Prosím o preventivní kontrolu

[Dreddrew]

Dobrý den,

Prosím o preventivní kontrolu,

Díky moc!

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-03-2017
Ran by Ondřej (administrator) on DESKTOP-H192JBB (14-03-2017 16:58:12)
Running from C:\Users\Ondřej\Desktop
Loaded Profiles: Ondřej (Available Profiles: Ondřej)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(OSBASE) C:\Windows\System32\ddmgr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Duet, Inc.) C:\Program Files\Kairos\Duet Display\duet.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(forum.viry.cz) C:\Users\Ondřej\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8841472 2016-10-05] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\WINDOWS\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [497384 2016-05-17] ()
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1517088 2014-07-20] (ABBYY Production LLC.)
HKLM-x32\...\Run: [Duet Display] => C:\Program Files\Kairos\Duet Display\duet.exe [1853040 2016-10-03] (Duet, Inc.)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [651560 2015-11-10] (Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6842424 2016-05-17] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-2701695438-465743939-1061350540-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23818360 2016-11-30] (Google)
HKU\S-1-5-21-2701695438-465743939-1061350540-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2062208 2016-05-26] (Sony)
HKU\S-1-5-21-2701695438-465743939-1061350540-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-09] (Valve Corporation)
HKU\S-1-5-21-2701695438-465743939-1061350540-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2701695438-465743939-1061350540-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9364696 2017-03-03] (Piriform Ltd)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe [371928 2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2015-11-11] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2015-11-11] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2015-11-11] (Acronis)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logo Calibration Loader.lnk [2017-01-22]
ShortcutTarget: Logo Calibration Loader.lnk -> C:\Program Files (x86)\GretagMacbeth\i1\Eye-One Match 3\CalibrationLoader\CalibrationLoader.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ProfileReminder.lnk [2017-01-22]
ShortcutTarget: ProfileReminder.lnk -> C:\Program Files (x86)\GretagMacbeth\i1\Eye-One Match 3\ProfileReminder.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2017-03-13]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Ondřej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2016-07-27]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Ondřej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2016-07-30]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{db389a99-e933-46bb-9f3a-a4f12ec85a1c}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-01-29] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-01-29] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-08-11] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 8lrnq6mn.default
FF ProfilePath: C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default [2017-03-14]
FF Homepage: Mozilla\Firefox\Profiles\8lrnq6mn.default -> hxxp://google.com/
FF Extension: (Disconnect) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\2.0@disconnect.me.xpi [2016-07-27]
FF Extension: (YouTube™ Enhancer Plus) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\firefoxaddon@youtubeenhancer.com.xpi [2016-12-22]
FF Extension: (Push to Kindle) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\jid0-GokC6R49cBZciOKniufAR4QKFWc@jetpack.xpi [2017-03-11]
FF Extension: (Translate This!) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\jid0-k75TfRGfOXPHfEZmJ9cKu5eCgLc@jetpack.xpi [2016-11-06]
FF Extension: (Lightbeam) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2016-07-27]
FF Extension: (Youtube Downloader - 4K Download) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\paulsaintuzb@gmail.com [2016-07-30]
FF Extension: (Send to Kindle for Mozilla Firefox) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\sendtokindle@amazon.com.xpi [2016-07-27]
FF Extension: (LastPass) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\support@lastpass.com [2017-01-03]
FF Extension: (TweakTube) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{15e67a59-bd3d-49ae-90dd-b3d3fd14c2ed}.xpi [2016-07-27]
FF Extension: (NoScript) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-03-08]
FF Extension: (YouTube High Definition) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2017-01-29]
FF Extension: (Adblock Plus) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]
FF Extension: (DownThemAll!) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2017-01-30]
FF Extension: (No Name) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800}.xpi [2016-12-16]
FF Extension: (Greasemonkey) - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\8lrnq6mn.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-02-25]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-19] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-19] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-19] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-19] (Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-01-29] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2701695438-465743939-1061350540-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2017-03-04] ()
FF Plugin HKU\S-1-5-21-2701695438-465743939-1061350540-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom)

Chrome:
=======
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default [2017-03-14]
CHR Extension: (Prezentace Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-27]
CHR Extension: (Dokumenty Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-27]
CHR Extension: (Disk Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-27]
CHR Extension: (YouTube) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-27]
CHR Extension: (Tabulky Google) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-07-27]
CHR Extension: (Dokumenty Google offline) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-03-08]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-07-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-12]
CHR Extension: (Gmail) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-27]
CHR Extension: (Chrome Media Router) - C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKU\S-1-5-21-2701695438-465743939-1061350540-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1135168 2016-05-17] ()
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2016-10-05] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2016-07-28] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2016-10-05] () [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3704520 2017-02-18] (Microsoft Corporation)
R2 ddmgr; C:\WINDOWS\system32\ddmgr.exe [1668256 2016-09-29] (OSBASE)
S3 DuetUpdater; C:\Program Files\Kairos\Duet Display\DuetUpdater.exe [734320 2016-10-03] (Kairos)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2771848 2016-11-11] (ESET)
R2 FoxitReaderService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [1659592 2017-02-24] (Foxit Software Inc.)
S2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4884064 2015-08-11] (Acronis)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-02-23] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2017-03-04] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1570520 2016-02-02] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [837848 2016-02-02] (Secunia)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-10-29] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-07-28] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2016-07-28] ()
R3 athur; C:\WINDOWS\System32\drivers\athuwbx.sys [2702336 2013-11-20] (Qualcomm Atheros Communications, Inc.)
R4 ddkmd; C:\WINDOWS\system32\drivers\ddkmd.sys [273792 2016-09-29] (OSBASE)
R0 ddkmdldr; C:\WINDOWS\System32\drivers\ddkmdldr.sys [29568 2016-09-29] (OSBASE)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [262792 2016-11-11] (ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [199328 2016-06-28] (ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15488 2016-06-28] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [197248 2016-11-11] (ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [153216 2016-11-11] (ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [208520 2016-11-11] (ESET)
R1 EpfwLWF; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [61568 2016-11-11] (ESET)
R0 epfwwfp; C:\WINDOWS\System32\DRIVERS\epfwwfp.sys [84616 2016-11-11] (ESET)
S3 EyeOneDisplay; C:\WINDOWS\System32\Drivers\i1display_x64.sys [7808 2005-12-14] (GretagMacbeth LLC)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [339808 2016-11-13] (Acronis International GmbH)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2016-11-02] (Sony Mobile Communications)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_02838dee03d82b94\nvlddmkm.sys [14427064 2017-01-21] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2017-01-20] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-02-23] (NVIDIA Corporation)
R3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2016-02-02] (Secunia)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1049432 2016-11-13] (Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [202592 2016-11-13] (Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [581464 2016-11-13] (Acronis International GmbH)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Apple, Inc.) [File not signed]
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [301408 2016-11-13] (Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S2 PDIHWCTL; \??\C:\WINDOWS\system32\drivers\pdihwctl.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-14 16:58 - 2017-03-14 16:58 - 00026945 _____ C:\Users\Ondřej\Desktop\FRST.txt
2017-03-14 16:57 - 2017-03-14 16:58 - 00000000 ____D C:\FRST
2017-03-14 16:56 - 2017-03-14 16:56 - 02424832 _____ (Farbar) C:\Users\Ondřej\Desktop\FRST64.exe
2017-03-14 16:36 - 2017-03-14 16:36 - 00184510 _____ C:\Users\Ondřej\Documents\cc_20170314_163627.reg
2017-03-14 16:36 - 2017-03-14 16:36 - 00000082 _____ C:\Users\Ondřej\Documents\cc_20170314_163614.reg
2017-03-14 16:22 - 2017-03-14 16:22 - 00002872 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-03-14 16:22 - 2017-03-14 16:22 - 00000000 ____D C:\Program Files\CCleaner
