VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Sekající se browser a zpomalený ntb

https://forum.viry.cz:443/viewtopic.php?t=152143

Stránka 1 z 1

Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 16:02
od netre
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-05-2017
Ran by User (administrator) on USER-HP (20-05-2017 16:28:13)
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User & DefaultAppPool)
Platform: Windows 10 Home Version 1703 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Prog-Soft s.r.o.) C:\Program Files (x86)\PSPad editor\PSPad.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6489704 2010-09-22] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [LogiScrollApp] => C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954352 2016-03-30] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-20] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [584760 2010-09-28] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-05-23] (Raptr, Inc)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-03-04] (Plays.tv, LLC)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-11-26] (Nullsoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2013-01-16] (Hewlett-Packard Company)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\MountPoints2: {3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} - "F:\HiSuiteDownLoader.exe"
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-20] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Guage.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Guage.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe (Clarus, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Real-Time Daemon.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Real-Time Daemon.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe (Clarus, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Scheduler.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Scheduler.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe (Clarus, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{97cce5a3-2359-42b4-9727-cb87c2db1915}: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{bea449f1-bccd-4dc4-ad33-b953f3f0b6fd}: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
URLSearchHook: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 - (No Name) - {95289393-33EA-4F8D-B952-483415B9C955} - No File
URLSearchHook: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 - (No Name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - No File
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = hxxp://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO: Logitech Flow Scroll -> {E11DB59D-5008-42ff-9069-535843BC0BE1} -> C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll [2012-02-08] (Logitech, Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-20] (Oracle Corporation)
BHO-x32: Logitech Flow Scroll -> {E11DB59D-5008-42ff-9069-535843BC0BE1} -> C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll [2012-02-08] (Logitech, Inc.)
BHO-x32: No Name -> {FB4F6285-4C32-49F2-950F-A5998F9CEC6C} -> No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rcqetvf.default [2017-05-20]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/search?bcutc=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF Keyword.URL: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/search?bcutc=sp-006
FF Homepage: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/?bcutc=sp-006
FF NewTab: Mozilla\Firefox\Profiles\1rcqetvf.default -> about:newtab
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rcqetvf.default\searchplugins\google-avast.xml [2017-05-20]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt
FF Extension: (Logitech Flow Scroll) - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt [2013-05-30] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\url_advisor@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\virtual_keyboard@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\content_blocker@kaspersky.com => not found

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 16:12
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 17:08
od netre
log ADWcleaner
# AdwCleaner v6.047 - Log vytvořen 20/05/2017 v 18:02:03
# Aktualizováno dne 19/05/2017 z Malwarebytes
# Databáze : 2017-05-19.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : User - USER-HP
# Spuštěno z : C:\Users\User\Desktop\adwcleaner_6.047.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

[-] Služba smazána: TAOAccelerator
[-] Služba smazána: TFsFlt
[-] Služba smazána: TAOKernelDriver
[-] Služba smazána: TSSKX64
[-] Služba smazána: Update service


***** [ Složky ] *****

[-] Složka smazána: C:\Users\User\AppData\Local\SysassistByHotWheel
[-] Složka smazána: C:\Users\User\AppData\LocalLow\Conduit
[-] Složka smazána: C:\Users\User\AppData\LocalLow\searchresultstb
[-] Složka smazána: C:\Users\User\AppData\Roaming\ppslog
[-] Složka smazána: C:\Users\User\AppData\Roaming\Tencent
[-] Složka smazána: C:\Users\User\AppData\Local\VirtualStore\Program Files (x86)\Tencent
[-] Složka smazána: C:\ProgramData\Ask
[-] Složka smazána: C:\ProgramData\Rising
[-] Složka smazána: C:\ProgramData\TXQMPC
[-] Složka smazána: C:\ProgramData\Uniblue
[-] Složka smazána: C:\ProgramData\Tencent
[-] Složka smazána: C:\Program Files (x86)\Conduit


***** [ Soubory ] *****

[-] Soubor smazán: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
[-] Soubor smazán: C:\WINDOWS\SysNative\drivers\TAOAccelerator64.sys
[-] Soubor smazán: C:\WINDOWS\SysNative\drivers\TSSKX64.sys
[!] Soubor nelze smazat:C:\WINDOWS\SysNative\drivers\TAOKernel64.sys
[-] Soubor smazán: C:\WINDOWS\SysNative\drivers\TFsFltX64.sys
[-] Soubor smazán: C:\WINDOWS\SysWOW64\drivers\TS888x64.sys


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****

[-] Úloha smazána: amiupdaterExd
[-] Úloha smazána: amiupdaterExi


***** [ Registry ] *****

[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\taoaccelerator
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\services\taokerneldriver
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\tfsflt
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\tsskx64
[-] Klíč smazán: HKLM\SOFTWARE\Classes\driverscanner
[-] Klíč smazán: HKLM\SOFTWARE\Classes\HCDNProxy
[-] Klíč smazán: HKLM\SOFTWARE\Classes\metnsd
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PCMgrRepairIEExtensions
[-] Klíč smazán: HKLM\SOFTWARE\Classes\ppsmb
[-] Klíč smazán: HKLM\SOFTWARE\Classes\qmbfile
[-] Klíč smazán: HKLM\SOFTWARE\Classes\qmgcfiles
[-] Klíč smazán: HKLM\SOFTWARE\Classes\qpakfile
[-] Klíč smazán: HKLM\SOFTWARE\Classes\QQPCMgr.qbox
[-] Klíč smazán: HKLM\SOFTWARE\Classes\qygameclient
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\driverscanner
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\HCDNProxy
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\metnsd
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PCMgrRepairIEExtensions
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ppsmb
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\qmbfile
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\qmgcfiles
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\qpakfile
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\QQPCMgr.qbox
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\qygameclient
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Classes\TypeLib\{E6F928E4-B672-4F3A-8CA2-53C4259235DE}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\{1E9BD312-7C8C-4422-906D-897F6D7714F2}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\{7A30415C-ABEE-4674-B64B-4CA145EEB0CA}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{138F4260-66CA-4F7C-812F-C6EED99B7EC7}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{790F2D3B-18EE-40E2-A45E-1FAC13B6AFB8}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}
[#] Klíč smazán po restartu: HKCU\Software\Classes\TypeLib\{E6F928E4-B672-4F3A-8CA2-53C4259235DE}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{B6360BD3-5CD0-40D3-BD87-DAFF37889F50}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{E1D75F62-CBBD-45C7-9D1D-6B5ECEC2E006}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{E6F928E4-B672-4F3A-8CA2-53C4259235DE}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{35627C7C-DB28-4772-9A6F-7607FFCBF9FF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{445E3964-15B0-472A-95F4-6242DD2EA066}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{593BE60A-1C6A-44F9-946D-A5EAB2D53511}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{C049F583-D724-4BAB-8F47-F13BCA41B808}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{8519F1E4-E25B-42B1-B361-0C643F45CF11}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Hodnota smazána: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
[-] Hodnota smazána: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{95289393-33EA-4F8D-B952-483415B9C955}]
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Conduit
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\MGShareware
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\PIP
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\PPStream
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\QyGameClient
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Softonic
[-] Klíč smazán: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\YahooPartnerToolbar
[#] Klíč smazán po restartu: HKCU\Software\Conduit
[#] Klíč smazán po restartu: HKCU\Software\MGShareware
[#] Klíč smazán po restartu: HKCU\Software\PIP
[#] Klíč smazán po restartu: HKCU\Software\PPStream
[#] Klíč smazán po restartu: HKCU\Software\QyGameClient
[#] Klíč smazán po restartu: HKCU\Software\Softonic
[#] Klíč smazán po restartu: HKCU\Software\YahooPartnerToolbar
[-] Klíč smazán: HKLM\SOFTWARE\Conduit
[-] Klíč smazán: HKLM\SOFTWARE\MGShareware
[-] Klíč smazán: HKLM\SOFTWARE\PIP
[-] Klíč smazán: HKLM\SOFTWARE\Uniblue
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Uniblue\DriverScanner
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
[#] Klíč smazán po restartu: [x64] HKCU\Software\Conduit
[#] Klíč smazán po restartu: [x64] HKCU\Software\MGShareware
[#] Klíč smazán po restartu: [x64] HKCU\Software\PIP
[#] Klíč smazán po restartu: [x64] HKCU\Software\PPStream
[#] Klíč smazán po restartu: [x64] HKCU\Software\QyGameClient
[#] Klíč smazán po restartu: [x64] HKCU\Software\Softonic
[#] Klíč smazán po restartu: [x64] HKCU\Software\YahooPartnerToolbar
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Klíč smazán: HKCU\Software\MozillaPlugins\@iqiyi.com/npWebPlayer
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [QyBrowser.exe]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [QyClient.exe]
[-] Klíč smazán: HKLM\SOFTWARE\MozillaPlugins\@iqiyi.com/npclient
[-] Klíč smazán: HKLM\SOFTWARE\MozillaPlugins\@iqiyi.com/npWebPlayer
[-] Klíč smazán: HKLM\SOFTWARE\MozillaPlugins\@qq.com/QQPCMgr
[-] Klíč smazán: HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\QMContextUninstall
[-] Klíč smazán: HKEY_CLASSES_ROOT\Folder\ShellEx\ContextMenuHandlers\QMContextUninstall
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.qq.qmchext
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\QMContextScan
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\QMContextScan.DLL
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AppID\QMContextUninstall.DLL
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\QMContextScan
[-] Klíč smazán: HKLM\SOFTWARE\Classes\.qbox
[-] Klíč smazán: HKLM\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextScan
[-] Klíč smazán: HKLM\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextUninstall
[#] Hodnota smazána po restartu: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION [QyBrowser.exe]
[#] Hodnota smazána po restartu: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION [QyClient.exe]
[-] Klíč smazán: HKEY_CLASSES_ROOT\.qmgc
[-] Klíč smazán: HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
[#] Klíč smazán po restartu: [x64] HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\Extensions\ooebklgpfnbcnpokahmdidgbmlcdepkm


***** [ Prohlížeče ] *****

[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazáno: slunecnice.cz
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazáno: search.conduit.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: bopakagnckmlgajfccecajhnimjiiedh
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: ejpbbhjlbipncjklfjjaedaieimbmdda
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: ooebklgpfnbcnpokahmdidgbmlcdepkm
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Web data] [Search Provider] Smazáno: slunecnice.cz
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Web data] [Search Provider] Smazáno: search.conduit.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2] [extension] Smazáno: ejpbbhjlbipncjklfjjaedaieimbmdda
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2] [extension] Smazáno: ooebklgpfnbcnpokahmdidgbmlcdepkm


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [12362 Bajty] - [20/05/2017 18:02:03]
C:\AdwCleaner\AdwCleaner[S0].txt - [12016 Bajty] - [20/05/2017 17:59:12]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [12510 Bajty] ##########

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 17:09
od Rudy
Dejte nový log FRST.

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 17:30
od netre
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-05-2017
Ran by User (administrator) on USER-HP (20-05-2017 18:17:19)
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User & DefaultAppPool)
Platform: Windows 10 Home Version 1703 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Prog-Soft s.r.o.) C:\Program Files (x86)\PSPad editor\PSPad.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPResources.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6489704 2010-09-22] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [LogiScrollApp] => C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954352 2016-03-30] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-20] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [584760 2010-09-28] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-05-23] (Raptr, Inc)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-03-04] (Plays.tv, LLC)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-11-26] (Nullsoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2013-01-16] (Hewlett-Packard Company)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\MountPoints2: {3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} - "F:\HiSuiteDownLoader.exe"
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-20] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Guage.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Guage.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe (Clarus, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Real-Time Daemon.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Real-Time Daemon.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe (Clarus, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Scheduler.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Scheduler.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe (Clarus, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{97cce5a3-2359-42b4-9727-cb87c2db1915}: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{bea449f1-bccd-4dc4-ad33-b953f3f0b6fd}: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = hxxp://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO: Logitech Flow Scroll -> {E11DB59D-5008-42ff-9069-535843BC0BE1} -> C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll [2012-02-08] (Logitech, Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-20] (Oracle Corporation)
BHO-x32: Logitech Flow Scroll -> {E11DB59D-5008-42ff-9069-535843BC0BE1} -> C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll [2012-02-08] (Logitech, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rcqetvf.default [2017-05-20]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/search?bcutc=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF Keyword.URL: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/search?bcutc=sp-006
FF Homepage: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/?bcutc=sp-006
FF NewTab: Mozilla\Firefox\Profiles\1rcqetvf.default -> about:newtab
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rcqetvf.default\searchplugins\google-avast.xml [2017-05-20]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt
FF Extension: (Logitech Flow Scroll) - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt [2013-05-30] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\url_advisor@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\virtual_keyboard@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\content_blocker@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\anti_banner@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\online_banking@kaspersky.com => not found
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [No File]
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-08-12] ()

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR HomePage: Profile 2 -> hxxp://www.google.com/
CHR StartupUrls: Profile 2 -> "hxxp://www.google.com/","hxxp://securedsearch2 ... 5249C5D543"
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-05-20]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-01-06]
CHR Extension: (Logitech Flow Scroll) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\geooogfhpjdpeiphckpbgkhpbeobcaoi [2014-03-10]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-05-20]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-05-20]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-08]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-22]
CHR Extension: (Adobe Acrobat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-03]
CHR Extension: (Logitech Flow Scroll) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\geooogfhpjdpeiphckpbgkhpbeobcaoi [2016-01-08]
CHR Extension: (Ochrana Kaspersky) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2016-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2017-05-20]
CHR Extension: (Prezentace Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-17]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-17]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-19]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-17]
CHR Extension: (Vyhledávání Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-17]
CHR Extension: (Tabulky Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-17]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-17]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\urladvisor.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [geooogfhpjdpeiphckpbgkhpbeobcaoi] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-05-30]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\online_banking_chrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\content_blocker_chrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\virtkbd.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - hxxps://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\ab.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-20] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-20] (AVAST Software)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-06-07] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-06-07] (Creative Labs) [File not signed]
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed]
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [245544 2016-05-05] (EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [File not signed]
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] ()
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2013-01-16] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2130440 2016-08-29] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2195984 2016-08-29] (Electronic Arts)
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-03-04] (Plays.tv, LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-29] ()
S2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [183488 2014-10-16] ()
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [File not signed]
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [105448 2014-09-11] (Razer Inc.)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.) [File not signed]
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.) [File not signed]
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.) [File not signed]
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [651776 2009-08-31] (Nokia) [File not signed]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [253960 2016-03-30] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [311808 2017-05-20] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [190256 2017-05-20] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334576 2017-05-20] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [49016 2017-05-20] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-05-20] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32600 2017-05-20] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [128648 2017-05-20] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-05-20] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-05-20] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1007160 2017-05-20] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [569192 2017-05-20] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [158880 2017-05-20] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-05-20] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [111120 2016-01-25] (Advanced Micro Devices)
R0 CSCrySec; C:\WINDOWS\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\WINDOWS\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [14456 2013-09-30] (GFI Software)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
S1 kltdi; C:\WINDOWS\System32\DRIVERS\kltdi.sys [54368 2013-12-18] (Kaspersky Lab ZAO)
S3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [20480 2011-04-04] (Marvell Semiconductor, Inc.)
R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2017-03-18] (MediaTek Inc.)
R1 rsutils; C:\WINDOWS\System32\DRIVERS\rsutils.sys [71760 2015-04-09] (Beijing Rising Information Technology Co., Ltd.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-10-16] (Razer, Inc.)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver.sys [20016 2011-10-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-03-30] (Synaptics Incorporated)
R0 sysmon; C:\WINDOWS\System32\DRIVERS\sysmon.sys [119256 2015-04-30] (Beijing Rising Information Technology Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
S3 XENfiltv; C:\WINDOWS\system32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
U1 aswbdisk; no ImagePath
U3 idsvc; no ImagePath
S1 KLIM6; \SystemRoot\system32\DRIVERS\klim6.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-05-20 18:17 - 2017-05-20 18:17 - 02429952 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-05-20 18:07 - 2017-05-20 18:07 - 00000000 ____D C:\ProgramData\Rising
2017-05-20 17:55 - 2017-05-20 18:02 - 00000000 ____D C:\AdwCleaner
2017-05-20 17:51 - 2017-05-20 17:51 - 04110280 _____ C:\Users\User\Desktop\adwcleaner_6.047.exe
2017-05-20 17:01 - 2017-05-20 17:01 - 00019057 _____ C:\Users\User\Downloads\Addition.rar
2017-05-20 16:30 - 2017-05-20 16:35 - 00075858 _____ C:\Users\User\Downloads\Addition.txt
2017-05-20 16:28 - 2017-05-20 18:19 - 00031696 _____ C:\Users\User\Downloads\FRST.txt
2017-05-20 16:15 - 2017-05-20 18:17 - 00000000 ____D C:\FRST
2017-05-20 16:11 - 2017-05-20 16:11 - 01329152 _____ C:\Users\User\Downloads\RSITx64.exe
2017-05-20 10:12 - 2017-05-20 10:12 - 00001064 _____ C:\Users\Public\Desktop\HiSuite.lnk
2017-05-20 10:12 - 2017-05-20 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2017-05-20 10:11 - 2017-05-20 10:12 - 00000000 ____D C:\Program Files (x86)\HiSuite
2017-05-20 10:11 - 2017-05-20 10:11 - 00000000 ____D C:\Users\User\Downloads\HiSuite_5.0.1.300_OVE
2017-05-20 10:11 - 2016-11-25 08:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys
2017-05-20 10:06 - 2017-05-20 10:06 - 00111448 _____ C:\Users\User\Documents\cc_20170520_100627.reg
2017-05-20 09:55 - 2017-05-20 09:55 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-05-20 09:55 - 2017-05-20 09:55 - 00000000 ____D C:\Users\User\AppData\Roaming\Sun
2017-05-20 09:55 - 2017-05-20 09:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-20 09:53 - 2017-05-20 09:55 - 00000000 ____D C:\ProgramData\Oracle
2017-05-20 09:52 - 2017-05-20 09:52 - 01157656 _____ (Oracle Corporation) C:\Users\User\Downloads\JavaUninstallTool.exe
2017-05-20 09:51 - 2017-05-20 09:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2017-05-20 09:50 - 2017-05-20 09:50 - 00000000 ____D C:\ProgramData\Apple Computer
2017-05-20 09:23 - 2017-05-20 09:23 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2017-05-20 09:22 - 2017-05-20 09:22 - 00004006 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1495264965
2017-05-20 09:22 - 2017-05-20 09:22 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-05-20 09:22 - 2017-05-20 09:22 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-05-20 09:21 - 2017-05-20 09:21 - 00032600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-05-20 09:20 - 2017-05-20 09:20 - 00000000 ____D C:\Users\User\AppData\Roaming\AVAST Software
2017-05-20 09:20 - 2017-05-20 09:20 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-05-20 09:19 - 2017-05-20 09:19 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-05-20 09:19 - 2017-05-20 09:19 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-05-20 09:19 - 2017-05-20 09:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-05-20 09:18 - 2017-05-20 09:19 - 00158880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2017-05-20 09:18 - 2017-05-20 09:18 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-05-20 09:18 - 2017-05-20 09:17 - 01007160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00569192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00400456 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-05-20 09:18 - 2017-05-20 09:17 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00334576 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00311808 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00190256 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00128648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00049016 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-05-20 09:15 - 2017-05-20 10:15 - 00000000 ____D C:\ProgramData\AVAST Software
2017-05-20 09:15 - 2017-05-20 09:21 - 00000000 ____D C:\Program Files\AVAST Software
2017-05-20 09:12 - 2017-05-20 09:12 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 45.lnk
2017-05-19 19:53 - 2017-01-09 11:25 - 00453382 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20170519-195324.backup
2017-05-19 14:37 - 2017-05-19 14:37 - 00280903 _____ C:\Users\User\Downloads\Rozvodove-formulare.pdf
2017-05-18 17:11 - 2017-05-18 17:11 - 00054911 _____ C:\Users\User\Downloads\richard-vojik-4c25f517870.ics
2017-05-18 08:49 - 2017-05-18 08:49 - 00004116 _____ C:\Users\User\AppData\Local\recently-used.xbel
2017-05-18 07:47 - 2017-05-18 08:15 - 00000000 ____D C:\Users\User\AppData\Local\gtk-2.0
2017-05-18 07:39 - 2017-05-18 07:39 - 00203944 _____ C:\Users\User\Downloads\LOGO.pdf
2017-05-15 09:54 - 2017-05-15 09:54 - 00000000 ____D C:\Users\User\AppData\Local\CCP
2017-05-15 09:54 - 2017-05-15 09:54 - 00000000 ____D C:\Users\User\.EVE
2017-05-15 09:52 - 2017-05-15 09:52 - 00000917 _____ C:\Users\User\Desktop\EVE Launcher.lnk
2017-05-15 09:52 - 2017-05-15 09:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE Launcher
2017-05-15 09:48 - 2017-05-15 09:48 - 00040556 _____ C:\Users\User\Downloads\Vyúčtování_předpisu_pojistného.pdf
2017-05-10 19:14 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-05-10 19:14 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-10 19:14 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-05-10 19:14 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-05-10 19:14 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-10 19:14 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-10 19:14 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-10 19:14 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-10 19:14 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-05-10 19:14 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-10 19:14 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-05-10 19:14 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-10 19:14 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-05-10 19:14 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-10 19:14 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-05-10 19:14 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-05-10 19:14 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-05-10 19:14 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-10 19:14 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-05-10 19:14 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-05-10 19:14 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-10 19:14 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-05-10 19:14 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-05-10 19:14 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-05-10 19:14 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-05-10 19:14 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-10 19:14 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-05-10 19:14 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-10 19:14 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-05-10 19:14 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-05-10 19:14 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-10 19:14 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-05-10 19:14 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-10 19:14 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-05-10 19:14 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-05-10 19:14 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-10 19:14 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-10 19:14 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-05-10 19:14 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-05-10 19:14 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-05-10 19:14 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-10 19:14 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-05-10 19:14 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-05-10 19:14 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-05-10 19:14 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-05-10 19:14 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-05-10 19:14 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-05-10 19:14 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-05-10 19:14 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-10 19:14 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-10 19:14 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-10 19:14 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-05-10 19:14 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-10 19:14 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-10 19:14 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-05-10 19:14 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-05-10 19:14 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-05-10 19:14 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-05-10 19:14 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-10 19:14 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-05-10 19:14 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-10 19:14 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-05-10 19:14 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-05-10 19:14 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-05-10 19:14 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-10 19:14 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-10 19:13 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-10 19:13 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-05-10 19:13 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-05-10 19:13 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-10 19:13 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-10 19:13 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-10 19:13 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-05-10 19:13 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-05-10 19:13 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-05-10 19:13 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-05-10 19:13 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-10 19:13 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-05-10 19:13 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-05-10 19:13 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-10 19:13 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-10 19:13 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-10 19:13 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-05-10 19:13 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-05-10 19:13 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-05-10 19:13 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-05-10 19:13 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-05-10 19:13 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-10 19:13 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-05-10 19:13 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-05-10 19:13 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-10 19:13 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-05-10 19:13 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-05-10 19:13 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-10 19:13 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-05-10 19:13 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-05-10 19:13 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-05-10 19:13 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-05-10 19:13 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-10 19:13 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-10 19:13 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-05-07 11:36 - 2017-05-07 11:37 - 00000000 ____D C:\Users\User\Downloads\Clanadonia
2017-05-07 11:31 - 2017-05-20 09:24 - 00000000 ____D C:\Users\User\Downloads\laboratorium piesni
2017-05-07 11:21 - 2017-05-07 11:31 - 00000000 ____D C:\Users\User\Downloads\Annutara
2017-05-07 11:17 - 2017-05-07 11:17 - 00001407 _____ C:\Users\Public\Desktop\Music Search MP3.lnk
2017-05-07 11:17 - 2013-05-23 09:52 - 00386560 _____ (Dart Communications) C:\WINDOWS\SysWOW64\DartSecure2.dll
2017-05-07 11:17 - 2013-05-23 09:52 - 00234496 _____ (Dart Communications) C:\WINDOWS\SysWOW64\DartCertificate.dll
2017-05-07 11:17 - 2013-05-06 13:17 - 00425472 _____ (Dart Communications) C:\WINDOWS\SysWOW64\DartSock.dll
2017-05-07 11:17 - 2008-08-18 19:18 - 00077824 _____ (Fox Magic Software) C:\WINDOWS\SysWOW64\fmcodec.DLL
2017-05-07 08:07 - 2017-05-07 08:07 - 00000000 ____D C:\WINDOWS\PCHEALTH
2017-05-07 08:06 - 2017-05-07 09:31 - 1485029986 _____ C:\Users\User\Downloads\Monty-Python-a-Svaty-Gral-Monty-Python-and-the-Holy-Grail-1080p-x264-AC3-Cz.mp4
2017-05-06 10:25 - 2017-05-06 10:25 - 00003272 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-06 10:23 - 2017-05-06 10:23 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-06 10:22 - 2017-05-06 10:22 - 00000000 ____D C:\Users\User\AppData\Local\DBG
2017-05-06 10:20 - 2017-05-06 10:20 - 00000020 ___SH C:\Users\User\ntuser.ini
2017-05-06 10:17 - 2017-05-06 10:18 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-05-06 10:17 - 2017-05-06 10:18 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-05-06 10:12 - 2017-05-20 18:03 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-06 10:12 - 2017-05-20 09:12 - 00003954 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1435357027
2017-05-06 10:12 - 2017-05-09 18:57 - 00004600 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-05-06 10:12 - 2017-05-09 18:56 - 00004458 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-06 10:12 - 2017-05-06 10:33 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-05-06 10:12 - 2017-05-06 10:12 - 00003764 _____ C:\WINDOWS\System32\Tasks\AMD Updater
2017-05-06 10:12 - 2017-05-06 10:12 - 00003398 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-05-06 10:12 - 2017-05-06 10:12 - 00003174 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-05-06 10:12 - 2017-05-06 10:12 - 00002854 _____ C:\WINDOWS\System32\Tasks\Ad-Aware Update (Weekly)
2017-05-06 10:12 - 2017-05-06 10:12 - 00002684 _____ C:\WINDOWS\System32\Tasks\{9924301B-5C49-43CF-88D1-949DD04342C4}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002524 _____ C:\WINDOWS\System32\Tasks\MirageAgent
2017-05-06 10:12 - 2017-05-06 10:12 - 00002418 _____ C:\WINDOWS\System32\Tasks\AutoKMS
2017-05-06 10:12 - 2017-05-06 10:12 - 00002350 _____ C:\WINDOWS\System32\Tasks\{6E434879-F320-4448-8E96-4BBA6DFF0AFB}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002310 _____ C:\WINDOWS\System32\Tasks\{0E0458F6-D2A7-447B-81C3-634BA34E7B7A}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002262 _____ C:\WINDOWS\System32\Tasks\{E7A99D0E-7B9D-4381-AEC7-0ABC4E5722B4}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002262 _____ C:\WINDOWS\System32\Tasks\{489E63E4-7689-4655-8130-83C7005B03B4}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002236 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-05-06 10:12 - 2017-05-06 10:12 - 00002206 _____ C:\WINDOWS\System32\Tasks\{A5D9CD77-DDBF-4EE2-94A1-79882306DF9C}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002142 _____ C:\WINDOWS\System32\Tasks\{92163F4B-FA2A-45D9-91AE-F773630B355A}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002142 _____ C:\WINDOWS\System32\Tasks\{6879AF53-DEB6-4D8B-8ACA-28EFB59E805D}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002092 _____ C:\WINDOWS\System32\Tasks\{3BD11269-A43C-41D0-B93D-A8B7CF6C61F7}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002016 _____ C:\WINDOWS\System32\Tasks\{14EFCECF-C105-494E-BB42-A63CDF382A53}
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2017-05-06 09:58 - 2017-05-06 09:58 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-06 09:52 - 2017-05-06 09:52 - 00000000 ____D C:\ProgramData\USOShared
2017-05-06 09:50 - 2017-05-06 09:50 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-05-06 09:49 - 2017-05-06 09:59 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-05-06 09:46 - 2017-05-20 09:23 - 00000000 ____D C:\Users\DefaultAppPool
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Šablony
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Soubory cookie
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Poslední
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Okolní tiskárny
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Okolní síť
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Nabídka Start
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Dokumenty
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Documents\Obrázky
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Documents\Hudba
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Documents\Filmy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Data aplikací
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\AppData\Local\Data aplikací
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Šablony
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Soubory cookie
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Poslední
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Okolní tiskárny
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Okolní síť
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Nabídka Start
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Dokumenty
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Obrázky
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Hudba
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Filmy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Data aplikací
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Data aplikací
2017-05-06 09:45 - 2017-05-20 18:10 - 02802892 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-06 09:45 - 2017-05-06 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-05-06 09:45 - 2017-05-06 09:51 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-06 09:45 - 2017-05-06 09:50 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2017-05-06 09:45 - 2017-05-06 09:45 - 01970242 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-05-06 09:45 - 2017-05-06 09:45 - 00000000 ____D C:\Program Files\ATI Technologies
2017-05-06 09:44 - 2017-05-06 09:59 - 00000000 ____D C:\Program Files\AMD
2017-05-06 09:44 - 2017-05-06 09:50 - 00000000 ____D C:\Program Files\Realtek
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2017-05-06 09:44 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-05-06 09:43 - 2017-05-06 09:43 - 00000000 ____D C:\Program Files\Synaptics
2017-05-06 09:41 - 2017-05-06 09:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-05-06 09:40 - 2017-05-12 12:59 - 02448400 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-06 08:27 - 2017-05-06 08:27 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-05-06 08:27 - 2017-05-06 08:27 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-05-06 08:27 - 2017-05-06 08:27 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-05-06 08:23 - 2017-03-17 23:00 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-05-06 08:23 - 2017-03-17 22:59 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-05-06 08:23 - 2017-03-17 22:48 - 06348288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-05-06 08:23 - 2017-03-17 22:43 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-05-06 08:23 - 2017-03-17 22:35 - 05484544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-05-06 08:18 - 2017-05-06 09:41 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-05-06 08:18 - 2017-05-06 08:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\system32\msmq
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files\MSBuild
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\inetpub
2017-05-06 08:14 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-06 08:14 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-05-04 17:45 - 2017-05-04 17:46 - 00222291 _____ C:\Users\User\Downloads\Uvolni svou sílu 12.-14.5.2017.pdf
2017-05-04 16:11 - 2017-05-04 16:11 - 00340992 _____ C:\Users\User\Downloads\08-21.XLS
2017-05-04 16:11 - 2017-05-04 16:11 - 00340992 _____ C:\Users\User\Downloads\08-14.XLS
2017-05-03 08:00 - 2017-04-13 18:50 - 1295190767 _____ C:\Users\User\Desktop\Rogue.One.Star.Wars.Story.2016.BluRay.AC3.5.1.CZ.dabing.mkv
2017-05-03 07:59 - 2017-05-03 07:59 - 00000000 ____D C:\Users\User\Desktop\Hacksaw-Ridge---Zrozeni-hrdiny-2016---EN-dab-CZ-tit-v-obraze
2017-05-01 11:08 - 2017-05-01 11:09 - 00000000 ____D C:\Users\User\Desktop\Terapie
2017-04-27 08:48 - 2017-05-20 10:04 - 00000000 ___DC C:\WINDOWS\Panther
2017-04-27 08:46 - 2017-04-27 08:46 - 00000000 ____D C:\Users\User\AppData\Roaming\Google
2017-04-26 10:45 - 2017-04-26 10:45 - 00000000 ____D C:\Users\User\AppData\Local\UNP
2017-04-26 10:12 - 2017-05-06 09:59 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-04-26 10:12 - 2017-04-26 10:13 - 00000000 ____D C:\Program Files\UNP
2017-04-25 08:49 - 2017-04-25 08:49 - 00618192 _____ C:\Users\User\Downloads\Doklad_2171375969.pdf
2017-04-23 11:08 - 2017-04-23 11:08 - 00000000 ____D C:\Users\User\.thumbnails
2017-04-21 21:41 - 2017-04-21 21:41 - 00002016 _____ C:\Users\User\New document 1.2017_04_21_21_41_31.0.svg
2017-04-21 21:40 - 2017-05-20 10:04 - 00000000 ____D C:\Users\User\AppData\Roaming\inkscape

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-05-20 18:10 - 2017-03-20 06:43 - 01236616 _____ C:\WINDOWS\system32\perfh005.dat
2017-05-20 18:10 - 2017-03-20 06:43 - 00309478 _____ C:\WINDOWS\system32\perfc005.dat
2017-05-20 18:04 - 2016-09-21 11:03 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-05-20 18:02 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-05-20 15:40 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-05-20 10:04 - 2015-07-17 07:15 - 00000000 ____D C:\Users\User\AppData\Roaming\MPC-HC
2017-05-20 10:04 - 2015-06-21 09:22 - 00000000 ____D C:\Users\User\AppData\Roaming\Media Player Classic
2017-05-20 10:00 - 2012-04-08 14:54 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-05-20 09:54 - 2011-07-19 22:05 - 00000000 ____D C:\Program Files (x86)\Java
2017-05-20 09:51 - 2012-02-10 11:36 - 00000000 ____D C:\Program Files (x86)\QuickTime
2017-05-20 09:49 - 2015-11-07 01:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-20 09:49 - 2011-07-18 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-05-20 09:49 - 2011-07-18 18:02 - 00000000 ____D C:\Program Files (x86)\7-Zip
2017-05-20 09:26 - 2017-04-10 11:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-05-20 09:26 - 2011-07-20 00:49 - 00000000 ____D C:\ProgramData\Skype
2017-05-20 09:20 - 2012-05-10 21:23 - 00000000 ____D C:\temp
2017-05-20 09:19 - 2015-08-01 14:45 - 00000000 ____D C:\Program Files\Common Files\AV
2017-05-20 09:12 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-20 09:12 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-05-20 09:12 - 2011-07-18 22:05 - 00000000 ____D C:\Program Files (x86)\Opera
2017-05-20 09:10 - 2017-01-05 18:21 - 00000000 ____D C:\Users\User\AppData\Local\Hisuite
2017-05-18 08:32 - 2017-04-16 22:02 - 00000000 ____D C:\Users\User\.gimp-2.8
2017-05-17 07:16 - 2012-11-11 07:59 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-15 09:52 - 2011-07-19 08:52 - 00000000 ____D C:\Games
2017-05-12 13:34 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-05-12 13:00 - 2016-02-09 16:23 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-12 12:57 - 2013-03-13 16:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-05-12 12:57 - 2013-03-13 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-05-11 16:00 - 2012-02-19 13:26 - 00000000 ____D C:\Program Files (x86)\Steam
2017-05-11 15:54 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-05-11 15:52 - 2013-07-19 01:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-11 15:46 - 2011-07-22 01:05 - 156335152 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-09 18:57 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-05-09 18:57 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-07 11:17 - 2016-06-05 20:33 - 00001263 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2017-05-07 11:17 - 2014-05-27 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2017-05-07 08:14 - 2013-03-13 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-05-07 07:49 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-05-06 10:38 - 2016-02-09 16:23 - 00000000 ____D C:\Users\User\AppData\Local\Packages
2017-05-06 10:25 - 2016-09-12 11:59 - 00002425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-05-06 10:25 - 2016-09-12 11:59 - 00000000 ___RD C:\Users\User\OneDrive
2017-05-06 10:21 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-06 10:20 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-06 10:19 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-05-06 10:19 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-05-06 10:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-05-06 10:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration
2017-05-06 10:12 - 2017-03-20 06:46 - 00000000 ____D C:\WINDOWS\HoloShell
2017-05-06 10:12 - 2016-02-09 12:45 - 00023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-05-06 10:11 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media
2017-05-06 10:10 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-06 09:59 - 2017-03-31 19:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ztroskotání - zrádné světlo - Sběratelská edice
2017-05-06 09:59 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-05-06 09:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-06 09:59 - 2016-08-10 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMR to MP3 Converter
2017-05-06 09:59 - 2016-02-09 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-05-06 09:59 - 2015-10-30 20:35 - 00000000 ____D C:\WINDOWS\ShellNew
2017-05-06 09:59 - 2015-09-26 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q3E Minimizer v1.51
2017-05-06 09:59 - 2015-08-28 00:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2017-05-06 09:59 - 2015-06-21 15:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2017-05-06 09:59 - 2015-06-20 07:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2017-05-06 09:59 - 2015-04-09 09:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mIRC
2017-05-06 09:59 - 2014-06-26 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2017-05-06 09:59 - 2014-02-23 04:10 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TygemBaduk Program
2017-05-06 09:59 - 2014-01-15 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QIP Infium
2017-05-06 09:59 - 2013-10-05 01:00 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2017-05-06 09:59 - 2013-07-22 15:16 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jízdní řád MHD České Budějovice
2017-05-06 09:59 - 2013-06-07 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2017-05-06 09:59 - 2013-05-16 16:07 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
2017-05-06 09:59 - 2013-05-14 00:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-05-06 09:59 - 2013-04-24 07:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyPic JPG to PDF Converter
2017-05-06 09:59 - 2013-04-16 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2017-05-06 09:59 - 2013-01-29 11:02 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2017-05-06 09:59 - 2013-01-07 08:28 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-05-06 09:59 - 2012-11-09 00:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2017-05-06 09:59 - 2012-09-04 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-05-06 09:59 - 2012-07-17 23:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2017-05-06 09:59 - 2012-04-08 14:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-06 09:59 - 2012-02-28 16:43 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-06 09:59 - 2012-02-19 14:54 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-06 09:59 - 2012-02-19 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-06 09:59 - 2012-02-15 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-05-06 09:59 - 2011-09-25 19:50 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-06 09:59 - 2011-07-24 12:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-05-06 09:59 - 2011-07-20 18:32 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-06 09:59 - 2011-07-20 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-06 09:59 - 2011-07-20 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2017-05-06 09:59 - 2011-07-19 22:40 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
2017-05-06 09:59 - 2011-07-19 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeRIP3
2017-05-06 09:59 - 2011-07-18 18:02 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2017-05-06 09:59 - 2011-07-18 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2017-05-06 09:59 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-06 09:59 - 2009-01-27 00:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
2017-05-06 09:59 - 2009-01-27 00:25 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager
2017-05-06 09:59 - 2009-01-27 00:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
2017-05-06 09:59 - 2009-01-27 00:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-05-06 09:52 - 2012-11-09 00:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2017-05-06 09:52 - 2011-07-22 00:55 - 00000000 ____D C:\WINDOWS\system32\SPReview
2017-05-06 09:52 - 2011-07-22 00:54 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2017-05-06 09:51 - 2017-04-16 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dry Creek Photo
2017-05-06 09:51 - 2017-04-16 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serif
zdůvodu omezení znaků druhou část pošlu vzápětí.

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 17:30
od netre
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-05-2017
Ran by User (administrator) on USER-HP (20-05-2017 18:17:19)
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User & DefaultAppPool)
Platform: Windows 10 Home Version 1703 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Prog-Soft s.r.o.) C:\Program Files (x86)\PSPad editor\PSPad.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPResources.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6489704 2010-09-22] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [LogiScrollApp] => C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954352 2016-03-30] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-20] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [584760 2010-09-28] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-05-23] (Raptr, Inc)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-03-04] (Plays.tv, LLC)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-11-26] (Nullsoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2013-01-16] (Hewlett-Packard Company)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\MountPoints2: {3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} - "F:\HiSuiteDownLoader.exe"
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-20] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Guage.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Guage.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe (Clarus, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Real-Time Daemon.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Real-Time Daemon.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe (Clarus, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Auto Backup Scheduler.lnk [2011-07-19]
ShortcutTarget: Samsung Auto Backup Scheduler.lnk -> C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe (Clarus, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{97cce5a3-2359-42b4-9727-cb87c2db1915}: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{bea449f1-bccd-4dc4-ad33-b953f3f0b6fd}: [DhcpNameServer] 10.108.10.108 10.108.10.109 8.8.8.8 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = hxxp://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO: Logitech Flow Scroll -> {E11DB59D-5008-42ff-9069-535843BC0BE1} -> C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll [2012-02-08] (Logitech, Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-20] (Oracle Corporation)
BHO-x32: Logitech Flow Scroll -> {E11DB59D-5008-42ff-9069-535843BC0BE1} -> C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll [2012-02-08] (Logitech, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rcqetvf.default [2017-05-20]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/search?bcutc=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\1rcqetvf.default -> Google
FF Keyword.URL: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/search?bcutc=sp-006
FF Homepage: Mozilla\Firefox\Profiles\1rcqetvf.default -> hxxps://www.google.com/?bcutc=sp-006
FF NewTab: Mozilla\Firefox\Profiles\1rcqetvf.default -> about:newtab
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1rcqetvf.default\searchplugins\google-avast.xml [2017-05-20]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt
FF Extension: (Logitech Flow Scroll) - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt [2013-05-30] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\url_advisor@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\virtual_keyboard@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\content_blocker@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\anti_banner@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\online_banking@kaspersky.com => not found
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [No File]
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-08-12] ()

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR HomePage: Profile 2 -> hxxp://www.google.com/
CHR StartupUrls: Profile 2 -> "hxxp://www.google.com/","hxxp://securedsearch2 ... 5249C5D543"
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-05-20]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-01-06]
CHR Extension: (Logitech Flow Scroll) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\geooogfhpjdpeiphckpbgkhpbeobcaoi [2014-03-10]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-05-20]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-05-20]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-08]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-22]
CHR Extension: (Adobe Acrobat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-03]
CHR Extension: (Logitech Flow Scroll) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\geooogfhpjdpeiphckpbgkhpbeobcaoi [2016-01-08]
CHR Extension: (Ochrana Kaspersky) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2016-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2017-05-20]
CHR Extension: (Prezentace Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-17]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-17]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-19]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-17]
CHR Extension: (Vyhledávání Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-17]
CHR Extension: (Tabulky Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-17]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-17]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\urladvisor.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [geooogfhpjdpeiphckpbgkhpbeobcaoi] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-05-30]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\online_banking_chrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\content_blocker_chrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\virtkbd.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - hxxps://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\ChromeExt\ab.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-20] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-20] (AVAST Software)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-06-07] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-06-07] (Creative Labs) [File not signed]
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed]
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [245544 2016-05-05] (EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [File not signed]
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] ()
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2013-01-16] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2130440 2016-08-29] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2195984 2016-08-29] (Electronic Arts)
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-03-04] (Plays.tv, LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-29] ()
S2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [183488 2014-10-16] ()
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [File not signed]
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [105448 2014-09-11] (Razer Inc.)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.) [File not signed]
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.) [File not signed]
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.) [File not signed]
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [651776 2009-08-31] (Nokia) [File not signed]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [253960 2016-03-30] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [311808 2017-05-20] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [190256 2017-05-20] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334576 2017-05-20] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [49016 2017-05-20] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-05-20] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32600 2017-05-20] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [128648 2017-05-20] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-05-20] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-05-20] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1007160 2017-05-20] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [569192 2017-05-20] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [158880 2017-05-20] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-05-20] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [111120 2016-01-25] (Advanced Micro Devices)
R0 CSCrySec; C:\WINDOWS\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\WINDOWS\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [14456 2013-09-30] (GFI Software)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
S1 kltdi; C:\WINDOWS\System32\DRIVERS\kltdi.sys [54368 2013-12-18] (Kaspersky Lab ZAO)
S3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [20480 2011-04-04] (Marvell Semiconductor, Inc.)
R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2017-03-18] (MediaTek Inc.)
R1 rsutils; C:\WINDOWS\System32\DRIVERS\rsutils.sys [71760 2015-04-09] (Beijing Rising Information Technology Co., Ltd.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-10-16] (Razer, Inc.)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver.sys [20016 2011-10-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-03-30] (Synaptics Incorporated)
R0 sysmon; C:\WINDOWS\System32\DRIVERS\sysmon.sys [119256 2015-04-30] (Beijing Rising Information Technology Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
S3 XENfiltv; C:\WINDOWS\system32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
U1 aswbdisk; no ImagePath
U3 idsvc; no ImagePath
S1 KLIM6; \SystemRoot\system32\DRIVERS\klim6.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-05-20 18:17 - 2017-05-20 18:17 - 02429952 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-05-20 18:07 - 2017-05-20 18:07 - 00000000 ____D C:\ProgramData\Rising
2017-05-20 17:55 - 2017-05-20 18:02 - 00000000 ____D C:\AdwCleaner
2017-05-20 17:51 - 2017-05-20 17:51 - 04110280 _____ C:\Users\User\Desktop\adwcleaner_6.047.exe
2017-05-20 17:01 - 2017-05-20 17:01 - 00019057 _____ C:\Users\User\Downloads\Addition.rar
2017-05-20 16:30 - 2017-05-20 16:35 - 00075858 _____ C:\Users\User\Downloads\Addition.txt
2017-05-20 16:28 - 2017-05-20 18:19 - 00031696 _____ C:\Users\User\Downloads\FRST.txt
2017-05-20 16:15 - 2017-05-20 18:17 - 00000000 ____D C:\FRST
2017-05-20 16:11 - 2017-05-20 16:11 - 01329152 _____ C:\Users\User\Downloads\RSITx64.exe
2017-05-20 10:12 - 2017-05-20 10:12 - 00001064 _____ C:\Users\Public\Desktop\HiSuite.lnk
2017-05-20 10:12 - 2017-05-20 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2017-05-20 10:11 - 2017-05-20 10:12 - 00000000 ____D C:\Program Files (x86)\HiSuite
2017-05-20 10:11 - 2017-05-20 10:11 - 00000000 ____D C:\Users\User\Downloads\HiSuite_5.0.1.300_OVE
2017-05-20 10:11 - 2016-11-25 08:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys
2017-05-20 10:11 - 2016-11-25 08:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys
2017-05-20 10:06 - 2017-05-20 10:06 - 00111448 _____ C:\Users\User\Documents\cc_20170520_100627.reg
2017-05-20 09:55 - 2017-05-20 09:55 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-05-20 09:55 - 2017-05-20 09:55 - 00000000 ____D C:\Users\User\AppData\Roaming\Sun
2017-05-20 09:55 - 2017-05-20 09:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-20 09:53 - 2017-05-20 09:55 - 00000000 ____D C:\ProgramData\Oracle
2017-05-20 09:52 - 2017-05-20 09:52 - 01157656 _____ (Oracle Corporation) C:\Users\User\Downloads\JavaUninstallTool.exe
2017-05-20 09:51 - 2017-05-20 09:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2017-05-20 09:50 - 2017-05-20 09:50 - 00000000 ____D C:\ProgramData\Apple Computer
2017-05-20 09:23 - 2017-05-20 09:23 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2017-05-20 09:22 - 2017-05-20 09:22 - 00004006 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1495264965
2017-05-20 09:22 - 2017-05-20 09:22 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-05-20 09:22 - 2017-05-20 09:22 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-05-20 09:21 - 2017-05-20 09:21 - 00032600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-05-20 09:20 - 2017-05-20 09:20 - 00000000 ____D C:\Users\User\AppData\Roaming\AVAST Software
2017-05-20 09:20 - 2017-05-20 09:20 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-05-20 09:19 - 2017-05-20 09:19 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-05-20 09:19 - 2017-05-20 09:19 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-05-20 09:19 - 2017-05-20 09:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-05-20 09:18 - 2017-05-20 09:19 - 00158880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2017-05-20 09:18 - 2017-05-20 09:18 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-05-20 09:18 - 2017-05-20 09:17 - 01007160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00569192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00400456 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-05-20 09:18 - 2017-05-20 09:17 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00334576 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00311808 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00190256 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00128648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00049016 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-05-20 09:18 - 2017-05-20 09:17 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-05-20 09:15 - 2017-05-20 10:15 - 00000000 ____D C:\ProgramData\AVAST Software
2017-05-20 09:15 - 2017-05-20 09:21 - 00000000 ____D C:\Program Files\AVAST Software
2017-05-20 09:12 - 2017-05-20 09:12 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 45.lnk
2017-05-19 19:53 - 2017-01-09 11:25 - 00453382 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20170519-195324.backup
2017-05-19 14:37 - 2017-05-19 14:37 - 00280903 _____ C:\Users\User\Downloads\Rozvodove-formulare.pdf
2017-05-18 17:11 - 2017-05-18 17:11 - 00054911 _____ C:\Users\User\Downloads\richard-vojik-4c25f517870.ics
2017-05-18 08:49 - 2017-05-18 08:49 - 00004116 _____ C:\Users\User\AppData\Local\recently-used.xbel
2017-05-18 07:47 - 2017-05-18 08:15 - 00000000 ____D C:\Users\User\AppData\Local\gtk-2.0
2017-05-18 07:39 - 2017-05-18 07:39 - 00203944 _____ C:\Users\User\Downloads\LOGO.pdf
2017-05-15 09:54 - 2017-05-15 09:54 - 00000000 ____D C:\Users\User\AppData\Local\CCP
2017-05-15 09:54 - 2017-05-15 09:54 - 00000000 ____D C:\Users\User\.EVE
2017-05-15 09:52 - 2017-05-15 09:52 - 00000917 _____ C:\Users\User\Desktop\EVE Launcher.lnk
2017-05-15 09:52 - 2017-05-15 09:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE Launcher
2017-05-15 09:48 - 2017-05-15 09:48 - 00040556 _____ C:\Users\User\Downloads\Vyúčtování_předpisu_pojistného.pdf
2017-05-10 19:14 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-05-10 19:14 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-10 19:14 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-05-10 19:14 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-05-10 19:14 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-10 19:14 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-10 19:14 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-10 19:14 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-10 19:14 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-05-10 19:14 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-10 19:14 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-05-10 19:14 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-10 19:14 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-05-10 19:14 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-10 19:14 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-05-10 19:14 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-05-10 19:14 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-05-10 19:14 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-10 19:14 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-05-10 19:14 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-05-10 19:14 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-10 19:14 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-05-10 19:14 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-05-10 19:14 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-05-10 19:14 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-05-10 19:14 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-10 19:14 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-05-10 19:14 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-10 19:14 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-05-10 19:14 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-05-10 19:14 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-05-10 19:14 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-10 19:14 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-05-10 19:14 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-10 19:14 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-05-10 19:14 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-05-10 19:14 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-10 19:14 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-10 19:14 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-05-10 19:14 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-05-10 19:14 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-05-10 19:14 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-10 19:14 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-05-10 19:14 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-05-10 19:14 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-05-10 19:14 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-05-10 19:14 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-05-10 19:14 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-05-10 19:14 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-05-10 19:14 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-10 19:14 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-10 19:14 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-10 19:14 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-05-10 19:14 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-10 19:14 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-10 19:14 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-05-10 19:14 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-05-10 19:14 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-05-10 19:14 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-05-10 19:14 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-10 19:14 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-05-10 19:14 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-10 19:14 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-05-10 19:14 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-05-10 19:14 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-05-10 19:14 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-05-10 19:14 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-10 19:14 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-05-10 19:14 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-10 19:13 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-10 19:13 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-05-10 19:13 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-05-10 19:13 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-10 19:13 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-10 19:13 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-10 19:13 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-05-10 19:13 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-05-10 19:13 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-05-10 19:13 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-05-10 19:13 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-10 19:13 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-05-10 19:13 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-05-10 19:13 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-10 19:13 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-10 19:13 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-10 19:13 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-05-10 19:13 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-05-10 19:13 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-05-10 19:13 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-05-10 19:13 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-05-10 19:13 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-10 19:13 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-05-10 19:13 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-05-10 19:13 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-10 19:13 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-05-10 19:13 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-05-10 19:13 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-10 19:13 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-05-10 19:13 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-05-10 19:13 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-05-10 19:13 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-05-10 19:13 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-10 19:13 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-10 19:13 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-05-07 11:36 - 2017-05-07 11:37 - 00000000 ____D C:\Users\User\Downloads\Clanadonia
2017-05-07 11:31 - 2017-05-20 09:24 - 00000000 ____D C:\Users\User\Downloads\laboratorium piesni
2017-05-07 11:21 - 2017-05-07 11:31 - 00000000 ____D C:\Users\User\Downloads\Annutara
2017-05-07 11:17 - 2017-05-07 11:17 - 00001407 _____ C:\Users\Public\Desktop\Music Search MP3.lnk
2017-05-07 11:17 - 2013-05-23 09:52 - 00386560 _____ (Dart Communications) C:\WINDOWS\SysWOW64\DartSecure2.dll
2017-05-07 11:17 - 2013-05-23 09:52 - 00234496 _____ (Dart Communications) C:\WINDOWS\SysWOW64\DartCertificate.dll
2017-05-07 11:17 - 2013-05-06 13:17 - 00425472 _____ (Dart Communications) C:\WINDOWS\SysWOW64\DartSock.dll
2017-05-07 11:17 - 2008-08-18 19:18 - 00077824 _____ (Fox Magic Software) C:\WINDOWS\SysWOW64\fmcodec.DLL
2017-05-07 08:07 - 2017-05-07 08:07 - 00000000 ____D C:\WINDOWS\PCHEALTH
2017-05-07 08:06 - 2017-05-07 09:31 - 1485029986 _____ C:\Users\User\Downloads\Monty-Python-a-Svaty-Gral-Monty-Python-and-the-Holy-Grail-1080p-x264-AC3-Cz.mp4
2017-05-06 10:25 - 2017-05-06 10:25 - 00003272 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-06 10:23 - 2017-05-06 10:23 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-06 10:22 - 2017-05-06 10:22 - 00000000 ____D C:\Users\User\AppData\Local\DBG
2017-05-06 10:20 - 2017-05-06 10:20 - 00000020 ___SH C:\Users\User\ntuser.ini
2017-05-06 10:17 - 2017-05-06 10:18 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-05-06 10:17 - 2017-05-06 10:18 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-05-06 10:12 - 2017-05-20 18:03 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-06 10:12 - 2017-05-20 09:12 - 00003954 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1435357027
2017-05-06 10:12 - 2017-05-09 18:57 - 00004600 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-05-06 10:12 - 2017-05-09 18:56 - 00004458 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-06 10:12 - 2017-05-06 10:33 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-05-06 10:12 - 2017-05-06 10:12 - 00003764 _____ C:\WINDOWS\System32\Tasks\AMD Updater
2017-05-06 10:12 - 2017-05-06 10:12 - 00003398 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-05-06 10:12 - 2017-05-06 10:12 - 00003174 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-05-06 10:12 - 2017-05-06 10:12 - 00002854 _____ C:\WINDOWS\System32\Tasks\Ad-Aware Update (Weekly)
2017-05-06 10:12 - 2017-05-06 10:12 - 00002684 _____ C:\WINDOWS\System32\Tasks\{9924301B-5C49-43CF-88D1-949DD04342C4}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002524 _____ C:\WINDOWS\System32\Tasks\MirageAgent
2017-05-06 10:12 - 2017-05-06 10:12 - 00002418 _____ C:\WINDOWS\System32\Tasks\AutoKMS
2017-05-06 10:12 - 2017-05-06 10:12 - 00002350 _____ C:\WINDOWS\System32\Tasks\{6E434879-F320-4448-8E96-4BBA6DFF0AFB}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002310 _____ C:\WINDOWS\System32\Tasks\{0E0458F6-D2A7-447B-81C3-634BA34E7B7A}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002262 _____ C:\WINDOWS\System32\Tasks\{E7A99D0E-7B9D-4381-AEC7-0ABC4E5722B4}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002262 _____ C:\WINDOWS\System32\Tasks\{489E63E4-7689-4655-8130-83C7005B03B4}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002236 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-05-06 10:12 - 2017-05-06 10:12 - 00002206 _____ C:\WINDOWS\System32\Tasks\{A5D9CD77-DDBF-4EE2-94A1-79882306DF9C}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002142 _____ C:\WINDOWS\System32\Tasks\{92163F4B-FA2A-45D9-91AE-F773630B355A}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002142 _____ C:\WINDOWS\System32\Tasks\{6879AF53-DEB6-4D8B-8ACA-28EFB59E805D}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002092 _____ C:\WINDOWS\System32\Tasks\{3BD11269-A43C-41D0-B93D-A8B7CF6C61F7}
2017-05-06 10:12 - 2017-05-06 10:12 - 00002016 _____ C:\WINDOWS\System32\Tasks\{14EFCECF-C105-494E-BB42-A63CDF382A53}
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-05-06 10:12 - 2017-05-06 10:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2017-05-06 09:58 - 2017-05-06 09:58 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-06 09:52 - 2017-05-06 09:52 - 00000000 ____D C:\ProgramData\USOShared
2017-05-06 09:50 - 2017-05-06 09:50 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-05-06 09:49 - 2017-05-06 09:59 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-05-06 09:46 - 2017-05-20 09:23 - 00000000 ____D C:\Users\DefaultAppPool
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Šablony
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Soubory cookie
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Poslední
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Okolní tiskárny
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Okolní síť
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Nabídka Start
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Dokumenty
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Documents\Obrázky
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Documents\Hudba
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Documents\Filmy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\Data aplikací
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\User\AppData\Local\Data aplikací
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Šablony
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Soubory cookie
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Poslední
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Okolní tiskárny
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Okolní síť
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Nabídka Start
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Dokumenty
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Obrázky
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Hudba
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Filmy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\Data aplikací
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-05-06 09:46 - 2017-05-06 09:46 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Data aplikací
2017-05-06 09:45 - 2017-05-20 18:10 - 02802892 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-06 09:45 - 2017-05-06 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-05-06 09:45 - 2017-05-06 09:51 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-06 09:45 - 2017-05-06 09:50 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2017-05-06 09:45 - 2017-05-06 09:45 - 01970242 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-05-06 09:45 - 2017-05-06 09:45 - 00000000 ____D C:\Program Files\ATI Technologies
2017-05-06 09:44 - 2017-05-06 09:59 - 00000000 ____D C:\Program Files\AMD
2017-05-06 09:44 - 2017-05-06 09:50 - 00000000 ____D C:\Program Files\Realtek
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2017-05-06 09:44 - 2017-05-06 09:44 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2017-05-06 09:44 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-05-06 09:43 - 2017-05-06 09:43 - 00000000 ____D C:\Program Files\Synaptics
2017-05-06 09:41 - 2017-05-06 09:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-05-06 09:40 - 2017-05-12 12:59 - 02448400 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-06 08:27 - 2017-05-06 08:27 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-05-06 08:27 - 2017-05-06 08:27 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-05-06 08:27 - 2017-05-06 08:27 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-05-06 08:27 - 2017-05-06 08:27 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-05-06 08:27 - 2017-05-06 08:27 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-05-06 08:26 - 2017-05-06 08:26 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-05-06 08:26 - 2017-05-06 08:26 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-05-06 08:26 - 2017-05-06 08:26 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-05-06 08:23 - 2017-03-17 23:00 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-05-06 08:23 - 2017-03-17 22:59 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-05-06 08:23 - 2017-03-17 22:48 - 06348288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-05-06 08:23 - 2017-03-17 22:43 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-05-06 08:23 - 2017-03-17 22:35 - 05484544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-05-06 08:18 - 2017-05-06 09:41 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-05-06 08:18 - 2017-05-06 08:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\system32\msmq
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files\MSBuild
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-06 08:15 - 2017-05-06 08:15 - 00000000 ____D C:\inetpub
2017-05-06 08:14 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-06 08:14 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-05-06 08:14 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-05-04 17:45 - 2017-05-04 17:46 - 00222291 _____ C:\Users\User\Downloads\Uvolni svou sílu 12.-14.5.2017.pdf
2017-05-04 16:11 - 2017-05-04 16:11 - 00340992 _____ C:\Users\User\Downloads\08-21.XLS
2017-05-04 16:11 - 2017-05-04 16:11 - 00340992 _____ C:\Users\User\Downloads\08-14.XLS
2017-05-03 08:00 - 2017-04-13 18:50 - 1295190767 _____ C:\Users\User\Desktop\Rogue.One.Star.Wars.Story.2016.BluRay.AC3.5.1.CZ.dabing.mkv
2017-05-03 07:59 - 2017-05-03 07:59 - 00000000 ____D C:\Users\User\Desktop\Hacksaw-Ridge---Zrozeni-hrdiny-2016---EN-dab-CZ-tit-v-obraze
2017-05-01 11:08 - 2017-05-01 11:09 - 00000000 ____D C:\Users\User\Desktop\Terapie
2017-04-27 08:48 - 2017-05-20 10:04 - 00000000 ___DC C:\WINDOWS\Panther
2017-04-27 08:46 - 2017-04-27 08:46 - 00000000 ____D C:\Users\User\AppData\Roaming\Google
2017-04-26 10:45 - 2017-04-26 10:45 - 00000000 ____D C:\Users\User\AppData\Local\UNP
2017-04-26 10:12 - 2017-05-06 09:59 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-04-26 10:12 - 2017-04-26 10:13 - 00000000 ____D C:\Program Files\UNP
2017-04-25 08:49 - 2017-04-25 08:49 - 00618192 _____ C:\Users\User\Downloads\Doklad_2171375969.pdf
2017-04-23 11:08 - 2017-04-23 11:08 - 00000000 ____D C:\Users\User\.thumbnails
2017-04-21 21:41 - 2017-04-21 21:41 - 00002016 _____ C:\Users\User\New document 1.2017_04_21_21_41_31.0.svg
2017-04-21 21:40 - 2017-05-20 10:04 - 00000000 ____D C:\Users\User\AppData\Roaming\inkscape

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-05-20 18:10 - 2017-03-20 06:43 - 01236616 _____ C:\WINDOWS\system32\perfh005.dat
2017-05-20 18:10 - 2017-03-20 06:43 - 00309478 _____ C:\WINDOWS\system32\perfc005.dat
2017-05-20 18:04 - 2016-09-21 11:03 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-05-20 18:02 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-05-20 15:40 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-05-20 10:04 - 2015-07-17 07:15 - 00000000 ____D C:\Users\User\AppData\Roaming\MPC-HC
2017-05-20 10:04 - 2015-06-21 09:22 - 00000000 ____D C:\Users\User\AppData\Roaming\Media Player Classic
2017-05-20 10:00 - 2012-04-08 14:54 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-05-20 09:54 - 2011-07-19 22:05 - 00000000 ____D C:\Program Files (x86)\Java
2017-05-20 09:51 - 2012-02-10 11:36 - 00000000 ____D C:\Program Files (x86)\QuickTime
2017-05-20 09:49 - 2015-11-07 01:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-20 09:49 - 2011-07-18 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-05-20 09:49 - 2011-07-18 18:02 - 00000000 ____D C:\Program Files (x86)\7-Zip
2017-05-20 09:26 - 2017-04-10 11:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-05-20 09:26 - 2011-07-20 00:49 - 00000000 ____D C:\ProgramData\Skype
2017-05-20 09:20 - 2012-05-10 21:23 - 00000000 ____D C:\temp
2017-05-20 09:19 - 2015-08-01 14:45 - 00000000 ____D C:\Program Files\Common Files\AV
2017-05-20 09:12 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-20 09:12 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-05-20 09:12 - 2011-07-18 22:05 - 00000000 ____D C:\Program Files (x86)\Opera
2017-05-20 09:10 - 2017-01-05 18:21 - 00000000 ____D C:\Users\User\AppData\Local\Hisuite
2017-05-18 08:32 - 2017-04-16 22:02 - 00000000 ____D C:\Users\User\.gimp-2.8
2017-05-17 07:16 - 2012-11-11 07:59 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-15 09:52 - 2011-07-19 08:52 - 00000000 ____D C:\Games
2017-05-12 13:34 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-05-12 13:00 - 2016-02-09 16:23 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-12 12:57 - 2013-03-13 16:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-05-12 12:57 - 2013-03-13 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-11 16:01 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-05-11 16:00 - 2012-02-19 13:26 - 00000000 ____D C:\Program Files (x86)\Steam
2017-05-11 15:54 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-05-11 15:52 - 2013-07-19 01:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-11 15:46 - 2011-07-22 01:05 - 156335152 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-09 18:57 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-05-09 18:57 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-07 11:17 - 2016-06-05 20:33 - 00001263 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2017-05-07 11:17 - 2014-05-27 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2017-05-07 08:14 - 2013-03-13 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-05-07 07:49 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-05-06 10:38 - 2016-02-09 16:23 - 00000000 ____D C:\Users\User\AppData\Local\Packages
2017-05-06 10:25 - 2016-09-12 11:59 - 00002425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-05-06 10:25 - 2016-09-12 11:59 - 00000000 ___RD C:\Users\User\OneDrive
2017-05-06 10:21 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-06 10:20 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-06 10:19 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-05-06 10:19 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-05-06 10:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-05-06 10:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration
2017-05-06 10:12 - 2017-03-20 06:46 - 00000000 ____D C:\WINDOWS\HoloShell
2017-05-06 10:12 - 2016-02-09 12:45 - 00023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-05-06 10:11 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media
2017-05-06 10:10 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-06 09:59 - 2017-03-31 19:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ztroskotání - zrádné světlo - Sběratelská edice
2017-05-06 09:59 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-05-06 09:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-06 09:59 - 2016-08-10 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMR to MP3 Converter
2017-05-06 09:59 - 2016-02-09 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-05-06 09:59 - 2015-10-30 20:35 - 00000000 ____D C:\WINDOWS\ShellNew
2017-05-06 09:59 - 2015-09-26 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q3E Minimizer v1.51
2017-05-06 09:59 - 2015-08-28 00:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2017-05-06 09:59 - 2015-06-21 15:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2017-05-06 09:59 - 2015-06-20 07:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2017-05-06 09:59 - 2015-04-09 09:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mIRC
2017-05-06 09:59 - 2014-06-26 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2017-05-06 09:59 - 2014-02-23 04:10 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TygemBaduk Program
2017-05-06 09:59 - 2014-01-15 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QIP Infium
2017-05-06 09:59 - 2013-10-05 01:00 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2017-05-06 09:59 - 2013-07-22 15:16 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jízdní řád MHD České Budějovice
2017-05-06 09:59 - 2013-06-07 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2017-05-06 09:59 - 2013-05-16 16:07 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
2017-05-06 09:59 - 2013-05-14 00:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-05-06 09:59 - 2013-04-24 07:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyPic JPG to PDF Converter
2017-05-06 09:59 - 2013-04-16 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2017-05-06 09:59 - 2013-01-29 11:02 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2017-05-06 09:59 - 2013-01-07 08:28 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-05-06 09:59 - 2012-11-09 00:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2017-05-06 09:59 - 2012-09-04 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-05-06 09:59 - 2012-07-17 23:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2017-05-06 09:59 - 2012-04-08 14:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-06 09:59 - 2012-02-28 16:43 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-06 09:59 - 2012-02-19 14:54 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-06 09:59 - 2012-02-19 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-06 09:59 - 2012-02-15 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-05-06 09:59 - 2011-09-25 19:50 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-06 09:59 - 2011-07-24 12:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-05-06 09:59 - 2011-07-20 18:32 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-06 09:59 - 2011-07-20 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-06 09:59 - 2011-07-20 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2017-05-06 09:59 - 2011-07-19 22:40 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
2017-05-06 09:59 - 2011-07-19 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeRIP3
2017-05-06 09:59 - 2011-07-18 18:02 - 00000000 ___HD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2017-05-06 09:59 - 2011-07-18 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2017-05-06 09:59 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-06 09:59 - 2009-01-27 00:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
2017-05-06 09:59 - 2009-01-27 00:25 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager
2017-05-06 09:59 - 2009-01-27 00:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
2017-05-06 09:59 - 2009-01-27 00:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-05-06 09:52 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-05-06 09:52 - 2012-11-09 00:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2017-05-06 09:52 - 2011-07-22 00:55 - 00000000 ____D C:\WINDOWS\system32\SPReview
2017-05-06 09:52 - 2011-07-22 00:54 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2017-05-06 09:51 - 2017-04-16 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dry Creek Photo
2017-05-06 09:51 - 2017-04-16 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serif
zdůvodu omezení znaků druhou část pošlu vzápětí.

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 17:30
od netre
Applications
2017-05-06 09:51 - 2017-04-10 11:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-05-06 09:51 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas
2017-05-06 09:51 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-05-06 09:51 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\IME
2017-05-06 09:51 - 2016-03-14 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPanda2
2017-05-06 09:51 - 2016-02-19 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio
2017-05-06 09:51 - 2014-10-26 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2017-05-06 09:51 - 2013-09-20 04:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2017-05-06 09:51 - 2013-04-16 08:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-05-06 09:51 - 2012-06-10 21:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2017-05-06 09:51 - 2011-12-10 09:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
2017-05-06 09:51 - 2011-12-06 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2017-05-06 09:51 - 2011-07-19 12:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2017-05-06 09:50 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files\Windows Sidebar
2017-05-06 09:50 - 2017-03-18 23:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-05-06 09:50 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-05-06 09:50 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2017-05-06 09:49 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-05-06 09:48 - 2015-08-21 19:08 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-05-06 09:48 - 2013-06-07 20:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Creative
2017-05-06 09:45 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-05-06 09:44 - 2011-12-01 10:43 - 00000000 ____D C:\AMD
2017-05-06 08:40 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-05-06 08:28 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup
2017-05-06 08:28 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-05-06 08:28 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-06 08:28 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-05-06 08:28 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-05-06 08:28 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-06 08:28 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-06 08:23 - 2017-03-20 06:45 - 00000000 ____D C:\WINDOWS\OCR
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-05-06 08:22 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-05-06 08:22 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-05-06 08:22 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-05-06 08:22 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender
2017-05-06 08:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-05-06 08:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-05-06 08:22 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-05-06 08:22 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\servicing
2017-05-06 08:15 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-05-06 08:15 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-05-06 08:15 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-06 08:15 - 2017-03-18 22:59 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2017-05-06 08:15 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2017-05-06 08:15 - 2017-03-18 22:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2017-05-06 08:15 - 2017-03-18 22:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2017-05-06 08:15 - 2017-03-18 22:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-05-06 08:15 - 2017-03-18 22:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2017-05-06 08:15 - 2017-03-18 22:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2017-05-06 08:15 - 2017-03-18 22:59 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2017-05-06 08:15 - 2017-03-18 22:56 - 01380352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-05-06 08:15 - 2017-03-18 22:56 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-05-06 08:15 - 2017-03-18 22:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-05-06 08:15 - 2017-03-18 22:56 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-05-06 08:15 - 2017-03-18 22:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-05-06 08:15 - 2017-03-18 22:56 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-05-06 08:15 - 2017-03-18 22:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2017-05-06 08:15 - 2017-03-18 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-05-06 08:15 - 2017-03-18 22:56 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2017-05-06 08:15 - 2017-03-18 22:56 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2017-05-06 08:15 - 2017-03-18 22:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-05-06 08:15 - 2017-03-18 22:56 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2017-05-06 08:15 - 2017-03-18 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2017-05-06 08:05 - 2016-09-12 11:28 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2017-05-01 14:10 - 2012-05-13 19:21 - 00000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-23 12:19 - 2016-02-20 16:26 - 00000000 ____D C:\Users\User\Desktop\shiatsu

==================== Files in the root of some directories =======

2011-07-18 18:01 - 2011-07-18 18:15 - 0000031 _____ () C:\Program Files\plugins-04041e-fe8.dat
2015-04-12 10:49 - 2015-04-12 10:57 - 0000027 _____ () C:\Program Files\plugins.dat
2012-02-03 20:31 - 2012-02-03 23:00 - 0106821 _____ () C:\Users\User\AppData\Local\ars.cache
2012-02-03 20:31 - 2012-02-03 23:09 - 6339056 _____ () C:\Users\User\AppData\Local\census.cache
2017-01-02 22:13 - 2017-02-05 13:20 - 0003584 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-02-03 20:26 - 2012-02-03 20:26 - 0000036 _____ () C:\Users\User\AppData\Local\housecall.guid.cache
2017-05-18 08:49 - 2017-05-18 08:49 - 0004116 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2011-07-28 01:35 - 2011-07-28 01:35 - 0017408 _____ () C:\Users\User\AppData\Local\WebpageIcons.db

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-05-16 16:24

==================== End of FRST.txt ============================

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 18:12
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\MountPoints2: {3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} - "F:\HiSuiteDownLoader.exe"
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => -> No File
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM-x32 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = hxxp://search.qip.ru/search?query={searchTerms}&from=IE
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\url_advisor@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\virtual_keyboard@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\content_blocker@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\anti_banner@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\online_banking@kaspersky.com => not found
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [No File]
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File]
FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
CHR StartupUrls: Profile 2 -> "hxxp://www.google.com/","hxxp://securedsearch2 ... 5249C5D543"
U1 aswbdisk; no ImagePath
U3 idsvc; no ImagePath
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\System32\Tasks\AutoKMS
Task: {0189A8EA-535C-44A9-9ED2-2DE337D0AB11} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {0905CCEC-2E69-4F18-B553-247D28AF5B11} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {12E03562-14C0-4775-9A32-3C1AD92ABD8E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {1E7CB8E6-BBCE-4E96-A426-5A3E1F84C51A} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {3258AD85-AFA4-4C18-8D26-311AE5BAA198} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
ask: {6F3C6380-DB2C-4D04-8692-64B4B081DA4C} - System32\Tasks\{9924301B-5C49-43CF-88D1-949DD04342C4} => pcalua.exe -a "C:\Users\User\Desktop\[AG3][all_in_one]
Task: {732BC7B5-C1E5-4086-8362-A840E27DD460} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {780D129B-739E-4E25-9F29-7B7727327543} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {787FE25D-7066-4AFA-80D8-811D2ACCF242} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {7AFEB02C-B2AF-4CF7-8AE5-78ADAE531D47} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {7C6B6EB5-6EB8-418F-93F0-300AE1D5C610} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {8B2B237D-A41C-4C7D-9297-DFAFA03468DC} - System32\Tasks\{489E63E4-7689-4655-8130-83C7005B03B4} => pcalua.exe -a E:\support\PhysX_9.10.0513_SystemSoftware.exe -d E:\support
Task: {8D6F4992-92B2-438C-81BD-8E81194FA3AA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {DA5760AC-EE84-4658-AA6E-874A7065F464} - System32\Tasks\{6E434879-F320-4448-8E96-4BBA6DFF0AFB} => pcalua.exe -a C:\Users\User\Downloads\swkotorczplna11\kotor_install_cz.exe -d C:\Users\User\Downloads\swkotorczplna11
Task: {DE30BC64-B1F7-4546-9940-5FBCCA437F31} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {EB49118D-E2C3-4BFC-B834-E9589796B0E1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> No File <==== ATTENTION
Task: {FB0F0242-9C9E-482A-9636-6F67828DBD67} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION

EmptyTemp:
ResetHosts:
End
Uložte do C:\Users\User\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Sekající se browser a zpomalený ntb

Napsal: 20 kvě 2017 22:11
od netre
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-05-2017
Ran by User (20-05-2017 23:04:50) Run:1
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\...\MountPoints2: {3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} - "F:\HiSuiteDownLoader.exe"
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => -> No File
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM-x32 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {95289393-33EA-4F8D-B952-483415B9C955} URL = hxxp://search.qip.ru/?query={searchTerms}
SearchScopes: HKU\S-1-5-21-1867007862-1806955532-3661286979-1000 -> {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = hxxp://search.qip.ru/search?query={searchTerms}&from=IE
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\url_advisor@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\virtual_keyboard@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\content_blocker@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\anti_banner@kaspersky.com => not found
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 3\FFExt\online_banking@kaspersky.com => not found
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [No File]
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File]
FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
FF Plugin HKU\S-1-5-21-1867007862-1806955532-3661286979-1000: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [No File]
CHR StartupUrls: Profile 2 -> "hxxp://www.google.com/","hxxp://securedsearch2 ... 5249C5D543"
U1 aswbdisk; no ImagePath
U3 idsvc; no ImagePath
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\System32\Tasks\AutoKMS
Task: {0189A8EA-535C-44A9-9ED2-2DE337D0AB11} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {0905CCEC-2E69-4F18-B553-247D28AF5B11} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {12E03562-14C0-4775-9A32-3C1AD92ABD8E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {1E7CB8E6-BBCE-4E96-A426-5A3E1F84C51A} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {3258AD85-AFA4-4C18-8D26-311AE5BAA198} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
ask: {6F3C6380-DB2C-4D04-8692-64B4B081DA4C} - System32\Tasks\{9924301B-5C49-43CF-88D1-949DD04342C4} => pcalua.exe -a "C:\Users\User\Desktop\[AG3][all_in_one]
Task: {732BC7B5-C1E5-4086-8362-A840E27DD460} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {780D129B-739E-4E25-9F29-7B7727327543} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {787FE25D-7066-4AFA-80D8-811D2ACCF242} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {7AFEB02C-B2AF-4CF7-8AE5-78ADAE531D47} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {7C6B6EB5-6EB8-418F-93F0-300AE1D5C610} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {8B2B237D-A41C-4C7D-9297-DFAFA03468DC} - System32\Tasks\{489E63E4-7689-4655-8130-83C7005B03B4} => pcalua.exe -a E:\support\PhysX_9.10.0513_SystemSoftware.exe -d E:\support
Task: {8D6F4992-92B2-438C-81BD-8E81194FA3AA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {DA5760AC-EE84-4658-AA6E-874A7065F464} - System32\Tasks\{6E434879-F320-4448-8E96-4BBA6DFF0AFB} => pcalua.exe -a C:\Users\User\Downloads\swkotorczplna11\kotor_install_cz.exe -d C:\Users\User\Downloads\swkotorczplna11
Task: {DE30BC64-B1F7-4546-9940-5FBCCA437F31} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {EB49118D-E2C3-4BFC-B834-E9589796B0E1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> No File <==== ATTENTION
Task: {FB0F0242-9C9E-482A-9636-6F67828DBD67} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION

EmptyTemp:
ResetHosts:
End
*****************

C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} => key removed successfully
HKCR\CLSID\{3420d4d8-edce-11e6-bd99-2c27d7c2e4cc} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.QMDeskTopGCIcon => key removed successfully
HKCR\CLSID\{B7667919-3765-4815-A66D-98A09BE662D6} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{95289393-33EA-4F8D-B952-483415B9C955} => key removed successfully
HKCR\Wow6432Node\CLSID\{95289393-33EA-4F8D-B952-483415B9C955} => key not found.
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95289393-33EA-4F8D-B952-483415B9C955} => key removed successfully
HKCR\CLSID\{95289393-33EA-4F8D-B952-483415B9C955} => key not found.
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} => key removed successfully
HKCR\CLSID\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key removed successfully
HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\url_advisor@kaspersky.com => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\content_blocker@kaspersky.com => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\anti_banner@kaspersky.com => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\online_banking@kaspersky.com => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value removed successfully
HKLM\Software\MozillaPlugins\@iqiyi.com/npclient => key removed successfully
HKLM\Software\MozillaPlugins\@iqiyi.com/npWebPlayer => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.4 => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.3.0 => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@rising.com.cn/nprising => key removed successfully
HKU\S-1-5-21-1867007862-1806955532-3661286979-1000\Software\MozillaPlugins\@rising.com.cn/nprising => key removed successfully
C:\Program Files (x86)\Rising\RAV\nprising.dll => not found.
Chrome StartupUrls => removed successfully
HKLM\System\CurrentControlSet\Services\aswbdisk => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\idsvc => key removed successfully
idsvc => service removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\System32\Tasks\AutoKMS => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0189A8EA-535C-44A9-9ED2-2DE337D0AB11} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0189A8EA-535C-44A9-9ED2-2DE337D0AB11} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0905CCEC-2E69-4F18-B553-247D28AF5B11} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0905CCEC-2E69-4F18-B553-247D28AF5B11} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{12E03562-14C0-4775-9A32-3C1AD92ABD8E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12E03562-14C0-4775-9A32-3C1AD92ABD8E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1E7CB8E6-BBCE-4E96-A426-5A3E1F84C51A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E7CB8E6-BBCE-4E96-A426-5A3E1F84C51A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3258AD85-AFA4-4C18-8D26-311AE5BAA198} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3258AD85-AFA4-4C18-8D26-311AE5BAA198} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask => key removed successfully
ask: {6F3C6380-DB2C-4D04-8692-64B4B081DA4C} - System32\Tasks\{9924301B-5C49-43CF-88D1-949DD04342C4} => pcalua.exe -a "C:\Users\User\Desktop\[AG3][all_in_one] => Error: No automatic fix found for this entry.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{732BC7B5-C1E5-4086-8362-A840E27DD460} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{732BC7B5-C1E5-4086-8362-A840E27DD460} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{780D129B-739E-4E25-9F29-7B7727327543} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{780D129B-739E-4E25-9F29-7B7727327543} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{787FE25D-7066-4AFA-80D8-811D2ACCF242} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{787FE25D-7066-4AFA-80D8-811D2ACCF242} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7AFEB02C-B2AF-4CF7-8AE5-78ADAE531D47} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AFEB02C-B2AF-4CF7-8AE5-78ADAE531D47} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7C6B6EB5-6EB8-418F-93F0-300AE1D5C610} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C6B6EB5-6EB8-418F-93F0-300AE1D5C610} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8B2B237D-A41C-4C7D-9297-DFAFA03468DC} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8B2B237D-A41C-4C7D-9297-DFAFA03468DC} => key removed successfully
C:\WINDOWS\System32\Tasks\{489E63E4-7689-4655-8130-83C7005B03B4} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{489E63E4-7689-4655-8130-83C7005B03B4} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8D6F4992-92B2-438C-81BD-8E81194FA3AA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D6F4992-92B2-438C-81BD-8E81194FA3AA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DA5760AC-EE84-4658-AA6E-874A7065F464} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA5760AC-EE84-4658-AA6E-874A7065F464} => key removed successfully
C:\WINDOWS\System32\Tasks\{6E434879-F320-4448-8E96-4BBA6DFF0AFB} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6E434879-F320-4448-8E96-4BBA6DFF0AFB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE30BC64-B1F7-4546-9940-5FBCCA437F31} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE30BC64-B1F7-4546-9940-5FBCCA437F31} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EB49118D-E2C3-4BFC-B834-E9589796B0E1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB49118D-E2C3-4BFC-B834-E9589796B0E1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-URT => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FB0F0242-9C9E-482A-9636-6F67828DBD67} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB0F0242-9C9E-482A-9636-6F67828DBD67} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key removed successfully
ResetHosts: => Error: No automatic fix found for this entry.

=========== EmptyTemp: ==========

BITS transfer queue => 6578176 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 18729911 B
Java, Flash, Steam htmlcache => 542390380 B
Windows/system/drivers => 157358096 B
Edge => 483 B
Chrome => 391676442 B
Firefox => 95841147 B
Opera => 329728 B

Temp, IE cache, history, cookies, recent:
Default => 16674 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 5004 B
NetworkService => 0 B
User => 135830010 B
DefaultAppPool => 16674 B

RecycleBin => 0 B
EmptyTemp: => 1.3 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 20-05-2017 23:08:19)


Result of scheduled keys to remove after reboot:

HKLM\System\CurrentControlSet\Services\aswbdisk => key could not remove, key could be protected

==== End of Fixlog 23:08:19 ====

Re: Sekající se browser a zpomalený ntb

Napsal: 21 kvě 2017 10:06
od Rudy
Smazáno. Nastala nějaká změna?

Re: Sekající se browser a zpomalený ntb

Napsal: 21 kvě 2017 12:16
od netre
Změna nastala browser se nezasekává a ntb se taky chová jako předtím.
Díky za rady .)
Mám ještě hodit nový log Frsit?

Re: Sekající se browser a zpomalený ntb

Napsal: 21 kvě 2017 13:38
od netre
Tak změna, teď mi kompletně spadl systém s modrou obrazovkou od Microsoftu s oznámením, že došlo k chybě a sbírají údaje...

Re: Sekající se browser a zpomalený ntb

Napsal: 21 kvě 2017 14:09
od Rudy
Koukněte do adresáře c:\windows\minidump, soubor/y tam nelezené zabalte do raru a přiložte k vašemu příštímu postu.

Re: Sekající se browser a zpomalený ntb

Napsal: 22 kvě 2017 06:00
od netre
Tady je minidump soubor

Re: Sekající se browser a zpomalený ntb

Napsal: 22 kvě 2017 17:36
od Rudy
Uděláme kontrolu disku. Stáhněte, nainstalujte a spusťte CrystalDiskInfo: http://www.stahuj.centrum.cz/utility_a_ ... ldiskinfo/ a přes Úpravy>kopírovat sem dejte log.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz