Prosím o kontrolu logu.
Napsal: 03 úno 2017 21:42
Dobrý deň, prosím o kontrolu logu, asi mám zavírený PC. Ďakujem pekne.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
Ran by MB (administrator) on MB-PC (03-02-2017 21:35:20)
Running from C:\Users\MB\Desktop
Loaded Profiles: MB & UpdatusUser (Available Profiles: MB & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
() C:\Users\MB\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Users\MB\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [380544 2012-05-28] (Alcor Micro Corp.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-13] (Realtek Semiconductor)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-05-31] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2292912 2015-09-17] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [14870192 2017-01-19] (MyHeritage)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\MB\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\MB\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27427808 2017-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\MountPoints2: {1c21b8ec-b756-11e4-a3df-00c2c6760592} - E:\RunSetup.exe
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\MountPoints2: {1c21b901-b756-11e4-a3df-00c2c6760592} - E:\RunSetup.exe
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\MountPoints2: {af5d34ec-b2c3-11e5-bccf-00c2c6760592} - E:\iStudio.exe
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64\FileSyncShell64.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64\FileSyncShell64.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64\FileSyncShell64.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-08] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\FileSyncShell.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\FileSyncShell.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\FileSyncShell.dll [2015-10-04] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
AutoConfigURL: [S-1-5-21-791841142-2433092875-376809133-1000] => hxxp://no-blocked.com/wpad.dat?fc70be1aca29edc8f91a3591a4d802f424268092
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E81D9DAA-720F-4ECB-9EB8-0657E999F6C7}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{F26054F9-9D9B-4873-AD66-CA44DD368DE5}: [DhcpNameServer] 192.168.1.1
ManualProxies: 0hxxp://no-blocked.com/wpad.dat?fc70be1aca29edc8f91a3591a4d802f424268092
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKLM-x32 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> D6449A13059E8C95CAE790AAA80EDA23 URL = hxxps://mysearch.avg.com/search?cid={6149B9E4-6B83-4594-BC9A-20350888C50D}&mid=232418edea5147cd8132d18b8092ec61-249b8c5bf37c0bf0204a03bfb9976c71e29b2b89&lang=sk&ds=AVG&coid=avgtbavg&cmpid=0915tb&pr=fr&d=2015-02-16 17:05:23&v=4.1.6.294&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {11D4BA1B-2787-4C9E-AD4F-8D30D1264EAB} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {2BF07D8A-CE79-44F1-8943-9C11CBA72816} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {4B913D92-101D-4B97-9822-0E6785445CE0} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {84FE9158-FCA1-4C72-BB14-5897CD99DFBA} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6149B9E4-6B83-4594-BC9A-20350888C50D}&mid=232418edea5147cd8132d18b8092ec61-249b8c5bf37c0bf0204a03bfb9976c71e29b2b89&lang=sk&ds=AVG&coid=avgtbavg&cmpid=0915tb&pr=fr&d=2015-02-16 17:05:23&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {A7A235D4-E6F8-4E5A-89A3-38DF21BBA11E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {B1CA9644-7A27-4D9F-9EDE-3885C0D6EA1B} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {BFDF0F8B-88FF-4056-B5CB-34BDD2DFBB34} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {C3B91E1F-9E7B-4C78-BBC6-5087F93B6174} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {DA60C86A-94E3-48B6-9C3A-451C1EC8B1B0} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
BHO: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL [2013-08-07] (AuthenTec Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-18] (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll [2013-08-07] (AuthenTec Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-18] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.3.0\ViProtocol.dll [2015-02-16] (AVG Secure Search)
FireFox:
========
FF DefaultProfile: z8i4h4a2.default
FF ProfilePath: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default [2017-02-03]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\z8i4h4a2.default -> AVG Secure Search
FF Homepage: Mozilla\Firefox\Profiles\z8i4h4a2.default -> www.google.sk
FF Extension: (Adblock Plus) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-25]
FF Extension: (Seznam lištička) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2017-02-03]
FF Extension: (Diagnostics) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\features\{2fcac2eb-088c-454e-91ed-2572bedb8755}\diagnostics@mozilla.org.xpi [2017-02-02]
FF Extension: (Send HSTS Priming Requests) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\features\{2fcac2eb-088c-454e-91ed-2572bedb8755}\hsts-priming@mozilla.org.xpi [2017-02-02]
FF SearchPlugin: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\searchplugins\ask-web-search.xml [2015-12-08]
FF SearchPlugin: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\searchplugins\avg-secure-search.xml [2015-10-22]
FF SearchPlugin: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\searchplugins\yandex.ru-165319.xml [2015-10-01]
FF Extension: (TrueSuite Website Logon) - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\websitelogon@truesuite.com [2016-11-20] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-08]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-03-26]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-13] ()
FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files\Lenovo Fingerprint Reader\npffwloplugin.dll [2013-08-07] (AuthenTec, Inc)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.9\\npsitesafety.dll [No File]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\41114593.js [2017-01-23] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\41114593.cfg [2017-01-23] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com
CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default [2016-12-31]
CHR Extension: (Prezentácie Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-06]
CHR Extension: (Dokumenty Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06]
CHR Extension: (Disk Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-02]
CHR Extension: (Seznam Lištička - Email) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2015-07-26]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2016-05-03]
CHR Extension: (YouTube) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-01]
CHR Extension: (AVG Secure Search) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-04-30]
CHR Extension: (Website Logon) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\clglhglbidpdbjffpfcldkifhdegdfle [2015-02-06]
CHR Extension: (Яндекс) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\cncgohepihcekklokhbhiblhfcmipbdh [2016-04-30]
CHR Extension: (Google Search) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-04-30]
CHR Extension: (Avast SafePrice) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-04-30]
CHR Extension: (Tabuľky Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-06]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-02]
CHR Extension: (Avast Online Security) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-30]
CHR Extension: (Skype) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-04-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-02]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2016-05-02]
CHR Extension: (Gmail) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-01]
CHR HKU\S-1-5-21-791841142-2433092875-376809133-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clglhglbidpdbjffpfcldkifhdegdfle] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [cncgohepihcekklokhbhiblhfcmipbdh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gehngeifmelphpllncobkmimphfkckne] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mdeldjolamfbcgnndjmjjiinnhbnbnla] - hxxp://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-08] (AVAST Software)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139944 2013-08-07] (AuthenTec, Inc)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401704 2013-07-22] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-08] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
R3 btmaudio; C:\Windows\System32\drivers\btmaud.sys [80896 2012-05-21] (Motorola Solutions, Inc.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [111104 2012-05-21] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [849408 2012-06-09] (Motorola Solutions, Inc.)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2015-01-08] (ESET)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44272 2013-03-29] (Synaptics Incorporated)
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-03 08:50 - 2017-02-03 08:50 - 00000000 ____H C:\ProgramData\cm-lock
2017-02-02 18:36 - 2017-02-02 18:37 - 00040416 _____ C:\Users\MB\Desktop\Addition.txt
2017-02-02 18:35 - 2017-02-03 21:36 - 00028480 _____ C:\Users\MB\Desktop\FRST.txt
2017-02-02 18:34 - 2017-02-03 21:35 - 00000000 ____D C:\FRST
2017-02-02 18:34 - 2017-02-02 18:34 - 02420736 _____ (Farbar) C:\Users\MB\Desktop\FRST64.exe
2017-02-02 18:22 - 2017-02-03 21:34 - 00000000 ____D C:\Program Files\trend micro
2017-02-02 18:22 - 2017-02-02 18:22 - 00000000 ____D C:\rsit
2017-02-02 18:21 - 2017-02-02 18:22 - 01323520 _____ C:\Users\MB\Desktop\RSITx64.exe
2017-02-01 19:28 - 2017-02-01 20:03 - 00000000 ____D C:\Users\MB\Desktop\Rodokmen_Photos
2017-02-01 19:12 - 2017-02-01 19:28 - 00012953 _____ C:\Users\MB\Desktop\Rodokmen.ged
2017-02-01 18:52 - 2017-02-01 18:52 - 00014548 _____ C:\Users\MB\Desktop\Rodokmen - 2017-02-01 18-51-57.zip
2017-02-01 18:41 - 2017-02-01 18:44 - 00000000 ____D C:\Users\MB\Documents\MyHeritage
2017-02-01 18:40 - 2017-02-01 18:40 - 00001121 _____ C:\Users\MB\Desktop\MyHeritage Family Tree Builder.lnk
2017-02-01 18:40 - 2017-02-01 18:40 - 00000000 ____D C:\Users\MB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyHeritage.com
2017-02-01 18:39 - 2017-02-01 18:39 - 00000000 ____D C:\Users\MB\AppData\Roaming\The Complete Genealogy Reporter - FTB
2017-02-01 18:39 - 2012-08-02 08:56 - 00606208 _____ (Lorenzi Davide) C:\Windows\SysWOW64\HexUniRTFBox.ocx
2017-02-01 18:39 - 2010-06-17 19:49 - 02029056 _____ (Bytescout) C:\Windows\SysWOW64\PDFDocScout.DLL
2017-02-01 18:39 - 2004-12-07 11:11 - 00258352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2017-02-01 18:39 - 2003-07-06 14:07 - 00372736 _____ (Intel Corporation) C:\Windows\SysWOW64\ijl15.dll
2017-02-01 18:39 - 2002-03-07 01:19 - 00454656 _____ () C:\Windows\SysWOW64\PaintX.dll
2017-02-01 18:39 - 2000-05-22 17:58 - 00608448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx
2017-02-01 18:39 - 1998-06-24 01:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmapi32.ocx
2017-02-01 18:38 - 2017-02-01 18:46 - 00000000 ____D C:\Users\MB\AppData\Roaming\MyHeritage
2017-02-01 18:38 - 2017-02-01 18:43 - 00000000 ____D C:\ProgramData\MyHeritage
2017-02-01 18:38 - 2017-02-01 18:38 - 00000000 ____D C:\Program Files (x86)\MyHeritage
2017-02-01 18:37 - 2017-02-01 18:37 - 47125648 _____ C:\Users\MB\Desktop\family_tree_builder_8372.exe
2017-02-01 18:24 - 2017-02-01 18:27 - 00000000 ____D C:\Users\MB\AppData\Roaming\Ahnenblatt
2017-02-01 18:24 - 2017-02-01 18:24 - 13931616 _____ C:\Users\MB\Desktop\Ahnenblatt_setup.exe
2017-02-01 18:24 - 2017-02-01 18:24 - 00001925 _____ C:\Users\MB\Desktop\Ahnenblatt.lnk
2017-02-01 18:24 - 2017-02-01 18:24 - 00000000 ____D C:\Users\MB\Documents\Ahnenblatt
2017-02-01 18:24 - 2017-02-01 18:24 - 00000000 ____D C:\Users\MB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ahnenblatt
2017-02-01 18:24 - 2017-02-01 18:24 - 00000000 ____D C:\Program Files (x86)\Ahnenblatt
2017-01-31 10:05 - 2017-01-31 10:05 - 00262144 ____N C:\Windows\Minidump\013117-25256-01.dmp
2017-01-23 21:46 - 2017-01-23 21:46 - 00050733 _____ C:\Users\MB\Desktop\Letasoft_Sound_Booster.exe
2017-01-19 15:51 - 2017-01-19 15:51 - 14539440 _____ (MyHeritage) C:\Windows\SysWOW64\FTBSaver.scr
2017-01-17 17:09 - 2017-01-17 17:09 - 00262144 ____N C:\Windows\Minidump\011717-18954-01.dmp
2017-01-10 20:46 - 2017-01-10 20:46 - 00262144 ____N C:\Windows\Minidump\011017-39031-01.dmp
2017-01-05 15:28 - 2017-01-05 15:28 - 00000000 ____D C:\Users\MB\AppData\Local\{0F376500-DFBE-47DE-A1F0-B86761A82BF2}
2017-01-05 15:19 - 2017-01-05 15:35 - 00001172 _____ C:\Users\MB\Desktop\UmmyVideoDownloader.lnk