2017-03-14 16:21 - 2017-03-14 16:21 - 09274608 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\ccsetup528.exe
2017-03-14 16:05 - 2017-03-14 16:06 - 00245520 _____ C:\Users\Ondřej\Downloads\Firefox Setup Stub 52.0.exe
2017-03-14 15:58 - 2017-03-14 16:30 - 174706788 _____ C:\Users\Ondřej\Downloads\Pravdivé-lži-(True-Lies)-(1994)-FULL-HD---DUAL-ENG+CZ-tit.-a-CZ-dabing-(martincz75).mkv
2017-03-14 14:03 - 2017-03-14 14:03 - 00000000 ____D C:\Users\Ondřej\Downloads\openssl-1.0.2j-fips-x86_64
2017-03-14 13:55 - 2017-03-14 13:55 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\npm
2017-03-14 13:55 - 2017-03-14 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js
2017-03-14 13:55 - 2017-03-14 13:55 - 00000000 ____D C:\Program Files\nodejs
2017-03-14 13:43 - 2017-03-14 13:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2017-03-14 13:42 - 2017-03-14 13:42 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2017-03-14 13:39 - 2017-03-14 16:57 - 00112640 _____ (forum.viry.cz) C:\Users\Ondřej\Desktop\FRSTLauncher.exe
2017-03-14 12:35 - 2017-03-14 12:37 - 00010244 _____ C:\Users\Ondřej\Downloads\LOGOTYPE - CZ.zip
2017-03-14 12:28 - 2017-03-14 12:33 - 694635604 _____ C:\Users\Ondřej\Downloads\Top.Gear.speciál.Napříč.Evropou.E02.DVB-T.CZ.avi
2017-03-14 12:25 - 2017-03-14 12:25 - 00042086 _____ C:\Users\Ondřej\Downloads\časové možnosti(1).pdf
2017-03-13 22:28 - 2017-03-13 22:28 - 00022488 _____ C:\Users\Ondřej\Downloads\envira-instagram.zip
2017-03-13 22:28 - 2017-03-13 22:28 - 00000000 ____D C:\Users\Ondřej\Downloads\envira-instagram
2017-03-13 22:28 - 2017-03-13 22:28 - 00000000 ____D C:\Users\Ondřej\Downloads\envira-gallery
2017-03-13 22:27 - 2017-03-13 22:27 - 00902045 _____ C:\Users\Ondřej\Downloads\envira-gallery.zip
2017-03-13 19:55 - 2017-03-13 20:05 - 2249017809 _____ C:\Users\Ondřej\Downloads\Top-Gear---Africký-speciál-část-II.-CZ-dabing-HD.mkv
2017-03-13 17:12 - 2017-03-13 17:22 - 2031429379 _____ C:\Users\Ondřej\Downloads\Top-Gear---Africký-speciál-část-I.-CZ-dabing-HD.mkv.part
2017-03-13 13:12 - 2017-03-13 13:13 - 220311794 _____ C:\Users\Ondřej\Downloads\update_kindle_all_new_paperwhite_5.8.8.bin
2017-03-13 13:05 - 2017-03-13 13:06 - 211046507 _____ C:\Users\Ondřej\Downloads\update_kindle_paperwhite_v2_5.8.8.bin
2017-03-13 12:18 - 2017-03-13 12:18 - 00093549 _____ C:\Users\Ondřej\Downloads\The-Sting(0000208793).srt
2017-03-13 12:13 - 2017-03-13 12:19 - 1725108788 _____ C:\Users\Ondřej\Downloads\The.Sting.1973.1080p.BluRay.x264.anoXmous_.mp4
2017-03-13 11:52 - 2017-03-13 11:52 - 04002104 _____ (Secunia) C:\Users\Ondřej\Downloads\PSISetup.exe
2017-03-13 11:52 - 2017-03-13 11:52 - 00001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2017-03-13 11:52 - 2017-03-13 11:52 - 00000000 ____D C:\Program Files (x86)\Secunia
2017-03-12 22:20 - 2017-03-12 22:20 - 00043757 _____ C:\Users\Ondřej\Downloads\Fargo-S02E10(0000263963).srt
2017-03-12 22:13 - 2017-03-12 22:21 - 1478165522 _____ C:\Users\Ondřej\Downloads\Fargo.S02E10.720p.HDTV.x264-0SEC.mkv
2017-03-12 20:16 - 2017-03-12 20:16 - 00033520 _____ C:\Users\Ondřej\Downloads\Fargo-S02E09(0000263619).srt
2017-03-12 20:09 - 2017-03-12 20:17 - 1413264163 _____ C:\Users\Ondřej\Downloads\Fargo.S02E09.720p.HDTV.x264-FLEET.mkv
2017-03-12 19:06 - 2017-03-12 19:06 - 00046534 _____ C:\Users\Ondřej\Downloads\Fargo-S02E08(0000263257).srt
2017-03-12 18:53 - 2017-03-12 18:53 - 00371423 _____ C:\Users\Ondřej\Downloads\Vydana faktura - 20170008(1).pdf
2017-03-12 18:51 - 2017-03-12 19:07 - 1688080701 _____ C:\Users\Ondřej\Downloads\Fargo.S02E08.720p.HDTV.x264-FLEET.mkv
2017-03-12 17:53 - 2017-03-12 17:53 - 00039926 _____ C:\Users\Ondřej\Downloads\Fargo.S02E07.HDTV.x264-KILLERS.srt
2017-03-12 16:17 - 2017-03-12 16:17 - 00000000 ____D C:\Users\Ondřej\Downloads\Fargo206
2017-03-12 15:12 - 2017-03-12 15:12 - 00046513 _____ C:\Users\Ondřej\Downloads\Fargo-S02E05(0000262198).srt
2017-03-11 13:17 - 2017-03-11 13:17 - 00000000 ____D C:\Users\Ondřej\Downloads\leixo
2017-03-11 13:16 - 2017-03-11 13:16 - 00680676 _____ C:\Users\Ondřej\Downloads\leixo.zip
2017-03-11 13:06 - 2017-03-11 13:06 - 00374384 _____ C:\Users\Ondřej\Downloads\Vydana faktura - 20170008.pdf
2017-03-11 12:48 - 2017-03-11 12:48 - 00000000 ____D C:\Users\Ondřej\Downloads\lemon_milk
2017-03-11 12:47 - 2017-03-11 12:47 - 00000000 ____D C:\Users\Ondřej\Downloads\wetransfer-b008bd
2017-03-11 12:46 - 2017-03-11 12:46 - 00118018 _____ C:\Users\Ondřej\Downloads\lemon_milk.zip
2017-03-11 12:44 - 2017-03-11 12:44 - 13118781 _____ C:\Users\Ondřej\Downloads\wetransfer-b008bd.zip
2017-03-11 12:15 - 2017-03-11 12:15 - 12146799 _____ C:\Users\Ondřej\Downloads\MusicBeeSetup_3_0_Update4.zip
2017-03-09 21:20 - 2017-03-09 21:20 - 00344580 _____ C:\Users\Ondřej\Downloads\Vydana faktura - 20170007.pdf
2017-03-09 21:04 - 2017-03-09 21:04 - 00343077 _____ C:\Users\Ondřej\Downloads\Vydana faktura - 20170006(1).pdf
2017-03-09 21:00 - 2017-03-09 21:00 - 00343077 _____ C:\Users\Ondřej\Downloads\Vydana faktura - 20170006.pdf
2017-03-08 23:04 - 2017-03-08 23:04 - 00000000 ____D C:\WINDOWS\LastGood
2017-03-08 15:03 - 2017-03-08 15:03 - 00000000 ____D C:\Users\Ondřej\Downloads\lame3.99.5-64
2017-03-08 15:03 - 2012-01-25 13:41 - 00000000 ____D C:\Users\Ondřej\Downloads\styles
2017-03-08 15:03 - 2012-01-25 13:41 - 00000000 ____D C:\Users\Ondřej\Downloads\images
2017-03-08 15:03 - 2011-10-15 14:31 - 00052475 _____ C:\Users\Ondřej\Downloads\detailed.html
2017-03-08 15:03 - 2010-12-03 19:46 - 00005406 _____ C:\Users\Ondřej\Downloads\about.html
2017-03-08 15:03 - 2010-11-21 20:45 - 00005695 _____ C:\Users\Ondřej\Downloads\usage.html
2017-03-08 15:03 - 2010-11-21 20:07 - 00004645 _____ C:\Users\Ondřej\Downloads\cbr.html
2017-03-08 15:03 - 2010-11-21 20:07 - 00004349 _____ C:\Users\Ondřej\Downloads\abr.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00025559 _____ C:\Users\Ondřej\Downloads\links.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00007791 _____ C:\Users\Ondřej\Downloads\introduction.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00005998 _____ C:\Users\Ondřej\Downloads\contributors.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00005639 _____ C:\Users\Ondřej\Downloads\ms_stereo.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00004519 _____ C:\Users\Ondřej\Downloads\contact.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00003421 _____ C:\Users\Ondřej\Downloads\vbr.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00002898 _____ C:\Users\Ondřej\Downloads\index.html
2017-03-08 15:03 - 2010-06-11 17:44 - 00002532 _____ C:\Users\Ondřej\Downloads\list.html
2017-03-08 15:03 - 2005-07-28 13:05 - 00004764 _____ C:\Users\Ondřej\Downloads\basic.html
2017-03-08 15:02 - 2017-03-08 15:02 - 00891865 _____ C:\Users\Ondřej\Downloads\lame3.99.5-64.zip
2017-03-08 15:02 - 2017-03-08 15:02 - 00675902 _____ C:\Users\Ondřej\Downloads\lame3.99.5.zip
2017-03-08 12:30 - 2017-03-08 12:33 - 358262218 _____ C:\Users\Ondřej\Downloads\Cerveny-trpaslik-S11E02--cz-tit.ZuTro.avi.part
2017-03-07 23:35 - 2017-03-07 23:35 - 00161514 _____ C:\Users\Ondřej\Downloads\Czech_Republic_flag.ai
2017-03-07 23:34 - 2017-03-07 23:34 - 00012693 _____ C:\Users\Ondřej\Downloads\United_Kingdom_Flag.eps
2017-03-07 18:50 - 2017-03-07 18:50 - 03045268 _____ C:\Users\Ondřej\Downloads\sitepress-multilingual-cms.3.6.3.zip
2017-03-07 13:56 - 2017-03-07 13:59 - 55760933 _____ C:\Users\Ondřej\Downloads\montessori_tajuplne-detstvi.pdf
2017-03-07 11:34 - 2017-03-07 11:34 - 26774296 _____ C:\Users\Ondřej\Downloads\R147514.zip
2017-03-07 11:34 - 2017-03-07 11:34 - 00000000 ____D C:\Users\Ondřej\Downloads\R147514
2017-03-06 20:37 - 2017-03-06 20:37 - 15278336 _____ C:\Users\Ondřej\Downloads\[William_Nealy]_Inline_A_Manual_for_Beginning_to(BookZZ.org).pdf
2017-03-05 23:08 - 2017-03-05 23:08 - 00042021 _____ C:\Users\Ondřej\Downloads\Fargo-S01E10(0000238145).srt
2017-03-05 23:07 - 2017-03-05 23:19 - 2466890328 _____ C:\Users\Ondřej\Downloads\Fargo.S01E10.Mortons.Fork.1080p.WEB-DL.DD5.1.H.264-BS.mkv.part
2017-03-05 21:55 - 2017-03-05 21:55 - 00051702 _____ C:\Users\Ondřej\Downloads\Fargo-S01E09(0000237863).srt
2017-03-05 17:51 - 2017-03-05 18:03 - 1734033803 _____ C:\Users\Ondřej\Downloads\Fargo.S01E09.A.Fox.a.Rabbit.and.a.Cabbage.720p.WEB-DL.DD5.1.H.264-BS.mkv
2017-03-05 16:16 - 2017-03-05 16:16 - 00052712 _____ C:\Users\Ondřej\Downloads\Fargo-S01E08(0000237525).srt
2017-03-05 16:06 - 2017-03-05 16:17 - 1782827200 _____ C:\Users\Ondřej\Downloads\Fargo.S01E08.The.Heap.720p.WEB-DL.DD5.1.H.264-BS.mkv
2017-03-04 14:08 - 2017-03-04 14:08 - 00432420 _____ C:\Users\Ondřej\Downloads\mime_logo_black_krivky(1).eps
2017-03-04 00:37 - 2017-03-04 01:07 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2017-03-04 00:36 - 2017-03-04 00:36 - 00000000 ____D C:\Users\Ondřej\AppData\Local\PunkBuster
2017-03-04 00:34 - 2017-03-04 01:07 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2017-03-04 00:34 - 2017-03-04 00:44 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2017-03-04 00:34 - 2017-03-04 00:34 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2017-03-03 12:38 - 2017-03-03 12:38 - 05963966 _____ C:\Users\Ondřej\Downloads\[Arthur_Koestler]_The_Roots_of_Coincidence(BookZZ.org).pdf
2017-03-02 18:42 - 2017-03-02 18:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-03-02 18:42 - 2017-03-02 18:42 - 00000000 ____D C:\Program Files\iTunes
2017-03-02 18:42 - 2017-03-02 18:42 - 00000000 ____D C:\Program Files\iPod
2017-03-01 16:51 - 2017-03-01 16:51 - 00432420 _____ C:\Users\Ondřej\Downloads\mime_logo_black_krivky.eps
2017-03-01 16:51 - 2017-03-01 16:51 - 00378706 _____ C:\Users\Ondřej\Downloads\mime_logo_BW_krivky.pdf
2017-02-28 22:01 - 2017-02-28 22:25 - 401803547 _____ C:\Users\Ondřej\Downloads\FARGO-_-1996-(-fhd---1080p-)-(-CZ-~-vhs,-CZ-~-ČTv,-SK,-PL,-ENG-~-dts-).mkv
2017-02-28 18:40 - 2017-02-28 18:40 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\Yacht Club Games
2017-02-27 16:23 - 2017-02-27 16:31 - 159777636 _____ C:\Users\Ondřej\Downloads\Bestiar_5e_CZ.pdf
2017-02-27 16:20 - 2017-02-27 16:20 - 03424360 _____ C:\Users\Ondřej\Downloads\1264.--Vlastimil-Vondruška---Olomoucký-bestiář-#22-.pdf
2017-02-26 11:34 - 2017-02-26 11:34 - 00000000 ____D C:\Users\Ondřej\Downloads\poeII-fankit
2017-02-26 11:32 - 2017-02-26 11:32 - 02967134 _____ C:\Users\Ondřej\Downloads\poeII-fankit.zip
2017-02-26 11:32 - 2017-02-26 11:32 - 00000537 _____ C:\Users\Ondřej\Downloads\Místní disk (C) – zástupce.lnk
2017-02-19 21:15 - 2017-02-19 21:21 - 520111877 _____ C:\Users\Ondřej\Downloads\Hercule-Poirot-01x01---Dobrodružství-claphamské-kuchařky.mp4
2017-02-15 09:49 - 2017-02-15 09:50 - 220551536 _____ C:\Users\Ondřej\Downloads\wetransfer-45b687.zip
2017-02-12 23:51 - 2017-02-12 23:52 - 00000000 ____D C:\Users\Ondřej\Downloads\DOSBox-czech-lang-072
2017-02-12 23:50 - 2017-02-12 23:50 - 00009377 _____ C:\Users\Ondřej\Downloads\DOSBox-czech-lang-072.zip
2017-02-12 21:17 - 2017-02-12 21:17 - 00066604 _____ C:\Users\Ondřej\Downloads\Lightplot.pdf
2017-02-12 20:58 - 2017-02-12 20:58 - 00647514 _____ C:\Users\Ondřej\Downloads\Plánek velkého sálu — 2NP provaziště.pdf
2017-02-12 20:58 - 2017-02-12 20:58 - 00216417 _____ C:\Users\Ondřej\Downloads\Světelná a projekční technika - vybavení.pdf
2017-02-12 20:58 - 2017-02-12 20:58 - 00210960 _____ C:\Users\Ondřej\Downloads\Divadelní zvukové vybavení.pdf
2017-02-12 20:57 - 2017-02-12 20:57 - 00697871 _____ C:\Users\Ondřej\Downloads\Plánek velkého sálu — 1NP balkón.pdf
2017-02-12 20:57 - 2017-02-12 20:57 - 00125075 _____ C:\Users\Ondřej\Downloads\Plánek velkého sálu — 1PP přízemí.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-14 16:58 - 2016-11-19 13:18 - 00000000 ____D C:\Users\Ondřej\AppData\LocalLow\Mozilla
2017-03-14 16:48 - 2016-07-27 20:57 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\vlc
2017-03-14 16:35 - 2016-11-06 19:39 - 00000000 ____D C:\Program Files (x86)\Steam
2017-03-14 16:35 - 2016-07-29 22:54 - 00000000 ____D C:\Users\Ondřej\AppData\Local\CrashDumps
2017-03-14 16:35 - 2016-07-28 13:08 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\MusicBee
2017-03-14 16:35 - 2016-07-27 21:24 - 00000000 ____D C:\ProgramData\Foxit Software
2017-03-14 16:35 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-14 16:34 - 2017-01-03 23:52 - 00000000 ____D C:\Users\Ondřej\AppData\LocalLow\LastPass
2017-03-14 16:34 - 2016-11-18 12:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-14 16:34 - 2016-07-27 20:51 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-03-14 16:34 - 2016-07-27 20:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-14 15:34 - 2016-10-29 07:51 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-14 14:06 - 2016-07-27 21:41 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\GHISLER
2017-03-14 13:45 - 2016-07-27 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2017-03-14 13:45 - 2016-07-27 21:21 - 00000000 ____D C:\Program Files\Calibre2
2017-03-14 13:44 - 2016-07-29 16:11 - 00000000 ____D C:\Users\Ondřej\Documents\My Kindle Content
2017-03-14 13:44 - 2016-07-27 21:41 - 00000000 ____D C:\Program Files\totalcmd
2017-03-14 13:43 - 2016-07-29 16:11 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Amazon
2017-03-14 13:42 - 2016-07-27 20:31 - 00002344 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-14 12:39 - 2016-07-30 20:38 - 00001728 _____ C:\Users\Ondřej\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2017-03-14 12:25 - 2016-10-29 07:52 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-14 12:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-14 11:06 - 2016-11-22 11:35 - 02447872 ___SH C:\Users\Ondřej\Desktop\Thumbs.db
2017-03-14 08:10 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-14 08:04 - 2016-10-29 17:17 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\duet
2017-03-14 08:04 - 2016-10-29 07:53 - 00000000 ____D C:\Users\Ondřej
2017-03-14 08:04 - 2016-07-27 20:54 - 00000000 ___RD C:\Users\Ondřej\Disk Google
2017-03-13 15:05 - 2016-07-27 21:30 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Steam
2017-03-12 19:04 - 2016-11-28 15:15 - 00000000 ____D C:\WINDOWS\Minidump
2017-03-11 12:47 - 2016-11-26 10:07 - 01003008 ___SH C:\Users\Ondřej\Downloads\Thumbs.db
2017-03-10 21:27 - 2016-07-27 20:05 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Packages
2017-03-10 06:48 - 2016-07-27 21:30 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\Skype
2017-03-06 09:46 - 2016-07-27 20:08 - 02260582 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-03-06 09:46 - 2016-07-16 23:25 - 00859222 _____ C:\WINDOWS\system32\perfh005.dat
2017-03-06 09:46 - 2016-07-16 23:25 - 00210974 _____ C:\WINDOWS\system32\perfc005.dat
2017-03-06 09:40 - 2016-10-29 07:59 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-04 14:39 - 2017-01-13 15:10 - 00027136 ___SH C:\Users\Ondřej\Documents\Thumbs.db
2017-03-04 01:35 - 2016-12-11 18:35 - 00000000 ____D C:\Users\Ondřej\AppData\Local\Ubisoft Game Launcher
2017-03-04 00:36 - 2016-12-19 18:54 - 00004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:36 - 2016-11-08 11:41 - 00003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:36 - 2016-10-29 07:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-04 00:36 - 2016-09-06 19:20 - 00000000 ____D C:\Users\Ondřej\Documents\My Games
2017-03-04 00:35 - 2016-11-08 11:41 - 00003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:35 - 2016-11-08 11:41 - 00003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:35 - 2016-11-08 11:41 - 00003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:35 - 2016-11-08 11:41 - 00003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:35 - 2016-11-08 11:41 - 00003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-04 00:35 - 2016-10-29 07:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-04 00:35 - 2016-10-29 07:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-03 11:24 - 2016-07-27 20:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-03-03 11:24 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-03-02 18:42 - 2016-08-02 10:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-03-02 10:51 - 2017-01-24 00:42 - 00003970 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1485214945
2017-03-02 10:51 - 2017-01-24 00:42 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-03-02 10:51 - 2017-01-24 00:42 - 00000000 ____D C:\Program Files (x86)\Opera
2017-03-01 14:40 - 2016-12-09 10:05 - 00000000 ____D C:\Users\Ondřej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2017-03-01 14:40 - 2016-12-09 10:05 - 00000000 ____D C:\Users\Ondřej\AppData\Local\atom
2017-02-27 17:17 - 2016-10-26 15:53 - 00000000 ____D C:\Users\Ondřej\Documents\Soubory aplikace Outlook
2017-02-24 21:08 - 2016-07-27 20:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-24 21:08 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-24 21:06 - 2016-07-27 20:30 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-23 19:35 - 2017-02-01 00:54 - 00057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-02-23 19:35 - 2016-07-29 21:02 - 01880512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2017-02-23 19:35 - 2016-07-29 21:02 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2017-02-23 19:35 - 2016-07-29 21:02 - 01468864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2017-02-23 19:35 - 2016-07-29 21:02 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2017-02-23 19:35 - 2016-07-29 21:02 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-02-23 15:32 - 2016-11-08 11:41 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-02-23 15:30 - 2016-12-19 18:54 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-02-16 18:27 - 2016-09-05 16:47 - 00000000 ____D C:\ProgramData\Corel
2017-02-16 01:06 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-16 00:44 - 2016-10-29 07:51 - 05502576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-12 23:54 - 2017-02-08 00:53 - 00000000 ____D C:\Program Files (x86)\DOSBox-0.74

==================== Files in the root of some directories =======

2016-07-29 14:57 - 2016-07-29 14:57 - 0000132 _____ () C:\Users\Ondřej\AppData\Roaming\Formát PNG Adobe CC – předvolby
2016-07-30 20:38 - 2017-03-14 12:39 - 0001728 _____ () C:\Users\Ondřej\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2016-09-21 14:30 - 2016-09-21 14:30 - 45700992 _____ (Sony) C:\Users\Ondřej\AppData\Local\pcc.exe
2016-10-29 07:52 - 2016-10-29 07:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-12-19 18:54 - 2017-02-01 00:54 - 0008442 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-19 18:54 - 2017-01-25 12:07 - 0006270 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-03-13 16:07

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:92.79 GB) (Free:7.79 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:298.09 GB) (Free:11.84 GB) NTFS
Drive f: (Data III) (Fixed) (Total:911.98 GB) (Free:13.19 GB) NTFS
Drive i: (ONDŘEJ - IP) (Removable) (Total:148.79 GB) (Free:73.45 GB) FAT32

Available physical RAM: 5513.48 MB
Total physical RAM: 8159.14 MB
Percentage of memory in use: 32%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 565809F4)
Partition 1: (Active) - (Size=912 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=19.5 GB) - (Type=05)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00055980)
Partition 1: (Active) - (Size=92.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=19 GB) - (Type=83)
Disk: 2 (Size: 298.1 GB) (Disk ID: B4DCBC09)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 9.0.407.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 9.0.407.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personální firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Ondýej\Desktop" je 2 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

[JaRon]

ahoj
log vypada OK