VIRY.CZ

DOBRÝ DEN MAM NOTEBOOK DELL XPS L702X S OPERACNIM SYSTEMEM MS WINDOWS 10 HOME CZ, ASI PRED NEKOLIKA DNY JSEM POUSTEL PROGRAMY ESET SMART SECURITY 9, MALWAREBYTES ANTIMALWARE, ESET ONLINE SCANNER, MCAFEE AVERT STINGER, CCLEANER.......A VSECHNY TYTO PROGRAMY MI NASLI DOHROMADY ASI 3000 VIRU ALE BOHUZEL VSECHNY MI NEODSTRANILI ANI NESMAZALI ALE VETSINU Z NICH ANO.......MEZI TY KTERE NESLY SMAZAT PATRI NAPR. TROJSKE KONE,...ALE MOHLO BY JICH BYT I VICE. TEDKA JSEM SPOUSTEL V PRIKAZOVEM RADKU JAKO SPRAVCE TYTO PRIKAZY "DISM /Online /Cleanup-Image /restorehealth" TENTO PRIKAZ SE ZASTAVIL NA 40% A PAK SE TO ZASEKLO A NEJELO DAL. DALE JSEM POUSTEL TENTO PRIKAZ "SFC /SCANOW" A TEN MI NAPSAL TOTO CHYBOVE HLASENI "Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not supported in offline servicing scenarios.". TYTO PRIKAZY MI BOHUZEL NEPOMOHLY. A JA SI MYSLIM ZE MI ZASE TY ANTIVIROVE PROGRAMY KTERE JSEM UVEDL VYSE ODSTRANILI NEKTERE SYSTEMOVE SOUBORY KTERE JSOU POTREBA PRO SLUZBU WINDOWS UPDATE KTERA MI OPET NEFUNGUJE BY MELA - ZASEKAVA SE A STALE UKAZUJE VYHLEDAVAM AKTUALIZACE A TO JE VSE. MYSLIM SI ZE BYLI SMAZANI SYSTEMOVE SOUBORY NEJAKYMI TYPY VIRU (MOZNA TROJSKE KONE NEBO TO MOHOU BYT I JINE VIRY) I V PROGRAMU WINDOWS 10 STORE SE MI STAVA TO SAME ZASEKNE SE MI TO PRI VYHLEDAVANI AKTUALIZACI A DAL UZ MI TO PROSTE NEJDE. NEKDY SE MI ZPOMALUJE I ZASEKAVA NOTEBOOK ALE JEN VYJIMECNE.....CASTO TO NENI ALE PRESTO SE BOJIM ZE MAM STALE SPOUSTU HACKERU, VIRU, SPYWARE, ATD. V MEM NOTEBOOKU S OS WINDOWS 10 HOME CZ. VSE MAM V NOTEBOOKU AKTUALIZOVANE (OPERACNI SYSTEM WINDOWS 10 HOME 64BIT CZ , ESET SMART SECURITY, ADOBE FLASH PLAYER, JAVA, OVLADACE NA GRAFICKOU KARTU NVIDIA,....ATD.) A PRED TYDNEM MI JESTE VSECHNO FUNGOVALO V PORADKU ALE TO TED UZ BOHUZEL NENI PRAVDA. PREDEM VAM MOCKRAT DEKUJI ZA POMOC I ZA PRIPADNE RESENI MYCH POTIZI. S POZDRAVEM VAS ZAKAZNIK, FANOUSEK A KAMARAD TOMAS L. ALIAS DOKTORXP ?! -))

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

DOBRY DEN PROTOZE ZPRAVA ASI OBSAHOVALA NEPOVOLENY POCET ZNAKU (Vaše zpráva obsahuje 118198 znaků. Maximální povolený počet znaků je 100000.).......ROZHODL JSEM SE ZA VAM OBA 2 LOGY POSLU VE FORME PRILOH ZABALENYCH DO ARCHIIVU ZIP. PREDEM VAM DEKUJI ZA POMOC I ZA PRIPADNE RESENI MYCH POTIZI S NOTEBOOKEM DELL XPS L702X SE SYSTEMEM WINDOWS 10 HOME 64BIT CZ ?! -)) PS.: KONTROLOVAL JSEM OBA DVA PEVNE DISKY POMOCI PROGRAMU CRYSTALDISK INFO A JSOU V PORADKU ?! -))

TADY VAM POSILAM FRST LOG SOUBOR JAKO PRILOHU.....ZABALENY DO ARCHIVU ZIP. PREDEM DEKUJI ZA POCHOPENI A ROVNEZ ZA PRIPADNE RESENI MYCH POTIZI. S POZDRAVEM VAS ZAKAZNIK, FANOUSEK A KAMARAD TOMAS L. ALIAS DOKTORXP ?! -))

V PC jsou 2 antiviry (Eset a McAfee) jeden z nich odinstalujte. Dále spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Dobry vecer, ten program Mcafee jsem odstranil jak jste mi poradil. A take vam posilam ten log z programu Adwcleaner, ketry jste ode me pozadoval. Chci vas jeste informovat, ze nektere internetove stranky se mi nezobrazuji, muze za toto chovani virus nebo hacker ?? A program HW monitor mi ukazuje teploty nejvice do 70 - 80 stupnu Celsia hlavne u procesoru a zakladni desky....je to normalni nebo se jedna zase o prehrivani ?? Nekdy se mi notebook i zpomaluje a zasekava ale ne stale. Pouzivam take chladici stojan (mam ho slozeny a na nem stoji notebook) a diky nemu mi teplot klesly asi o 5 - 10 stupnu Celsia, coz je doufam v poradku. Taktez se stale divim ze mi programy jako Eset online scanner, Malwarebytes Antimalware, Stinger,....nepomhly odstranit z notebooku se systemem MS Windows 10 Home 64BT CZ vsechny hrozby (viry, spyware, trojske kone, adware,....atd.). Predem Vam dekuji za pochopeni i za pripadne reseni mych potizi s mym notebookem. Vas zakaznik Tomas L. alias DOKTORXP ?! -))

# AdwCleaner v5.030 - Logfile created 22/01/2016 at 01:33:58
# Updated 17/01/2016 by Xplode
# Database : 2016-01-19.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Tomáš Lipský - DESKTOP-NJ045RP
# Running from : D:\Downloads\adwcleaner_5.030.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\simplitec
[-] Folder Deleted : C:\ProgramData\simplitec
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd

***** [ Files ] *****

[-] File Deleted : C:\END
[-] File Deleted : C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fcfenmboojpjinhpgggodefccipikbpd_0.localstorage

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : simplitec Power Suite (Tray)
[-] Task Deleted : simplitec Power Suite

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0DC81A74-1FBD-4EF6-82B2-DE3FA05E8233}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B26E4A2-7F09-4365-9AB8-13E6891E42CB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{21402197-BB5B-476C-AA1D-3FFED8ED813A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{42E8D680-A18B-4CAA-ACE0-18EA05E4A056}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{454A4044-16EC-4D64-9069-C5B8832B7B55}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4FEB1BAD-35AD-4A08-B6EC-E6D832F1ED4D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8F2B3016-17D4-447A-B207-FFA8957A834A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E66B63B0-49F8-47E3-A9BA-799287B59E87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F8FA5B48-B7A2-4BC6-8389-9587643A4660}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0DC81A74-1FBD-4EF6-82B2-DE3FA05E8233}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1B26E4A2-7F09-4365-9AB8-13E6891E42CB}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{21402197-BB5B-476C-AA1D-3FFED8ED813A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{42E8D680-A18B-4CAA-ACE0-18EA05E4A056}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{454A4044-16EC-4D64-9069-C5B8832B7B55}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4FEB1BAD-35AD-4A08-B6EC-E6D832F1ED4D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8F2B3016-17D4-447A-B207-FFA8957A834A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E66B63B0-49F8-47E3-A9BA-799287B59E87}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F8FA5B48-B7A2-4BC6-8389-9587643A4660}
[-] Key Deleted : HKLM\SOFTWARE\simplitec
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\simplitec POWER SUITE_is1

***** [ Web browsers ] *****

[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : fcfenmboojpjinhpgggodefccipikbpd
[-] [C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Secure Preferences] [Extension] Deleted : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3679 bytes] ##########
# AdwCleaner v5.037 - Logfile created 02/03/2016 at 23:16:52
# Updated 28/02/2016 by Xplode
# Database : 2016-03-02.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Tomáš Lipský - DESKTOP-NJ045RP
# Running from : D:\Downloads\adwcleaner_5.037.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : SCService
[-] Service Deleted : sdfhgdf

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Prompt Downloader
[-] Folder Deleted : C:\Program Files (x86)\Zrychleni Pocitace
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zrychleni Pocitace
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Local\Prompt Downloader
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jlcgehabolcakkjhgmgpkagpolbjlhfa
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prompt Downloader
[-] Folder Deleted : C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

***** [ Files ] *****

[-] File Deleted : C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_fcfenmboojpjinhpgggodefccipikbpd_0.localstorage
[-] File Deleted : C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fcfenmboojpjinhpgggodefccipikbpd_0.localstorage
[-] File Deleted : C:\WINDOWS\SysNative\drivers\sdfhgdf.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : FreeDownloadManagerNetworkMonitor

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Key Deleted : HKCU\Software\Classes\CLSID\{17EF1FFB-0545-4C9A-BE64-78FF53338475}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C42038D-817A-472C-8C2A-EF46F1DA576D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{873C7DA8-195D-4D5A-B830-C5E2831901EA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3157E247-2784-4028-BF0F-52D6DDC70E1B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6C42038D-817A-472C-8C2A-EF46F1DA576D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{873C7DA8-195D-4D5A-B830-C5E2831901EA}
[-] Key Deleted : HKCU\Software\Prompt Downloader
[-] Key Deleted : HKLM\SOFTWARE\Prompt Downloader
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Prompt Downloader
[-] Key Deleted : [x64] HKLM\SOFTWARE\SearchModule
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www-searching.com
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www-searching.com
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pcspeedup]

***** [ Web browsers ] *****

[-] [C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultenginename", "mysites123");
[-] [C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\prefs.js] [Preference] Deleted : user_pref("extensions.quick_start.enable_search1", false);
[-] [C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\prefs.js] [Preference] Deleted : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mysites123
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Deleted : hxxp://mysites123.com/web?type=ds&ts=1455035759&z=bc50d0171a39176ca5e3558g6zdwcweefc1w2mfwft&from=amt&uid=st9500423as_5ws37bg4xxxx5ws37bg4&q={searchTerms}
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : fcfenmboojpjinhpgggodefccipikbpd
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : jlcgehabolcakkjhgmgpkagpolbjlhfa
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://www.mysites123.com/?type=hp&ts=14550357 ... xx5ws37bg4
[-] [C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Secure Preferences] [Extension] Deleted : fcfenmboojpjinhpgggodefccipikbpd
[-] [C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Secure Preferences] [Extension] Deleted : jlcgehabolcakkjhgmgpkagpolbjlhfa

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [9410 bytes] - [22/01/2016 01:33:58]
C:\AdwCleaner\AdwCleaner[S1].txt - [9022 bytes] - [22/01/2016 01:30:44]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [9556 bytes] ##########
# AdwCleaner v5.117 - Log soubor vytvořen 15/05/2016 o 22:13:09
# Aktualizováno 15/05/2016 by Xplode
# Databáze : 2016-05-15.2 [Server]
# Operační systém : Windows 10 Home (X64)
# Jméno uživatele : Tomáš Lipský - DESKTOP-NJ045RP
# Spuštěno z : C:\Users\Tomáš Lipský\Desktop\AdwCleaner.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka smazáno : C:\ProgramData\simplitec
[-] Složka smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
[-] Složka smazáno : C:\Program Files (x86)\simplitec
[-] Složka smazáno : C:\Program Files (x86)\WinTaske
[-] Složka smazáno : C:\Program Files (x86)\QQBrowser
[-] Složka smazáno : C:\Users\Tomáš Lipský\AppData\Roaming\eCyber
[-] Složka smazáno : C:\Users\Tomáš Lipský\AppData\Roaming\TSv
[-] Složka smazáno : C:\Users\Tomáš Lipský\AppData\Roaming\WinZiper
[-] Složka smazáno : C:\Users\Tomáš Lipský\AppData\Local\Chromium\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Složka smazáno : C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd

***** [ Soubory ] *****

[-] Soubor smazáno : C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\qksee.lnk
[-] Soubor smazáno : C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\invalidprefs.js

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****

[-] Úkol smazáno : simplitec Power Suite (Tray)
[-] Úkol smazáno : simplitec Power Suite
[-] Úkol smazáno : Browser Updater Task(Core)
[-] Úkol smazáno : FreeDownloadManagerNetworkMonitor

***** [ Registr ] *****

[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinZipper
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinZipper
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinZipper
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.001
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.7z
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.arj
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.bz2
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.bzip2
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.cab
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.cpio
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.deb
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.dmg
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.fat
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.gz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.gzip
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.hfs
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.iso
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.lha
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.lzh
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.lzma
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.ntfs
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.rar
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.rpm
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.squashfs
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.swm
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.tar
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.taz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.tbz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.tbz2
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.tgz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.tpz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.txz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.vhd
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.wim
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.xar
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.xz
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.z
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WinZippers.zip
[-] Klávesa smazáno : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Klávesa smazáno : HKCU\Software\Classes\qkseeViewer.bmp
[-] Klávesa smazáno : HKCU\Software\Classes\qkseeViewer.gif
[-] Klávesa smazáno : HKCU\Software\Classes\qkseeViewer.jpeg
[-] Klávesa smazáno : HKCU\Software\Classes\qkseeViewer.jpg
[-] Klávesa smazáno : HKCU\Software\Classes\qkseeViewer.png
[-] Klávesa smazáno : HKCU\Software\Classes\qkseeViewer.tif
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\PCSU.SysUtils
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\qkseeViewer.bmp
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\qkseeViewer.gif
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\qkseeViewer.jpeg
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\qkseeViewer.jpg
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\qkseeViewer.png
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\qkseeViewer.tif
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Klávesa smazáno : HKCU\Software\WIN
[-] Klávesa smazáno : HKCU\Software\SrpnFiles
[-] Klávesa smazáno : HKLM\SOFTWARE\hdcode
[-] Klávesa smazáno : HKLM\SOFTWARE\simplitec
[-] Klávesa smazáno : HKLM\SOFTWARE\TSv
[-] Klávesa smazáno : HKLM\SOFTWARE\SrpnFiles
[-] Klávesa smazáno : HKLM\SOFTWARE\qkseeSvc
[-] Klávesa smazáno : HKLM\SOFTWARE\qksee
[-] Klávesa smazáno : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Klávesa smazáno : HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
[-] Klávesa smazáno : HKLM\SOFTWARE\{G6276374-DEEE-4AAA-A355-9016A2F98A2D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\simplitec POWER SUITE_is1
[-] Hodnota smazáno : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{A640887A-0AFB-4F71-93B2-36291FB1103E}]
[-] Hodnota smazáno : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{22BC628A-E4B1-441A-A4C0-03C81C11C260}]
[-] Hodnota smazáno : HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [pcspeedup]
[-] Hodnota smazáno : HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SearchModule]

***** [ Webové prohlížeče ] *****

[-] [C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] smazáno : user_pref("browser.search.defaultenginename.US", "data:text/plain,browser.search.defaultenginename.US=hohosearch");
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] smazáno : google
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] smazáno : hxxp://www.hohosearch.com/?mode=nnnb&ptid=epf1 ... A34kAn0qAk..
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] smazáno : fcfenmboojpjinhpgggodefccipikbpd
[-] [C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] smazáno : hxxp://www.hohosearch.com/?mode=nnnb&ptid=epf1 ... A34kAn0qAk..
[-] [C:\Users\Tomáš Lipský\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] smazáno : fcfenmboojpjinhpgggodefccipikbpd
[-] [C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] [Search Provider] smazáno : yahoo.com
[-] [C:\Users\Tomáš Lipský\AppData\Local\Comodo\Dragon\User Data\Default\Secure Preferences] [Extension] smazáno : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [17899 bytes] - [22/01/2016 02:33:58]
C:\AdwCleaner\AdwCleaner[S1].txt - [17828 bytes] - [22/01/2016 02:30:44]
C:\AdwCleaner\AdwCleaner[S2].txt - [8876 bytes] - [15/05/2016 22:11:24]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [18120 bytes] ##########

OK. Dejte nový log FRST.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:16-05-2016
Ran by Tomáš Lipský (administrator) on DESKTOP-NJ045RP (16-05-2016 23:05:12)
Running from C:\Users\Tomáš Lipský\Desktop
Loaded Profiles: Tomáš Lipský (Available Profiles: Tomáš Lipský)
Platform: Windows 10 Home Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
() C:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(Comodo) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(© 2015 Microsoft Corporation) C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\3.30.8\LogiOptionsMgr.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerHIDReceiver\AVerHIDReceiver.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(forum.viry.cz) C:\Users\Tomáš Lipský\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8504064 2015-08-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-08-31] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4146848 2012-08-16] (Dell Inc.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1553528 2015-11-14] (Logitech, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1521440 2015-11-24] (ABBYY Production LLC.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-05-09] (Plays.tv, LLC)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-04-27] (Raptr, Inc)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [3077712 2016-03-31] (Valve Corporation)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [45296 2016-05-08] (Overwolf LTD)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [52142720 2016-04-29] (Skype Technologies S.A.)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Tomáš Lipský\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Tomáš Lipský\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [BingSvc] => C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-03-11] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [HP DeskJet 4530 series (NET)] => C:\Program Files\HP\HP DeskJet 4530 series\Bin\ScanToPCActivationApp.exe [3651080 2015-03-09] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-04-22] (Apple Inc.)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\MountPoints2: {0fd0ef63-4ffd-11e5-9bc2-806e6f6e6963} - "E:\Setup.exe"
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Mystify.scr [150528 2015-10-30] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk [2016-05-10]
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerHIDReceiver\AVerHIDReceiver.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2016-05-10]
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2016-05-10]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{18283c71-187f-487d-881f-b8935e720cbd}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{fc6f9be9-b7ee-4f08-ab18-7a615365e6c3}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://windows.microsoft.com/cs-cz/hotmail/home?ocid=iehp
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {07F08A42-B817-44BC-A353-E02DD7779F22} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {17A96976-991F-4D48-AEC6-497403781F56} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {2A4F629C-F22A-4E7B-8973-09EB5E2BA8C0} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {30F6747F-D1BA-4495-BE7E-53529DEDFEB7} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {6F919F63-A83D-4507-96B1-4F1D5E4D1118} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {71F50E93-D9B8-47A6-B8FA-3E861F1B355F} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {878C0935-40AD-4992-8651-AA56A29D5899} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {B7263F27-0609-4F89-8CC5-0F20E8D272F3} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2011743211-4105206050-1100676317-1001 -> {D0084F7F-B3AF-4435-9638-107083ADBCED} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
BHO: No Name -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-04-21] (Oracle Corporation)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-04-29] (LastPass)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-21] (Oracle Corporation)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2016-04-29] (LastPass)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-21] (Oracle Corporation)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-04-29] (LastPass)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2016-04-29] (LastPass)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF DefaultSearchEngine: Bing
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Bing
FF Homepage: hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-ww
hxxps://www.malwarebytes.org/restorebrowser//?t ... xx5ws37bg4
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-21] (Oracle Corporation)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-04-29] (LastPass)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-21] (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-04-29] (LastPass)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-05-10] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-05-10] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\searchplugins\bing-.xml [2015-12-10]
FF SearchPlugin: C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\bing-.xml [2015-12-10]
FF Extension: FireLux - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\@firelux.xpi [2016-03-28]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com [2015-09-08] [not signed]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-10]
FF Extension: FireLux - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\@firelux.xpi [2016-05-03]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com [2016-04-08] [not signed]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-10]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-04-29]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-02]
CHR Extension: (Dokumenty Google) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-02]
CHR Extension: (Disk Google) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2016-02-01]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2016-02-10]
CHR Extension: (YouTube) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-11]
CHR Extension: (Vyhledávání Google) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]
CHR Extension: (Tabulky Google) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-02]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-24]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2016-04-30]
CHR Extension: (Skype) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-05-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-08]
CHR Extension: (Gmail) - C:\Users\Tomáš Lipský\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-02]
CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]

Opera:
=======
OPR Extension: (YouTube™ Flash-HTML5) - C:\Users\Tomáš Lipský\AppData\Roaming\Opera Software\Opera Stable\Extensions\abpeogmjbjonedcakbihofgpoelmfbgj [2016-05-12]
OPR Extension: (LastPass) - C:\Users\Tomáš Lipský\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo [2016-04-29]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [965848 2015-07-02] (ABBYY Production LLC)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [364544 2013-03-26] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [771072 2013-03-26] () [File not signed]
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-09-04] (BitRaider, LLC)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-04-29] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-04-29] (Microsoft Corporation)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2572024 2016-03-11] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [202488 2016-03-11] (Dell Inc.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2307768 2016-05-05] (Comodo)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2520928 2016-03-03] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [28552 2016-04-26] (Hewlett-Packard Company)
R2 IceDragonUpdater; C:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe [1985688 2016-04-05] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [250672 2016-05-10] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-02] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1286896 2016-05-08] (Overwolf LTD)
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-09] (Plays.tv, LLC)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S2 Remotr Service; C:\Program Files (x86)\Remotr\RemotrService.exe [181840 2016-05-05] (RemoteMyApp sp. z o.o.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-08-31] (Realtek Semiconductor)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31928 2016-04-22] (Dell Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AVer7231_x64; C:\Windows\system32\DRIVERS\AVer7231_x64.sys [1799808 2010-06-11] (AVerMedia TECHNOLOGIES, Inc.)
R3 BGTCap64; C:\Windows\system32\DRIVERS\BGTCap64.sys [4587008 2013-12-21] (BlackGold Technology Ltd.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2015-11-14] (Motorola Solutions, Inc.)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-05-22] (Dell Computer Corporation)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-02-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-02-27] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-02-09] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [251632 2015-07-14] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-09-23] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-12-18] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-12-18] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [198096 2016-02-09] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [53384 2016-02-09] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84800 2016-02-09] (ESET)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2016-03-19] (REALiX(tm))
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-08-31] (Intel Corporation)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864072 2016-05-10] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106120 2016-05-10] (McAfee, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
R3 sthid; C:\Windows\System32\drivers\sthid.sys [21216 2015-07-23] (Splashtop Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-16 23:05 - 2016-05-16 23:05 - 00028949 _____ C:\Users\Tomáš Lipský\Desktop\FRST.txt
2016-05-16 20:30 - 2016-05-16 20:30 - 02883728 _____ (Martin Malík - REALiX ) C:\Users\Tomáš Lipský\Downloads\hw64_524.exe
2016-05-16 20:23 - 2016-05-16 20:52 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-05-16 20:23 - 2016-05-16 20:23 - 00001080 _____ C:\Users\Tomáš Lipský\Desktop\SpeedFan.lnk
2016-05-16 20:23 - 2016-05-16 20:23 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2016-05-16 20:23 - 2016-05-16 20:23 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-05-16 16:08 - 2016-05-16 16:12 - 18479600 _____ C:\Users\Tomáš Lipský\Downloads\ProgDVB7.13.3x64.exe
2016-05-15 21:40 - 2016-05-15 21:41 - 03651136 _____ C:\Users\Tomáš Lipský\Desktop\AdwCleaner.exe
2016-05-15 03:21 - 2016-05-15 03:21 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\NVIDIA
2016-05-14 09:39 - 2016-05-14 09:39 - 00002210 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2016-05-14 09:39 - 2016-05-14 09:39 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-05-14 09:39 - 2016-05-14 09:39 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-05-14 09:39 - 2016-05-10 01:35 - 06369728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-05-14 09:39 - 2016-05-10 01:35 - 02993088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-05-14 09:39 - 2016-05-10 01:35 - 02563128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-05-14 09:39 - 2016-05-10 01:35 - 01201600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-05-14 09:39 - 2016-05-10 01:35 - 00530880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-05-14 09:39 - 2016-05-10 01:35 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-05-14 09:39 - 2016-05-10 01:35 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-05-14 09:39 - 2016-05-10 01:35 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-05-14 09:39 - 2016-05-10 01:23 - 00110528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2016-05-14 09:39 - 2016-05-07 23:24 - 06423191 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-05-14 09:39 - 2016-05-04 04:23 - 00129824 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2016-05-14 09:39 - 2016-05-04 04:22 - 00130848 _____ C:\WINDOWS\system32\vulkan-1.dll
2016-05-14 09:39 - 2016-05-04 04:22 - 00045344 _____ C:\WINDOWS\system32\vulkaninfo.exe
2016-05-14 09:39 - 2016-05-04 04:22 - 00040224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2016-05-14 09:38 - 2016-05-10 06:05 - 00213952 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-05-14 09:38 - 2016-05-10 06:05 - 00201664 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-05-14 09:36 - 2016-05-13 06:58 - 12643392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2016-05-14 09:36 - 2016-05-10 20:11 - 01580488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvir3dgenco64.dll
2016-05-14 09:36 - 2016-05-10 20:11 - 00467912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstusb.sys
2016-05-14 09:36 - 2016-05-10 20:11 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 42924088 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 37567424 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 31625272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 25374776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 21380696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 20922648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 20078656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 17777016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 17370472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 17370400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 17332320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 14227696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 10566520 _____ C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 08673880 _____ C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 03685280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 03262968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 02614208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 02258368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436519.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436519.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00960056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00887744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00753208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00695864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00678704 _____ C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00571912 _____ C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2016-05-14 09:36 - 2016-05-10 06:05 - 00038050 _____ C:\WINDOWS\system32\nvinfo.pb
2016-05-14 09:36 - 2016-05-10 06:05 - 00000592 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2016-05-14 09:36 - 2016-05-10 06:05 - 00000592 _____ C:\WINDOWS\system32\nv-vk64.json
2016-05-13 23:52 - 2016-04-14 07:38 - 00113216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-05-13 23:52 - 2016-04-14 07:38 - 00102976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-05-13 23:27 - 2016-05-13 23:27 - 00021800 _____ C:\Users\Tomáš Lipský\Desktop\FRST.zip
2016-05-13 23:15 - 2016-05-13 23:15 - 00008678 _____ C:\Users\Tomáš Lipský\Desktop\Addition.zip
2016-05-13 23:05 - 2016-05-16 23:03 - 00000000 ____D C:\FRST
2016-05-13 23:00 - 2016-05-16 23:01 - 02382336 _____ (Farbar) C:\Users\Tomáš Lipský\Desktop\FRST64.exe
2016-05-13 23:00 - 2016-05-16 23:00 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš Lipský\Desktop\FRSTLauncher.exe
2016-05-12 22:10 - 2016-05-12 22:19 - 08597336 _____ (McAfee, Inc.) C:\Users\Tomáš Lipský\Downloads\SecurityScan_Release.exe
2016-05-12 21:32 - 2016-05-12 21:32 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\WaterfoxProject
2016-05-12 21:20 - 2016-05-12 21:24 - 01193680 _____ (Adobe Systems Incorporated) C:\Users\Tomáš Lipský\Downloads\flashplayer21pp_fa_install.exe
2016-05-12 21:20 - 2016-05-12 21:20 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-05-12 21:19 - 2016-05-13 05:28 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-05-12 14:44 - 2016-05-12 14:44 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\vlc
2016-05-11 02:54 - 2016-05-16 22:59 - 00000992 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-11 02:54 - 2016-05-16 21:03 - 00000988 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-10 19:17 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-10 19:17 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-05-10 19:17 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-05-10 19:17 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-05-10 19:17 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-05-10 19:17 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-05-10 19:17 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-05-10 19:17 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-05-10 19:17 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-05-10 19:17 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-10 19:17 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-05-10 19:17 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-05-10 19:16 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2016-05-10 19:16 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-05-10 19:16 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-05-10 19:16 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-05-10 19:16 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-10 19:16 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-05-10 19:16 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-10 19:16 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-05-10 19:16 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-05-10 19:16 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-05-10 19:16 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-05-10 19:16 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-05-10 19:16 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-05-10 19:16 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-05-10 19:16 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-05-10 19:16 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-05-10 19:16 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-10 19:16 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-05-10 19:16 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-05-10 19:16 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-05-10 19:16 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-05-10 19:16 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-05-10 19:16 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-05-10 19:16 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-05-10 19:16 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-05-10 19:16 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-05-10 19:16 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-05-10 19:16 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-05-10 19:16 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-05-10 19:16 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-05-10 19:16 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-05-10 19:16 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-05-10 19:16 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-10 19:16 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-05-10 19:16 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2016-05-10 19:16 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-05-10 19:16 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-05-10 19:16 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-05-10 19:16 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-05-10 19:16 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-05-10 19:16 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-05-10 19:16 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-05-10 19:16 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-05-10 19:16 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-10 19:16 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-05-10 19:16 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-05-10 19:16 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-05-10 19:16 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-05-10 19:16 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-05-10 19:16 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-05-10 19:16 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-05-10 19:16 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-05-10 19:16 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-05-10 19:16 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-05-10 19:16 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2016-05-10 19:16 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-05-10 19:16 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-05-10 19:16 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-05-10 19:16 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2016-05-10 19:16 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-05-10 19:16 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-05-10 19:16 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2016-05-10 19:16 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-05-10 19:16 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2016-05-10 19:16 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-05-10 19:16 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-05-10 19:16 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-05-10 19:16 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-05-10 19:16 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-05-10 19:16 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-10 19:16 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-10 19:16 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-05-10 19:16 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-05-10 19:16 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-05-10 19:16 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-10 19:16 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-05-10 19:16 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-10 19:16 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-05-10 19:16 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-10 19:16 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-10 19:16 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-05-10 19:16 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-05-10 19:16 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-05-10 19:16 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-05-10 19:16 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-05-10 19:16 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-05-10 19:16 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-05-10 19:16 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-05-10 19:16 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-05-10 19:16 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-05-10 19:16 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-10 19:16 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-05-10 19:16 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-05-10 19:16 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-10 19:16 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-05-10 19:16 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-05-10 19:16 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-05-10 19:16 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-05-10 19:16 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-05-10 19:16 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-05-10 19:16 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-05-10 19:16 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-05-10 19:16 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-10 19:16 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-05-10 19:16 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-05-10 19:16 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-05-10 19:16 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-05-10 19:16 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-10 19:16 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-10 19:16 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-05-10 19:16 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-05-10 19:16 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-05-10 19:16 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-05-10 19:16 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-05-10 19:16 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-05-10 19:16 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-05-10 19:16 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-05-10 19:16 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-05-10 19:16 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-05-10 19:16 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-05-10 19:16 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-10 19:16 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-05-10 19:16 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-05-10 19:16 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-10 19:16 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-05-10 19:16 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-10 19:16 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-10 19:16 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-05-10 19:16 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-05-10 19:16 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-05-10 19:16 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-05-10 19:16 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-05-10 19:16 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-05-10 19:16 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-05-10 19:16 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-05-10 19:16 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-05-10 19:16 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-05-10 19:16 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-05-10 19:16 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-05-10 19:16 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-05-10 19:16 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-05-10 19:16 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-10 19:16 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-10 19:16 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-05-10 19:16 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-05-10 19:15 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-05-10 19:15 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-05-10 19:15 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-05-10 19:15 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-05-10 19:15 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-05-10 19:15 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-10 19:15 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-05-10 19:15 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-05-10 19:15 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2016-05-10 19:15 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-10 19:15 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-05-10 19:15 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2016-05-10 19:15 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-10 19:15 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-05-10 19:15 - 2016-04-23 06:30 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-05-10 19:15 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-05-10 19:15 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-10 19:15 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2016-05-10 19:15 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2016-05-10 19:15 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2016-05-10 19:15 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-05-10 19:15 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-05-10 19:15 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-05-10 19:15 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-05-10 19:15 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-05-10 19:15 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-10 19:15 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-05-10 19:15 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-05-10 19:15 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-05-10 19:15 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-05-10 19:15 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-10 19:15 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-05-10 19:15 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-05-10 19:15 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-10 19:15 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-05-10 19:15 - 2016-04-23 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-05-10 19:15 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-05-10 19:15 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-05-10 19:15 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-05-10 19:15 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-05-10 19:15 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2016-05-10 19:15 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-05-10 09:38 - 2016-05-10 09:38 - 00864072 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfehidk.sys
2016-05-10 09:38 - 2016-05-10 09:38 - 00250672 _____ (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe
2016-05-10 09:38 - 2016-05-10 09:38 - 00106120 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mferkdet.sys
2016-05-10 09:38 - 2016-05-10 09:38 - 00000000 ____D C:\Quarantine
2016-05-10 08:28 - 2016-05-10 19:45 - 00000080 _____ C:\Users\Tomáš Lipský\Desktop\ipnetinfo - zástupce.lnk
2016-05-10 08:28 - 2016-05-10 19:45 - 00000080 _____ C:\Users\Public\Desktop\NHLR 09.lnk
2016-05-08 16:49 - 2016-05-08 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP
2016-05-06 20:48 - 2016-05-10 19:45 - 00001199 _____ C:\Users\Tomáš Lipský\Desktop\NHL 2009.lnk
2016-05-06 16:34 - 2016-05-06 16:34 - 00000000 ____D C:\Users\Tomáš Lipský\Documents\Overwatch
2016-05-06 06:09 - 2016-05-10 19:45 - 00000818 _____ C:\Users\Public\Desktop\Overwatch.lnk
2016-05-05 22:49 - 2016-05-05 22:49 - 00000000 ____D C:\ProgramData\Splashtop
2016-05-05 19:42 - 2016-05-05 19:42 - 16963025 _____ ( ) C:\Users\Tomáš Lipský\Downloads\klcp_update_1212_20160502.exe
2016-05-04 18:49 - 2016-05-16 21:03 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\PlaysTV
2016-05-04 18:49 - 2016-05-10 19:45 - 00002096 _____ C:\Users\Public\Desktop\Raptr.lnk
2016-05-04 18:49 - 2016-05-04 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Raptr
2016-05-04 18:46 - 2016-05-04 18:56 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Raptr
2016-05-04 18:46 - 2016-05-04 18:49 - 00000000 ____D C:\Program Files (x86)\Raptr Inc
2016-05-04 18:46 - 2016-05-04 18:46 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\library_dir
2016-05-04 18:44 - 2016-05-04 18:44 - 02036992 _____ C:\Users\Tomáš Lipský\Downloads\talon-5.2.0-r112326-release.exe.336ozsw.partial
2016-05-04 15:18 - 2016-05-04 15:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-05-04 04:23 - 2016-05-04 04:23 - 00129824 _____ C:\WINDOWS\SysWOW64\vulkan-1-1-0-11-1.dll
2016-05-04 04:22 - 2016-05-04 04:22 - 00130848 _____ C:\WINDOWS\system32\vulkan-1-1-0-11-1.dll
2016-05-04 04:22 - 2016-05-04 04:22 - 00045344 _____ C:\WINDOWS\system32\vulkaninfo-1-1-0-11-1.exe
2016-05-04 04:22 - 2016-05-04 04:22 - 00040224 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-11-1.exe
2016-05-03 23:08 - 2016-05-10 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-03 14:30 - 2016-05-16 20:51 - 00000392 _____ C:\WINDOWS\Tasks\HPCeeScheduleForTomáš Lipský.job
2016-05-03 00:17 - 2016-05-10 19:45 - 00002091 _____ C:\Users\Tomáš Lipský\Desktop\Creative ALchemy Universal.lnk
2016-05-02 22:49 - 2016-05-02 22:52 - 00000000 ____D C:\Users\Tomáš Lipský\Documents\NHL09
2016-05-02 22:45 - 2016-05-02 22:45 - 00002410 _____ C:\WINDOWS\SysWOW64\ealregsnapshot1.reg
2016-05-02 22:43 - 2016-05-02 22:43 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Leadertech
2016-05-02 22:43 - 2016-05-02 22:43 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\Downloaded Installations
2016-05-02 22:42 - 2016-05-02 22:42 - 00002057 _____ C:\Users\Public\Desktop\NHL® 09.lnk
2016-05-02 22:41 - 2016-05-02 22:41 - 00000000 ____D C:\Program Files (x86)\EA Sports
2016-05-02 18:52 - 2016-05-03 20:54 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\XnView
2016-05-02 17:44 - 2016-05-10 20:11 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2016-05-02 17:44 - 2016-05-10 20:11 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2016-05-02 17:39 - 2016-05-02 17:39 - 00001102 _____ C:\Users\Tomáš Lipský\Desktop\ipnetinfo – zástupce.lnk
2016-05-02 17:27 - 2016-05-10 19:45 - 00000992 _____ C:\Users\Tomáš Lipský\Desktop\XnView.lnk
2016-05-02 17:27 - 2016-05-02 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2016-05-02 17:27 - 2016-05-02 17:27 - 00000000 ____D C:\Program Files (x86)\XnView
2016-05-02 17:22 - 2016-05-10 19:45 - 00002044 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dopamine.lnk
2016-05-02 17:22 - 2016-05-02 17:24 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Dopamine
2016-05-02 17:22 - 2016-05-02 17:22 - 00000000 ____D C:\Program Files (x86)\Dopamine
2016-04-30 20:20 - 2016-04-30 20:27 - 00000000 ____D C:\Users\Tomáš Lipský\Downloads\NHL-2009-peter_smedby
2016-04-30 01:01 - 2016-04-30 01:01 - 00000001 _____ C:\WINDOWS\SysWOW64\en.html
2016-04-29 21:54 - 2016-05-10 19:45 - 00002100 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2016-04-29 21:53 - 2016-04-29 21:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-04-29 21:53 - 2016-04-29 21:53 - 00000000 ____D C:\ProgramData\ESET
2016-04-29 21:53 - 2016-04-29 21:53 - 00000000 ____D C:\Program Files\ESET
2016-04-29 21:13 - 2016-05-10 19:46 - 00002109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2016-04-29 21:13 - 2016-05-10 19:46 - 00001207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2016-04-29 21:13 - 2016-05-10 19:45 - 00001345 _____ C:\Users\Public\Desktop\NCH Suite.lnk
2016-04-29 21:13 - 2016-05-10 19:45 - 00001195 _____ C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2016-04-29 21:13 - 2016-05-06 21:13 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2016-04-29 21:13 - 2016-04-29 21:13 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\NCH Software
2016-04-29 21:13 - 2016-04-29 21:13 - 00000000 ____D C:\ProgramData\NCH Software
2016-04-29 21:13 - 2016-04-29 21:13 - 00000000 ____D C:\Program Files (x86)\NCH Software
2016-04-29 21:11 - 2016-05-10 19:45 - 00001156 _____ C:\Users\Public\Desktop\My LastPass Vault.lnk
2016-04-29 21:08 - 2016-04-29 21:08 - 00000000 ____D C:\Users\Tomáš Lipský\Desktop\Tor Browser
2016-04-26 17:14 - 2016-05-10 19:46 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-04-24 22:13 - 2016-05-10 19:45 - 00000958 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-04-21 16:30 - 2016-04-21 16:29 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2016-04-18 23:01 - 2016-04-18 23:02 - 00000000 _____ C:\WINDOWS\system32\netsh
2016-04-18 23:01 - 2016-04-18 23:01 - 00000237 _____ C:\WINDOWS\system32\dhcp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-16 23:03 - 2015-08-31 21:23 - 00004226 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{F078DCAA-406E-4CD6-BDF1-0E35ED0CF2A9}
2016-05-16 22:53 - 2015-09-01 10:08 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-05-16 22:18 - 2015-10-30 20:31 - 00751272 _____ C:\WINDOWS\system32\perfh005.dat
2016-05-16 22:18 - 2015-10-30 20:31 - 00150860 _____ C:\WINDOWS\system32\perfc005.dat
2016-05-16 22:18 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-05-16 22:18 - 2015-08-31 18:36 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-16 21:01 - 2016-03-04 09:23 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-05-16 21:01 - 2016-03-04 09:02 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-16 20:54 - 2016-03-04 09:06 - 00000000 ____D C:\Users\Tomáš Lipský
2016-05-16 20:54 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-05-16 20:30 - 2016-03-19 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2016-05-16 20:30 - 2016-03-19 13:01 - 00000000 ____D C:\Program Files\HWiNFO64
2016-05-16 19:12 - 2015-09-01 23:53 - 00000000 ____D C:\Program Files (x86)\Opera
2016-05-16 15:43 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-05-16 13:02 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-16 13:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-05-15 22:11 - 2016-01-22 02:30 - 00000000 ____D C:\AdwCleaner
2016-05-15 19:58 - 2015-09-08 23:29 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-05-15 03:03 - 2015-11-04 02:25 - 00000000 ____D C:\Program Files (x86)\Warcraft III
2016-05-15 02:23 - 2015-10-13 22:53 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-05-14 09:39 - 2016-03-04 09:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-14 09:39 - 2016-03-04 09:02 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-05-14 09:39 - 2015-12-29 19:30 - 00000000 ____D C:\temp
2016-05-14 09:39 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Help
2016-05-14 09:39 - 2015-08-31 23:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-13 23:54 - 2015-08-31 23:25 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\NVIDIA
2016-05-13 23:53 - 2015-08-31 23:42 - 00001454 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-05-13 21:57 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-05-13 21:55 - 2015-09-17 18:03 - 00002414 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2016-05-13 21:55 - 2015-09-17 18:03 - 00002406 _____ C:\Users\Tomáš Lipský\Desktop\Vivaldi.lnk
2016-05-13 21:55 - 2015-09-17 18:03 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\Vivaldi
2016-05-13 21:41 - 2015-09-02 15:25 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\Battle.net
2016-05-13 19:18 - 2015-09-03 13:36 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2016-05-13 17:09 - 2015-09-02 15:25 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-05-13 06:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-13 05:29 - 2015-11-15 00:09 - 00000000 ____D C:\Program Files\Intel
2016-05-12 22:36 - 2015-08-31 23:17 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\ElevatedDiagnostics
2016-05-12 21:58 - 2015-09-03 10:20 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\DAEMON Tools Lite
2016-05-12 21:57 - 2015-12-27 02:14 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\CrashDumps
2016-05-12 21:55 - 2015-09-01 10:08 - 00000000 ____D C:\ProgramData\McAfee
2016-05-12 21:40 - 2015-09-02 00:00 - 00000000 ____D C:\Program Files (x86)\K-Meleon
2016-05-12 21:33 - 2015-09-01 10:07 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\Adobe
2016-05-12 21:32 - 2016-01-22 01:56 - 00000000 ____D C:\Program Files\Waterfox
2016-05-12 21:24 - 2015-10-13 22:53 - 00004098 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-05-12 21:21 - 2015-09-02 01:06 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-12 21:21 - 2015-09-02 01:06 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-12 20:37 - 2015-10-16 14:03 - 54376048 _____ (Comodo) C:\Users\Tomáš Lipský\Downloads\dragonsetup.exe
2016-05-12 13:42 - 2016-03-08 03:15 - 00000000 ____D C:\Program Files (x86)\Comodo
2016-05-12 01:34 - 2015-09-02 14:38 - 00000000 ____D C:\ProgramData\Origin
2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 13:49 - 2015-08-31 21:23 - 00000000 ____D C:\ProgramData\ProgDVB
2016-05-11 03:42 - 2015-11-21 18:37 - 00001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remotr Streamer.lnk
2016-05-11 03:42 - 2015-11-21 18:37 - 00000000 ____D C:\Program Files (x86)\Remotr
2016-05-11 02:54 - 2015-09-02 01:05 - 00004050 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 02:54 - 2015-09-02 01:05 - 00003818 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-10 19:46 - 2016-04-13 20:20 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Meleon.lnk
2016-05-10 19:46 - 2016-04-13 20:18 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-05-10 19:46 - 2016-03-04 09:13 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-05-10 19:46 - 2016-01-22 01:56 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox.lnk
2016-05-10 19:46 - 2015-10-14 22:47 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-05-10 19:46 - 2015-10-13 22:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-10 19:46 - 2015-09-21 18:11 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2016-05-10 19:46 - 2015-08-31 22:01 - 00001010 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pale Moon.lnk
2016-05-10 19:45 - 2016-04-13 20:20 - 00001178 _____ C:\Users\Public\Desktop\K-Meleon.lnk
2016-05-10 19:45 - 2016-04-13 20:18 - 00001184 _____ C:\Users\Public\Desktop\Opera.lnk
2016-05-10 19:45 - 2016-04-09 18:48 - 00000898 _____ C:\Users\Public\Desktop\ProgDVB 7.lnk
2016-05-10 19:45 - 2016-04-09 18:48 - 00000876 _____ C:\Users\Public\Desktop\ProgTV.lnk
2016-05-10 19:45 - 2016-04-09 17:07 - 00002296 _____ C:\Users\Public\Desktop\AVerMedia TV Player.lnk
2016-05-10 19:45 - 2016-04-08 01:14 - 00001019 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2016-05-10 19:45 - 2016-04-01 19:09 - 00001974 _____ C:\Users\Tomáš Lipský\Desktop\Diablo II - Lord of Destruction.lnk
2016-05-10 19:45 - 2016-04-01 18:59 - 00001974 _____ C:\Users\Public\Desktop\Diablo II.lnk
2016-05-10 19:45 - 2016-03-23 16:21 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-05-10 19:45 - 2016-03-19 20:03 - 00000978 _____ C:\Users\Public\Desktop\Diablo III Public Test.lnk
2016-05-10 19:45 - 2016-03-16 23:39 - 00002289 _____ C:\Users\Public\Desktop\HP DeskJet 4530 series.lnk
2016-05-10 19:45 - 2016-03-16 23:39 - 00002064 _____ C:\Users\Public\Desktop\HP Photo Creations.lnk
2016-05-10 19:45 - 2016-03-16 23:39 - 00001236 _____ C:\Users\Public\Desktop\Objednání spotřebního materiálu - HP DeskJet 4530 series.lnk
2016-05-10 19:45 - 2016-03-10 09:08 - 00001135 _____ C:\Users\Public\Desktop\Comodo IceDragon.lnk
2016-05-10 19:45 - 2016-03-03 00:13 - 00001858 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-05-10 19:45 - 2016-03-03 00:10 - 00001854 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk
2016-05-10 19:45 - 2016-02-27 19:59 - 00001111 _____ C:\Users\Public\Desktop\Tomb Raider.lnk
2016-05-10 19:45 - 2016-02-24 22:11 - 00000957 _____ C:\Users\Public\Desktop\Free Download Manager 5.lnk
2016-05-10 19:45 - 2016-02-24 22:00 - 00000436 _____ C:\Users\Tomáš Lipský\Desktop\Tento počítač.lnk
2016-05-10 19:45 - 2016-02-09 03:23 - 00000976 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2016-05-10 19:45 - 2016-02-09 03:23 - 00000928 _____ C:\Users\Tomáš Lipský\Desktop\Start Tor Browser.lnk
2016-05-10 19:45 - 2016-02-09 03:20 - 00001286 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2016-05-10 19:45 - 2016-02-09 03:20 - 00001262 _____ C:\Users\Public\Desktop\GOM Player.lnk
2016-05-10 19:45 - 2016-02-05 02:58 - 00001184 _____ C:\Users\Tomáš Lipský\Desktop\Rise of the Tomb Raider.lnk
2016-05-10 19:45 - 2016-01-22 01:56 - 00000995 _____ C:\Users\Public\Desktop\Waterfox.lnk
2016-05-10 19:45 - 2016-01-20 02:50 - 00002012 _____ C:\Users\Public\Desktop\PCSX2 1.4.0.lnk
2016-05-10 19:45 - 2015-12-29 19:37 - 00002903 _____ C:\Users\Public\Desktop\ABBYY FineReader 12.lnk
2016-05-10 19:45 - 2015-12-29 19:19 - 00001051 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Volitelné funkce.lnk
2016-05-10 19:45 - 2015-12-27 03:46 - 00002102 _____ C:\Users\Tomáš Lipský\Desktop\STAR WARS JEDI ACADEMY CZ.lnk
2016-05-10 19:45 - 2015-12-26 23:02 - 00000973 _____ C:\Users\Public\Desktop\AIMP.lnk
2016-05-10 19:45 - 2015-11-17 22:33 - 00001259 _____ C:\Users\Tomáš Lipský\Desktop\CrystalDiskInfo.lnk
2016-05-10 19:45 - 2015-11-07 00:49 - 00001920 _____ C:\Users\Tomáš Lipský\Desktop\Splashtop Streamer.lnk
2016-05-10 19:45 - 2015-11-04 02:31 - 00002045 _____ C:\Users\Tomáš Lipský\Desktop\Frozen Throne.lnk
2016-05-10 19:45 - 2015-11-04 02:26 - 00002038 _____ C:\Users\Tomáš Lipský\Desktop\Warcraft III.lnk
2016-05-10 19:45 - 2015-10-16 14:06 - 00001303 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2016-05-10 19:45 - 2015-10-13 22:36 - 00002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-05-10 19:45 - 2015-10-13 22:32 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-05-10 19:45 - 2015-10-05 14:48 - 00001182 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk
2016-05-10 19:45 - 2015-10-05 14:48 - 00001152 _____ C:\Users\Tomáš Lipský\Desktop\Trillian.lnk
2016-05-10 19:45 - 2015-09-28 22:39 - 00002304 _____ C:\Users\Tomáš Lipský\Desktop\HP Support Assistant.lnk
2016-05-10 19:45 - 2015-09-28 21:45 - 00002085 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2016-05-10 19:45 - 2015-09-21 18:11 - 00001216 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2016-05-10 19:45 - 2015-09-10 02:03 - 00001286 _____ C:\Users\Public\Desktop\DEMO FIFA 16.lnk
2016-05-10 19:45 - 2015-09-08 23:28 - 00001305 _____ C:\Users\Tomáš Lipský\Desktop\TeamSpeak 3 Client.lnk
2016-05-10 19:45 - 2015-09-08 22:01 - 00002658 _____ C:\Users\Public\Desktop\Skype.lnk
2016-05-10 19:45 - 2015-09-04 19:03 - 00000643 _____ C:\Users\Tomáš Lipský\Desktop\KMPlayer.lnk
2016-05-10 19:45 - 2015-09-04 06:40 - 00000843 _____ C:\Users\Public\Desktop\Star Wars - The Old Republic.lnk
2016-05-10 19:45 - 2015-09-03 21:50 - 00001058 _____ C:\Users\Public\Desktop\Crysis 3.lnk
2016-05-10 19:45 - 2015-09-03 14:33 - 00000964 _____ C:\Users\Public\Desktop\World of Warcraft Public Test.lnk
2016-05-10 19:45 - 2015-09-03 13:49 - 00001262 _____ C:\Users\Public\Desktop\Heroes of the Storm.lnk
2016-05-10 19:45 - 2015-09-03 13:24 - 00001254 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2016-05-10 19:45 - 2015-09-03 09:39 - 00001164 _____ C:\Users\Public\Desktop\StarCraft II.lnk
2016-05-10 19:45 - 2015-09-03 01:50 - 00001211 _____ C:\Users\Public\Desktop\Diablo III.lnk
2016-05-10 19:45 - 2015-09-02 21:50 - 00000986 _____ C:\Users\Public\Desktop\Steam.lnk
2016-05-10 19:45 - 2015-09-02 21:22 - 00001401 _____ C:\Users\Public\Desktop\Dragon Age Inquisition.lnk
2016-05-10 19:45 - 2015-09-02 15:25 - 00001217 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-05-10 19:45 - 2015-09-02 14:38 - 00001052 _____ C:\Users\Public\Desktop\Origin.lnk
2016-05-10 19:45 - 2015-09-02 14:13 - 00001005 _____ C:\Users\Public\Desktop\Guild Wars 2.lnk
2016-05-10 19:45 - 2015-09-02 01:10 - 00002105 _____ C:\Users\Tomáš Lipský\Desktop\Google Chrome.lnk
2016-05-10 19:45 - 2015-09-01 23:53 - 00001991 _____ C:\Users\Public\Desktop\DOSBox 0.74.lnk
2016-05-10 19:45 - 2015-09-01 23:50 - 00001383 _____ C:\Users\Tomáš Lipský\Desktop\Mass Effect 3.lnk
2016-05-10 19:45 - 2015-09-01 21:15 - 00001882 _____ C:\Users\Public\Desktop\linguatec Voice Reader.lnk
2016-05-10 19:45 - 2015-08-31 22:41 - 00001062 _____ C:\Users\Tomáš Lipský\Desktop\Daum Potplayer-64 Bits.lnk
2016-05-10 19:45 - 2015-08-31 22:04 - 00000714 _____ C:\Users\Public\Desktop\Unreal Commander.lnk
2016-05-10 19:45 - 2015-08-31 22:03 - 00000683 _____ C:\Users\Tomáš Lipský\Desktop\Total Commander 64 bit.lnk
2016-05-10 19:45 - 2015-08-31 22:01 - 00000998 _____ C:\Users\Public\Desktop\Pale Moon.lnk
2016-05-10 19:45 - 2015-08-31 21:50 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-05-10 19:45 - 2015-08-31 21:49 - 00000907 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-05-10 19:45 - 2015-08-31 21:34 - 00000869 _____ C:\Users\Tomáš Lipský\Desktop\PeaZip.lnk
2016-05-10 19:45 - 2015-08-31 21:29 - 00001872 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Q-Dir.lnk
2016-05-10 19:45 - 2015-08-31 21:29 - 00001848 _____ C:\Users\Tomáš Lipský\Desktop\Q-Dir.lnk
2016-05-10 19:45 - 2015-08-31 18:40 - 00002428 _____ C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-10 19:42 - 2015-08-31 18:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-10 19:40 - 2015-08-31 21:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-10 19:39 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-05-10 19:38 - 2015-10-30 20:35 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-10 19:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-10 19:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-10 19:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-10 19:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-10 19:37 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-05-10 19:32 - 2015-09-01 13:48 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-10 19:24 - 2015-10-13 22:37 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-05-10 19:17 - 2015-09-01 13:48 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-05-10 19:12 - 2016-04-13 20:18 - 00003970 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1460571520
2016-05-10 19:07 - 2015-08-31 22:01 - 00000000 ____D C:\Program Files\Pale Moon
2016-05-10 14:51 - 2016-01-05 15:01 - 00003312 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForTomáš Lipský
2016-05-10 11:52 - 2016-02-02 23:48 - 00000000 ____D C:\Users\Tomáš Lipský\Downloads\ROTTR denuvo bypass
2016-05-10 10:55 - 2015-09-02 21:50 - 00000000 ____D C:\Program Files (x86)\Steam
2016-05-10 09:33 - 2015-10-13 22:33 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-05-08 16:49 - 2015-12-26 23:02 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\AIMP
2016-05-08 16:49 - 2015-08-31 22:18 - 00000000 ____D C:\Program Files (x86)\AIMP3
2016-05-08 05:38 - 2015-08-31 18:38 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\Packages
2016-05-08 03:44 - 2015-09-03 09:37 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2016-05-06 21:19 - 2015-09-08 22:01 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-02 22:35 - 2016-02-24 22:11 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\Free Download Manager
2016-05-02 18:21 - 2015-09-03 00:56 - 00000000 ____D C:\Program Files (x86)\Diablo III
2016-05-02 18:15 - 2015-09-03 13:24 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-05-02 18:14 - 2015-09-02 14:38 - 00000000 ____D C:\Program Files (x86)\Origin
2016-05-02 17:30 - 2015-08-31 21:34 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\PeaZip
2016-05-02 17:29 - 2015-08-31 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip
2016-05-02 17:29 - 2015-08-31 21:34 - 00000000 ____D C:\Program Files\PeaZip
2016-05-02 17:27 - 2015-11-17 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2016-05-02 17:27 - 2015-11-17 22:33 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2016-05-02 07:39 - 2015-08-31 23:41 - 01377800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-05-02 07:39 - 2015-08-31 23:41 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-05-02 07:38 - 2015-11-21 02:06 - 00112032 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-05-02 07:38 - 2015-08-31 23:41 - 01767944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-05-02 07:38 - 2015-08-31 23:41 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-04-30 20:19 - 2016-02-24 22:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2016-04-30 20:19 - 2016-02-24 22:11 - 00000000 ____D C:\Program Files\Free Download Manager
2016-04-29 21:51 - 2015-09-08 22:01 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Skype
2016-04-29 21:14 - 2015-09-08 22:01 - 00000000 ____D C:\ProgramData\Skype
2016-04-29 21:11 - 2015-08-31 21:51 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2016-04-29 21:11 - 2015-08-31 21:51 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\LocalLow\LastPass
2016-04-29 21:11 - 2015-08-31 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2016-04-29 21:11 - 2015-08-31 21:51 - 00000000 ____D C:\Program Files (x86)\LastPass
2016-04-26 17:00 - 2015-09-28 18:54 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\Kodi
2016-04-25 20:00 - 2015-09-28 22:08 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Roaming\HpUpdate
2016-04-24 22:13 - 2016-04-08 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-04-24 22:13 - 2016-04-08 01:14 - 00000000 ____D C:\Program Files\CPUID
2016-04-21 16:30 - 2015-09-02 00:16 - 00000000 ____D C:\Program Files (x86)\Java
2016-04-21 16:30 - 2015-09-01 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-04-21 16:30 - 2015-09-01 10:09 - 00000000 ____D C:\ProgramData\Oracle
2016-04-21 16:29 - 2016-01-22 01:38 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-04-21 16:29 - 2015-09-01 10:10 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-04-21 16:29 - 2015-09-01 10:10 - 00000000 ____D C:\Users\Tomáš Lipský\.oracle_jre_usage
2016-04-21 16:29 - 2015-09-01 10:09 - 00000000 ____D C:\Program Files\Java
2016-04-21 16:25 - 2015-08-31 22:00 - 00002820 _____ C:\WINDOWS\System32\Tasks\klcp_update
2016-04-21 16:25 - 2015-08-31 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-04-21 16:25 - 2015-08-31 21:59 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2016-04-16 00:10 - 2015-09-21 18:11 - 00000000 ____D C:\Users\Tomáš Lipský\AppData\Local\UnrealEngine
2016-04-16 00:09 - 2015-09-02 14:59 - 00000000 ____D C:\ProgramData\Package Cache

==================== Files in the root of some directories =======

2015-08-31 21:51 - 2016-04-29 21:11 - 21572120 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2016-03-16 23:38 - 2016-03-16 23:38 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-09-28 22:04 - 2016-03-16 22:12 - 0006513 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Users\Tomáš Lipský\ESETUninstaller.exe


Some files in TEMP:
====================
C:\Users\Tomáš Lipský\AppData\Local\Temp\cres.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\cshell.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\libeay32.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\msvcr120.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\nvStInst.exe
C:\Users\Tomáš Lipský\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\sfextra.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\sqlite3.dll
C:\Users\Tomáš Lipský\AppData\Local\Temp\sres.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_242_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForTomáš Lipský.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 9.0.376.1 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.376.1 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Tom�� Lipsk�\Desktop" je 144 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Windows\System32\mfevtps.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [BingSvc] => C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-03-11] (© 2015 Microsoft Corporation)
C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\MountPoints2: {0fd0ef63-4ffd-11e5-9bc2-806e6f6e6963} - "E:\Setup.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: No Name -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> No File
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-04-29] (LastPass)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
FF DefaultSearchEngine: Bing
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Bing
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com [2015-09-08] [not signed]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-10]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com [2016-04-08] [not signed]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-10]
OPR Extension: (LastPass) - C:\Users\Tomáš Lipský\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo [2016-04-29]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-04-29] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-04-29] (Microsoft Corporation)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [250672 2016-05-10] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864072 2016-05-10] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106120 2016-05-10] (McAfee, Inc.)
C:\WINDOWS\LastGood.Tmp
C:\Program Files\Common Files\McAfee
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Tomáš Lipský\ESETUninstaller.exe
C:\Users\Tomáš Lipský\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version:16-05-2016
Ran by Tomáš Lipský (2016-05-18 22:22:02) Run:1
Running from C:\Users\Tomáš Lipský\Desktop
Loaded Profiles: Tomáš Lipský (Available Profiles: Tomáš Lipský)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Windows\System32\mfevtps.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\Run: [BingSvc] => C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-03-11] (© 2015 Microsoft Corporation)
C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\...\MountPoints2: {0fd0ef63-4ffd-11e5-9bc2-806e6f6e6963} - "E:\Setup.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: No Name -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> No File
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2016-04-29] (LastPass)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
FF DefaultSearchEngine: Bing
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Bing
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com [2015-09-08] [not signed]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-10]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com [2016-04-08] [not signed]
FF Extension: Bing Search - C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-10]
OPR Extension: (LastPass) - C:\Users\Tomáš Lipský\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo [2016-04-29]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-04-29] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-04-29] (Microsoft Corporation)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [250672 2016-05-10] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864072 2016-05-10] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106120 2016-05-10] (McAfee, Inc.)
C:\WINDOWS\LastGood.Tmp
C:\Program Files\Common Files\McAfee
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Tomáš Lipský\ESETUninstaller.exe
C:\Users\Tomáš Lipský\AppData\Local\Temp
End
*****************

C:\Windows\System32\mfevtps.exe => moved successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BingSvc => value removed successfully
C:\Users\Tomáš Lipský\AppData\Local\Microsoft\BingSvc => moved successfully
"HKU\S-1-5-21-2011743211-4105206050-1100676317-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0fd0ef63-4ffd-11e5-9bc2-806e6f6e6963}" => key removed successfully
HKCR\CLSID\{0fd0ef63-4ffd-11e5-9bc2-806e6f6e6963} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13D67BB7-DB5F-48AA-884D-7A5D94168509}" => key removed successfully
HKCR\CLSID\{13D67BB7-DB5F-48AA-884D-7A5D94168509} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} => value removed successfully
"HKCR\CLSID\{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5}" => key removed successfully
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
Firefox DefaultSearchEngine removed successfully
Firefox SearchEngineOrder.3 removed successfully
Firefox SelectedSearchEngine removed successfully
C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com => moved successfully
C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\2yi5b0qy.default\Extensions\bingsearch.full@microsoft.com.xpi => moved successfully
C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com => moved successfully
C:\Users\Tomáš Lipský\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\bingsearch.full@microsoft.com.xpi => moved successfully
C:\Users\Tomáš Lipský\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo => moved successfully
c2cautoupdatesvc => Unable to stop service.
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => Unable to stop service.
c2cpnrsvc => service removed successfully
mfevtp => Unable to stop service.
mfevtp => service removed successfully
mfehidk => Unable to stop service.
mfehidk => service removed successfully
mferkdet => service removed successfully
C:\WINDOWS\LastGood.Tmp => moved successfully
C:\Program Files\Common Files\McAfee => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Users\Tomáš Lipský\ESETUninstaller.exe => moved successfully

"C:\Users\Tomáš Lipský\AppData\Local\Temp" folder move:

Could not move "C:\Users\Tomáš Lipský\AppData\Local\Temp" => Scheduled to move on reboot.


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-05-18 22:25:25)

C:\Users\Tomáš Lipský\AppData\Local\Temp => moved successfully

==== End of Fixlog 22:25:29 ====

Smazáno. Nastala nějaká změna?