VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

preventivka

https://forum.viry.cz:443/viewtopic.php?t=148704

Stránka 1 z 1

preventivka

Napsal: 17 dub 2016 12:58
od filouzofka
Dobry den, s mojim PC asi nieco je, ale netusim zda je to vir...

pravidelne mi pise 2 rovnake pismena po sebe, resp. pravidelne mi spmaluje internet na uplne minimum.

Re: preventivka

Napsal: 18 dub 2016 12:24
od Roli
Zdravím, s tím nelegálním produktem od Microsoftu uděláme co ?

Re: preventivka

Napsal: 18 dub 2016 19:16
od filouzofka
dobry vecer, teraz by to malo byt v poriadku... balik Office mam doma zakupeny, ale neviem sa k nemu dostat atm. a nenapadlo ma to ked som bol doma :(

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-04-2016
Ran by Filip (administrator) on FILIPICKO (18-04-2016 20:09:38)
Running from C:\Users\Filip\Desktop
Loaded Profiles: UpdatusUser & Filip (Available Profiles: UpdatusUser & Filip)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(PornTime) C:\Users\Filip\AppData\Roaming\PT\updater.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo) C:\Program Files\lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\Filip\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Spotify Ltd) C:\Users\Filip\AppData\Roaming\Spotify\Spotify.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Spotify Ltd) C:\Users\Filip\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Filip\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Filip\AppData\Roaming\Spotify\Spotify.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Lenovo) C:\Users\Filip\AppData\Local\Apps\2.0\MCZ20H0G.BND\V1B25HAZ.JJP\lsb...tion_91a10ba61c75c82d_0001.0006_f185aae74f563194\LSB.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\lenovo\iMController\AutoUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [404376 2015-08-09] ()
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-08] (Intel Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891080 2013-10-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2013-10-17] (Realtek semiconductor)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-15] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-11-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-11-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595848 2015-01-28] (ESET)
HKLM\...\Run: [AutoKMS] => C:\windows\AutoKMS.exe [615936 2016-03-31] ()
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\Run: [Spotify Web Helper] => C:\Users\Filip\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-17] (Spotify Ltd)
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\Run: [Spotify] => C:\Users\Filip\AppData\Roaming\Spotify\Spotify.exe [6855280 2016-04-17] (Spotify Ltd)
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\MountPoints2: {2f326c19-d66f-11e5-8286-d07e3530f132} - "F:\Startme.exe"
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\MountPoints2: {3eeef355-e29e-11e4-8265-d07e3530f132} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\...\MountPoints2: {3eeef395-e29e-11e4-8265-d07e3530f132} - "F:\HTC_Sync_Manager_PC.exe"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-2823346003-503312802-3612261594-1002] => 85.214.61.81
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{185554A0-140C-4C6A-8229-85F7A3FE1298}: [DhcpNameServer] 192.168.200.1
Tcpip\..\Interfaces\{1DA3C2B7-9E93-427A-A6C4-5D1C87B81ADA}: [DhcpNameServer] 192.168.0.1
ManualProxies: 085.214.61.81

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-2823346003-503312802-3612261594-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
URLSearchHook: [S-1-5-21-2823346003-503312802-3612261594-1001] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2823346003-503312802-3612261594-1002 -> DefaultScope {5A8B2DE6-6FBB-404B-9D11-83A0D217EAD9} URL =
SearchScopes: HKU\S-1-5-21-2823346003-503312802-3612261594-1002 -> {5A8B2DE6-6FBB-404B-9D11-83A0D217EAD9} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-22] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-22] (Oracle Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll [2015-08-05] ()
FF Plugin: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-08-05] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => not found

Chrome:
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-23]
CHR Extension: (Dokumenty Google) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-23]
CHR Extension: (Disk Google) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Tabuľky Google) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-23]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-20]
CHR Extension: (AdBlock) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-04-16]
CHR Extension: (Auto Replay for YouTube™) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb [2015-04-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Gmail) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2015-01-28] (ESET)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-10-09] (ELAN Microelectronics Corp.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-08] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-05-22] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-11-27] (Lenovo(beijing) Limited)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-11-21] ()
R2 PornTime Updater; C:\Users\Filip\AppData\Roaming\PT\updater.exe [165888 2015-06-15] (PornTime) [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2013-11-21] (Intel® Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Andbus; C:\Windows\System32\drivers\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\system32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\system32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\system32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1408824 2013-10-19] (Motorola Solutions, Inc.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-27] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-03-10] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241880 2015-03-10] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169792 2015-03-10] (ESET)
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [222280 2015-03-10] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [44632 2015-03-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [64208 2015-03-10] (ESET)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [142280 2013-10-18] (Intel Corporation)
R3 LgBttPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\drivers\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\system32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3609568 2013-12-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8876248 2013-10-17] (Realtek Semiconductor Corp.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-18 15:18 - 2016-04-18 15:18 - 00040448 _____ C:\Users\Filip\Downloads\Výsledky zápočtového testu_lichý (2).xls
2016-04-18 15:17 - 2016-04-18 15:17 - 00045056 _____ C:\Users\Filip\Downloads\Výsledky zápočtového testu_sudý (1).xls
2016-04-18 15:17 - 2016-04-18 15:17 - 00040448 _____ C:\Users\Filip\Downloads\Výsledky zápočtového testu_lichý (1).xls
2016-04-18 15:16 - 2016-04-18 15:16 - 00045056 _____ C:\Users\Filip\Downloads\Výsledky zápočtového testu_sudý.xls
2016-04-18 15:15 - 2016-04-18 15:15 - 00040448 _____ C:\Users\Filip\Downloads\Výsledky zápočtového testu_lichý.xls
2016-04-18 14:00 - 2016-04-18 14:37 - 00000000 ____D C:\Users\Filip\Downloads\Vinyl.S01E10.HDTV.x264-KILLERS[ettv]
2016-04-18 13:59 - 2016-04-18 13:59 - 00000000 ____D C:\Users\Filip\AppData\LocalLow\uTorrent
2016-04-18 04:50 - 2016-04-18 04:50 - 00302592 _____ C:\Users\Filip\Desktop\2DZM_Meheš_Filip.mpp
2016-04-18 03:34 - 2016-04-18 03:34 - 00009865 _____ C:\Users\Filip\Downloads\Seznam zdrojů.xlsx
2016-04-18 03:31 - 2016-04-18 03:31 - 00009865 _____ C:\Users\Filip\Downloads\Seznam zdrojů - 3. cv.xlsx
2016-04-18 03:31 - 2016-04-18 03:31 - 00009865 _____ C:\Users\Filip\Downloads\Seznam zdrojů - 3. cv (1).xlsx
2016-04-18 03:28 - 2016-04-18 04:46 - 00316928 _____ C:\Users\Filip\Downloads\lol222.mpp
2016-04-18 01:07 - 2016-04-18 03:26 - 00299520 _____ C:\Users\Filip\Downloads\lol.mpp
2016-04-18 00:36 - 2016-04-18 00:36 - 15734412 _____ C:\Users\Filip\Downloads\MPP Viewer 3.0.zip
2016-04-18 00:18 - 2016-04-18 00:18 - 00010860 _____ C:\Users\Filip\Downloads\Softik_ukoly.xlsx
2016-04-18 00:18 - 2016-04-18 00:18 - 00010634 _____ C:\Users\Filip\Downloads\Softik_ukoly_mehebe.xlsx
2016-04-18 00:18 - 2016-04-18 00:18 - 00010634 _____ C:\Users\Filip\Downloads\Softik_ukoly_mehebe (1).xlsx
2016-04-17 23:34 - 2016-04-18 01:07 - 00268288 _____ C:\Users\Filip\Downloads\mehebeee2.mpp
2016-04-17 23:05 - 2016-04-18 03:56 - 00176640 _____ C:\Users\Filip\Downloads\Garcar_EPM_332.mpp
2016-04-17 16:47 - 2016-04-17 16:47 - 00000000 ____D C:\Users\Filip\Downloads\znal_man
2016-04-17 16:05 - 2016-04-17 16:05 - 00678228 _____ C:\Users\Filip\Downloads\znal_man.rar
2016-04-17 14:46 - 2016-04-17 14:46 - 00000000 ____D C:\Users\Filip\AppData\Roaming\sp6_log
2016-04-17 13:57 - 2016-04-17 13:57 - 00010399 _____ C:\Users\Filip\Desktop\Addition.rar
2016-04-17 13:51 - 2016-04-17 13:53 - 00038783 _____ C:\Users\Filip\Desktop\Addition.txt
2016-04-17 13:50 - 2016-04-18 20:09 - 00021307 _____ C:\Users\Filip\Desktop\FRST.txt
2016-04-17 13:50 - 2016-04-18 20:09 - 00000000 ____D C:\FRST
2016-04-17 13:48 - 2016-04-17 13:48 - 02375168 _____ (Farbar) C:\Users\Filip\Desktop\FRST64.exe
2016-04-15 11:36 - 2016-04-15 11:36 - 00002170 _____ C:\Users\Filip\AppData\Local\recently-used.xbel
2016-04-15 04:02 - 2016-04-15 13:06 - 00000000 ____D C:\Users\Filip\Downloads\Dope (2015) [1080p]
2016-04-14 22:43 - 2016-04-14 22:43 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2016-04-14 22:43 - 2016-04-14 22:43 - 00000000 ____D C:\ProgramData\Logitech
2016-04-14 22:40 - 2016-04-17 14:34 - 00018960 _____ (Logitech, Inc.) C:\windows\system32\Drivers\LNonPnP.sys
2016-04-14 22:39 - 2016-04-17 14:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-04-14 22:39 - 2016-04-17 14:46 - 00000000 ____D C:\ProgramData\Logishrd
2016-04-14 22:39 - 2016-04-17 14:46 - 00000000 ____D C:\Program Files\Common Files\Logishrd
2016-04-14 22:36 - 2016-04-14 22:43 - 00000000 ____D C:\Users\Filip\AppData\Roaming\Logitech
2016-04-14 22:36 - 2016-04-14 22:37 - 00000000 ____D C:\Users\Filip\AppData\Roaming\Logishrd
2016-04-14 22:36 - 2016-04-14 22:36 - 03679544 _____ (Logitech Inc.) C:\Users\Filip\Downloads\SetPoint6.67.83_smart.exe
2016-04-13 15:44 - 2016-04-13 15:45 - 05134336 _____ C:\Users\Filip\Downloads\2. cvičení.ppt
2016-04-13 15:44 - 2016-04-13 15:45 - 02804224 _____ C:\Users\Filip\Downloads\3.cvičení.ppt
2016-04-13 15:44 - 2016-04-13 15:45 - 01627648 _____ C:\Users\Filip\Downloads\4.cvičení.ppt
2016-04-13 15:44 - 2016-04-13 15:44 - 00859136 _____ C:\Users\Filip\Downloads\1. cvičení_sudý_lichý týden.ppt
2016-04-13 15:27 - 2016-04-13 15:28 - 08631808 _____ C:\Users\Filip\Downloads\Drobné podnikání-přednášky-2015-2016.ppt
2016-04-13 15:25 - 2016-04-13 15:46 - 00000000 ____D C:\Users\Filip\Downloads\Vinyl.S01E09.PROPER.HDTV.x264-KILLERS[ettv]
2016-04-13 14:32 - 2016-04-04 08:35 - 00046768 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2016-04-13 14:32 - 2016-04-02 15:26 - 01386496 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2016-04-13 14:32 - 2016-04-02 15:26 - 01169408 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2016-04-13 14:32 - 2016-03-28 15:21 - 00698368 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2016-04-13 14:32 - 2016-03-28 15:21 - 00499200 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2016-04-13 14:32 - 2016-03-28 15:21 - 00279040 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2016-04-13 14:32 - 2016-03-28 15:21 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2016-04-13 14:32 - 2016-03-28 15:21 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2016-04-13 14:32 - 2016-02-02 20:16 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys
2016-04-13 14:32 - 2016-01-27 17:18 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll
2016-04-13 14:32 - 2016-01-21 21:35 - 00952928 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2016-04-13 14:32 - 2016-01-21 20:42 - 00786152 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2016-04-13 14:31 - 2016-02-09 03:31 - 22365472 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2016-04-13 14:31 - 2016-02-09 03:31 - 19794896 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2016-04-13 14:31 - 2016-02-09 03:31 - 02757616 _____ (Microsoft Corporation) C:\windows\explorer.exe
2016-04-13 14:31 - 2016-02-09 03:31 - 02412576 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2016-04-13 14:31 - 2016-02-09 03:31 - 00273264 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2016-04-13 14:31 - 2016-02-08 22:55 - 02712576 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll
2016-04-13 14:31 - 2016-02-08 22:15 - 02551808 _____ (Microsoft Corporation) C:\windows\SysWOW64\themecpl.dll
2016-04-13 14:31 - 2016-02-08 22:02 - 01197056 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2016-04-13 14:31 - 2016-02-08 21:48 - 12879360 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2016-04-13 14:31 - 2016-02-08 21:43 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncHost.exe
2016-04-13 14:31 - 2016-02-08 21:40 - 00539648 _____ (Microsoft Corporation) C:\windows\SysWOW64\hgcpl.dll
2016-04-13 14:31 - 2016-02-08 21:39 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2016-04-13 14:31 - 2016-02-08 21:37 - 00141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingMonitor.dll
2016-04-13 14:31 - 2016-02-08 21:35 - 00954880 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2016-04-13 14:31 - 2016-02-08 21:34 - 00667648 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncCore.dll
2016-04-13 14:31 - 2016-02-08 21:33 - 00520192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2016-04-13 14:31 - 2016-02-08 20:50 - 03120640 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2016-04-13 14:31 - 2016-02-08 19:55 - 02592256 _____ (Microsoft Corporation) C:\windows\system32\themecpl.dll
2016-04-13 14:31 - 2016-02-08 19:33 - 01278464 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2016-04-13 14:31 - 2016-02-08 19:12 - 14466560 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2016-04-13 14:31 - 2016-02-08 19:02 - 00653824 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncHost.exe
2016-04-13 14:31 - 2016-02-08 19:00 - 00599552 _____ (Microsoft Corporation) C:\windows\system32\hgcpl.dll
2016-04-13 14:31 - 2016-02-08 18:58 - 00336384 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2016-04-13 14:31 - 2016-02-08 18:55 - 00173056 _____ (Microsoft Corporation) C:\windows\system32\SettingMonitor.dll
2016-04-13 14:31 - 2016-02-08 18:53 - 02171904 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2016-04-13 14:31 - 2016-02-08 18:53 - 01348096 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll
2016-04-13 14:31 - 2016-02-08 18:50 - 01220096 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2016-04-13 14:31 - 2016-02-08 18:50 - 00841728 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncCore.dll
2016-04-13 14:31 - 2016-02-08 18:48 - 00655872 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2016-04-13 14:31 - 2016-02-08 18:47 - 02819584 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2016-04-13 14:31 - 2016-02-08 18:44 - 00955392 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.dll
2016-04-13 14:31 - 2016-02-05 16:46 - 01455104 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe
2016-04-13 14:31 - 2016-02-03 17:14 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2016-04-13 14:31 - 2016-02-02 19:51 - 00162304 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll
2016-04-13 14:31 - 2016-02-02 19:19 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll
2016-04-13 14:31 - 2016-02-02 19:01 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\WsmAgent.dll
2016-04-13 14:31 - 2016-02-02 18:51 - 02609152 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2016-04-13 14:31 - 2016-02-02 18:48 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2016-04-13 14:31 - 2016-02-02 18:46 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAgent.dll
2016-04-13 14:31 - 2016-02-02 18:41 - 02170880 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2016-04-13 14:31 - 2016-02-02 18:39 - 00236032 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2016-04-13 14:31 - 2014-11-08 04:38 - 00166912 _____ (Microsoft Corporation) C:\windows\system32\AppxAllUserStore.dll
2016-04-13 14:31 - 2014-11-08 04:17 - 00143360 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxAllUserStore.dll
2016-04-13 14:30 - 2016-03-10 21:19 - 07452512 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-04-13 14:30 - 2016-03-10 21:17 - 01663192 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2016-04-13 14:30 - 2016-03-10 21:17 - 01523216 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2016-04-13 14:30 - 2016-03-10 21:17 - 01490128 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2016-04-13 14:30 - 2016-03-10 21:17 - 01358960 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2016-04-13 14:30 - 2016-03-10 21:17 - 01133752 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-04-13 14:30 - 2016-03-10 19:48 - 00862720 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-04-13 14:30 - 2016-03-10 19:43 - 00161280 _____ (Microsoft Corporation) C:\windows\SysWOW64\msorcl32.dll
2016-04-13 14:30 - 2016-03-10 18:55 - 00166400 _____ (Microsoft Corporation) C:\windows\system32\mtxoci.dll
2016-04-13 14:30 - 2016-03-10 18:42 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\mtxoci.dll
2016-04-13 14:30 - 2016-02-03 17:11 - 01673728 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2016-04-13 14:30 - 2016-02-02 19:15 - 00787456 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2016-04-13 14:30 - 2016-01-26 21:15 - 00072024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vpci.sys
2016-04-13 14:30 - 2016-01-22 07:22 - 02487296 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2016-04-13 14:30 - 2016-01-22 07:11 - 01482240 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2016-04-13 14:30 - 2016-01-21 00:40 - 00099672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys
2016-04-13 14:29 - 2016-02-07 01:05 - 00551256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys
2016-04-13 14:29 - 2016-02-07 00:41 - 00316760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2016-04-13 14:29 - 2016-02-05 21:07 - 00378712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2016-04-13 14:29 - 2016-02-05 17:11 - 00845312 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2016-04-13 14:29 - 2016-02-05 17:11 - 00422400 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2016-04-13 14:29 - 2016-02-05 17:07 - 00272384 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2016-04-13 14:29 - 2016-02-05 17:02 - 01083904 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2016-04-13 14:29 - 2016-02-04 20:07 - 00222720 _____ (Microsoft Corporation) C:\windows\system32\dhcpsapi.dll
2016-04-13 14:29 - 2016-02-04 19:35 - 00142848 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpsapi.dll
2016-04-13 14:29 - 2016-02-04 18:23 - 00713216 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2016-04-13 14:29 - 2016-02-04 18:22 - 00561664 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2016-04-13 14:29 - 2016-02-02 19:18 - 01574912 _____ (Microsoft Corporation) C:\windows\system32\wbengine.exe
2016-04-13 14:29 - 2016-01-31 19:17 - 00779264 _____ (Microsoft Corporation) C:\windows\system32\WindowsAnytimeUpgradeui.exe
2016-04-13 14:22 - 2016-04-13 14:24 - 57186211 _____ C:\Users\Filip\Downloads\TorBrowser-5.5.4-osx64_en-US.dmg
2016-04-13 10:54 - 2016-03-31 02:54 - 25817600 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-04-13 10:54 - 2016-03-31 02:31 - 02892800 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-04-13 10:54 - 2016-03-31 02:28 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-04-13 10:54 - 2016-03-31 02:25 - 06052352 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-04-13 10:54 - 2016-03-31 02:17 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-04-13 10:54 - 2016-03-31 02:03 - 20352512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-04-13 10:54 - 2016-03-31 01:56 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2016-04-13 10:54 - 2016-03-31 01:56 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-04-13 10:54 - 2016-03-31 01:55 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-04-13 10:54 - 2016-03-31 01:53 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-04-13 10:54 - 2016-03-31 01:51 - 02285056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-04-13 10:54 - 2016-03-31 01:50 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2016-04-13 10:54 - 2016-03-31 01:45 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-04-13 10:54 - 2016-03-31 01:45 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-04-13 10:54 - 2016-03-31 01:43 - 00806400 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-04-13 10:54 - 2016-03-31 01:43 - 00725504 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-04-13 10:54 - 2016-03-31 01:43 - 00379392 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-04-13 10:54 - 2016-03-31 01:42 - 02131968 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-04-13 10:54 - 2016-03-31 01:39 - 15415808 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-04-13 10:54 - 2016-03-31 01:30 - 04611072 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-04-13 10:54 - 2016-03-31 01:30 - 02596864 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-04-13 10:54 - 2016-03-31 01:30 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-04-13 10:54 - 2016-03-31 01:30 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2016-04-13 10:54 - 2016-03-31 01:27 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2016-04-13 10:54 - 2016-03-31 01:24 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-04-13 10:54 - 2016-03-31 01:23 - 02056192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-04-13 10:54 - 2016-03-31 01:23 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-04-13 10:54 - 2016-03-31 01:23 - 00330752 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-04-13 10:54 - 2016-03-31 01:21 - 13811712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-04-13 10:54 - 2016-03-31 01:18 - 01547264 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-04-13 10:54 - 2016-03-31 01:06 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-04-13 10:54 - 2016-03-31 01:05 - 02121216 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-04-13 10:54 - 2016-03-31 01:02 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-04-13 10:54 - 2016-03-31 01:00 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-04-13 10:52 - 2016-03-29 16:05 - 04175872 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-04-13 10:52 - 2016-03-16 01:00 - 00561952 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2016-04-13 10:52 - 2016-03-15 16:14 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2016-04-13 10:52 - 2016-03-11 16:48 - 00833024 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll
2016-04-13 10:52 - 2016-03-10 20:22 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2016-04-13 10:52 - 2016-03-10 20:21 - 00401920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2016-04-13 10:52 - 2016-03-10 20:20 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2016-04-13 10:52 - 2016-03-10 19:44 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2016-04-13 10:52 - 2016-03-10 19:16 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2016-04-13 10:52 - 2016-03-10 19:03 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\samlib.dll
2016-04-13 10:52 - 2016-03-10 18:48 - 00064512 _____ (Microsoft Corporation) C:\windows\SysWOW64\samlib.dll
2016-04-13 10:52 - 2016-03-03 18:47 - 02345472 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2016-04-13 10:52 - 2016-03-03 18:33 - 01556992 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2016-04-13 10:52 - 2016-03-03 18:13 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\basesrv.dll
2016-04-13 10:52 - 2016-03-03 03:39 - 01661576 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2016-04-13 10:52 - 2016-03-03 03:39 - 01212248 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll
2016-04-11 21:31 - 2016-04-12 03:43 - 00000000 ____D C:\Users\Filip\Downloads\Billions.S01E12.HDTV.x264-BATV[ettv]
2016-04-11 21:27 - 2016-04-11 21:27 - 00003663 _____ C:\Users\Filip\Downloads\[kat.cr]billions.s01e12.hdtv.x264.batv.ettv.torrent
2016-04-11 14:33 - 2016-04-11 14:34 - 00093796 _____ C:\Users\Filip\Desktop\Aplikace-principů-znalostniho-managementu-ve-vybrané-firmě.pptx
2016-04-11 13:30 - 2016-04-11 13:30 - 00220744 _____ C:\Users\Filip\Downloads\res_bacikPREZ1.pptx
2016-04-10 23:28 - 2016-04-10 23:28 - 00484984 _____ C:\Users\Filip\Downloads\cvičení č. 2 (2).pdf
2016-04-10 17:24 - 2016-04-10 17:24 - 00484984 _____ C:\Users\Filip\Downloads\cvičení č. 2 (1).pdf
2016-04-09 23:20 - 2016-04-09 23:38 - 322154521 _____ C:\Users\Filip\Downloads\Rating.pdf
2016-04-09 23:13 - 2016-04-09 23:13 - 02355609 _____ C:\Users\Filip\Downloads\zaverecna_prace (1).pdf
2016-04-09 23:12 - 2016-04-09 23:12 - 02369384 _____ C:\Users\Filip\Downloads\zaverecna_prace.pdf
2016-04-09 18:41 - 2016-04-09 18:41 - 00342683 _____ C:\Users\Filip\Downloads\7.pdf
2016-04-08 12:14 - 2013-08-22 15:25 - 00000824 _____ C:\windows\system32\Drivers\etc\hosts.20160408-121420.backup
2016-04-07 18:08 - 2016-04-07 18:08 - 06505019 _____ C:\Users\Filip\Downloads\rating-bronka.rar
2016-04-07 18:08 - 2016-04-07 18:08 - 00000000 ____D C:\Users\Filip\Downloads\rating-bronka
2016-04-06 23:42 - 2016-04-06 23:43 - 06868672 _____ (Piriform Ltd) C:\Users\Filip\Downloads\ccsetup516.exe
2016-04-06 23:11 - 2016-04-06 23:11 - 00014065 _____ C:\Users\Filip\Downloads\[kat.cr]the.matrix.1999.720p.bluray.x264.nezu.torrent
2016-04-06 19:36 - 2016-04-06 19:36 - 00278278 _____ C:\Users\Filip\Downloads\Rating USI_3.pdf
2016-04-06 19:36 - 2016-04-06 19:36 - 00017343 _____ C:\Users\Filip\Downloads\rating_USI - leasing_řešení.xlsx
2016-04-06 19:18 - 2016-04-06 19:21 - 16467010 _____ C:\Users\Filip\Downloads\Rozpočty_Reporting.pdf
2016-04-06 18:37 - 2016-04-06 18:37 - 00484984 _____ C:\Users\Filip\Downloads\cvičení č. 2.pdf
2016-04-06 14:41 - 2016-04-17 14:45 - 00000000 ____D C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2016-04-06 14:41 - 2016-04-06 14:41 - 00000000 ____D C:\tmp
2016-04-06 14:40 - 2016-04-17 14:45 - 00000000 ____D C:\Users\Filip\AppData\Local\OpenBazaar
2016-04-06 14:40 - 2016-04-06 15:21 - 00000000 ____D C:\Users\Filip\AppData\Roaming\OpenBazaar
2016-04-06 14:40 - 2016-04-06 14:41 - 00000000 ____D C:\Users\Filip\AppData\Local\SquirrelTemp
2016-04-06 14:24 - 2016-04-06 14:29 - 85872720 _____ (OpenBazaar) C:\Users\Filip\Downloads\OpenBazaar-1.1.0_Setup_x64.exe
2016-04-06 14:19 - 2016-04-06 14:22 - 837102601 _____ C:\Users\Filip\Downloads\sislove.16.03.01.cameron.dee.540p.mp4
2016-04-06 14:19 - 2016-04-06 14:22 - 207386312 _____ C:\Users\Filip\Downloads\SisLovesMe Cameron Dee 720p HEVC x265 piemonster.mkv
2016-04-05 17:24 - 2016-04-06 13:26 - 00000000 ____D C:\Users\Filip\Downloads\Vinyl.S01E08.HDTV.x264-BATV[ettv]
2016-04-05 17:23 - 2016-04-05 19:04 - 00000000 ____D C:\Users\Filip\Downloads\Billions.S01E11.HDTV.x264-FUM[ettv]
2016-04-04 02:29 - 2016-04-04 02:29 - 00460958 _____ C:\Users\Filip\Downloads\Zadání 5.cvičení.pdf
2016-04-01 13:46 - 2016-04-01 13:46 - 00354045 _____ C:\Users\Filip\Downloads\V_1338473002_3_20160331_C1_P0.pdf
2016-04-01 01:27 - 2016-04-01 01:27 - 00047590 _____ C:\Users\Filip\Downloads\Faktura_83651564_1123378088.pdf
2016-03-31 23:27 - 2016-03-31 23:27 - 00615936 _____ C:\windows\AutoKMS.exe
2016-03-31 23:27 - 2016-03-31 23:27 - 00077824 ____N C:\windows\KMSEmulator.exe
2016-03-31 23:27 - 2016-03-31 23:27 - 00000161 _____ C:\windows\AutoKMS.ini
2016-03-31 23:26 - 2016-03-31 23:26 - 00000000 ____D C:\Users\Filip\Downloads\MS-Project-2010
2016-03-31 23:07 - 2016-03-31 23:21 - 243908062 _____ C:\Users\Filip\Downloads\MS-Project-2010.rar
2016-03-30 15:14 - 2016-03-30 15:14 - 00699406 _____ C:\Users\Filip\Downloads\calendar.pdf
2016-03-30 15:14 - 2016-03-30 15:14 - 00553651 _____ C:\Users\Filip\Downloads\calendar (1).pdf
2016-03-30 15:10 - 2016-03-30 15:10 - 00010318 _____ C:\Users\Filip\Downloads\calendar_March_2016_cq1459343437550.pdf
2016-03-30 15:10 - 2016-03-30 15:10 - 00010116 _____ C:\Users\Filip\Downloads\calendar_April_2016_cq1459343452861.pdf
2016-03-30 15:04 - 2016-03-30 15:04 - 01294740 _____ C:\Users\Filip\Downloads\Bakalářská práce veřejná.pdf
2016-03-30 15:04 - 2016-03-30 15:04 - 00238951 _____ C:\Users\Filip\Downloads\mehes BP (1).pptx
2016-03-29 22:38 - 2016-03-29 22:38 - 00033344 _____ C:\Users\Filip\Downloads\[kat.cr]nicole.aniston.gets.her.sexy.feet.worshipped.pir.te.torrent
2016-03-28 23:05 - 2016-03-28 23:25 - 00000000 ____D C:\Users\Filip\Downloads\Billions.S01E10.HDTV.x264-FUM[ettv]
2016-03-28 23:00 - 2016-03-28 23:00 - 00003773 _____ C:\Users\Filip\Downloads\[kat.cr]billions.s01e10.hdtv.x264.fum.ettv.torrent
2016-03-28 22:36 - 2016-03-29 00:41 - 00000000 ____D C:\Users\Filip\Downloads\Vinyl.S01E07.HDTV.x264-KILLERS[ettv]
2016-03-28 22:32 - 2016-03-28 22:32 - 00006553 _____ C:\Users\Filip\Downloads\[kat.cr]vinyl.s01e07.hdtv.x264.killers.ettv.torrent
2016-03-28 22:26 - 2016-03-28 22:26 - 00013458 _____ C:\Users\Filip\Downloads\[kat.cr]flatbush.zombies.3001.a.laced.odyssey.2016.320.torrent
2016-03-27 19:26 - 2016-03-27 19:26 - 04310116 _____ C:\Users\Filip\Downloads\DiplomováPráce_StudenyRadim.doc (4).pdf
2016-03-27 19:22 - 2016-03-27 19:22 - 02278747 _____ C:\Users\Filip\Downloads\Veřejná verze. Pavla Petrová. Posouzení informačního systému vybrané firmy a návrh změn.pdf
2016-03-27 17:04 - 2016-03-27 17:04 - 04310116 _____ C:\Users\Filip\Downloads\DiplomováPráce_StudenyRadim.doc (3).pdf
2016-03-27 17:04 - 2016-03-27 17:04 - 04310116 _____ C:\Users\Filip\Downloads\DiplomováPráce_StudenyRadim.doc (2).pdf
2016-03-27 01:36 - 2016-03-27 01:36 - 04310116 _____ C:\Users\Filip\Downloads\DiplomováPráce_StudenyRadim.doc.pdf
2016-03-27 01:36 - 2016-03-27 01:36 - 04310116 _____ C:\Users\Filip\Downloads\DiplomováPráce_StudenyRadim.doc (1).pdf
2016-03-22 20:05 - 2016-03-22 20:05 - 00020301 _____ C:\Users\Filip\Downloads\kkvoi (1).m3u
2016-03-22 01:50 - 2016-03-22 02:34 - 00000000 ____D C:\Users\Filip\Downloads\Vinyl.S01E06.HDTV.x264-KILLERS[ettv]
2016-03-21 23:13 - 2016-03-21 23:13 - 00200353 _____ C:\Users\Filip\Downloads\Rating USI 2015_2016 podmínky zapoctu.pdf
2016-03-21 20:08 - 2016-03-21 22:42 - 00000000 ____D C:\Users\Filip\Downloads\Billions.S01E09.WEBRip.x264-FUM[ettv]
2016-03-21 20:05 - 2016-03-21 20:05 - 00003840 _____ C:\Users\Filip\Downloads\[kat.cr]billions.s01e09.webrip.x264.fum.ettv.torrent
2016-03-21 19:26 - 2016-03-21 19:26 - 00006213 _____ C:\Users\Filip\Downloads\[kat.cr]vinyl.s01e06.hdtv.x264.killers.ettv.torrent
2016-03-21 12:49 - 2016-03-21 12:57 - 00000000 ____D C:\Users\Filip\Downloads\Puba - Nicole Aniston (Leaked home movie of Nicole Aniston getting creampied) HD [.mp4]
2016-03-21 12:49 - 2016-03-21 12:49 - 00037925 _____ C:\Users\Filip\Downloads\[kat.cr]puba.nicole.aniston.leaked.home.movie.of.nicole.aniston.getting.creampied.hd.torrent
2016-03-20 23:51 - 2016-03-20 23:51 - 00023720 _____ C:\Users\Filip\Downloads\paha.maa.(2005).cze.1cd.(3091458) (1).zip
2016-03-20 23:29 - 2016-03-20 23:51 - 00000000 ____D C:\Users\Filip\Downloads\Paha Maa a.k.a Frozen Land (2005) DVDRip, Subs English + Swedish
2016-03-20 23:28 - 2016-03-20 23:28 - 00014511 _____ C:\Users\Filip\Downloads\[kat.cr]paha.maa.a.k.a.frozen.land.2005.dvdrip.subs.english.swedish.torrent
2016-03-20 17:48 - 2016-03-20 17:49 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-20 17:48 - 2016-03-20 17:48 - 00001125 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-20 17:48 - 2016-03-20 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-20 17:48 - 2016-03-20 17:48 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-20 17:48 - 2016-03-20 17:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-20 17:48 - 2016-03-10 15:09 - 00065408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2016-03-20 17:48 - 2016-03-10 15:08 - 00140672 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2016-03-20 17:48 - 2016-03-10 15:08 - 00027008 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2016-03-20 17:47 - 2016-03-20 17:47 - 22851472 _____ (Malwarebytes ) C:\Users\Filip\Downloads\mbam-setup-2.2.1.1043.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-18 20:09 - 2014-11-27 23:06 - 00731772 _____ C:\windows\system32\perfh005.dat
2016-04-18 20:09 - 2014-11-27 23:06 - 00152016 _____ C:\windows\system32\perfc005.dat
2016-04-18 20:09 - 2014-03-18 11:53 - 01749406 _____ C:\windows\system32\PerfStringBackup.INI
2016-04-18 20:09 - 2013-08-22 15:36 - 00000000 ____D C:\windows\Inf
2016-04-18 20:07 - 2015-03-23 01:37 - 00000000 ____D C:\Users\Filip\AppData\Local\Spotify
2016-04-18 20:07 - 2015-03-23 01:36 - 00000000 ____D C:\Users\Filip\AppData\Roaming\Spotify
2016-04-18 20:06 - 2016-02-03 01:43 - 00000000 __SHD C:\Users\Filip\IntelGraphicsProfiles
2016-04-18 20:06 - 2015-03-23 01:24 - 00000960 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-18 20:06 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-04-18 20:06 - 2013-08-22 16:44 - 00492296 _____ C:\windows\system32\FNTCACHE.DAT
2016-04-18 20:05 - 2015-04-03 18:02 - 00000000 ____D C:\Users\Filip\AppData\Roaming\uTorrent
2016-04-18 20:03 - 2014-11-27 23:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-18 20:03 - 2014-04-03 20:24 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-04-18 20:02 - 2015-03-20 19:39 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2823346003-503312802-3612261594-1002
2016-04-18 20:01 - 2014-03-18 11:38 - 00000000 ____D C:\windows\ShellNew
2016-04-18 20:01 - 2013-08-22 15:25 - 00000076 _____ C:\windows\win.ini
2016-04-18 20:00 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-04-18 19:40 - 2015-05-18 21:29 - 00000964 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1d091a0fb3aca02.job
2016-04-18 19:34 - 2015-03-23 01:24 - 00000964 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-18 19:33 - 2015-08-05 17:00 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-04-18 15:15 - 2016-03-01 11:54 - 00003348 _____ C:\windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2016-04-17 17:28 - 2016-03-18 02:10 - 00000903 _____ C:\Users\Filip\Desktop\CDisplayEx.lnk
2016-04-17 16:56 - 2015-12-29 21:21 - 00000000 ___RD C:\Users\Filip\Documents\Scanned Documents
2016-04-17 16:47 - 2015-12-15 22:34 - 00000000 ____D C:\CCProxy
2016-04-17 14:56 - 2015-05-16 13:18 - 00000000 ____D C:\Program Files\Recuva
2016-04-17 12:48 - 2015-04-09 12:58 - 00294400 ___SH C:\Users\Filip\Desktop\Thumbs.db
2016-04-17 12:47 - 2015-05-13 11:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-04-15 13:05 - 2015-03-31 11:55 - 00678912 ___SH C:\Users\Filip\Downloads\Thumbs.db
2016-04-15 11:32 - 2015-11-20 16:02 - 00000000 ____D C:\Users\Filip\AppData\Local\gtk-2.0
2016-04-14 23:26 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\NDF
2016-04-14 22:07 - 2013-08-22 15:25 - 00262144 ___SH C:\windows\system32\config\BBI
2016-04-14 22:06 - 2015-04-16 13:25 - 00000000 ____D C:\windows\system32\appraiser
2016-04-14 22:06 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2016-04-14 20:06 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2016-04-14 19:42 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2016-04-14 12:13 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-14 12:13 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2016-04-14 10:58 - 2015-03-24 08:36 - 00000000 ____D C:\windows\system32\MRT
2016-04-14 10:49 - 2015-03-24 08:36 - 135176864 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-04-14 01:41 - 2015-04-15 16:30 - 00000000 ____D C:\Users\Filip\AppData\Roaming\Skype
2016-04-13 14:26 - 2016-03-09 12:56 - 01737080 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-04-13 14:26 - 2016-03-09 12:56 - 01501488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-04-13 14:26 - 2016-03-09 12:56 - 00246784 _____ (Microsoft Corporation) C:\windows\system32\microsoft-windows-system-events.dll
2016-04-13 10:52 - 2016-01-13 12:58 - 00177488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2016-04-11 21:38 - 2015-03-23 01:24 - 00002238 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-11 21:38 - 2015-03-23 01:24 - 00002226 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-07 00:02 - 2015-05-13 11:31 - 00000845 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-04-05 23:53 - 2013-08-22 17:38 - 00829944 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-04-05 23:53 - 2013-08-22 17:38 - 00176632 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-04-03 15:51 - 2016-03-08 02:51 - 00000000 ____D C:\Users\Filip\Downloads\Vinyl.S01E04.HDTV.x264-FLEET[rarbg]
2016-03-26 02:16 - 2015-04-04 12:08 - 00000000 ___SD C:\windows\SysWOW64\GWX
2016-03-26 02:16 - 2015-04-04 12:08 - 00000000 ___SD C:\windows\system32\GWX
2016-03-20 23:52 - 2015-09-03 21:08 - 00000000 ____D C:\KMPlayer

==================== Files in the root of some directories =======

2016-04-15 11:36 - 2016-04-15 11:36 - 0002170 _____ () C:\Users\Filip\AppData\Local\recently-used.xbel
2014-11-27 22:40 - 2014-11-27 22:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-16 05:27

==================== End of FRST.txt ============================

Re: preventivka

Napsal: 19 dub 2016 13:49
od Roli
Stáhni a spusť OTMoveIt

do levého okna aplikace pod Paste Instructions for Items to be Moved zkopíruj tento text:

Kód: Vybrat vše

:processes
explorer.exe       

:files 
C:\windows\AutoKMS.exe
C:\windows\KMSEmulator.exe
C:\windows\AutoKMS.ini

:commands
[purity]
[emptytemp]
[start explorer]
klikni na MoveIt! a v pravém zeleném okně aplikace se Ti objeví info o provedene akci, obsah okna zkopíruj sem,

pokud aplikace bude požadovat restart, klikni na YES

v tom případě sem zkopíruj obsah logu uloženého na C:\_OTMoveIt\MovedFiles\


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a spusť AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.


Nakonec použij Mbam z mého podpisu a dej mi sem z něj log po smazání.

Re: preventivka

Napsal: 19 dub 2016 17:40
od filouzofka
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
C:\windows\AutoKMS.exe moved successfully.
C:\windows\KMSEmulator.exe moved successfully.
C:\windows\AutoKMS.ini moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Filip
->Temp folder emptied: 791060 bytes
->Temporary Internet Files folder emptied: 1737872 bytes
->Java cache emptied: 1299 bytes
->Google Chrome cache emptied: 520444870 bytes
->Flash cache emptied: 604 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 12366768 bytes
RecycleBin emptied: 2262829181 bytes

Total Files Cleaned = 2 669,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 04192016_150213

Files moved on Reboot...
C:\Users\Filip\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Filip\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.

Registry entries deleted on Reboot...


# AdwCleaner v5.112 - Log soubor vytvořen 19/04/2016 o 15:19:47
# Aktualizováno 17/04/2016 by Xplode
# Databáze : 2016-04-19.1 [Server]
# Operační systém : Windows 8.1 (X64)
# Jméno uživatele : Filip - FILIPICKO
# Spuštěno z : C:\Users\Filip\Downloads\adwcleaner_5.112.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka smazáno : C:\ProgramData\pokki
[#] Složka smazáno : C:\ProgramData\Application Data\pokki

***** [ Soubory ] *****

[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_d16fk4ms6rqz1v.cloudfront.net_0.localstorage
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_d30ke5tqu2tkyx.cloudfront.net_0.localstorage
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_d30ke5tqu2tkyx.cloudfront.net_0.localstorage-journal
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
[-] Soubor smazáno : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****


***** [ Registr ] *****

[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\AppID\VISUALDISCOVERY.EXE
[-] Klávesa smazáno : HKCU\Software\Classes\pokki
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{2E5FA7B4-61A2-4662-BBCE-62BBB20FC649}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{5D7F05E3-075A-43AF-8BC7-21E2F7F38845}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{617E26CE-E6E1-4C75-A68A-A001F2B98491}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{79FBDBEA-A722-4ABD-BEC0-B7D463F6BA0E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{8128586C-DF69-4266-873F-CF4C6F705A7C}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{C1F9CFCE-A7DC-4072-8B31-1DEA57004C86}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{EA4AD895-2A7F-430E-B973-DEE6C4E743A9}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{EBF4B60F-A863-426F-BE6F-5DFE83BC574F}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{CB6BF8B6-E12B-42FA-A478-91BCCDE475DC}
[-] Klávesa smazáno : HKCU\Software\Conduit
[-] Klávesa smazáno : HKLM\SOFTWARE\VisualDiscovery

***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [3971 bytes] - [19/04/2016 15:19:47]
C:\AdwCleaner\AdwCleaner[S1].txt - [4070 bytes] - [19/04/2016 15:18:07]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4117 bytes] ##########


Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 19.4.2016
Čas skenování: 15:27
Protokol: mb.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.04.19.04
Databáze rootkitů: v2016.04.17.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Filip

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 653782
Uplynulý čas: 2 hod, 46 min, 49 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 2
CrackTool.Agent.Keygen, C:\_OTM\MovedFiles\04192016_150213\C_windows\AutoKMS.exe, Do karantény, [9b157838f8a171c5c2857148e61b8779],
RiskWare.Tool.CK, C:\_OTM\MovedFiles\04192016_150213\C_windows\KMSEmulator.exe, Do karantény, [5c54a20e8019320475afec8816ea6d93],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: preventivka

Napsal: 19 dub 2016 21:16
od filouzofka
PC sa po vsetkych procedurach zblaznil, v podstate je nefunkcny... :D

takyto pomaly som ho este nemal, a navyse na nom nevyuzivam nic ine iba internet, pozatvaral som teda vsetky okna atd. no nie je mozne aby bol taky pomaly aj len pri 5tich oknach napr.

odinstaloval som ESET, ak by bola chba v nm a nic...

neviem akykolvek naznak pouzivvania doplnkov flash/java/ alebo tak... PC jednoducho nezvlada.

Re: preventivka

Napsal: 19 dub 2016 21:17
od filouzofka
furt vrci, akoby na pozadi robil nejaku mega dolezitu ulohu,,,, ???????

Re: preventivka

Napsal: 19 dub 2016 21:18
od filouzofka
preboha co mam robit, sak on nezzvlada ani ked kliknem na "dpovedat" v tomto fore... to je hrozne :(

Re: preventivka

Napsal: 20 dub 2016 13:27
od Roli
Znovu spusť OTMoveIt a nahoře v aplikaci klini na CleanUP!

tímto po sobě uklidí.


Pak dej vědět jak se PC chová.

Re: preventivka

Napsal: 21 dub 2016 10:52
od filouzofka
no ide normalnejsie, ale celkovo ma proste take priznaky jak 5+rocny pocitac... furt vrci etc. etc. a flash mu dava zabrat a v istu dobu dna sa mega spomali :D

Re: preventivka

Napsal: 21 dub 2016 16:39
od Roli
No smazali jsme cracky u kterých nikdy nevíš co naboří a nějakou další havěť.

Ty problémy na netu se dějí i v jiném prohlížeči ?

Ovladače grafiky máš aktuální ?
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz