VIRY.CZ

Hezký den, mohl bych Vás poprosit o kontrolu logu z RSIT. Notebook je použitelný jen nouzovém režimu, jinak komplet zasekaný.

Mockrát děkuji
m.



Logfile of random's system information tool 1.10 (written by random/random)
Run by Anna at 2016-04-02 15:03:37
Microsoft Windows 10 Home
System drive C: has 12 GB (6%) free of 190 GB
Total RAM: 3980 MB (81% free)

HijackThis download failed

======Listing Processes======


winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k appmodel
sihost.exe
C:\WINDOWS\Explorer.EXE
ctfmon.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\helppane.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\WINDOWS\System32\NetworkUXBroker.exe" -ServerName:Windows.Networking.UX
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Anna\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\DLL-Files FixerASKUSER.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe -askuser
C:\WINDOWS\tasks\DLL-Files.Com Fixer_MONTHLY.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe scan
C:\WINDOWS\tasks\DLL-Files.Com Fixer_Updates.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe -updatecheck
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Norton Security Scan for Anna.job - C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe /scan-quick /scheduled

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-10 64640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-24 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-10-25 5299320]
"BtTray"=C:\Program Files (x86)\Bluetooth Suite\BtTray.exe []
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []
"ACMON"=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-09-11 107192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent"=C:\Users\Anna\AppData\Roaming\BitTorrent\BitTorrent.exe [2016-03-12 1930760]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]
"OneDrive"=C:\Users\Anna\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-11 551104]
"Zoner Photo Studio Service 16"=C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Report"=C:\AdwCleaner\AdwCleaner[C1].txt [2016-03-27 5264]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-28 91432]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-16 6108752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2016-04-02 14:27:03 ----D---- C:\Program Files\trend micro
2016-04-02 14:27:02 ----D---- C:\rsit
2016-03-27 15:04:55 ----D---- C:\AdwCleaner
2016-03-27 14:58:01 ----A---- C:\WINDOWS\ntbtlog.txt
2016-03-10 23:34:37 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-10 23:34:35 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-10 23:34:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-10 23:34:30 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-10 23:34:29 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-03-10 23:34:28 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-03-10 23:34:26 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-10 23:34:24 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-10 23:34:21 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-10 23:34:19 ----A---- C:\WINDOWS\system32\WMASF.DLL
2016-03-10 23:34:19 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-03-10 23:34:18 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-10 23:34:15 ----A---- C:\WINDOWS\system32\hlink.dll
2016-03-10 23:34:14 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-10 23:34:12 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-10 23:34:11 ----A---- C:\WINDOWS\system32\combase.dll
2016-03-10 23:34:10 ----A---- C:\WINDOWS\SYSWOW64\WMASF.DLL
2016-03-10 23:34:10 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-10 23:34:07 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-10 23:34:07 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-10 23:34:06 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-10 23:34:06 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-10 23:34:06 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-03-10 23:34:06 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-10 23:34:06 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-10 23:34:05 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-10 23:34:05 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-03-10 23:34:02 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-10 23:34:01 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-03-10 23:34:01 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-10 23:34:01 ----A---- C:\WINDOWS\system32\msctf.dll
2016-03-10 23:34:00 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-10 23:33:59 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-10 23:33:58 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-10 23:33:57 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-10 23:33:56 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-10 23:33:56 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-03-10 23:33:56 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-03-10 23:33:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-10 23:33:54 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-10 23:33:54 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-10 23:33:53 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-10 23:33:53 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-10 23:33:53 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-10 23:33:53 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-10 23:33:52 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-03-10 23:33:52 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-10 23:33:51 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-10 23:33:50 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-10 23:33:47 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-03-10 23:33:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-10 23:33:43 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-10 23:33:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-10 23:33:41 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-10 23:33:40 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-10 23:33:40 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-03-10 23:33:39 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-10 23:33:38 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-10 23:33:38 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-10 23:33:37 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-03-10 23:33:37 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-03-10 23:33:36 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-10 23:33:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-10 23:33:35 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-10 23:33:35 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-10 23:33:34 ----A---- C:\WINDOWS\SYSWOW64\rasman.dll
2016-03-10 23:33:34 ----A---- C:\WINDOWS\system32\rasman.dll
2016-03-10 23:33:34 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-03-10 23:33:34 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-03-10 23:33:34 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-10 23:33:33 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-03-10 23:33:33 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-03-10 23:33:33 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-10 23:33:32 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-03-10 23:33:32 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-10 23:33:32 ----A---- C:\WINDOWS\system32\browser.dll
2016-03-10 23:33:31 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-10 23:33:30 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-03-10 23:33:30 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-10 23:33:30 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\system32\wkscli.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\system32\netapi32.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\system32\browcli.dll
2016-03-10 23:33:29 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-10 23:33:28 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-10 23:33:28 ----A---- C:\WINDOWS\system32\srvcli.dll
2016-03-10 23:33:27 ----A---- C:\WINDOWS\SYSWOW64\wkscli.dll
2016-03-10 23:33:27 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-10 23:33:27 ----A---- C:\WINDOWS\SYSWOW64\srvcli.dll
2016-03-10 23:33:27 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-10 23:33:27 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-03-10 23:33:26 ----A---- C:\WINDOWS\SYSWOW64\IoTAssignedAccessLockFramework.dll
2016-03-10 23:33:26 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-10 23:33:26 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-10 23:33:26 ----A---- C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll
2016-03-10 23:33:26 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-10 23:33:25 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-10 23:33:24 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-03-10 23:33:24 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-03-10 23:33:23 ----A---- C:\WINDOWS\SYSWOW64\ztrace_maps.dll
2016-03-10 23:33:23 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-03-10 23:33:23 ----A---- C:\WINDOWS\system32\ztrace_maps.dll
2016-03-10 23:33:23 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-10 23:33:23 ----A---- C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-03-10 23:33:23 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-10 23:33:22 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-10 23:33:21 ----A---- C:\WINDOWS\SYSWOW64\NetCfgNotifyObjectHost.exe
2016-03-10 23:33:21 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-10 23:33:21 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-10 23:33:20 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-10 23:33:20 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-10 23:33:20 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-10 23:33:19 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-10 23:33:19 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-10 23:33:19 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-03-10 23:33:18 ----A---- C:\WINDOWS\system32\wups2.dll
2016-03-10 23:33:17 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-03-10 23:33:16 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-10 23:33:15 ----A---- C:\WINDOWS\system32\wups.dll
2016-03-10 23:33:14 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-03-10 23:33:14 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-10 23:33:11 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-10 23:33:11 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-10 23:33:10 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-10 23:06:50 ----D---- C:\WINDOWS\Minidump
2016-02-04 18:31:45 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2016-02-04 08:08:51 ----ASH---- C:\pagefile.sys
2016-01-12 21:16:22 ----D---- C:\ProgramData\Package Cache
2016-01-12 21:06:13 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-01-12 21:06:13 ----A---- C:\WINDOWS\system32\schannel.dll
2016-01-12 21:05:58 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2016-01-12 21:05:58 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2016-01-12 21:05:58 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2016-01-12 21:05:57 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-01-12 21:05:57 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2016-01-12 21:05:57 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2016-01-12 21:05:56 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2016-01-12 21:05:55 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2016-01-12 21:05:55 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-01-12 21:05:55 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2016-01-12 21:05:55 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2016-01-12 21:05:54 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2016-01-12 21:05:53 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2016-01-12 21:05:53 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2016-01-12 21:05:53 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2016-01-12 21:05:53 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2016-01-12 21:05:52 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2016-01-12 21:05:52 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2016-01-12 21:05:50 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2016-01-12 21:05:50 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2016-01-12 21:05:49 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-01-12 21:05:49 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-01-12 21:05:49 ----A---- C:\WINDOWS\system32\quartz.dll
2016-01-12 21:05:48 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2016-01-12 21:05:48 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2016-01-12 21:05:46 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2016-01-12 21:05:46 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-01-12 21:05:46 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-01-12 21:05:45 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2016-01-12 21:05:45 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-12 21:05:44 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-01-12 21:05:41 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-01-12 21:05:41 ----A---- C:\WINDOWS\system32\aepic.dll
2016-01-12 21:05:40 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-01-12 21:05:40 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2016-01-12 21:05:40 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-01-12 21:05:40 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-12 21:05:40 ----A---- C:\WINDOWS\system32\evr.dll
2016-01-12 21:05:39 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-01-12 21:05:39 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-01-12 21:05:38 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2016-01-12 21:05:38 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2016-01-12 21:05:38 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-01-12 21:05:37 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2016-01-12 21:05:36 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-01-12 21:05:36 ----A---- C:\WINDOWS\system32\qedit.dll
2016-01-12 21:05:33 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-01-12 21:05:32 ----A---- C:\WINDOWS\system32\mftranscode.dll
2016-01-12 21:05:32 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-01-12 21:05:32 ----A---- C:\WINDOWS\system32\devenum.dll
2016-01-12 21:05:30 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-01-12 21:05:29 ----A---- C:\WINDOWS\system32\invagent.dll
2016-01-12 21:05:29 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-01-12 21:05:28 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2016-01-12 21:05:28 ----A---- C:\WINDOWS\SYSWOW64\mfh264enc.dll
2016-01-12 21:05:28 ----A---- C:\WINDOWS\system32\mfh264enc.dll
2016-01-12 21:05:28 ----A---- C:\WINDOWS\system32\devinv.dll
2016-01-12 21:05:27 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2016-01-12 21:05:27 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-01-12 21:05:27 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-01-12 21:05:27 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-01-12 21:05:24 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2016-01-12 21:05:24 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2016-01-12 21:05:24 ----A---- C:\WINDOWS\system32\usermgrcli.dll
2016-01-12 21:05:24 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-01-12 21:05:23 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2016-01-12 21:05:23 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2016-01-12 21:05:23 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-01-12 21:05:22 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2016-01-12 21:05:22 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-01-12 21:05:22 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-12 21:05:21 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-01-12 21:05:21 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-01-12 21:05:21 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-01-12 21:05:20 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-01-12 21:05:20 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-01-12 21:05:19 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-12 21:05:18 ----A---- C:\WINDOWS\SYSWOW64\usermgrcli.dll
2016-01-12 21:05:18 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-01-12 21:05:18 ----A---- C:\WINDOWS\system32\mfps.dll
2016-01-12 21:05:17 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-01-12 21:05:15 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-01-12 21:05:15 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-12 21:05:15 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-01-12 21:05:14 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-01-12 21:05:14 ----A---- C:\WINDOWS\system32\jscript.dll

======List of files/folders modified in the last 3 months======

2016-04-02 14:56:29 ----D---- C:\WINDOWS\Tasks
2016-04-02 14:56:28 ----D---- C:\WINDOWS\System32
2016-04-02 14:52:57 ----D---- C:\WINDOWS\Temp
2016-04-02 14:27:03 ----RD---- C:\Program Files
2016-04-02 14:26:51 ----D---- C:\WINDOWS\INF
2016-04-02 14:26:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-27 15:06:52 ----RD---- C:\Program Files (x86)
2016-03-27 15:06:52 ----HD---- C:\ProgramData
2016-03-27 15:06:52 ----D---- C:\WINDOWS\system32\Tasks
2016-03-27 14:58:01 ----D---- C:\Windows
2016-03-27 14:40:52 ----D---- C:\WINDOWS\system32\wbem
2016-03-27 14:39:06 ----D---- C:\WINDOWS\AppReadiness
2016-03-27 14:38:59 ----HD---- C:\Program Files\WindowsApps
2016-03-27 14:33:09 ----D---- C:\ProgramData\ASUS Smart Gesture
2016-03-27 14:26:54 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-03-27 14:20:42 ----D---- C:\WINDOWS\system32\sru
2016-03-25 00:23:14 ----D---- C:\Users\Anna\AppData\Roaming\BitTorrent
2016-03-25 00:22:46 ----D---- C:\WINDOWS\debug
2016-03-25 00:03:27 ----D---- C:\Users\Anna\AppData\Roaming\Skype
2016-03-24 09:51:49 ----SHD---- C:\System Volume Information
2016-03-24 09:40:31 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-21 20:05:06 ----D---- C:\WINDOWS\system32\config
2016-03-21 20:04:58 ----D---- C:\WINDOWS\Panther
2016-03-20 23:58:35 ----D---- C:\WINDOWS\LiveKernelReports
2016-03-20 20:44:20 ----D---- C:\Program Files (x86)\Opera
2016-03-20 19:46:41 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-20 19:46:19 ----D---- C:\WINDOWS\WinSxS
2016-03-20 10:55:26 ----D---- C:\The KMPlayer
2016-03-20 10:45:46 ----D---- C:\Program Files\CCleaner
2016-03-19 10:05:57 ----RD---- C:\WINDOWS\assembly
2016-03-19 04:29:32 ----D---- C:\WINDOWS\rescache
2016-03-19 04:03:21 ----D---- C:\WINDOWS\SysWOW64
2016-03-19 04:03:20 ----RSD---- C:\WINDOWS\Fonts
2016-03-19 04:03:20 ----D---- C:\WINDOWS\system32\cs-CZ
2016-03-19 04:03:20 ----D---- C:\WINDOWS\system32\Boot
2016-03-19 04:03:19 ----D---- C:\WINDOWS\system32\drivers
2016-03-19 04:03:19 ----D---- C:\WINDOWS\AppPatch
2016-03-19 04:03:19 ----D---- C:\Program Files\Windows Portable Devices
2016-03-19 04:03:19 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-19 04:03:19 ----D---- C:\Program Files\Windows Media Player
2016-03-19 04:03:19 ----D---- C:\Program Files\Windows Journal
2016-03-19 04:03:19 ----D---- C:\Program Files\Internet Explorer
2016-03-19 04:03:19 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-19 04:03:19 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-19 04:03:19 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-18 21:32:40 ----D---- C:\WINDOWS\Prefetch
2016-03-15 20:07:57 ----D---- C:\WINDOWS\system32\FxsTmp
2016-03-14 21:06:27 ----D---- C:\Program Files (x86)\Hearthstone
2016-03-12 12:42:10 ----D---- C:\WINDOWS\system32\MRT
2016-03-12 12:29:41 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-12 12:29:30 ----SHD---- C:\WINDOWS\Installer
2016-03-12 12:29:30 ----SHD---- C:\Config.Msi
2016-03-12 12:29:10 ----D---- C:\ProgramData\Microsoft Help
2016-03-12 12:27:35 ----A---- C:\WINDOWS\win.ini
2016-03-12 12:25:16 ----D---- C:\WINDOWS\CbsTemp
2016-03-11 20:58:22 ----D---- C:\Program Files (x86)\Battle.net
2016-03-11 20:37:05 ----D---- C:\Users\Anna\AppData\Roaming\Battle.net
2016-03-11 20:37:05 ----D---- C:\ProgramData\Battle.net
2016-03-09 12:59:53 ----D---- C:\Users\Anna\AppData\Roaming\vlc
2016-03-09 10:09:31 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 09:10:49 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-02 22:08:07 ----D---- C:\ProgramData\Skype
2016-02-09 16:05:58 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-01-28 21:39:13 ----RD---- C:\Program Files (x86)\Skype
2016-01-28 21:39:12 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
R0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
R0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
R0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
R0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-24 93528]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@oem33.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw10x.sys [2015-06-26 4325544]
R3 ATP;@oem5.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2015-09-23 101368]
R3 BTATH_BUS;@oem8.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2012-08-10 33944]
R3 HIDSwitch;@oem32.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2015-05-13 19976]
R3 kbfiltr;@oem9.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-07-10 129224]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
S0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-24 65224]
S0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-24 274808]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-11-16 1059656]
S1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-11-16 449992]
S1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
S1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2015-05-28 489776]
S1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
S1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-12-01 8192]
S2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
S2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-24 28656]
S2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-24 90968]
S2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-24 150160]
S2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
S2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
S3 AmUStor;@oem16.inf,%AmUStor.SvcDesc%;AM USB Stroage Driver; C:\WINDOWS\system32\drivers\AmUStor.SYS [2012-07-13 101504]
S3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-06-29 609992]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem22.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
S3 IntcDAud;@oem27.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-10-26 342528]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-08 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem12.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-08 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2013-01-15 107320]
S2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
S2 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
S2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
S2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-24 146600]
S2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
S2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
S2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
S2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session5;Hostitel synchronizace_Session5; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session5;Data kontaktů_Session5; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-08 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session5;Úložiště uživatelských dat_Session5; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Dobrý den,

já jsem ten AdwCleaner spouštěl už před asi týdnem, kdy to začalo zlobit, takže včera večer to už asi nic nenašlo. Nicméně s notebookem se stále nedá pracovat.
Přikládám oba logy, nejprve ten starší a pak ten ze včerejška:

# AdwCleaner v5.105 - Logfile created 27/03/2016 at 15:06:51
# Updated 21/03/2016 by Xplode
# Database : 2016-03-20.7 [Local]
# Operating system : Windows 10 Home (x64)
# Username : Anna - ANNIEPC
# Running from : C:\Users\Anna\Desktop\adwcleaner_5.105.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : APNMCP

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\AskPartnerNetwork
[-] Folder Deleted : C:\Users\Anna\AppData\Local\AskPartnerNetwork
[-] Folder Deleted : C:\Users\Anna\AppData\Local\Temp\apn

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\SysNative\roboot64.exe

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : RDReminder

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54
[-] Key Deleted : HKLM\SOFTWARE\microsoft\windows nt\currentversion\Image File Execution Options\MsMpEng.exe
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaadgepjkdffhjbkfjgnnffnfcffbg
[-] Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaadgepjkdffhjbkfjgnnffnfcffbg
[-] Key Deleted : HKCU\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTBMon]

***** [ Web browsers ] *****

[-] [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : aaaaadgepjkdffhjbkfjgnnffnfcffbg

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [4951 bytes] - [27/03/2016 15:06:51]
C:\AdwCleaner\AdwCleaner[S1].txt - [5086 bytes] - [27/03/2016 15:05:06]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5097 bytes] ##########


# AdwCleaner v5.105 - Logfile created 02/04/2016 at 20:30:40
# Updated 21/03/2016 by Xplode
# Database : 2016-03-20.7 [Local]
# Operating system : Windows 10 Home (x64)
# Username : Anna - ANNIEPC
# Running from : C:\Users\Anna\Desktop\adwcleaner_5.105.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : RDReminder

***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [5264 bytes] - [27/03/2016 15:06:51]
C:\AdwCleaner\AdwCleaner[C2].txt - [787 bytes] - [02/04/2016 20:30:40]
C:\AdwCleaner\AdwCleaner[S1].txt - [5086 bytes] - [27/03/2016 15:05:06]
C:\AdwCleaner\AdwCleaner[S2].txt - [915 bytes] - [02/04/2016 20:06:27]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1004 bytes] ##########

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

FRST log (v příloze Addition.txt)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Anna (administrator) on ANNIEPC (03-04-2016 21:26:58)
Running from C:\Users\Anna\Desktop
Loaded Profiles: Anna (Available Profiles: Anna)
Platform: Windows 10 Home (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(forum.viry.cz) C:\Users\Anna\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA)
HKLM\...\Run: [BtTray] => "C:\Program Files (x86)\Bluetooth Suite\BtTray.exe"
HKLM\...\Run: [BtvStack] => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6108752 2015-11-16] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\Run: [BitTorrent] => C:\Users\Anna\AppData\Roaming\BitTorrent\BitTorrent.exe [1930760 2016-03-12] (BitTorrent Inc.)
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2013-12-13] ()
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[C2].txt [1083 2016-04-02] ()
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\MountPoints2: {bb3b9145-68a1-11e5-bea9-dc85de3446a5} - "F:\autorun.exe"
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\MountPoints2: {ef9248f1-e703-11e5-bec0-dc85de3446a5} - "F:\autorun.exe"
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Anna\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64\FileSyncShell64.dll [2016-03-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Anna\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64\FileSyncShell64.dll [2016-03-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Anna\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64\FileSyncShell64.dll [2016-03-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-24] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Anna\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll [2016-03-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Anna\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll [2016-03-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Anna\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll [2016-03-11] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1793ee1d-9336-4bd7-b462-ec8d10fdd30a}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3beeff4e-a82b-41be-93b1-2e7d262498e3}: [DhcpNameServer] 10.90.90.21 10.90.90.100

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKU\S-1-5-21-945434114-2289781356-3128133063-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-945434114-2289781356-3128133063-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-10] (Qualcomm Atheros Commnucations)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-24] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-10]

Chrome:
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-17]
CHR Extension: (Disk Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]
CHR Extension: (Adblock Plus) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-12]
CHR Extension: (Spotify - Music for every moment) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkjkdjlofllcpbemipjbcpfnglbgieh [2014-12-27]
CHR Extension: (Vyhledávání Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-24]
CHR Extension: (Avast Online Security) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-02-02]
CHR Extension: (Skype) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR Extension: (Gmail) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-24]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
S2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-24] (AVAST Software)
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-07-24] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-07-24] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-24] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-07-24] (AVAST Software)
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-16] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-16] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150160 2015-07-24] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-07-24] (AVAST Software)
S3 athr; C:\Windows\System32\drivers\athw10x.sys [4325544 2015-06-26] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [101368 2015-09-23] (ASUS Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [489776 2015-05-28] (Symantec Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(http://www.devguru.co.kr))
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-03 21:26 - 2016-04-03 21:27 - 00016256 _____ C:\Users\Anna\Desktop\FRST.txt
2016-04-03 21:23 - 2016-04-03 21:26 - 00000000 ____D C:\FRST
2016-04-03 21:23 - 2016-04-03 21:23 - 00016148 _____ C:\WINDOWS\system32\ANNIEPC_Anna_HistoryPrediction.bin
2016-04-03 21:12 - 2016-04-03 21:03 - 00112640 _____ (forum.viry.cz) C:\Users\Anna\Desktop\FRSTLauncher.exe
2016-04-03 21:12 - 2016-04-03 21:01 - 02374144 _____ (Farbar) C:\Users\Anna\Desktop\FRST64.exe
2016-04-02 14:52 - 2016-04-02 14:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Anna\Desktop\hijackthis.exe
2016-04-02 14:27 - 2016-04-02 15:03 - 00000000 ____D C:\rsit
2016-04-02 14:27 - 2016-04-02 14:27 - 00000000 ____D C:\Program Files\trend micro
2016-04-02 14:25 - 2016-04-02 14:23 - 01222144 _____ C:\Users\Anna\Desktop\RSITx64.exe
2016-03-27 15:04 - 2016-04-02 20:30 - 00000000 ____D C:\AdwCleaner
2016-03-27 15:04 - 2016-03-27 15:03 - 01530368 _____ C:\Users\Anna\Desktop\adwcleaner_5.105.exe
2016-03-27 14:58 - 2016-04-03 21:27 - 00929640 _____ C:\WINDOWS\ntbtlog.txt
2016-03-27 14:58 - 2016-04-03 21:10 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-03-25 00:29 - 2016-03-25 00:29 - 00284080 _____ C:\WINDOWS\Minidump\032416-33109-01.dmp
2016-03-25 00:07 - 2016-03-25 00:08 - 06868672 _____ (Piriform Ltd) C:\Users\Anna\Downloads\ccsetup516.exe
2016-03-25 00:02 - 2016-03-25 00:02 - 00000000 ____D C:\Users\Anna\AppData\LocalLow\BitTorrent
2016-03-15 20:23 - 2016-03-15 20:23 - 00004544 _____ C:\Users\Anna\Desktop\Nový dokument deníku.jnt
2016-03-15 20:23 - 2016-03-15 20:23 - 00000000 _____ C:\Users\Anna\Desktop\Nový textový dokument.txt
2016-03-14 20:33 - 2016-03-14 19:05 - 00103249 _____ C:\Users\Anna\Downloads\August Osage County.srt
2016-03-14 19:05 - 2016-03-14 19:05 - 00041582 _____ C:\Users\Anna\Downloads\August-Osage-County(0000238860).zip
2016-03-14 18:54 - 2016-03-14 19:49 - 1131102152 _____ C:\Users\Anna\Downloads\August.Osage.County.2013.720p.BRRip.1GB.MkvCage.mkv
2016-03-12 16:13 - 2016-03-12 16:12 - 00145949 _____ C:\Users\Anna\Downloads\Pulp Fiction.srt
2016-03-12 16:12 - 2016-03-12 16:12 - 00060532 _____ C:\Users\Anna\Downloads\Pulp-Fiction(0000123471).zip
2016-03-12 14:57 - 2016-03-12 15:21 - 00000000 ____D C:\Users\Anna\Downloads\Pulp Fiction (1994)
2016-03-12 11:35 - 2016-03-12 11:35 - 00000000 ____D C:\Users\Anna\AppData\Local\Blizzard
2016-03-11 22:10 - 2016-03-11 22:10 - 00000000 ____D C:\Users\Anna\Desktop\fotky z mobilu
2016-03-11 21:36 - 2016-03-11 21:36 - 00001252 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2016-03-11 20:55 - 2016-03-11 20:55 - 03142712 _____ (Blizzard Entertainment) C:\Users\Anna\Downloads\Hearthstone-Setup (1).exe
2016-03-11 20:35 - 2016-03-11 20:36 - 03142712 _____ (Blizzard Entertainment) C:\Users\Anna\Downloads\Hearthstone-Setup.exe
2016-03-10 23:34 - 2016-02-23 16:53 - 01314496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-10 23:34 - 2016-02-23 16:41 - 00299600 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2016-03-10 23:34 - 2016-02-23 16:07 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-10 23:34 - 2016-02-23 15:23 - 00952968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-10 23:34 - 2016-02-23 15:11 - 00249976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2016-03-10 23:34 - 2016-02-23 14:38 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-10 23:34 - 2016-02-23 13:55 - 24592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-10 23:34 - 2016-02-23 13:45 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-10 23:34 - 2016-02-23 13:45 - 06788608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-10 23:34 - 2016-02-23 13:14 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-03-10 23:34 - 2016-02-23 13:04 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-10 23:34 - 2016-02-23 12:55 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-10 23:34 - 2016-02-23 12:48 - 21859840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-10 23:34 - 2016-02-23 12:48 - 05157376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-10 23:34 - 2016-02-23 12:46 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-10 23:34 - 2016-02-23 12:45 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-10 23:34 - 2016-02-23 12:45 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-10 23:34 - 2016-02-23 12:11 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-10 23:34 - 2016-02-23 12:03 - 01495040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-10 23:34 - 2016-02-23 12:00 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-10 23:34 - 2016-01-31 08:25 - 01951872 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-03-10 23:34 - 2016-01-31 08:23 - 02601160 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-03-10 23:34 - 2016-01-31 08:23 - 01420392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-03-10 23:34 - 2016-01-31 08:06 - 01531368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-03-10 23:34 - 2016-01-31 08:04 - 01811360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-03-10 23:34 - 2016-01-31 08:04 - 01180696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-03-10 23:34 - 2016-01-31 07:29 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-10 23:34 - 2016-01-31 07:26 - 03793408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-03-10 23:34 - 2016-01-31 07:22 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-03-10 23:34 - 2016-01-31 07:17 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-03-10 23:34 - 2016-01-31 07:16 - 09889280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-10 23:34 - 2016-01-31 07:04 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-03-10 23:33 - 2016-02-23 16:52 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-10 23:33 - 2016-02-23 16:51 - 00633184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-03-10 23:33 - 2016-02-23 16:51 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-10 23:33 - 2016-02-23 16:50 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-10 23:33 - 2016-02-23 16:48 - 08022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-10 23:33 - 2016-02-23 16:48 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-10 23:33 - 2016-02-23 16:48 - 01123952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-10 23:33 - 2016-02-23 16:41 - 01150816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-10 23:33 - 2016-02-23 16:41 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2016-03-10 23:33 - 2016-02-23 16:40 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2016-03-10 23:33 - 2016-02-23 16:38 - 00272752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-10 23:33 - 2016-02-23 16:36 - 00080128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2016-03-10 23:33 - 2016-02-23 16:11 - 00781984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-10 23:33 - 2016-02-23 16:11 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-10 23:33 - 2016-02-23 16:11 - 00103776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-03-10 23:33 - 2016-02-23 16:08 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-10 23:33 - 2016-02-23 15:39 - 00607416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-03-10 23:33 - 2016-02-23 15:30 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-10 23:33 - 2016-02-23 15:25 - 01085632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-03-10 23:33 - 2016-02-23 15:21 - 00529456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-10 23:33 - 2016-02-23 15:21 - 00141152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-10 23:33 - 2016-02-23 15:11 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2016-03-10 23:33 - 2016-02-23 15:11 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2016-03-10 23:33 - 2016-02-23 15:09 - 00229352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-10 23:33 - 2016-02-23 15:06 - 00069232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
2016-03-10 23:33 - 2016-02-23 14:58 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-03-10 23:33 - 2016-02-23 14:50 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-03-10 23:33 - 2016-02-23 14:50 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-03-10 23:33 - 2016-02-23 14:42 - 00658536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-10 23:33 - 2016-02-23 14:42 - 00467296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-10 23:33 - 2016-02-23 14:42 - 00078176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-03-10 23:33 - 2016-02-23 14:39 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-10 23:33 - 2016-02-23 14:35 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-03-10 23:33 - 2016-02-23 14:20 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-03-10 23:33 - 2016-02-23 14:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-03-10 23:33 - 2016-02-23 14:16 - 02237952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-10 23:33 - 2016-02-23 14:15 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-03-10 23:33 - 2016-02-23 14:15 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-03-10 23:33 - 2016-02-23 13:59 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-03-10 23:33 - 2016-02-23 13:59 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-10 23:33 - 2016-02-23 13:57 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-10 23:33 - 2016-02-23 13:42 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-03-10 23:33 - 2016-02-23 13:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-10 23:33 - 2016-02-23 13:38 - 02663424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-10 23:33 - 2016-02-23 13:37 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2016-03-10 23:33 - 2016-02-23 13:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-10 23:33 - 2016-02-23 13:25 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-10 23:33 - 2016-02-23 13:18 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-10 23:33 - 2016-02-23 13:17 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2016-03-10 23:33 - 2016-02-23 13:17 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
2016-03-10 23:33 - 2016-02-23 13:08 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-03-10 23:33 - 2016-02-23 13:03 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-10 23:33 - 2016-02-23 13:03 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-03-10 23:33 - 2016-02-23 13:02 - 03587584 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-10 23:33 - 2016-02-23 12:55 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-10 23:33 - 2016-02-23 12:51 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-10 23:33 - 2016-02-23 12:51 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-10 23:33 - 2016-02-23 12:45 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-03-10 23:33 - 2016-02-23 12:45 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-10 23:33 - 2016-02-23 12:44 - 01821696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-03-10 23:33 - 2016-02-23 12:38 - 07524864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-03-10 23:33 - 2016-02-23 12:29 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
2016-03-10 23:33 - 2016-02-23 12:17 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-10 23:33 - 2016-02-23 12:17 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-10 23:33 - 2016-02-23 12:00 - 05457408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-03-10 23:33 - 2016-02-23 11:58 - 18800640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-10 23:33 - 2016-01-31 08:25 - 01248896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-03-10 23:33 - 2016-01-31 08:24 - 01824880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-10 23:33 - 2016-01-31 08:06 - 01535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-10 23:33 - 2016-01-31 08:06 - 00809336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-03-10 23:33 - 2016-01-31 07:34 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-10 23:33 - 2016-01-31 07:33 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll
2016-03-10 23:33 - 2016-01-31 07:29 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2016-03-10 23:33 - 2016-01-31 07:25 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-10 23:33 - 2016-01-31 07:25 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-03-10 23:33 - 2016-01-31 07:24 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-03-10 23:33 - 2016-01-31 07:24 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-03-10 23:33 - 2016-01-31 07:23 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-03-10 23:33 - 2016-01-31 07:20 - 02849792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-10 23:33 - 2016-01-31 07:19 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-10 23:33 - 2016-01-31 07:19 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-03-10 23:33 - 2016-01-31 07:19 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IoTAssignedAccessLockFramework.dll
2016-03-10 23:33 - 2016-01-31 07:18 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-03-10 23:33 - 2016-01-31 07:16 - 00950272 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-03-10 23:33 - 2016-01-31 07:13 - 04791808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-10 23:33 - 2016-01-31 07:13 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2016-03-10 23:33 - 2016-01-31 07:13 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-03-10 23:33 - 2016-01-31 07:11 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-03-10 23:33 - 2016-01-31 07:11 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-03-10 23:33 - 2016-01-31 07:11 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-03-10 23:33 - 2016-01-31 07:06 - 02316800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-10 23:33 - 2016-01-31 07:05 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-10 23:33 - 2016-01-31 07:05 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-03-10 23:33 - 2016-01-31 07:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-10 23:33 - 2016-01-31 07:02 - 00768000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-03-10 23:33 - 2016-01-31 06:58 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-03-10 23:06 - 2016-03-25 00:29 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-09 13:01 - 2016-03-09 13:01 - 00001141 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-03-09 12:56 - 2012-03-23 12:40 - 676366916 _____ C:\Users\Anna\Desktop\Panstvi-Downton-02x05-.avi
2016-03-09 12:56 - 2012-03-22 20:44 - 796352256 _____ C:\Users\Anna\Desktop\02x04_Panstvi_Downton_tv-rip_CZdub.avi
2016-03-09 10:52 - 2016-03-09 10:52 - 00063946 _____ C:\Users\Anna\Downloads\Downton Abbey S02E03.srt
2016-03-09 10:52 - 2016-03-09 10:52 - 00026906 _____ C:\Users\Anna\Downloads\Downton-Abbey-S02E03(0000193816) (1).zip
2016-03-09 10:51 - 2016-03-09 10:51 - 00026906 _____ C:\Users\Anna\Downloads\Downton-Abbey-S02E03(0000193816).zip
2016-03-08 19:39 - 2016-03-08 20:02 - 405417727 _____ C:\Users\Anna\Downloads\Downton.Abbey.S02E03.DVDRip.XviD-0.mkv
2016-03-08 16:55 - 2016-03-08 16:55 - 00000000 ____D C:\Users\Anna\Desktop\diskuse
2016-03-08 16:54 - 2011-10-06 10:36 - 00014755 ____N C:\Users\Anna\Downloads\classroom-672111-zaloha_diskuze.html
2016-03-08 16:53 - 2016-03-08 16:53 - 00008807 _____ C:\Users\Anna\Downloads\classroom-672111-zaloha_diskuze.zip
2016-03-08 15:42 - 2016-03-08 15:42 - 00076667 _____ C:\Users\Anna\Downloads\Downton Abbey S01E07.srt
2016-03-08 15:42 - 2016-03-08 15:42 - 00030385 _____ C:\Users\Anna\Downloads\Downton-Abbey-S01E07(0000173046).zip
2016-03-08 10:54 - 2016-03-08 10:54 - 01701992 _____ (BitTorrent Inc.) C:\Users\Anna\Downloads\BitTorrent.exe
2016-03-07 23:17 - 2016-03-07 23:17 - 00018169 _____ C:\Users\Anna\Downloads\Downton-Abbey-S01E04(0000173440).zip
2016-03-07 23:15 - 2016-03-07 23:17 - 00036687 _____ C:\Users\Anna\Downloads\Downton Abbey S01E04.sub
2016-03-07 23:15 - 2016-03-07 23:15 - 00018170 _____ C:\Users\Anna\Downloads\Downton-Abbey-S01E04(0000183510).zip
2016-03-07 23:13 - 2016-03-07 23:12 - 00056414 _____ C:\Users\Anna\Downloads\Downton Abbey S01E04.srt
2016-03-07 23:12 - 2016-03-07 23:12 - 00022697 _____ C:\Users\Anna\Downloads\Downton-Abbey-S01E04(0000173015).zip
2016-03-07 22:42 - 2016-03-07 23:03 - 365414400 _____ C:\Users\Anna\Downloads\Downton.Abbey.S01E04.iNTERNAL.BDRip.XviD-HAGGiS.avi
2016-03-07 15:44 - 2016-03-07 15:44 - 00057650 _____ C:\Users\Anna\Downloads\Downton Abbey S01E03.srt
2016-03-07 15:44 - 2016-03-07 15:44 - 00023065 _____ C:\Users\Anna\Downloads\Downton-Abbey-S01E03(0000172963).zip
2016-03-07 13:34 - 2016-03-07 13:33 - 00064202 _____ C:\Users\Anna\Downloads\Downton Abbey S01E02.srt
2016-03-07 13:33 - 2016-03-07 13:33 - 00026011 _____ C:\Users\Anna\Downloads\Downton-Abbey-S01E02(0000172936).zip
2016-03-06 19:21 - 2016-03-06 19:21 - 00072931 _____ C:\Users\Anna\Desktop\Downton Abbey S01E01.srt
2016-03-06 19:21 - 2016-03-06 19:21 - 00028688 _____ C:\Users\Anna\Desktop\Downton-Abbey-S01E01(0000172935).zip
2016-03-06 19:12 - 2016-03-08 09:29 - 01930760 _____ (BitTorrent Inc.) C:\Users\Anna\Desktop\7.9.5_41866.exe
2016-03-04 20:47 - 2016-03-04 20:47 - 00065579 _____ C:\Users\Anna\Downloads\Spotlight(0000266821).zip
2016-03-04 20:45 - 2016-03-04 20:47 - 00168833 _____ C:\Users\Anna\Downloads\Spotlight.srt
2016-03-04 20:44 - 2016-03-04 20:44 - 00065563 _____ C:\Users\Anna\Downloads\Spotlight(0000266329).zip
2016-03-04 18:11 - 2016-03-04 18:11 - 00000000 ____D C:\Users\Anna\Downloads\Spotlight.2015.1080p.BRRip.x264.AAC-ETRG
2016-03-04 16:34 - 2016-03-04 17:42 - 1564754373 _____ C:\Users\Anna\Downloads\Downton.Abbey.S01E07.720p.HDTV.x264-FoV.mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-03 21:13 - 2015-09-07 23:54 - 01762290 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-03 21:13 - 2015-07-10 18:02 - 00745406 _____ C:\WINDOWS\system32\perfh005.dat
2016-04-03 21:13 - 2015-07-10 18:02 - 00149344 _____ C:\WINDOWS\system32\perfc005.dat
2016-04-03 21:13 - 2015-07-10 13:02 - 00000000 ____D C:\WINDOWS\INF
2016-04-03 21:10 - 2015-09-07 23:34 - 00000000 ____D C:\Users\Anna
2016-04-03 21:06 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-02 20:30 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-27 15:09 - 2014-06-25 14:09 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-27 14:39 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-27 14:38 - 2015-07-10 13:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-27 14:34 - 2014-09-06 10:06 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-03-27 14:33 - 2015-10-15 18:37 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-03-27 14:33 - 2014-10-04 11:29 - 00000000 ____D C:\Users\Anna\AppData\Local\CrashDumps
2016-03-25 00:23 - 2014-09-27 18:19 - 00000000 ____D C:\Users\Anna\AppData\Roaming\BitTorrent
2016-03-25 00:11 - 2014-12-25 11:43 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-03-25 00:05 - 2014-06-25 14:09 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-25 00:03 - 2014-10-17 12:58 - 00000000 ____D C:\Users\Anna\AppData\Roaming\Skype
2016-03-25 00:01 - 2014-06-24 21:46 - 00000401 _____ C:\Users\Anna\AppData\Roaming\sp_data.sys
2016-03-24 23:35 - 2014-12-06 12:41 - 00000000 ___RD C:\Users\Anna\OneDrive
2016-03-24 09:03 - 2014-06-24 21:43 - 00000000 ____D C:\Users\Anna\AppData\Local\Packages
2016-03-21 20:44 - 2014-10-28 18:44 - 00000298 _____ C:\WINDOWS\Tasks\DLL-Files FixerASKUSER.job
2016-03-21 20:04 - 2015-10-10 12:44 - 00000000 ____D C:\WINDOWS\Panther
2016-03-21 15:14 - 2014-10-06 23:09 - 00000466 ____H C:\WINDOWS\Tasks\Norton Security Scan for Anna.job
2016-03-20 23:58 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-03-20 20:44 - 2014-10-04 11:24 - 00000000 ____D C:\Program Files (x86)\Opera
2016-03-20 10:55 - 2014-06-27 13:41 - 00000000 ____D C:\The KMPlayer
2016-03-20 10:45 - 2014-12-25 11:43 - 00000000 ____D C:\Program Files\CCleaner
2016-03-20 10:20 - 2014-06-20 08:06 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-19 18:43 - 2014-10-28 18:43 - 00000306 _____ C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job
2016-03-19 04:29 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2016-03-19 04:09 - 2015-07-10 14:20 - 00348400 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-19 04:03 - 2015-07-10 18:05 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-19 04:03 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-19 04:03 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-19 04:03 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-19 04:03 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-18 22:07 - 2015-05-29 16:17 - 00000000 ____D C:\Users\Anna\AppData\Local\Battle.net
2016-03-18 20:44 - 2015-05-21 16:56 - 00001122 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-03-18 20:44 - 2014-10-04 11:25 - 00003954 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1412414695
2016-03-15 20:08 - 2014-06-25 14:10 - 00002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-15 20:08 - 2014-06-25 14:10 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-15 20:07 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-03-14 21:06 - 2015-05-29 16:22 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-03-12 12:42 - 2014-06-26 17:58 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-12 12:29 - 2014-06-26 17:57 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-12 12:27 - 2012-07-26 07:26 - 00000199 _____ C:\WINDOWS\win.ini
2016-03-12 12:25 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-11 21:36 - 2015-05-29 16:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2016-03-11 20:58 - 2015-05-29 16:16 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-03-11 20:37 - 2015-05-29 16:17 - 00000000 ____D C:\Users\Anna\AppData\Roaming\Battle.net
2016-03-11 20:37 - 2015-05-29 16:06 - 00000000 ____D C:\ProgramData\Battle.net
2016-03-11 19:12 - 2015-09-08 20:01 - 00002425 _____ C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-09 12:59 - 2014-10-28 12:32 - 00000000 ____D C:\Users\Anna\AppData\Roaming\vlc
2016-03-08 10:53 - 2014-09-27 18:21 - 00000873 _____ C:\Users\Anna\Desktop\BitTorrent.lnk
2016-03-08 09:10 - 2015-10-02 03:08 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:10 - 2015-10-02 03:08 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2014-06-24 21:46 - 2016-03-25 00:01 - 0000401 _____ () C:\Users\Anna\AppData\Roaming\sp_data.sys
2013-05-01 13:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Some files in TEMP:
====================
C:\Users\Anna\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================


==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================




===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Anna\Desktop" je 1651 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\MountPoints2: {bb3b9145-68a1-11e5-bea9-dc85de3446a5} - "F:\autorun.exe"
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\MountPoints2: {ef9248f1-e703-11e5-bec0-dc85de3446a5} - "F:\autorun.exe"
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\ProgramData\SetStretch.VBS
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Z logu:

Velikost slozky "C:\Users\Anna\Desktop" je 1651 MB.

To je příliš mnoho a může to zpomalovat start systému. Vytvořte v C:\Users\Anna novou složku, přesuňte do ni všechna data z plochy (kromě zástupců) a na plochi dejte zástupce té složky pro snazší přístup.

Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Anna (2016-04-04 00:02:03) Run:1
Running from C:\Users\Anna\Desktop
Loaded Profiles: Anna (Available Profiles: Anna)
Boot Mode: Safe Mode (minimal)
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\MountPoints2: {bb3b9145-68a1-11e5-bea9-dc85de3446a5} - "F:\autorun.exe"
HKU\S-1-5-21-945434114-2289781356-3128133063-1001\...\MountPoints2: {ef9248f1-e703-11e5-bec0-dc85de3446a5} - "F:\autorun.exe"
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\ProgramData\SetStretch.VBS
End
*****************

"HKU\S-1-5-21-945434114-2289781356-3128133063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{bb3b9145-68a1-11e5-bea9-dc85de3446a5}" => key removed successfully
HKCR\CLSID\{bb3b9145-68a1-11e5-bea9-dc85de3446a5} => key not found.
"HKU\S-1-5-21-945434114-2289781356-3128133063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ef9248f1-e703-11e5-bec0-dc85de3446a5}" => key removed successfully
HKCR\CLSID\{ef9248f1-e703-11e5-bec0-dc85de3446a5} => key not found.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => service removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\ProgramData\SetStretch.VBS => moved successfully

==== End of Fixlog 00:02:03 ====

Smazáno. Nastala nějaká změna?

Bohužel, stále je to v případě standardního spuštění velmi zasekané.

Kolik je volného místa na systémovém disku c:\?

Dobrý den,
omlouvám se, že píši až teď, ale skutečně byl nějaký problém s diskem. Teď už počítač funguje jak má.

Mockrát děkuji za pomoc.

OK a nemáte zač!