2017-01-05 15:19 - 2017-01-05 15:35 - 00000000 ____D C:\Users\MB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-03 21:30 - 2015-02-16 10:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-03 21:30 - 2015-02-06 14:11 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-02-03 21:30 - 2015-01-10 10:17 - 00000000 ____D C:\Users\MB\AppData\Roaming\vlc
2017-02-03 21:30 - 2015-01-08 21:19 - 00000000 ____D C:\Users\MB\AppData\LocalLow\AuthenTec
2017-02-03 16:25 - 2015-02-06 14:11 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-02-03 09:14 - 2015-10-18 20:03 - 00000000 ____D C:\Users\MB\AppData\Roaming\Skype
2017-02-03 09:05 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-03 09:05 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-03 08:58 - 2015-10-18 20:03 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-03 08:58 - 2015-10-18 20:03 - 00000000 ____D C:\ProgramData\Skype
2017-02-03 08:55 - 2016-11-21 09:02 - 00000000 ____D C:\Users\MB\AppData\LocalLow\Mozilla
2017-02-03 08:55 - 2015-07-26 10:03 - 00000000 ____D C:\Users\MB\AppData\Roaming\Seznam.cz
2017-02-03 08:49 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-01 20:26 - 2015-11-05 17:34 - 418355195 _____ C:\Users\MB\Downloads\Suchy vrch.zip
2017-02-01 09:30 - 2016-04-19 16:20 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-01-31 10:05 - 2015-10-03 20:02 - 00000000 ____D C:\Windows\Minidump
2017-01-30 08:30 - 2016-11-20 14:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-30 08:30 - 2015-01-08 21:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-13 18:07 - 2015-02-16 10:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-13 18:07 - 2015-01-08 21:40 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-13 18:07 - 2015-01-08 21:40 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-13 18:07 - 2015-01-08 21:40 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-13 18:07 - 2015-01-08 21:40 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-12 21:04 - 2015-01-08 21:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-12 21:03 - 2015-06-26 13:39 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-12 18:44 - 2009-07-14 06:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-12 18:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-10 20:47 - 2015-01-08 21:24 - 00000000 ____D C:\Users\UpdatusUser
2017-01-05 15:35 - 2015-09-29 06:32 - 00000000 ____D C:\Users\MB\AppData\Local\UmmyVideoDownloader
==================== Files in the root of some directories =======
2015-01-10 10:00 - 2015-01-10 10:18 - 4096000 _____ () C:\Program Files (x86)\GUTA3FD.tmp
2016-01-24 19:41 - 2016-01-24 19:41 - 0000132 _____ () C:\Users\MB\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-09-27 10:29 - 2015-10-12 17:29 - 0000034 _____ () C:\Users\MB\AppData\Roaming\AdobeWLCMCache.dat
2016-05-23 21:22 - 2016-05-23 21:22 - 0000037 ___SH () C:\Users\MB\AppData\Local\20986331705021ca58edc424.96250074
2017-02-03 08:50 - 2017-02-03 08:50 - 0000000 ____H () C:\ProgramData\cm-lock
Some files in TEMP:
====================
2016-01-06 10:45 - 2015-11-12 16:54 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08113467054.exe
2016-01-16 09:48 - 2015-12-08 07:23 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_081568837477.exe
2016-04-07 19:12 - 2016-02-18 12:09 - 0179624 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08458295799.exe
2016-02-23 12:37 - 2016-01-12 16:23 - 0179624 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08483602039.exe
2016-04-18 17:49 - 2016-03-23 15:57 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08836501745.exe
2016-01-11 13:44 - 2015-10-20 01:44 - 1114112 _____ (Microsoft Corporation) C:\Users\MB\AppData\Local\Temp\kernel32.dll
2016-03-27 17:18 - 2016-04-18 08:43 - 13686656 _____ ( ) C:\Users\MB\AppData\Local\Temp\MBSetup_uvd-loader.exe
2015-10-03 10:56 - 2015-10-03 14:31 - 0000000 ____D () C:\Users\MB\AppData\Local\Temp\MovieStudio.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-01-23 21:25
==================== End of FRST.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
Ran by MB (administrator) on MB-PC (03-02-2017 21:35:20)
Running from C:\Users\MB\Desktop
Loaded Profiles: MB & UpdatusUser (Available Profiles: MB & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
() C:\Users\MB\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Users\MB\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [380544 2012-05-28] (Alcor Micro Corp.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-13] (Realtek Semiconductor)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-05-31] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2292912 2015-09-17] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [14870192 2017-01-19] (MyHeritage)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\MB\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\MB\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27427808 2017-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\MountPoints2: {1c21b8ec-b756-11e4-a3df-00c2c6760592} - E:\RunSetup.exe
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\MountPoints2: {1c21b901-b756-11e4-a3df-00c2c6760592} - E:\RunSetup.exe
HKU\S-1-5-21-791841142-2433092875-376809133-1000\...\MountPoints2: {af5d34ec-b2c3-11e5-bccf-00c2c6760592} - E:\iStudio.exe
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64\FileSyncShell64.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64\FileSyncShell64.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64\FileSyncShell64.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-08] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\FileSyncShell.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\FileSyncShell.dll [2015-10-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\MB\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\FileSyncShell.dll [2015-10-04] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
AutoConfigURL: [S-1-5-21-791841142-2433092875-376809133-1000] => hxxp://no-blocked.com/wpad.dat?fc70be1aca29edc8f91a3591a4d802f424268092
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E81D9DAA-720F-4ECB-9EB8-0657E999F6C7}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{F26054F9-9D9B-4873-AD66-CA44DD368DE5}: [DhcpNameServer] 192.168.1.1
ManualProxies: 0hxxp://no-blocked.com/wpad.dat?fc70be1aca29edc8f91a3591a4d802f424268092
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKU\S-1-5-21-791841142-2433092875-376809133-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKLM-x32 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> D6449A13059E8C95CAE790AAA80EDA23 URL = hxxps://mysearch.avg.com/search?cid={6149B9E4-6B83-4594-BC9A-20350888C50D}&mid=232418edea5147cd8132d18b8092ec61-249b8c5bf37c0bf0204a03bfb9976c71e29b2b89&lang=sk&ds=AVG&coid=avgtbavg&cmpid=0915tb&pr=fr&d=2015-02-16 17:05:23&v=4.1.6.294&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {11D4BA1B-2787-4C9E-AD4F-8D30D1264EAB} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {2BF07D8A-CE79-44F1-8943-9C11CBA72816} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {4B913D92-101D-4B97-9822-0E6785445CE0} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {84FE9158-FCA1-4C72-BB14-5897CD99DFBA} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={6149B9E4-6B83-4594-BC9A-20350888C50D}&mid=232418edea5147cd8132d18b8092ec61-249b8c5bf37c0bf0204a03bfb9976c71e29b2b89&lang=sk&ds=AVG&coid=avgtbavg&cmpid=0915tb&pr=fr&d=2015-02-16 17:05:23&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {A7A235D4-E6F8-4E5A-89A3-38DF21BBA11E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {B1CA9644-7A27-4D9F-9EDE-3885C0D6EA1B} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {BFDF0F8B-88FF-4056-B5CB-34BDD2DFBB34} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {C3B91E1F-9E7B-4C78-BBC6-5087F93B6174} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_12454
SearchScopes: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> {DA60C86A-94E3-48B6-9C3A-451C1EC8B1B0} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
BHO: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL [2013-08-07] (AuthenTec Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-18] (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll [2013-08-07] (AuthenTec Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-18] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-791841142-2433092875-376809133-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.3.0\ViProtocol.dll [2015-02-16] (AVG Secure Search)
FireFox:
========
FF DefaultProfile: z8i4h4a2.default
FF ProfilePath: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default [2017-02-03]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\z8i4h4a2.default -> AVG Secure Search
FF Homepage: Mozilla\Firefox\Profiles\z8i4h4a2.default -> www.google.sk
FF Extension: (Adblock Plus) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-25]
FF Extension: (Seznam lištička) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2017-02-03]
FF Extension: (Diagnostics) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\features\{2fcac2eb-088c-454e-91ed-2572bedb8755}\diagnostics@mozilla.org.xpi [2017-02-02]
FF Extension: (Send HSTS Priming Requests) - C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\features\{2fcac2eb-088c-454e-91ed-2572bedb8755}\hsts-priming@mozilla.org.xpi [2017-02-02]
FF SearchPlugin: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\searchplugins\ask-web-search.xml [2015-12-08]
FF SearchPlugin: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\searchplugins\avg-secure-search.xml [2015-10-22]
FF SearchPlugin: C:\Users\MB\AppData\Roaming\Mozilla\Firefox\Profiles\z8i4h4a2.default\searchplugins\yandex.ru-165319.xml [2015-10-01]
FF Extension: (TrueSuite Website Logon) - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\websitelogon@truesuite.com [2016-11-20] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-08]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-03-26]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-13] ()
FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files\Lenovo Fingerprint Reader\npffwloplugin.dll [2013-08-07] (AuthenTec, Inc)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.9\\npsitesafety.dll [No File]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\41114593.js [2017-01-23] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\41114593.cfg [2017-01-23] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com
CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default [2016-12-31]
CHR Extension: (Prezentácie Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-06]
CHR Extension: (Dokumenty Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06]
CHR Extension: (Disk Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-02]
CHR Extension: (Seznam Lištička - Email) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2015-07-26]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2016-05-03]
CHR Extension: (YouTube) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-01]
CHR Extension: (AVG Secure Search) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-04-30]
CHR Extension: (Website Logon) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\clglhglbidpdbjffpfcldkifhdegdfle [2015-02-06]
CHR Extension: (Яндекс) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\cncgohepihcekklokhbhiblhfcmipbdh [2016-04-30]
CHR Extension: (Google Search) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-04-30]
CHR Extension: (Avast SafePrice) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-04-30]
CHR Extension: (Tabuľky Google) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-06]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-02]
CHR Extension: (Avast Online Security) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-30]
CHR Extension: (Skype) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-04-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-02]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2016-05-02]
CHR Extension: (Gmail) - C:\Users\MB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-01]
CHR HKU\S-1-5-21-791841142-2433092875-376809133-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clglhglbidpdbjffpfcldkifhdegdfle] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [cncgohepihcekklokhbhiblhfcmipbdh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gehngeifmelphpllncobkmimphfkckne] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mdeldjolamfbcgnndjmjjiinnhbnbnla] - hxxp://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-08] (AVAST Software)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139944 2013-08-07] (AuthenTec, Inc)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401704 2013-07-22] (AuthenTec, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-08] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
R3 btmaudio; C:\Windows\System32\drivers\btmaud.sys [80896 2012-05-21] (Motorola Solutions, Inc.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [111104 2012-05-21] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [849408 2012-06-09] (Motorola Solutions, Inc.)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2015-01-08] (ESET)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44272 2013-03-29] (Synaptics Incorporated)
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-03 08:50 - 2017-02-03 08:50 - 00000000 ____H C:\ProgramData\cm-lock
2017-02-02 18:36 - 2017-02-02 18:37 - 00040416 _____ C:\Users\MB\Desktop\Addition.txt
2017-02-02 18:35 - 2017-02-03 21:36 - 00028480 _____ C:\Users\MB\Desktop\FRST.txt
2017-02-02 18:34 - 2017-02-03 21:35 - 00000000 ____D C:\FRST
2017-02-02 18:34 - 2017-02-02 18:34 - 02420736 _____ (Farbar) C:\Users\MB\Desktop\FRST64.exe
2017-02-02 18:22 - 2017-02-03 21:34 - 00000000 ____D C:\Program Files\trend micro
2017-02-02 18:22 - 2017-02-02 18:22 - 00000000 ____D C:\rsit
2017-02-02 18:21 - 2017-02-02 18:22 - 01323520 _____ C:\Users\MB\Desktop\RSITx64.exe
2017-02-01 19:28 - 2017-02-01 20:03 - 00000000 ____D C:\Users\MB\Desktop\Rodokmen_Photos
2017-02-01 19:12 - 2017-02-01 19:28 - 00012953 _____ C:\Users\MB\Desktop\Rodokmen.ged
2017-02-01 18:52 - 2017-02-01 18:52 - 00014548 _____ C:\Users\MB\Desktop\Rodokmen - 2017-02-01 18-51-57.zip
2017-02-01 18:41 - 2017-02-01 18:44 - 00000000 ____D C:\Users\MB\Documents\MyHeritage
2017-02-01 18:40 - 2017-02-01 18:40 - 00001121 _____ C:\Users\MB\Desktop\MyHeritage Family Tree Builder.lnk
2017-02-01 18:40 - 2017-02-01 18:40 - 00000000 ____D C:\Users\MB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyHeritage.com
2017-02-01 18:39 - 2017-02-01 18:39 - 00000000 ____D C:\Users\MB\AppData\Roaming\The Complete Genealogy Reporter - FTB
2017-02-01 18:39 - 2012-08-02 08:56 - 00606208 _____ (Lorenzi Davide) C:\Windows\SysWOW64\HexUniRTFBox.ocx
2017-02-01 18:39 - 2010-06-17 19:49 - 02029056 _____ (Bytescout) C:\Windows\SysWOW64\PDFDocScout.DLL
2017-02-01 18:39 - 2004-12-07 11:11 - 00258352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2017-02-01 18:39 - 2003-07-06 14:07 - 00372736 _____ (Intel Corporation) C:\Windows\SysWOW64\ijl15.dll
2017-02-01 18:39 - 2002-03-07 01:19 - 00454656 _____ () C:\Windows\SysWOW64\PaintX.dll
2017-02-01 18:39 - 2000-05-22 17:58 - 00608448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx
2017-02-01 18:39 - 1998-06-24 01:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmapi32.ocx
2017-02-01 18:38 - 2017-02-01 18:46 - 00000000 ____D C:\Users\MB\AppData\Roaming\MyHeritage
2017-02-01 18:38 - 2017-02-01 18:43 - 00000000 ____D C:\ProgramData\MyHeritage
2017-02-01 18:38 - 2017-02-01 18:38 - 00000000 ____D C:\Program Files (x86)\MyHeritage
2017-02-01 18:37 - 2017-02-01 18:37 - 47125648 _____ C:\Users\MB\Desktop\family_tree_builder_8372.exe
2017-02-01 18:24 - 2017-02-01 18:27 - 00000000 ____D C:\Users\MB\AppData\Roaming\Ahnenblatt
2017-02-01 18:24 - 2017-02-01 18:24 - 13931616 _____ C:\Users\MB\Desktop\Ahnenblatt_setup.exe
2017-02-01 18:24 - 2017-02-01 18:24 - 00001925 _____ C:\Users\MB\Desktop\Ahnenblatt.lnk
2017-02-01 18:24 - 2017-02-01 18:24 - 00000000 ____D C:\Users\MB\Documents\Ahnenblatt
2017-02-01 18:24 - 2017-02-01 18:24 - 00000000 ____D C:\Users\MB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ahnenblatt
2017-02-01 18:24 - 2017-02-01 18:24 - 00000000 ____D C:\Program Files (x86)\Ahnenblatt
2017-01-31 10:05 - 2017-01-31 10:05 - 00262144 ____N C:\Windows\Minidump\013117-25256-01.dmp
2017-01-23 21:46 - 2017-01-23 21:46 - 00050733 _____ C:\Users\MB\Desktop\Letasoft_Sound_Booster.exe
2017-01-19 15:51 - 2017-01-19 15:51 - 14539440 _____ (MyHeritage) C:\Windows\SysWOW64\FTBSaver.scr
2017-01-17 17:09 - 2017-01-17 17:09 - 00262144 ____N C:\Windows\Minidump\011717-18954-01.dmp
2017-01-10 20:46 - 2017-01-10 20:46 - 00262144 ____N C:\Windows\Minidump\011017-39031-01.dmp
2017-01-05 15:28 - 2017-01-05 15:28 - 00000000 ____D C:\Users\MB\AppData\Local\{0F376500-DFBE-47DE-A1F0-B86761A82BF2}
2017-01-05 15:19 - 2017-01-05 15:35 - 00001172 _____ C:\Users\MB\Desktop\UmmyVideoDownloader.lnk
2017-01-05 15:19 - 2017-01-05 15:35 - 00000000 ____D C:\Users\MB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-03 21:30 - 2015-02-16 10:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-03 21:30 - 2015-02-06 14:11 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-02-03 21:30 - 2015-01-10 10:17 - 00000000 ____D C:\Users\MB\AppData\Roaming\vlc
2017-02-03 21:30 - 2015-01-08 21:19 - 00000000 ____D C:\Users\MB\AppData\LocalLow\AuthenTec
2017-02-03 16:25 - 2015-02-06 14:11 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-02-03 09:14 - 2015-10-18 20:03 - 00000000 ____D C:\Users\MB\AppData\Roaming\Skype
2017-02-03 09:05 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-03 09:05 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-03 08:58 - 2015-10-18 20:03 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-03 08:58 - 2015-10-18 20:03 - 00000000 ____D C:\ProgramData\Skype
2017-02-03 08:55 - 2016-11-21 09:02 - 00000000 ____D C:\Users\MB\AppData\LocalLow\Mozilla
2017-02-03 08:55 - 2015-07-26 10:03 - 00000000 ____D C:\Users\MB\AppData\Roaming\Seznam.cz
2017-02-03 08:49 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-01 20:26 - 2015-11-05 17:34 - 418355195 _____ C:\Users\MB\Downloads\Suchy vrch.zip
2017-02-01 09:30 - 2016-04-19 16:20 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-01-31 10:05 - 2015-10-03 20:02 - 00000000 ____D C:\Windows\Minidump
2017-01-30 08:30 - 2016-11-20 14:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-30 08:30 - 2015-01-08 21:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-13 18:07 - 2015-02-16 10:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-13 18:07 - 2015-01-08 21:40 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-13 18:07 - 2015-01-08 21:40 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-13 18:07 - 2015-01-08 21:40 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-13 18:07 - 2015-01-08 21:40 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-12 21:04 - 2015-01-08 21:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-12 21:03 - 2015-06-26 13:39 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-12 18:44 - 2009-07-14 06:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-12 18:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-10 20:47 - 2015-01-08 21:24 - 00000000 ____D C:\Users\UpdatusUser
2017-01-05 15:35 - 2015-09-29 06:32 - 00000000 ____D C:\Users\MB\AppData\Local\UmmyVideoDownloader
==================== Files in the root of some directories =======
2015-01-10 10:00 - 2015-01-10 10:18 - 4096000 _____ () C:\Program Files (x86)\GUTA3FD.tmp
2016-01-24 19:41 - 2016-01-24 19:41 - 0000132 _____ () C:\Users\MB\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-09-27 10:29 - 2015-10-12 17:29 - 0000034 _____ () C:\Users\MB\AppData\Roaming\AdobeWLCMCache.dat
2016-05-23 21:22 - 2016-05-23 21:22 - 0000037 ___SH () C:\Users\MB\AppData\Local\20986331705021ca58edc424.96250074
2017-02-03 08:50 - 2017-02-03 08:50 - 0000000 ____H () C:\ProgramData\cm-lock
Some files in TEMP:
====================
2016-01-06 10:45 - 2015-11-12 16:54 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08113467054.exe
2016-01-16 09:48 - 2015-12-08 07:23 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_081568837477.exe
2016-04-07 19:12 - 2016-02-18 12:09 - 0179624 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08458295799.exe
2016-02-23 12:37 - 2016-01-12 16:23 - 0179624 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08483602039.exe
2016-04-18 17:49 - 2016-03-23 15:57 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\MB\AppData\Local\Temp\avguirn_08836501745.exe
2016-01-11 13:44 - 2015-10-20 01:44 - 1114112 _____ (Microsoft Corporation) C:\Users\MB\AppData\Local\Temp\kernel32.dll
2016-03-27 17:18 - 2016-04-18 08:43 - 13686656 _____ ( ) C:\Users\MB\AppData\Local\Temp\MBSetup_uvd-loader.exe
2015-10-03 10:56 - 2015-10-03 14:31 - 0000000 ____D () C:\Users\MB\AppData\Local\Temp\MovieStudio.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-01-23 21:25
==================== End of FRST.txt ============================
Cize stale mam nejaky vír.