VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Nějaké havěť v pc

https://forum.viry.cz:443/viewtopic.php?t=147932

Stránka 1 z 1

Nějaké havěť v pc

Napsal: 13 úno 2016 19:47
od lordweb24
Zdravím, určitě se mě objevila nějaká ta havěť ve stařičkém notebooku. Prosím o kontrolu logu a následnou opravu. Budu všem vděčný za pomoc.


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-02-2016
Ran by lordw (administrator) on DESKTOP-V3CK663 (13-02-2016 19:43:03)
Running from C:\Users\lordw\Desktop
Loaded Profiles: lordw (Available Profiles: lordw)
Platform: Microsoft Windows 10 Pro Version 1511 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2016.27.2.0_x86__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6568.16901.0_x86__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6568.16901.0_x86__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.16941.0_x86__8wekyb3d8bbwe\Video.UI.exe
(forum.viry.cz) C:\Users\lordw\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

AppInit_DLLs: C:\ProgramData\Airtostrong\Air-Tam.dll => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23cc515d-8878-42ad-bb9e-510c5fa2c0e5}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
SearchScopes: HKLM -> DefaultScope {ielnksrch} URL =

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-05] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgHlgybJEqzVGEG_rXg2dV0lKrKomyZZEm58DpPFUUbP1lF7kTfU7dRjcUv9oXAArxr72ZdlltM_qmeu9N71yFGhEycyFyY13Ge78Vo0Yb5Kmwn--pJJchQ76N0vHxi-yOAwsaZ6_1Lf2zF-5smggUnlthyGeGI,
CHR Profile: C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-14]
CHR Extension: (Dokumenty Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-14]
CHR Extension: (Disk Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-14]
CHR Extension: (YouTube) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-14]
CHR Extension: (Vyhledávání Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-14]
CHR Extension: (Tabulky Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-14]
CHR Extension: (AdBlock) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-09]
CHR Extension: (Sniper Team Game Collection) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgbbaloijjnkpigapgmocdpoblnlec [2016-02-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-14]
CHR Extension: (Gmail) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-14]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)
S2 Airtostrong; C:\ProgramData\\Airtostrong\\Airtostrong.exe -f "C:\ProgramData\\Airtostrong\\Airtostrong.dat" -l -a

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BCM43XX; C:\WINDOWS\System32\drivers\bcmwl63l.sys [4715008 2015-10-30] (Broadcom Corporation)
R3 guardian2; C:\WINDOWS\System32\Drivers\oz776.sys [72184 2015-05-11] (O2Micro)
R1 MPCKpt; C:\WINDOWS\System32\DRIVERS\MPCKpt.sys [52968 2016-02-09] (DotC United Inc)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
S0 MPCBase; System32\drivers\MPCBase.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-13 19:39 - 2016-02-13 19:43 - 00007061 _____ C:\Users\lordw\Desktop\FRST.txt
2016-02-13 19:39 - 2016-02-13 19:43 - 00000000 ____D C:\FRST
2016-02-13 18:38 - 2016-02-13 19:42 - 00112640 _____ (forum.viry.cz) C:\Users\lordw\Desktop\FRSTLauncher.exe
2016-02-13 18:38 - 2016-02-13 19:39 - 01721344 _____ (Farbar) C:\Users\lordw\Desktop\FRST.exe
2016-02-13 18:38 - 2016-02-13 18:38 - 05657611 _____ (Swearware) C:\Users\lordw\Downloads\ComboFix.exe
2016-02-13 18:28 - 2016-02-13 18:28 - 00001949 _____ C:\Users\lordw\Desktop\JRT.txt
2016-02-13 18:25 - 2016-02-13 18:25 - 01609032 _____ (Malwarebytes) C:\Users\lordw\Downloads\JRT.exe
2016-02-13 18:18 - 2016-02-13 18:21 - 02870984 _____ (ESET) C:\Users\lordw\Downloads\esetsmartinstaller_csy (2).exe
2016-02-12 20:50 - 2016-02-12 20:50 - 00027234 _____ C:\Users\lordw\Downloads\The.Big.Bang.Theory.S09E15.HDTV.x264-LOL.srt
2016-02-11 09:48 - 2016-02-11 09:48 - 00000000 ___HD C:\OneDriveTemp
2016-02-10 05:23 - 2016-02-10 05:23 - 00004486 _____ C:\Users\lordw\OneDrive\Dokumenty\AdwCleaner[C1].txt
2016-02-10 05:05 - 2016-02-10 05:05 - 00000000 ____D C:\Program Files\ESET
2016-02-10 05:04 - 2016-02-10 05:05 - 02870984 _____ (ESET) C:\Users\lordw\Downloads\esetsmartinstaller_csy.exe
2016-02-10 00:00 - 2016-02-10 00:00 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Mozilla
2016-02-09 23:59 - 2016-02-13 19:20 - 00000000 ____D C:\ProgramData\Airtostrong
2016-02-09 23:59 - 2016-02-09 23:59 - 00000000 ____D C:\ProgramData\Airtostrongs
2016-02-09 23:57 - 2016-02-13 19:19 - 00000000 ____D C:\Program Files\Common Files\qrkxsrsl
2016-02-09 23:12 - 2016-02-13 18:12 - 00000000 ____D C:\Program Files\MPC Cleaner
2016-02-09 23:12 - 2016-02-09 23:12 - 00052968 ____N (DotC United Inc) C:\WINDOWS\system32\Drivers\MPCKpt.sys
2016-02-09 23:12 - 2016-02-09 23:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default)
2016-02-09 22:54 - 2016-02-09 22:54 - 00041472 _____ C:\Users\lordw\AppData\Local\donelectronics.dat
2016-02-09 22:54 - 2016-02-09 22:54 - 00000187 _____ C:\Users\lordw\AppData\Local\donelectronics.exe.config
2016-02-09 22:54 - 2016-02-09 22:49 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-02-09 22:53 - 2016-02-13 19:19 - 00000000 ____D C:\Program Files\4C4C4544-1455054788-3710-8052-C8C04F57334A
2016-02-09 22:50 - 2016-02-09 22:50 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2016-02-09 22:48 - 2016-02-09 22:48 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2016-02-09 22:48 - 2016-02-09 22:48 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2016-02-09 22:47 - 2016-02-09 22:47 - 00000000 ____D C:\Users\lordw\AppData\Local\@ByELDI
2016-02-09 22:46 - 2016-02-13 19:19 - 00000000 ____D C:\Program Files\KMSPico
2016-02-09 22:46 - 2016-02-09 23:06 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Seznam.cz
2016-02-09 22:46 - 2016-02-09 23:06 - 00000000 ____D C:\Program Files\Seznam.cz
2016-02-09 22:30 - 2016-02-13 12:33 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-09 22:30 - 2016-02-09 22:30 - 00000000 ____D C:\Users\lordw\AppData\Local\Microsoft Help
2016-02-09 22:26 - 2016-02-09 22:26 - 01945832 _____ C:\Users\lordw\Downloads\wrar521cz.exe
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\Users\lordw\AppData\Roaming\WinRAR
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\Program Files\WinRAR
2016-02-09 22:08 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-09 22:08 - 2016-01-27 07:15 - 05798240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-09 22:08 - 2016-01-27 07:15 - 01560848 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-09 22:08 - 2016-01-27 07:15 - 01541792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-09 22:08 - 2016-01-27 07:12 - 00279376 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-09 22:08 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-02-09 22:08 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-09 22:08 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-09 22:08 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-09 22:08 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-09 22:08 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-09 22:08 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-09 22:08 - 2016-01-27 06:47 - 01714016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-09 22:08 - 2016-01-27 06:47 - 00483680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-09 22:08 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msorcl32.dll
2016-02-09 22:08 - 2016-01-27 06:15 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-09 22:08 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-09 22:08 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-09 22:08 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-09 22:08 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-09 22:08 - 2016-01-27 06:11 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-09 22:08 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-09 22:08 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-09 22:08 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-09 22:08 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-09 22:08 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-09 22:08 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-09 22:08 - 2016-01-27 05:58 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-09 22:08 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-09 22:08 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-09 22:08 - 2016-01-27 05:52 - 02977280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-09 22:08 - 2016-01-27 05:51 - 01903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-09 22:08 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-09 22:08 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-09 22:08 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-09 22:08 - 2016-01-27 05:49 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-09 22:08 - 2016-01-27 05:44 - 00942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-09 22:08 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-09 20:53 - 2016-02-10 19:30 - 00000000 ____D C:\Users\lordw\Desktop\Fotky probrat
2016-02-08 14:39 - 2016-02-08 16:01 - 1510757320 _____ C:\Users\lordw\Downloads\I9505XXUHOJ2_I9505TMZHOJ1_TMZ.zip
2016-02-08 11:58 - 2016-02-08 11:58 - 00002747 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Device Recovery Tool.lnk
2016-02-08 11:58 - 2016-02-08 11:58 - 00002735 _____ C:\Users\Public\Desktop\Windows Device Recovery Tool.lnk
2016-02-08 11:58 - 2016-02-08 11:58 - 00000000 ____D C:\ProgramData\LGE
2016-02-08 11:58 - 2016-02-08 11:58 - 00000000 ____D C:\ProgramData\HTC
2016-02-08 11:58 - 2016-02-08 11:58 - 00000000 ____D C:\Program Files\Microsoft Care Suite
2016-02-08 11:57 - 2016-02-08 11:57 - 02362464 _____ (Microsoft) C:\Users\lordw\Downloads\WindowsDeviceRecoveryToolInstaller.exe
2016-02-05 21:54 - 2016-02-05 21:55 - 01110104 _____ C:\Users\lordw\Downloads\Odin3_v3.10.7.zip
2016-02-05 10:18 - 2016-02-05 10:18 - 00000733 _____ C:\Users\lordw\Desktop\F=I=L=M=Y.lnk
2016-02-03 22:19 - 2016-02-02 22:04 - 00014366 _____ C:\Users\lordw\OneDrive\Dokumenty\dovolenka služební volno.xlsx
2016-01-31 23:57 - 2016-01-31 23:57 - 00000000 ____D C:\Users\lordw\AppData\Local\ElevatedDiagnostics
2016-01-29 16:59 - 2016-01-29 17:24 - 23587052 _____ (AutoComSoft s.r.o) C:\Users\lordw\Downloads\setup.exe
2016-01-29 11:06 - 2016-01-29 11:07 - 00000000 ____D C:\Users\lordw\Downloads\Vag-com 304.409 (CZE-US)+ VIS 3.0 popis zavad
2016-01-28 12:47 - 2016-01-28 12:47 - 01529227 _____ C:\Users\lordw\Downloads\D770HX_vA8.zip
2016-01-28 12:46 - 2016-01-28 12:46 - 01472789 _____ C:\Users\lordw\Downloads\D770HX_vA7.zip
2016-01-28 12:43 - 2016-01-16 07:35 - 00959840 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-28 12:43 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-01-28 12:43 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-01-28 12:43 - 2016-01-16 07:20 - 00297072 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-01-28 12:43 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-28 12:43 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-01-28 12:43 - 2016-01-16 07:17 - 01300016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-01-28 12:43 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-01-28 12:43 - 2016-01-16 07:03 - 00364168 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-01-28 12:43 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-28 12:43 - 2016-01-16 06:28 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-01-28 12:43 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-01-28 12:43 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-01-28 12:43 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-01-28 12:43 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-01-28 12:43 - 2016-01-16 06:23 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-01-28 12:43 - 2016-01-16 06:22 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-01-28 12:43 - 2016-01-16 06:22 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-01-28 12:43 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-01-28 12:43 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-01-28 12:43 - 2016-01-16 06:19 - 01552896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-01-28 12:43 - 2016-01-16 06:17 - 01793024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-28 12:43 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-01-28 12:43 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-01-28 12:43 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-01-28 12:42 - 2016-01-16 07:35 - 00599904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-28 12:42 - 2016-01-16 07:35 - 00168360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-01-28 12:42 - 2016-01-16 07:33 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-28 12:42 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-28 12:42 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-28 12:42 - 2016-01-16 07:04 - 00771424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-01-28 12:42 - 2016-01-16 06:37 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-01-28 12:42 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-01-28 12:42 - 2016-01-16 06:35 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-01-28 12:42 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-01-28 12:42 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-01-28 12:42 - 2016-01-16 06:34 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-01-28 12:42 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-28 12:42 - 2016-01-16 06:32 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-01-28 12:42 - 2016-01-16 06:32 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-01-28 12:42 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-01-28 12:42 - 2016-01-16 06:31 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-01-28 12:42 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-01-28 12:42 - 2016-01-16 06:30 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-01-28 12:42 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-01-28 12:42 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-01-28 12:42 - 2016-01-16 06:28 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-28 12:42 - 2016-01-16 06:28 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-01-28 12:42 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-01-28 12:42 - 2016-01-16 06:27 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-01-28 12:42 - 2016-01-16 06:27 - 00398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-01-28 12:42 - 2016-01-16 06:27 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-28 12:42 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-01-28 12:42 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-01-28 12:42 - 2016-01-16 06:25 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-01-28 12:42 - 2016-01-16 06:24 - 00382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-01-28 12:42 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-01-28 12:42 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-01-28 12:42 - 2016-01-16 06:20 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-28 12:42 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-01-28 12:42 - 2016-01-16 06:20 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00176128 _____ C:\WINDOWS\system32\MTFServer.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\system32\MTF.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-28 12:42 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-28 12:42 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-01-27 14:51 - 2016-01-27 14:52 - 01213544 _____ C:\Users\lordw\Downloads\AF103733511_en-us_powerpoint2013quickstartguide.pdf
2016-01-23 16:33 - 2016-01-23 15:48 - 15724553 _____ C:\Users\lordw\Desktop\Sonia Borg - Orální sex - To nejlepší pro něj.pdf
2016-01-22 18:38 - 2016-01-22 18:49 - 00000000 ____D C:\Users\lordw\Desktop\doklad
2016-01-16 16:23 - 2016-01-16 16:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-01-16 14:35 - 2016-01-16 14:37 - 00000000 ____D C:\Users\lordw\Desktop\DCIM
2016-01-16 14:34 - 2016-01-16 14:34 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-01-15 19:42 - 2016-02-13 09:06 - 00000000 ____D C:\Users\lordw\AppData\Roaming\uTorrent
2016-01-15 19:42 - 2016-01-15 19:42 - 00000995 _____ C:\Users\lordw\Desktop\µTorrent.lnk
2016-01-15 19:42 - 2016-01-15 19:42 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2016-01-15 11:37 - 2016-01-15 11:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-01-14 12:19 - 2016-01-14 12:19 - 00000000 ____D C:\Users\lordw\AppData\Local\PeerDistRepub
2016-01-14 11:31 - 2016-01-14 11:31 - 00000000 ____D C:\Users\lordw\AppData\Local\NetworkTiles
2016-01-14 10:42 - 2016-02-13 09:16 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-14 10:42 - 2016-02-13 09:11 - 144254680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-14 10:40 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-14 10:40 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-14 10:40 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-14 10:40 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-14 10:40 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-14 10:40 - 2016-01-05 03:18 - 00641728 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-14 10:40 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-14 10:40 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-14 10:40 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-14 10:40 - 2016-01-05 02:37 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-14 10:40 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-14 10:40 - 2016-01-05 02:35 - 00706048 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-14 10:40 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-14 10:40 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-01-14 10:40 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-01-14 10:40 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-01-14 10:40 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-01-14 10:40 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-01-14 10:40 - 2015-12-07 05:45 - 00203104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-01-14 10:40 - 2015-12-07 05:12 - 00820224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-01-14 10:40 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-01-14 10:40 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-01-14 10:40 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-01-14 10:40 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-01-14 10:40 - 2015-12-07 04:57 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-01-14 10:40 - 2015-12-07 04:56 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-01-14 10:40 - 2015-12-07 04:56 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-01-14 10:40 - 2015-12-07 04:56 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-01-14 10:40 - 2015-12-07 04:53 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-01-14 10:40 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-01-14 10:40 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-01-14 10:40 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-01-14 10:40 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-01-14 10:40 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-01-14 10:40 - 2015-12-07 04:34 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-01-14 10:40 - 2015-12-01 07:51 - 01821024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-01-14 10:40 - 2015-11-24 10:26 - 01273728 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-01-14 10:40 - 2015-11-24 09:02 - 01154560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-01-14 10:40 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-01-14 10:40 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-01-14 10:40 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-01-14 10:40 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-14 10:40 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-01-14 10:40 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-01-14 10:40 - 2015-11-22 10:32 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-01-14 10:40 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-01-14 10:40 - 2015-11-22 10:32 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-01-14 10:40 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2016-01-14 10:40 - 2015-11-22 10:30 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-01-14 10:40 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-01-14 10:40 - 2015-11-22 10:27 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-01-14 10:40 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-01-14 10:40 - 2015-11-22 10:26 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-01-14 10:40 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-01-14 10:40 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-01-14 10:40 - 2015-11-22 10:23 - 03197440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-01-14 10:40 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-01-14 10:40 - 2015-11-22 10:20 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-01-14 10:40 - 2015-11-22 10:18 - 00748032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-01-14 10:40 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-01-14 10:40 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-01-14 10:40 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-01-14 10:40 - 2015-11-13 07:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2016-01-14 10:40 - 2015-11-13 07:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-01-14 10:40 - 2015-11-13 07:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-01-14 10:40 - 2015-11-13 07:09 - 00727752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2016-01-14 10:40 - 2015-11-13 06:32 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-01-14 10:40 - 2015-11-13 06:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-01-14 10:40 - 2015-11-13 06:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-01-14 10:40 - 2015-11-05 12:02 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2016-01-14 10:40 - 2015-11-05 10:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-01-14 10:40 - 2015-11-05 10:26 - 00471392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-01-14 10:40 - 2015-11-05 09:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-01-14 10:39 - 2016-01-05 03:49 - 01051584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-14 10:39 - 2016-01-05 03:49 - 00926560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-14 10:39 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-14 10:39 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-14 10:39 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-14 10:39 - 2016-01-05 03:17 - 01137856 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-14 10:39 - 2016-01-05 03:16 - 01696176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-14 10:39 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-14 10:39 - 2016-01-05 02:48 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-14 10:39 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-14 10:39 - 2016-01-05 02:47 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-14 10:39 - 2016-01-05 02:45 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-14 10:39 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-14 10:39 - 2016-01-05 02:43 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-14 10:39 - 2016-01-05 02:43 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-14 10:39 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-14 10:39 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-14 10:39 - 2016-01-05 02:41 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-14 10:39 - 2016-01-05 02:41 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-14 10:39 - 2016-01-05 02:40 - 01496064 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-14 10:39 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-14 10:39 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-14 10:39 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-14 10:39 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-14 10:39 - 2016-01-05 02:36 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-01-14 10:39 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-14 10:39 - 2016-01-05 02:35 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-14 10:39 - 2015-12-07 05:49 - 00309088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-01-14 10:39 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-01-14 10:39 - 2015-12-07 05:11 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-01-14 10:39 - 2015-12-07 05:05 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-01-14 10:39 - 2015-12-07 05:05 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-01-14 10:39 - 2015-12-07 05:05 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-01-14 10:39 - 2015-12-07 05:03 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-01-14 10:39 - 2015-12-07 05:03 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-01-14 10:39 - 2015-12-07 05:03 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-01-14 10:39 - 2015-12-07 05:01 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-01-14 10:39 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-01-14 10:39 - 2015-12-07 05:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-01-14 10:39 - 2015-12-07 05:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-01-14 10:39 - 2015-12-07 04:58 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-01-14 10:39 - 2015-12-07 04:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-01-14 10:39 - 2015-12-07 04:57 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-01-14 10:39 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-01-14 10:39 - 2015-12-07 04:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-01-14 10:39 - 2015-12-07 04:48 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-01-14 10:39 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-01-14 10:39 - 2015-12-07 04:37 - 00614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-01-14 10:39 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-01-14 10:39 - 2015-11-24 09:48 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2016-01-14 10:39 - 2015-11-24 09:47 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-01-14 10:39 - 2015-11-24 09:39 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2016-01-14 10:39 - 2015-11-24 09:33 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2016-01-14 10:39 - 2015-11-24 09:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-01-14 10:39 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2016-01-14 10:39 - 2015-11-22 11:34 - 00023776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-01-14 10:39 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2016-01-14 10:39 - 2015-11-22 11:24 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-01-14 10:39 - 2015-11-22 11:24 - 00043376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-01-14 10:39 - 2015-11-22 11:23 - 00076128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2016-01-14 10:39 - 2015-11-22 11:20 - 00504624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-01-14 10:39 - 2015-11-22 11:20 - 00139616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-01-14 10:39 - 2015-11-22 10:48 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-01-14 10:39 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-01-14 10:39 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-01-14 10:39 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-01-14 10:39 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-01-14 10:39 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-01-14 10:39 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-01-14 10:39 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-01-14 10:39 - 2015-11-22 10:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2016-01-14 10:39 - 2015-11-22 10:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2016-01-14 10:39 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-01-14 10:39 - 2015-11-22 10:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-01-14 10:39 - 2015-11-22 10:42 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-01-14 10:39 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-01-14 10:39 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-01-14 10:39 - 2015-11-22 10:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-01-14 10:39 - 2015-11-22 10:39 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-01-14 10:39 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-01-14 10:39 - 2015-11-22 10:39 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-01-14 10:39 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2016-01-14 10:39 - 2015-11-22 10:38 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-01-14 10:39 - 2015-11-22 10:37 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-01-14 10:39 - 2015-11-22 10:37 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2016-01-14 10:39 - 2015-11-22 10:33 - 06529024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-01-14 10:39 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2016-01-14 10:39 - 2015-11-22 10:33 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2016-01-14 10:39 - 2015-11-22 10:31 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-01-14 10:39 - 2015-11-22 10:30 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-01-14 10:39 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-01-14 10:39 - 2015-11-22 10:29 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-01-14 10:39 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-01-14 10:39 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-01-14 10:39 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-01-14 10:39 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-01-14 10:39 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-01-14 10:39 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-01-14 10:39 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-01-14 10:39 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-01-14 10:39 - 2015-11-22 10:19 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-01-14 10:39 - 2015-11-21 06:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-01-14 10:39 - 2015-11-13 07:37 - 00030048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2016-01-14 10:39 - 2015-11-13 07:32 - 00443744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2016-01-14 10:39 - 2015-11-13 07:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-01-14 10:39 - 2015-11-13 07:21 - 00113624 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2016-01-14 10:39 - 2015-11-13 07:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-01-14 10:39 - 2015-11-13 07:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-01-14 10:39 - 2015-11-13 07:09 - 00081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-01-14 10:39 - 2015-11-13 06:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-01-14 10:39 - 2015-11-13 06:41 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-01-14 10:39 - 2015-11-13 06:40 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-01-14 10:39 - 2015-11-13 06:40 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-01-14 10:39 - 2015-11-13 06:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-01-14 10:39 - 2015-11-13 06:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-01-14 10:39 - 2015-11-13 06:40 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2016-01-14 10:39 - 2015-11-13 06:40 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-01-14 10:39 - 2015-11-13 06:39 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-01-14 10:39 - 2015-11-13 06:38 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2016-01-14 10:39 - 2015-11-13 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-01-14 10:39 - 2015-11-13 06:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-01-14 10:39 - 2015-11-13 06:32 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-01-14 10:39 - 2015-11-13 06:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-01-14 10:39 - 2015-11-13 06:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-01-14 10:39 - 2015-11-13 06:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-01-14 10:39 - 2015-11-13 06:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-01-14 10:39 - 2015-11-05 10:03 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2016-01-14 10:39 - 2015-11-05 10:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2016-01-14 10:39 - 2015-11-05 09:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-01-14 10:39 - 2015-11-05 09:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-01-14 10:39 - 2015-11-05 09:42 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-01-14 10:38 - 2015-12-09 04:39 - 00247976 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-01-14 10:36 - 2016-01-14 10:36 - 00000000 ____D C:\Users\lordw\AppData\Roaming\MAGIX
2016-01-14 10:36 - 2016-01-14 10:36 - 00000000 ____D C:\ProgramData\MAGIX
2016-01-14 10:34 - 2016-01-14 10:34 - 00000643 _____ C:\Users\lordw\Desktop\KMPlayer.lnk
2016-01-14 10:34 - 2016-01-14 10:34 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2016-01-14 10:33 - 2016-02-12 23:38 - 00000000 ____D C:\KMPlayer
2016-01-14 10:33 - 2016-02-08 11:58 - 00000000 ____D C:\ProgramData\Package Cache
2016-01-14 10:33 - 2015-05-06 16:54 - 00120200 _____ () C:\WINDOWS\system32\DLLDEV32i.dll
2016-01-14 10:14 - 2016-01-14 10:14 - 00000120 ____R C:\Users\lordw\OneDrive\Dokumenty\Poznámkový blok uživatele Jaroslav.url
2016-01-14 09:44 - 2016-01-14 09:44 - 00000000 ____D C:\Users\lordw\AppData\LocalLow\Temp
2016-01-14 09:36 - 2016-01-14 09:36 - 00000000 ___RD C:\Users\lordw\3D Objects
2016-01-14 09:09 - 2016-02-13 18:27 - 00002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-14 09:09 - 2016-02-13 16:34 - 00002230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-01-14 09:08 - 2016-02-13 19:18 - 00000980 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-14 09:08 - 2016-02-13 18:10 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-14 09:08 - 2016-01-14 09:09 - 00000000 ____D C:\Program Files\Google
2016-01-14 09:08 - 2016-01-14 09:08 - 00000873 _____ C:\Users\lordw\Desktop\Obrázky.lnk
2016-01-14 09:07 - 2016-01-14 20:55 - 00000000 ____D C:\Users\lordw\AppData\Local\Google
2016-01-14 09:07 - 2016-01-14 09:07 - 00000885 _____ C:\Users\lordw\Desktop\Dokumenty.lnk
2016-01-14 09:01 - 2016-01-14 09:01 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Macromedia
2016-01-14 09:00 - 2016-01-14 09:00 - 00000000 ____D C:\Users\lordw\AppData\Local\MicrosoftEdge
2016-01-14 08:44 - 2016-01-14 08:44 - 00000735 _____ C:\Users\lordw\Desktop\OneDrive.lnk
2016-01-14 08:36 - 2016-02-13 18:26 - 00000000 ___RD C:\Users\lordw\OneDrive
2016-01-14 08:36 - 2016-02-03 22:18 - 00002387 _____ C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-01-14 08:35 - 2016-01-14 08:35 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-01-14 08:34 - 2016-02-09 07:50 - 00000000 ____D C:\Users\lordw\AppData\Local\Comms
2016-01-14 08:34 - 2016-01-14 08:34 - 00000000 ____D C:\Users\lordw\AppData\Local\ActiveSync
2016-01-14 08:33 - 2016-01-14 08:33 - 00000000 ____D C:\Users\lordw\AppData\Local\Publishers
2016-01-14 08:32 - 2016-02-11 09:48 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-01-14 08:32 - 2016-02-09 22:28 - 00000000 ____D C:\Users\lordw\AppData\Local\Packages
2016-01-14 08:32 - 2016-01-14 08:32 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Adobe
2016-01-14 08:32 - 2016-01-14 08:32 - 00000000 ____D C:\Users\lordw\AppData\Local\VirtualStore
2016-01-14 08:32 - 2016-01-14 08:32 - 00000000 ____D C:\Users\lordw\AppData\Local\TileDataLayer
2016-01-14 08:31 - 2016-02-13 18:39 - 00000000 ____D C:\Users\lordw
2016-01-14 08:31 - 2016-01-14 08:31 - 00000020 ___SH C:\Users\lordw\ntuser.ini
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Šablony
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Soubory cookie
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Poslední
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Okolní tiskárny
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Okolní síť
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Nabídka Start
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Dokumenty
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\Data aplikací
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-01-14 08:31 - 2016-01-14 08:31 - 00000000 _SHDL C:\Users\lordw\AppData\Local\Data aplikací
2016-01-14 08:28 - 2016-02-10 19:33 - 01683934 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 08:24 - 2016-01-14 08:24 - 00000000 ____D C:\ProgramData\USOShared
2016-01-14 08:21 - 2016-02-13 18:08 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Šablony
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Poslední
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Okolní síť
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Dokumenty
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\Data aplikací
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\ProgramData\Šablony
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\ProgramData\Plocha
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\ProgramData\Dokumenty
2016-01-14 08:21 - 2016-01-14 08:21 - 00000000 _SHDL C:\ProgramData\Data aplikací
2016-01-14 08:20 - 2016-01-14 08:20 - 00000000 ____D C:\WINDOWS\CSC
2016-01-14 08:16 - 2016-01-14 08:16 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2016-01-14 08:14 - 2016-02-13 18:08 - 00263240 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-14 08:14 - 2016-01-14 12:00 - 00000000 ___DC C:\WINDOWS\Panther
2016-01-14 08:12 - 2016-01-14 08:12 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-13 19:27 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-13 18:08 - 2015-10-30 06:13 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-13 12:34 - 2015-10-30 06:48 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-13 12:33 - 2015-10-30 06:48 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-13 12:31 - 2015-10-30 16:10 - 00000000 ____D C:\WINDOWS\ShellNew
2016-02-13 12:31 - 2015-10-30 06:48 - 00000076 _____ C:\WINDOWS\win.ini
2016-02-12 19:12 - 2015-10-30 06:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-11 10:13 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\rescache
2016-02-11 03:30 - 2015-10-30 16:10 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 03:30 - 2015-10-30 06:47 - 00000000 ____D C:\WINDOWS\INF
2016-02-10 20:24 - 2015-10-30 06:39 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-10 19:33 - 2015-10-30 16:08 - 00716854 _____ C:\WINDOWS\system32\perfh005.dat
2016-02-10 19:33 - 2015-10-30 16:08 - 00143080 _____ C:\WINDOWS\system32\perfc005.dat
2016-02-09 22:31 - 2015-10-30 06:48 - 00000000 ____D C:\Program Files\Common Files\System
2016-02-03 20:01 - 2015-10-30 06:49 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-02-03 20:01 - 2015-10-30 06:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-01-31 23:57 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-15 04:07 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\AppCompat
2016-01-14 11:50 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-01-14 11:50 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-14 11:50 - 2015-10-30 06:13 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-01-14 08:50 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-01-14 08:33 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-01-14 08:33 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-01-14 08:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-01-14 08:24 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-01-14 08:24 - 2015-10-30 06:48 - 00000000 ____D C:\ProgramData\USOPrivate
2016-01-14 08:24 - 2015-10-30 06:13 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-01-14 08:21 - 2015-10-30 06:48 - 00000000 ____D C:\Program Files\Windows NT
2016-01-14 08:19 - 2015-10-30 06:13 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-01-14 08:15 - 2015-10-30 16:15 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-01-14 08:14 - 2015-10-30 06:48 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

==================== Files in the root of some directories =======

2016-02-09 22:54 - 2016-02-09 22:54 - 0041472 _____ () C:\Users\lordw\AppData\Local\donelectronics.dat
2016-02-09 22:54 - 2016-02-09 22:54 - 0000187 _____ () C:\Users\lordw\AppData\Local\donelectronics.exe.config

Some files in TEMP:
====================
C:\Users\lordw\AppData\Local\Temp\brastub_amobl_inst.exe
C:\Users\lordw\AppData\Local\Temp\genteert.dll
C:\Users\lordw\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-09 08:50

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:35.08 GB) (Free:10.44 GB) NTFS
Drive e: (Záloha) (Fixed) (Total:76.17 GB) (Free:64.64 GB) NTFS

Available physical RAM: 768.7 MB
Total physical RAM: 2037.97 MB
Percentage of memory in use: 62%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 98316F07)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=35.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=76.2 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=450 MB) - (Type=27)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\lordw\Desktop" je 4357 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

Re: Nějaké havěť v pc

Napsal: 13 úno 2016 20:39
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 01:33
od lordweb24
Tady je log:

# AdwCleaner v5.033 - Logfile created 14/02/2016 at 01:27:59
# Updated 07/02/2016 by Xplode
# Database : 2016-02-07.2 [Server]
# Operating system : Windows 10 Pro (x86)
# Username : lordw - DESKTOP-V3CK663
# Running from : C:\Users\lordw\Desktop\adwcleaner_5.033.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : MPCKpt
[-] Service Deleted : MPCBase

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\MPC Cleaner

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\system32\drivers\MPCKpt.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Stpro.exe
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.mpc.am
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.mpc.am

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1351 bytes] ##########

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 11:07
od Rudy
Dejte nový log FRST.

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 16:55
od lordweb24
Nový log zde:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-02-2016
Ran by lordw (administrator) on DESKTOP-V3CK663 (14-02-2016 16:47:30)
Running from C:\Users\lordw\Desktop
Loaded Profiles: lordw (Available Profiles: lordw)
Platform: Microsoft Windows 10 Pro Version 1511 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2016.27.2.0_x86__8wekyb3d8bbwe\WinStore.Mobile.exe
(Microsoft Corporation) C:\Windows\System32\wuapihost.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6568.16901.0_x86__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6568.16901.0_x86__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.16941.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(forum.viry.cz) C:\Users\lordw\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

AppInit_DLLs: C:\ProgramData\Airtostrong\Air-Tam.dll => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23cc515d-8878-42ad-bb9e-510c5fa2c0e5}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
SearchScopes: HKLM -> DefaultScope {ielnksrch} URL =

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-05] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_BzVqASLW90uzABgHlgybJEqzVGEG_rXg2dV0lKrKomyZZEm58DpPFUUbP1lF7kTfU7dRjcUv9oXAArxr72ZdlltM_qmeu9N71yFGhEycyFyY13Ge78Vo0Yb5Kmwn--pJJchQ76N0vHxi-yOAwsaZ6_1Lf2zF-5smggUnlthyGeGI,
CHR Profile: C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-14]
CHR Extension: (Dokumenty Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-14]
CHR Extension: (Disk Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-14]
CHR Extension: (YouTube) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-14]
CHR Extension: (Vyhledávání Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-14]
CHR Extension: (Tabulky Google) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-14]
CHR Extension: (AdBlock) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-09]
CHR Extension: (Sniper Team Game Collection) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgbbaloijjnkpigapgmocdpoblnlec [2016-02-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-14]
CHR Extension: (Gmail) - C:\Users\lordw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-14]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)
S2 Airtostrong; C:\ProgramData\\Airtostrong\\Airtostrong.exe -f "C:\ProgramData\\Airtostrong\\Airtostrong.dat" -l -a

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BCM43XX; C:\WINDOWS\System32\drivers\bcmwl63l.sys [4715008 2015-10-30] (Broadcom Corporation)
R3 guardian2; C:\WINDOWS\System32\Drivers\oz776.sys [72184 2015-05-11] (O2Micro)
R1 MpKslc70da11f; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D0C48B05-43B6-40B0-A2E1-EE5E9A20DD71}\MpKslc70da11f.sys [39168 2016-02-14] (Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-14 16:47 - 2016-02-14 16:48 - 00006951 _____ C:\Users\lordw\Desktop\FRST.txt
2016-02-14 16:47 - 2016-02-14 16:47 - 00015327 _____ C:\Users\lordw\Desktop\LM.bat
2016-02-14 16:40 - 2016-02-14 16:47 - 00029696 _____ C:\Users\lordw\AppData\Local\MSGBOX.EXE
2016-02-14 01:25 - 2016-02-14 01:27 - 00000000 ____D C:\AdwCleaner
2016-02-14 01:10 - 2016-02-14 01:11 - 01508352 _____ C:\Users\lordw\Desktop\adwcleaner_5.033.exe
2016-02-13 19:46 - 2016-02-13 19:46 - 00005586 _____ C:\Users\lordw\Desktop\Addition.rar
2016-02-13 19:39 - 2016-02-14 16:47 - 00000000 ____D C:\FRST
2016-02-13 18:38 - 2016-02-13 19:42 - 00112640 _____ (forum.viry.cz) C:\Users\lordw\Desktop\FRSTLauncher.exe
2016-02-13 18:38 - 2016-02-13 19:39 - 01721344 _____ (Farbar) C:\Users\lordw\Desktop\FRST.exe
2016-02-13 18:38 - 2016-02-13 18:38 - 05657611 _____ (Swearware) C:\Users\lordw\Downloads\ComboFix.exe
2016-02-13 18:25 - 2016-02-13 18:25 - 01609032 _____ (Malwarebytes) C:\Users\lordw\Downloads\JRT.exe
2016-02-13 18:18 - 2016-02-13 18:21 - 02870984 _____ (ESET) C:\Users\lordw\Downloads\esetsmartinstaller_csy (2).exe
2016-02-12 20:50 - 2016-02-12 20:50 - 00027234 _____ C:\Users\lordw\Downloads\The.Big.Bang.Theory.S09E15.HDTV.x264-LOL.srt
2016-02-11 09:48 - 2016-02-11 09:48 - 00000000 ___HD C:\OneDriveTemp
2016-02-10 05:23 - 2016-02-10 05:23 - 00004486 _____ C:\Users\lordw\OneDrive\Dokumenty\AdwCleaner[C1].txt
2016-02-10 05:05 - 2016-02-10 05:05 - 00000000 ____D C:\Program Files\ESET
2016-02-10 05:04 - 2016-02-10 05:05 - 02870984 _____ (ESET) C:\Users\lordw\Downloads\esetsmartinstaller_csy.exe
2016-02-10 00:00 - 2016-02-10 00:00 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Mozilla
2016-02-09 23:59 - 2016-02-13 19:20 - 00000000 ____D C:\ProgramData\Airtostrong
2016-02-09 23:59 - 2016-02-09 23:59 - 00000000 ____D C:\ProgramData\Airtostrongs
2016-02-09 23:57 - 2016-02-13 19:19 - 00000000 ____D C:\Program Files\Common Files\qrkxsrsl
2016-02-09 23:12 - 2016-02-09 23:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default)
2016-02-09 22:54 - 2016-02-09 22:54 - 00041472 _____ C:\Users\lordw\AppData\Local\donelectronics.dat
2016-02-09 22:54 - 2016-02-09 22:54 - 00000187 _____ C:\Users\lordw\AppData\Local\donelectronics.exe.config
2016-02-09 22:54 - 2016-02-09 22:49 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-02-09 22:53 - 2016-02-13 19:19 - 00000000 ____D C:\Program Files\4C4C4544-1455054788-3710-8052-C8C04F57334A
2016-02-09 22:50 - 2016-02-09 22:50 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2016-02-09 22:48 - 2016-02-09 22:48 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2016-02-09 22:48 - 2016-02-09 22:48 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2016-02-09 22:47 - 2016-02-09 22:47 - 00000000 ____D C:\Users\lordw\AppData\Local\@ByELDI
2016-02-09 22:46 - 2016-02-13 19:19 - 00000000 ____D C:\Program Files\KMSPico
2016-02-09 22:46 - 2016-02-09 23:06 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Seznam.cz
2016-02-09 22:46 - 2016-02-09 23:06 - 00000000 ____D C:\Program Files\Seznam.cz
2016-02-09 22:30 - 2016-02-13 12:33 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-09 22:30 - 2016-02-09 22:30 - 00000000 ____D C:\Users\lordw\AppData\Local\Microsoft Help
2016-02-09 22:26 - 2016-02-09 22:26 - 01945832 _____ C:\Users\lordw\Downloads\wrar521cz.exe
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\Users\lordw\AppData\Roaming\WinRAR
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-09 22:26 - 2016-02-09 22:26 - 00000000 ____D C:\Program Files\WinRAR
2016-02-09 22:08 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-09 22:08 - 2016-01-27 07:15 - 05798240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-09 22:08 - 2016-01-27 07:15 - 01560848 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-09 22:08 - 2016-01-27 07:15 - 01541792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-09 22:08 - 2016-01-27 07:12 - 00279376 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-09 22:08 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-02-09 22:08 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-09 22:08 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-09 22:08 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-09 22:08 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-09 22:08 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-09 22:08 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-09 22:08 - 2016-01-27 06:47 - 01714016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-09 22:08 - 2016-01-27 06:47 - 00483680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-09 22:08 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msorcl32.dll
2016-02-09 22:08 - 2016-01-27 06:15 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-09 22:08 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-09 22:08 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-09 22:08 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-09 22:08 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-09 22:08 - 2016-01-27 06:11 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-09 22:08 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-09 22:08 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-09 22:08 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-09 22:08 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-09 22:08 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-09 22:08 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-09 22:08 - 2016-01-27 05:58 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-09 22:08 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-09 22:08 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-09 22:08 - 2016-01-27 05:52 - 02977280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-09 22:08 - 2016-01-27 05:51 - 01903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-09 22:08 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-09 22:08 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-09 22:08 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-09 22:08 - 2016-01-27 05:49 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-09 22:08 - 2016-01-27 05:44 - 00942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-09 22:08 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-09 20:53 - 2016-02-10 19:30 - 00000000 ____D C:\Users\lordw\Desktop\Fotky probrat
2016-02-08 14:39 - 2016-02-08 16:01 - 1510757320 _____ C:\Users\lordw\Downloads\I9505XXUHOJ2_I9505TMZHOJ1_TMZ.zip
2016-02-08 11:58 - 2016-02-08 11:58 - 00002747 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Device Recovery Tool.lnk
2016-02-08 11:58 - 2016-02-08 11:58 - 00002735 _____ C:\Users\Public\Desktop\Windows Device Recovery Tool.lnk
2016-02-08 11:58 - 2016-02-08 11:58 - 00000000 ____D C:\ProgramData\LGE
2016-02-08 11:58 - 2016-02-08 11:58 - 00000000 ____D C:\ProgramData\HTC
2016-02-08 11:58 - 2016-02-08 11:58 - 00000000 ____D C:\Program Files\Microsoft Care Suite
2016-02-08 11:57 - 2016-02-08 11:57 - 02362464 _____ (Microsoft) C:\Users\lordw\Downloads\WindowsDeviceRecoveryToolInstaller.exe
2016-02-05 21:54 - 2016-02-05 21:55 - 01110104 _____ C:\Users\lordw\Downloads\Odin3_v3.10.7.zip
2016-02-05 10:18 - 2016-02-05 10:18 - 00000733 _____ C:\Users\lordw\Desktop\F=I=L=M=Y.lnk
2016-02-03 22:19 - 2016-02-02 22:04 - 00014366 _____ C:\Users\lordw\OneDrive\Dokumenty\dovolenka služební volno.xlsx
2016-01-31 23:57 - 2016-01-31 23:57 - 00000000 ____D C:\Users\lordw\AppData\Local\ElevatedDiagnostics
2016-01-29 16:59 - 2016-01-29 17:24 - 23587052 _____ (AutoComSoft s.r.o) C:\Users\lordw\Downloads\setup.exe
2016-01-29 11:06 - 2016-01-29 11:07 - 00000000 ____D C:\Users\lordw\Downloads\Vag-com 304.409 (CZE-US)+ VIS 3.0 popis zavad
2016-01-28 12:47 - 2016-01-28 12:47 - 01529227 _____ C:\Users\lordw\Downloads\D770HX_vA8.zip
2016-01-28 12:46 - 2016-01-28 12:46 - 01472789 _____ C:\Users\lordw\Downloads\D770HX_vA7.zip
2016-01-28 12:43 - 2016-01-16 07:35 - 00959840 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-28 12:43 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-01-28 12:43 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-01-28 12:43 - 2016-01-16 07:20 - 00297072 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-01-28 12:43 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-28 12:43 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-01-28 12:43 - 2016-01-16 07:17 - 01300016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-01-28 12:43 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-01-28 12:43 - 2016-01-16 07:03 - 00364168 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-01-28 12:43 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-28 12:43 - 2016-01-16 06:28 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-01-28 12:43 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-01-28 12:43 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-01-28 12:43 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-01-28 12:43 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-01-28 12:43 - 2016-01-16 06:23 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-01-28 12:43 - 2016-01-16 06:22 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-01-28 12:43 - 2016-01-16 06:22 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-01-28 12:43 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-01-28 12:43 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-01-28 12:43 - 2016-01-16 06:19 - 01552896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-01-28 12:43 - 2016-01-16 06:17 - 01793024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-28 12:43 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-01-28 12:43 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-01-28 12:43 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-01-28 12:42 - 2016-01-16 07:35 - 00599904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-28 12:42 - 2016-01-16 07:35 - 00168360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-01-28 12:42 - 2016-01-16 07:33 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-28 12:42 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-28 12:42 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-28 12:42 - 2016-01-16 07:04 - 00771424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-01-28 12:42 - 2016-01-16 06:37 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-01-28 12:42 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-01-28 12:42 - 2016-01-16 06:35 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-01-28 12:42 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-01-28 12:42 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-01-28 12:42 - 2016-01-16 06:34 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-01-28 12:42 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-28 12:42 - 2016-01-16 06:32 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-01-28 12:42 - 2016-01-16 06:32 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-01-28 12:42 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-01-28 12:42 - 2016-01-16 06:31 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-01-28 12:42 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-01-28 12:42 - 2016-01-16 06:30 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-01-28 12:42 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-01-28 12:42 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-01-28 12:42 - 2016-01-16 06:29 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-01-28 12:42 - 2016-01-16 06:28 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-28 12:42 - 2016-01-16 06:28 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-01-28 12:42 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-01-28 12:42 - 2016-01-16 06:27 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-01-28 12:42 - 2016-01-16 06:27 - 00398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-01-28 12:42 - 2016-01-16 06:27 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-28 12:42 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-01-28 12:42 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-01-28 12:42 - 2016-01-16 06:25 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-01-28 12:42 - 2016-01-16 06:24 - 00382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-01-28 12:42 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-01-28 12:42 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-01-28 12:42 - 2016-01-16 06:20 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-28 12:42 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-01-28 12:42 - 2016-01-16 06:20 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00176128 _____ C:\WINDOWS\system32\MTFServer.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\system32\MTF.dll
2016-01-28 12:42 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-28 12:42 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-28 12:42 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-01-27 14:51 - 2016-01-27 14:52 - 01213544 _____ C:\Users\lordw\Downloads\AF103733511_en-us_powerpoint2013quickstartguide.pdf
2016-01-23 16:33 - 2016-01-23 15:48 - 15724553 _____ C:\Users\lordw\Desktop\Sonia Borg - Orální sex - To nejlepší pro něj.pdf
2016-01-22 18:38 - 2016-01-22 18:49 - 00000000 ____D C:\Users\lordw\Desktop\doklad
2016-01-16 16:23 - 2016-01-16 16:23 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-01-16 14:35 - 2016-01-16 14:37 - 00000000 ____D C:\Users\lordw\Desktop\DCIM
2016-01-16 14:34 - 2016-01-16 14:34 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-01-15 19:42 - 2016-02-13 09:06 - 00000000 ____D C:\Users\lordw\AppData\Roaming\uTorrent
2016-01-15 19:42 - 2016-01-15 19:42 - 00000995 _____ C:\Users\lordw\Desktop\µTorrent.lnk
2016-01-15 19:42 - 2016-01-15 19:42 - 00000000 ____D C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2016-01-15 11:37 - 2016-01-15 11:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-14 16:18 - 2016-01-14 09:08 - 00000980 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-14 10:18 - 2016-01-14 09:08 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-14 01:30 - 2016-01-14 08:36 - 00000000 ___RD C:\Users\lordw\OneDrive
2016-02-14 01:29 - 2016-01-14 08:31 - 00000000 ____D C:\Users\lordw
2016-02-14 01:29 - 2016-01-14 08:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-14 01:28 - 2015-10-30 06:13 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-13 19:27 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-13 18:27 - 2016-01-14 09:09 - 00002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-13 18:08 - 2016-01-14 08:14 - 00263240 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-13 16:34 - 2016-01-14 09:09 - 00002230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-13 12:34 - 2015-10-30 06:48 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-13 12:33 - 2015-10-30 06:48 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-13 12:31 - 2015-10-30 16:10 - 00000000 ____D C:\WINDOWS\ShellNew
2016-02-13 12:31 - 2015-10-30 06:48 - 00000076 _____ C:\WINDOWS\win.ini
2016-02-13 09:16 - 2016-01-14 10:42 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-13 09:11 - 2016-01-14 10:42 - 144254680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-12 23:38 - 2016-01-14 10:33 - 00000000 ____D C:\KMPlayer
2016-02-12 19:12 - 2015-10-30 06:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-11 10:13 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\rescache
2016-02-11 09:48 - 2016-01-14 08:32 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-11 03:30 - 2015-10-30 16:10 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 03:30 - 2015-10-30 06:47 - 00000000 ____D C:\WINDOWS\INF
2016-02-10 20:24 - 2015-10-30 06:39 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-10 19:33 - 2016-01-14 08:28 - 01683934 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-10 19:33 - 2015-10-30 16:08 - 00716854 _____ C:\WINDOWS\system32\perfh005.dat
2016-02-10 19:33 - 2015-10-30 16:08 - 00143080 _____ C:\WINDOWS\system32\perfc005.dat
2016-02-09 22:31 - 2015-10-30 06:48 - 00000000 ____D C:\Program Files\Common Files\System
2016-02-09 22:28 - 2016-01-14 08:32 - 00000000 ____D C:\Users\lordw\AppData\Local\Packages
2016-02-09 07:50 - 2016-01-14 08:34 - 00000000 ____D C:\Users\lordw\AppData\Local\Comms
2016-02-08 11:58 - 2016-01-14 10:33 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-03 22:18 - 2016-01-14 08:36 - 00002387 _____ C:\Users\lordw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-03 20:01 - 2015-10-30 06:49 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-02-03 20:01 - 2015-10-30 06:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-01-31 23:57 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-29 03:31 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-15 04:07 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\AppCompat

==================== Files in the root of some directories =======

2016-02-09 22:54 - 2016-02-09 22:54 - 0041472 _____ () C:\Users\lordw\AppData\Local\donelectronics.dat
2016-02-09 22:54 - 2016-02-09 22:54 - 0000187 _____ () C:\Users\lordw\AppData\Local\donelectronics.exe.config
2016-02-14 16:40 - 2016-02-14 16:47 - 0029696 _____ () C:\Users\lordw\AppData\Local\MSGBOX.EXE

Some files in TEMP:
====================
C:\Users\lordw\AppData\Local\Temp\brastub_amobl_inst.exe
C:\Users\lordw\AppData\Local\Temp\genteert.dll
C:\Users\lordw\AppData\Local\Temp\sqlite3.dll
C:\Users\lordw\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-09 08:50

==================== End of FRST.txt ============================

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 17:40
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F. ... UnlthyGeGI,
C:\Program Files\KMSPico
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\Users\lordw\AppData\Local\Temp
Task: {DF75D632-EAB1-4A47-AE31-9D0999B021B2} - System32\Tasks\tgus3gft => C:\Program Files\Common Files\qrkxsrsl\824d0xqmvt4js.exe <==== ATTENTION

ResetHosts:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 20:15
od lordweb24
Po fixu proběhl restart ntb. Zde je log:

Fix result of Farbar Recovery Scan Tool (x86) Version:07-02-2016
Ran by lordw (2016-02-14 20:10:48) Run:1
Running from C:\Users\lordw\Desktop
Loaded Profiles: lordw (Available Profiles: lordw)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F. ... UnlthyGeGI,
C:\Program Files\KMSPico
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\Users\lordw\AppData\Local\Temp
Task: {DF75D632-EAB1-4A47-AE31-9D0999B021B2} - System32\Tasks\tgus3gft => C:\Program Files\Common Files\qrkxsrsl\824d0xqmvt4js.exe <==== ATTENTION

ResetHosts:
End
*****************

Chrome HomePage => removed successfully.
C:\Program Files\KMSPico => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully

"C:\Users\lordw\AppData\Local\Temp" folder move:

Could not move "C:\Users\lordw\AppData\Local\Temp" => Scheduled to move on reboot.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DF75D632-EAB1-4A47-AE31-9D0999B021B2}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DF75D632-EAB1-4A47-AE31-9D0999B021B2}" => key removed successfully.
C:\Windows\System32\Tasks\tgus3gft => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\tgus3gft" => key removed successfully.
ResetHosts: => Error: No automatic fix found for this entry.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-02-14 20:12:34)

C:\Users\lordw\AppData\Local\Temp => moved successfully

==== End of Fixlog 20:12:37 ====

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 21:00
od Rudy
Smazáno. Nastala nějaká změna?

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 21:28
od lordweb24
Děkuji moc. Řekl bych, že už si prohlížeč nežije vlastním životem :-)

Jen prohlížeč EDGE při spuštění otevře okno a po napsání adresy třeba http://www.seznam.cz a odklepnutí se vůbec nic neděje. Až když kliknu na tlačítko plus nová záložka tak nová záložka nahradí momentální okno a pak teprve funguje jak má...

Viz foto v raru. Nevím jestli Vám to něco řekne. Je tam rozdíl ve vzhledu okna. Každopádně až tak to není důležité. Jako hlavní prohlížeč používám Chrome.

Ještě jednou děkuji.

Re: Nějaké havěť v pc

Napsal: 14 úno 2016 21:53
od Rudy
Ten prohlížeč, bohužel, neznám, takže dám univerzální radu: Zkuste ho přeinstalovat.

Re: Nějaké havěť v pc

Napsal: 16 úno 2016 18:43
od lordweb24
OK, prosím o LOCK a děkuji za čas...

Re: Nějaké havěť v pc

Napsal: 16 úno 2016 18:45
od Rudy
Rádo se stalo! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz