.231&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {B1E3FA54-7454-4B05-8E98-59ECCD1C44E3} URL = hxxp://searchsimple-a.akamaihd.net/?affID=mt-tr&q={searchTerms}&r=914
SearchScopes: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> {DE3CAF3D-51D9-48E5-B069-316A19CBCBBA} URL = hxxp://search.findwide.com/serp?guid={C226278C-D99D-4720-8D71-B0379CCE0035}&action=default_search&k={searchTerms}
BHO: GoHD -> {11111111-1111-1111-1111-110611211180} -> C:\Program Files (x86)\GoHD\GoHD-bho64.dll [2014-10-22] (InstallMoon)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-14] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: BlockAndSurf -> {949350F1-1C0C-4696-7F0C-FAF4F41250C2} -> C:\Program Files (x86)\ver3BlockAndSurf\180_x64.dll [2014-10-21] ()
BHO-x32: Internet Speed Checker -> {11111111-1111-1111-1111-110611171152} -> C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho.dll [2014-10-21] (Speedchecker)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-09] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-14] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: AVG SafeGuard toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG SafeGuard toolbar\19.1.0.285\AVG SafeGuard toolbar_toolbar.dll [2015-12-13] (AVG Secure Search)
BHO-x32: allgenius 1.0.0.7 -> {963e8e8b-052d-46d7-abe6-6728f612ae99} -> C:\Program Files (x86)\allgenius\allgeniusBHO.dll [2015-01-27] (allgenius)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-06-07] (Microsoft Corporation.)
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-06-07] (Microsoft Corporation.)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\19.1.0.285\AVG SafeGuard toolbar_toolbar.dll [2015-12-13] (AVG Secure Search)
Toolbar: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Toolbar: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> FindWide Toolbar - {A369F97E-5B49-41EB-AFB7-8B538290CEE6} - No File
Toolbar: HKU\S-1-5-21-3351076012-2336630952-411980133-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\19.1.0\ViProtocol.dll [2015-12-13] (AVG Secure Search)
FireFox:
========
FF ProfilePath: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF DefaultSearchEngine: Yahoo! Search
FF SelectedSearchEngine: Yahoo! Search
FF Homepage: hxxp://searchsimple-a.akamaihd.net/?affID=mt-tr
FF Keyword.URL: hxxp://searchsimple-a.akamaihd.net/?q=
FF NewTab: hxxp://searchsimple-a.akamaihd.net/?m=tab&affID=mt-tr
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-08] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-08] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\19.1.0\\npsitesafety.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-10-22] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-10-22] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Od Ježiška\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @talk.google.com/O1DPlugin -> C:\Users\Od Ježiška\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @tnt2npapi.com/Plugin -> C:\Users\Od Ježiška\AppData\Local\TNT2\2.0.0.1868\npTNT2.dll [No File]
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Od Ježiška\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-3351076012-2336630952-411980133-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Od Ježiška\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF user.js: detected! => C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js [2014-10-21]
FF Plugin ProgramFiles/Appdata: C:\Users\Od Ježiška\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Od Ježiška\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF SearchPlugin: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\dsrlte.xml [2015-01-18]
FF SearchPlugin: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\dsrlte1.xml [2015-09-12]
FF SearchPlugin: C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-195739.xml [2014-10-21]
FF Extension: No Name - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\toolbar11147@findwide.com.xpi [not found]
FF Extension: No Name - C:\Users\Od Je [not found]
FF Extension: Internet Speed Checker - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com [2014-10-22] [not signed]
FF Extension: GoHD - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sonnypenn@aol.com [2014-10-21] [not signed]
FF Extension: FindWide Toolbar - C:\Users\Od Ježiška\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\toolbar11147@findwide.com [2014-10-21] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.204
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.204 [2014-02-06] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-15]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKU\S-1-5-21-3351076012-2336630952-411980133-1000\...\Firefox\Extensions: [{4C221D56-A54A-A548-2CE6-322758891EDC}] - C:\Program Files (x86)\ver3BlockAndSurf\180.xpi
FF Extension: BlockAndSurf - C:\Program Files (x86)\ver3BlockAndSurf\180.xpi [2014-10-21] [not signed]
Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=703_pr__alt__ddc_dsssyc_bd_com"
CHR StartupUrls: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=703_pr__alt__ddc_dsssyc_bd_com"
CHR DefaultSearchURL: Default -> hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=703_pr__alt__ddc_dss_bd_com&p={searchTerms}
CHR DefaultSearchKeyword: Default -> yahoo.com
CHR DefaultNewTabURL: Default -> hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=703_pr__alt__ddc_dsssyctab_bd_com
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\pdf.dll => No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll => No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll => No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL => No File
CHR Profile: C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (allgenius) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnlagjpcfaabkkapnjhmdeejhjgbeneg [2015-04-12] [UpdateUrl: hxxp://wwwallgeniusinfo-a.akamaihd.net/update/chrome] <==== ATTENTION
CHR Extension: (mr fun) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfhphepmmghimompopllneamgdbelkdd [2015-04-07]
CHR Extension: (Avast SafePrice) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-13]
CHR Extension: (Bing) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-07-26]
CHR Extension: (gcjpefhffmcgplgklffgbebganmhffje) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcjpefhffmcgplgklffgbebganmhffje [2015-04-05]
CHR Extension: (Avast Online Security) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-13]
CHR Extension: (Big Phat Sports) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhjchhljdoccgihhmkmoefiegblmlekk [2015-05-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-26]
CHR Extension: (winter web) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\obbfamljbihbcghcciagdafdpbgcmkne [2015-04-05]
CHR Extension: (phhpajlkjeoakfmckfnogpnfeidgbhil) - C:\Users\Od Ježiška\AppData\Local\Google\Chrome\User Data\Default\Extensions\phhpajlkjeoakfmckfnogpnfeidgbhil [2015-04-07]
CHR Extension: () - C:\Users\Od Ježiška\AppData\Local\Comp Bubble\Component [2015-10-15]
CHR Extension: () - C:\Users\Od Ježiška\AppData\Local\Car Form\Component [2015-12-27]
CHR HKU\S-1-5-21-3351076012-2336630952-411980133-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aminlpmkfcdibgpgfajlgnamicjckkjf] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jdkihdhlegcdggknokfekoemkjjnjhgi] - hxxp://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://www.yandex.ru/?win=147&clid=1989595"
OPR Extension: (Internet Speed Checker) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbglkiiiofelplniblholffbhhjmdhhi [2015-12-21]
OPR Extension: (allgenius) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\bnlagjpcfaabkkapnjhmdeejhjgbeneg [2015-04-19]
OPR Extension: (Go HD 1.1) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\bokijhalndhhhikpnaniimagniglonke [2015-08-16]
OPR Extension: (Opera Addons Portal) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\dfhphepmmghimompopllneamgdbelkdd [2015-04-07]
OPR Extension: (Opera Addons Portal) - C:\Users\Od Ježiška\AppData\Roaming\Opera Software\Opera Stable\Extensions\phhpajlkjeoakfmckfnogpnfeidgbhil [2015-04-07]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [107648 2012-03-09] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-14] (AVAST Software)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-22] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-10-22] (globalUpdate) [File not signed] <==== ATTENTION
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-16] (Intel Corporation)
R2 MaintainerSvc3.93.1720192; C:\ProgramData\cab4fbb2-1ac7-44d2-9b7d-0c921d8827f4\maintainer.exe [128240 2015-10-22] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [12784 2010-11-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [282616 2010-11-11] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R2 Update allgenius; C:\Program Files (x86)\allgenius\updateallgenius.exe [647408 2015-12-27] ()
R2 Util allgenius; C:\Program Files (x86)\allgenius\bin\utilallgenius.exe [648432 2015-12-20] ()
R2 vToolbarUpdater19.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\ToolbarUpdater.exe [1864592 2015-12-13] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-28] (Atheros) [File not signed]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-14] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-14] (AVAST Software)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [188928 2010-10-24] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [72064 2010-10-24] (Microsoft Corporation)
R2 webinstrNew; C:\Windows\system32\Drivers\webinstrNew.sys [56504 2014-10-21] (Corsica)
R1 {089a2337-f92c-4fd6-89c4-9869b0ab6644}w64; C:\Windows\System32\drivers\{089a2337-f92c-4fd6-89c4-9869b0ab6644}w64.sys [48832 2014-12-01] (StdLib)
R1 {20028c4e-ef35-4336-a227-afedf096d2a7}w64; C:\Windows\System32\drivers\{20028c4e-ef35-4336-a227-afedf096d2a7}w64.sys [48832 2014-12-31] (StdLib)
R1 {2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}w64; C:\Windows\System32\drivers\{2d11e69f-33c6-44c6-ac04-bb1b36bd5d05}w64.sys [48832 2014-11-22] (StdLib)
R1 {2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}w64; C:\Windows\System32\drivers\{2ed6f06d-c282-422a-bd97-39d8f3b7bfbe}w64.sys [48832 2014-11-30] (StdLib)
R1 {2edd21db-764b-43cd-81b6-eef43c26704a}w64; C:\Windows\System32\drivers\{2edd21db-764b-43cd-81b6-eef43c26704a}w64.sys [48832 2014-12-18] (StdLib)
R1 {3bcd1a06-f942-43b2-83f3-1b446001ad4c}w64; C:\Windows\System32\drivers\{3bcd1a06-f942-43b2-83f3-1b446001ad4c}w64.sys [48832 2014-11-03] (StdLib)
R1 {458639bd-68ee-4273-bbab-5c062f563d3b}w64; C:\Windows\System32\drivers\{458639bd-68ee-4273-bbab-5c062f563d3b}w64.sys [48832 2014-12-25] (StdLib)
R1 {487feb77-84bf-4620-9b7d-e3091f0d8c1a}w64; C:\Windows\System32\drivers\{487feb77-84bf-4620-9b7d-e3091f0d8c1a}w64.sys [48832 2014-11-25] (StdLib)
R1 {5f8e00a8-575d-48e6-8d65-64af80d8d3c1}w64; C:\Windows\System32\drivers\{5f8e00a8-575d-48e6-8d65-64af80d8d3c1}w64.sys [48832 2014-10-29] (StdLib)
R1 {645cdede-1bea-456e-9de9-65f184313502}w64; C:\Windows\System32\drivers\{645cdede-1bea-456e-9de9-65f184313502}w64.sys [48832 2014-12-09] (StdLib)
R1 {64ffc04b-3304-4dd9-a15c-6a0b789ab072}w64; C:\Windows\System32\drivers\{64ffc04b-3304-4dd9-a15c-6a0b789ab072}w64.sys [48832 2015-01-06] (StdLib)
R1 {69344dc5-97c6-446f-ab93-78620f9ce080}w64; C:\Windows\System32\drivers\{69344dc5-97c6-446f-ab93-78620f9ce080}w64.sys [48832 2014-11-16] (StdLib)
R1 {7fe08025-5799-4bbb-b59a-98fc6fb5f287}w64; C:\Windows\System32\drivers\{7fe08025-5799-4bbb-b59a-98fc6fb5f287}w64.sys [48832 2014-12-03] (StdLib)
R1 {8ebc28a2-0eec-4503-8299-d9ab3df68568}w64; C:\Windows\System32\drivers\{8ebc28a2-0eec-4503-8299-d9ab3df68568}w64.sys [48832 2015-01-11] (StdLib)
R1 {918d73e6-344e-4cbd-99f6-1e688461e49b}w64; C:\Windows\System32\drivers\{918d73e6-344e-4cbd-99f6-1e688461e49b}w64.sys [48832 2015-01-03] (StdLib)
R1 {ac0ddd40-091b-4a3f-89cd-5279f84da3bc}w64; C:\Windows\System32\drivers\{ac0ddd40-091b-4a3f-89cd-5279f84da3bc}w64.sys [48832 2014-11-19] (StdLib)
R1 {af16652c-3cdd-4795-b89b-2d9cf16806d6}Gw64; C:\Windows\System32\drivers\{af16652c-3cdd-4795-b89b-2d9cf16806d6}Gw64.sys [48832 2014-10-21] (StdLib)
R1 {b6bca5b8-0633-4bd4-aff8-a8eac231017e}w64; C:\Windows\System32\drivers\{b6bca5b8-0633-4bd4-aff8-a8eac231017e}w64.sys [48832 2014-11-09] (StdLib)
R1 {c1080099-5e1a-43c5-80f0-41cd67821448}w64; C:\Windows\System32\drivers\{c1080099-5e1a-43c5-80f0-41cd67821448}w64.sys [48832 2014-11-27] (StdLib)
R1 {cc1c7882-de6a-4305-8b39-485dcaa147b6}w64; C:\Windows\System32\drivers\{cc1c7882-de6a-4305-8b39-485dcaa147b6}w64.sys [48832 2014-11-13] (StdLib)
R1 {d0e4096d-22f7-4d51-86f7-85e4dcb81f43}Gw64; C:\Windows\System32\drivers\{d0e4096d-22f7-4d51-86f7-85e4dcb81f43}Gw64.sys [48832 2014-10-26] (StdLib)
R1 {d2016952-a5e4-488e-bc66-1499bf686a8a}w64; C:\Windows\System32\drivers\{d2016952-a5e4-488e-bc66-1499bf686a8a}w64.sys [48832 2014-12-16] (StdLib)
R1 {dcdd20f6-dcc3-4788-be49-c9fbacb2dae7}w64; C:\Windows\System32\drivers\{dcdd20f6-dcc3-4788-be49-c9fbacb2dae7}w64.sys [48832 2014-12-06] (StdLib)
R1 {f51668dd-f93c-4fee-a9fd-55c8481780d4}w64; C:\Windows\System32\drivers\{f51668dd-f93c-4fee-a9fd-55c8481780d4}w64.sys [48832 2014-12-28] (StdLib)
R1 {f5598bc7-a9c4-4bd0-8ca5-3b6319e94b10}w64; C:\Windows\System32\drivers\{f5598bc7-a9c4-4bd0-8ca5-3b6319e94b10}w64.sys [48832 2014-12-22] (StdLib)
R1 {f7ba53d8-c3df-4a43-84a3-af76826da955}w64; C:\Windows\System32\drivers\{f7ba53d8-c3df-4a43-84a3-af76826da955}w64.sys [48832 2014-10-31] (StdLib)
R1 {f8625ba0-c2d7-40f8-b773-382964b0698d}w64; C:\Windows\System32\drivers\{f8625ba0-c2d7-40f8-b773-382964b0698d}w64.sys [48832 2014-11-08] (StdLib)
S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-12-27 17:33 - 2015-12-27 17:37 - 00036622 _____ C:\Users\Od Ježiška\Downloads\FRST.txt
2015-12-27 17:30 - 2015-12-27 17:33 - 00000000 ____D C:\FRST
2015-12-27 17:26 - 2015-12-27 17:27 - 02370560 _____ (Farbar) C:\Users\Od Ježiška\Downloads\FRST64.exe
2015-12-27 17:09 - 2015-12-27 17:09 - 00000000 ___RD C:\Users\Od Ježiška\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-12-21 15:50 - 2015-12-21 15:52 - 00000000 ____D C:\Users\Od Ježiška\Desktop\patrik
2015-12-20 22:55 - 2015-12-20 23:33 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Oznamko
2015-12-20 22:31 - 2015-12-20 22:42 - 1142694854 _____ C:\Users\Od Ježiška\Downloads\patrik.rar
2015-12-09 22:33 - 2015-12-09 22:33 - 00106001 _____ C:\Users\Od Ježiška\Downloads\Vianocna nadej.mid
2015-12-09 12:50 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 12:50 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 12:50 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 12:50 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-09 12:50 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-09 12:50 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-09 12:50 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 12:50 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 12:50 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-09 12:50 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-09 12:50 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 12:50 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 12:50 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 12:50 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-09 12:50 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-09 12:50 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 12:50 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 12:50 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-09 12:50 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 12:50 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-12-09 12:50 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 12:50 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 12:50 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-09 12:50 - 2015-10-09 00:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 12:50 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 12:50 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2015-12-09 12:50 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2015-12-09 12:50 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2015-12-09 12:50 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2015-12-09 12:50 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-09 12:49 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 12:49 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-09 12:49 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 12:49 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-09 12:49 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-09 12:49 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-09 12:49 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-09 12:49 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 12:49 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-09 12:49 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-09 12:49 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-09 12:49 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-09 12:49 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-09 12:49 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-09 12:49 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-09 12:49 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-09 12:49 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-09 12:49 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-09 12:49 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-09 12:49 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-09 12:49 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-09 12:49 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-09 12:49 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 12:49 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-09 12:49 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-09 12:49 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-09 12:49 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-09 12:49 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-09 12:49 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-09 12:49 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-09 12:49 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-09 12:49 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-09 12:49 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-09 12:49 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 12:49 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 12:49 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 12:49 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 12:49 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 12:49 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 12:49 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 12:49 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 12:49 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 12:49 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 12:49 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 12:49 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 12:49 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 12:49 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 12:49 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 12:49 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 12:49 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 12:49 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 12:49 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 12:49 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 12:49 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 12:49 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 12:49 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 12:49 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 12:49 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 12:49 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 12:49 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 12:49 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 12:49 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 12:49 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 12:49 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 12:48 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 12:48 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-07 16:24 - 2015-12-07 16:24 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2015-12-07 16:24 - 2015-12-07 16:24 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-07 13:07 - 2015-12-07 13:07 - 00256540 _____ C:\Users\Od Ježiška\Downloads\T9K-Ballad.ZIP
2015-12-07 13:04 - 2015-12-07 13:05 - 00644128 _____ C:\Users\Od Ježiška\Downloads\T3Ballad_4_PSR9k.zip
2015-12-07 12:58 - 2015-12-07 12:58 - 01759379 _____ C:\Users\Od Ježiška\Downloads\psr-9000 (1).zip
2015-12-07 12:50 - 2015-12-07 12:50 - 01551768 _____ C:\Users\Od Ježiška\Downloads\psr-8000.zip
2015-12-07 12:46 - 2015-12-07 12:46 - 00113366 _____ C:\Users\Od Ježiška\Downloads\730-8Beat-2k.ZIP
2015-12-07 12:42 - 2015-12-07 12:42 - 00376618 _____ C:\Users\Od Ježiška\Downloads\T4ENTERT95O.zip
2015-12-07 12:42 - 2015-12-07 12:42 - 00236014 _____ C:\Users\Od Ježiška\Downloads\T4BALLROOM S950.zip
2015-12-07 12:35 - 2015-12-07 12:36 - 00283907 _____ C:\Users\Od Ježiška\Downloads\T4BALLAD S950.zip
2015-12-06 23:08 - 2015-12-06 23:08 - 03729096 _____ C:\Users\Od Ježiška\Downloads\Tyros_4_T2.ZIP
2015-12-06 22:59 - 2015-12-06 23:00 - 01759379 _____ C:\Users\Od Ježiška\Downloads\psr-9000.zip
2015-12-06 22:54 - 2015-12-06 22:55 - 00554595 _____ C:\Users\Od Ježiška\Downloads\PSR-550Originals.zip
2015-12-06 22:48 - 2015-12-06 22:49 - 00451584 _____ C:\Users\Od Ježiška\Downloads\HenniMegaIndex.xls
2015-12-03 20:53 - 2015-12-27 17:09 - 00000512 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_1215tb_rel.job
2015-12-03 20:53 - 2015-12-27 17:09 - 00000426 _____ C:\Windows\Tasks\AVG_SYS_TASK_1215tb_DELETE.job
2015-12-03 20:53 - 2015-12-03 20:53 - 00002928 _____ C:\Windows\System32\Tasks\AVG_SYS_TASK_1215tb_DELETE
2015-12-03 20:53 - 2015-12-03 20:53 - 00002806 _____ C:\Windows\System32\Tasks\AVG-Secure-Search-Update_1215tb_rel
2015-12-03 20:53 - 2015-12-03 20:53 - 00000000 ____D C:\ProgramData\Avg_Update_1215tb
2015-12-03 18:50 - 2015-12-03 18:50 - 07889679 _____ C:\Users\Od Ježiška\Downloads\Longman Exam Accelerator_promo brochure_recordings.zip
2015-12-02 22:40 - 2015-12-02 22:43 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Kazik Vianoce
2015-12-02 21:58 - 2015-12-02 22:00 - 40136791 _____ C:\Users\Od Ježiška\Downloads\ROBO-KAZIK---Vianoce-(ludovky).rar
2015-11-30 17:29 - 2015-11-30 17:30 - 03172960 _____ C:\Users\Od Ježiška\Downloads\30.Vyberanie_zvonceka_pri_bohosluzbach.pptx
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-12-27 17:37 - 2014-06-22 17:49 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8e39fcb7c00f.job
2015-12-27 17:32 - 2015-04-05 20:51 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-12-27 17:32 - 2015-04-05 19:32 - 00001324 _____ C:\Windows\Tasks\winter_web_notification_service.job
2015-12-27 17:32 - 2011-02-12 08:24 - 00000000 ____D C:\Windows
2015-12-27 17:25 - 2009-07-14 05:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-27 17:25 - 2009-07-14 05:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-27 17:19 - 2014-10-21 20:52 - 00000000 ____D C:\Program Files (x86)\allgenius
2015-12-27 17:18 - 2009-07-14 06:13 - 00785946 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-27 17:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-27 17:18 - 2009-07-14 03:34 - 00000612 _____ C:\Windows\win.ini
2015-12-27 17:15 - 2013-01-22 20:29 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000UA.job
2015-12-27 17:14 - 2014-11-13 20:10 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000UA1cfff758a55a72f.job
2015-12-27 17:14 - 2012-12-21 15:54 - 00000000 ____D C:\Users\Od Ježiška\AppData\Roaming\Skype
2015-12-27 17:13 - 2014-12-11 21:51 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-12-27 17:12 - 2015-04-07 14:11 - 00001300 _____ C:\Windows\Tasks\mr_fun_notification_service.job
2015-12-27 17:09 - 2015-04-07 14:11 - 00000662 _____ C:\Windows\Tasks\mr_fun_updating_service.job
2015-12-27 17:09 - 2015-04-05 19:32 - 00000686 _____ C:\Windows\Tasks\winter_web_updating_service.job
2015-12-27 17:09 - 2014-10-21 18:56 - 00002458 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-5.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00005196 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-11.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00004506 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-4.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00004170 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-6.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00003826 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-7.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00003480 _____ C:\Windows\Tasks\2d2bdd09-8abb-4c14-977f-88a8093f8006-1.job
2015-12-27 17:09 - 2014-10-21 18:55 - 00000944 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-12-27 17:09 - 2013-01-09 15:01 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-27 17:09 - 2012-05-26 16:43 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-12-27 17:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-24 18:46 - 2012-03-28 19:36 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-24 16:12 - 2014-11-13 20:10 - 00000914 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000Core1cfff7589a7178c.job
2015-12-24 14:32 - 2014-10-21 18:55 - 00000948 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-12-21 17:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-12-20 23:38 - 2015-04-05 08:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-20 23:38 - 2015-04-05 08:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-20 18:40 - 2009-07-14 05:45 - 00341024 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-16 22:38 - 2013-01-09 15:02 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-15 22:02 - 2014-03-31 17:49 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Škola
2015-12-15 20:14 - 2014-10-09 21:00 - 00000000 ____D C:\Users\Od Ježiška\AppData\Roaming\Mozilla
2015-12-15 10:20 - 2012-05-26 16:43 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-12-14 16:44 - 2013-03-13 22:24 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-14 16:44 - 2013-03-13 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-14 16:02 - 2013-02-11 16:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-14 15:59 - 2013-03-14 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-13 17:25 - 2014-11-11 14:57 - 00003866 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415714265
2015-12-13 17:25 - 2012-12-21 14:29 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-13 17:19 - 2015-10-25 18:08 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2015-12-09 11:52 - 2015-07-26 11:32 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-12-09 04:39 - 2010-11-21 04:27 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-08 22:46 - 2015-07-26 11:32 - 00003904 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-12-08 22:46 - 2012-03-28 19:36 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-08 22:46 - 2012-03-28 19:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-08 22:46 - 2012-03-28 19:36 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-08 18:22 - 2013-10-24 14:08 - 00000000 ____D C:\Users\Od Ježiška\AppData\Local\CrashDumps
2015-12-06 16:31 - 2014-06-22 17:49 - 00003932 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf8e39fcb7c00f
2015-12-06 16:31 - 2013-01-09 15:01 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-03 20:04 - 2014-10-21 17:57 - 00000000 ____D C:\Users\Od Ježiška\Desktop\ANJ
2015-12-02 21:26 - 2013-05-15 12:47 - 00000000 ____D C:\Users\Od Ježiška\Desktop\USB
2015-12-02 16:07 - 2014-11-13 20:10 - 00003946 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000UA1cfff758a55a72f
2015-12-02 16:07 - 2014-11-13 20:10 - 00003550 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3351076012-2336630952-411980133-1000Core1cfff7589a7178c
2015-11-30 21:35 - 2014-10-21 17:58 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Noty
2015-11-30 21:35 - 2013-02-21 20:05 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Dokumenty
2015-11-30 18:42 - 2012-12-31 16:32 - 00000000 ____D C:\Users\Od Ježiška\Desktop\Oltárne plachty
==================== Files in the root of some directories =======
2015-03-31 09:14 - 2015-03-31 09:14 - 0005655 _____ () C:\Users\Od Ježiška\AppData\Roaming\IZx2wn9Hrch6ZeAh8sJQ
2015-04-03 14:49 - 2015-04-03 14:49 - 1577472 _____ () C:\Users\Od Ježiška\AppData\Roaming\IZx2wn9Hrch6ZeAh8sJQ.exe
2015-03-31 09:14 - 2015-03-31 09:14 - 0005655 _____ () C:\Users\Od Ježiška\AppData\Roaming\lRMPD3Yf2xDOO
2015-04-03 14:49 - 2015-04-03 14:49 - 1577472 _____ () C:\Users\Od Ježiška\AppData\Roaming\lRMPD3Yf2xDOO.exe
2013-11-11 18:40 - 2014-05-31 09:40 - 0000038 _____ () C:\Users\Od Ježiška\AppData\Roaming\WB.CFG
2014-01-01 16:14 - 2014-01-03 18:19 - 0000005 _____ () C:\Users\Od Ježiška\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-11-11 18:40 - 2014-01-30 15:40 - 0000005 _____ () C:\Users\Od Ježiška\AppData\Roaming\WBPU-TTL.DAT
2014-10-21 20:03 - 2014-10-21 20:03 - 0612346 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nsaA19F.tmp
2014-10-21 19:58 - 2014-10-21 19:58 - 0627784 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nsdA5A7.tmp
2014-10-21 19:13 - 2014-10-21 19:13 - 0612346 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nsr19AA.tmp
2014-10-22 13:30 - 2014-10-22 13:29 - 0612346 _____ (CMI Limited) C:\Users\Od Ježiška\AppData\Local\nssFEF7.tmp
2014-10-29 13:30 - 2014-10-29 13:30 - 0000000 _____ () C:\Users\Od Ježiška\AppData\Local\{58C832AE-29D4-48E7-90E1-F1ED1A190270}
2012-05-26 16:57 - 2012-05-26 17:00 - 0002454 _____ () C:\ProgramData\clear.fiSDK20.log
2012-05-26 16:59 - 2012-05-26 16:59 - 0000032 _____ () C:\ProgramData\PS.log
Some files in TEMP:
====================
C:\Users\Od Ježiška\AppData\Local\Temp\11072.exe
C:\Users\Od Ježiška\AppData\Local\Temp\20147.exe
C:\Users\Od Ježiška\AppData\Local\Temp\26361.exe
C:\Users\Od Ježiška\AppData\Local\Temp\26799.exe
C:\Users\Od Ježiška\AppData\Local\Temp\2786.exe
C:\Users\Od Ježiška\AppData\Local\Temp\4311.exe
C:\Users\Od Ježiška\AppData\Local\Temp\appshat-distribution.exe
C:\Users\Od Ježiška\AppData\Local\Temp\BingSvc.exe
C:\Users\Od Ježiška\AppData\Local\Temp\bitool.dll
C:\Users\Od Ježiška\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Od Ježiška\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Od Ježiška\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp61dabg.dll
C:\Users\Od Ježiška\AppData\Local\Temp\dsrsetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\GURBF0A.exe
C:\Users\Od Ježiška\AppData\Local\Temp\oi_{7437A1E4-F11D-431F-8E13-E19BE6721EC3}.exe
C:\Users\Od Ježiška\AppData\Local\Temp\OnlineBackup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\qUAJ1.exe
C:\Users\Od Ježiška\AppData\Local\Temp\res.dll
C:\Users\Od Ježiška\AppData\Local\Temp\sender.exe
C:\Users\Od Ježiška\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\Softonic_EN_1-5-11_EN-Production_10_CleanRelease.exe
C:\Users\Od Ježiška\AppData\Local\Temp\uninst1.exe
C:\Users\Od Ježiška\AppData\Local\Temp\Uninstall.exe
C:\Users\Od Ježiška\AppData\Local\Temp\uQsT3.dll
C:\Users\Od Ježiška\AppData\Local\Temp\uQsT3.exe
C:\Users\Od Ježiška\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Od Ježiška\AppData\Local\Temp\VideoConverterSetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\{10772FBC-7BB8-4075-AF53-19B725EE4438}-GoogleUpdateSetup.exe
C:\Users\Od Ježiška\AppData\Local\Temp\~dl731E.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-12-21 17:12
==================== End of FRST.txt ============================