Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-06-2017
Ran by KUBA (administrator) on KUBA-PC (13-06-2017 21:36:16)
Running from C:\Users\KUBA\Desktop
Loaded Profiles: KUBA (Available Profiles: KUBA)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Users\KUBA\AppData\Local\Seznam.cz\postak.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files\MagicTune Premium\GammaTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Edimax\11n USB Wireless LAN Utility\RtlService.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Edimax\11n USB Wireless LAN Utility\RtWLan.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7573024 2009-03-24] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-03-24] (Realtek Semiconductor Corp.)
HKLM\...\Run: [MagicTuneEngine] => C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [53760 2011-05-26] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-11] (AVAST Software)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [673616 2009-04-07] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [VICTORY Gaming Keyboard] => C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [270336 2013-11-11] ()
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1207808 2016-12-09] (Cisco Systems, Inc.)
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\Run: [Seznam Postak] => C:\Users\KUBA\AppData\Local\Seznam.cz\postak.exe [488728 2010-10-06] ()
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\Run: [EPSON SX110 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE [223232 2008-09-26] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {1f95a7cd-1ed0-11e7-b8ac-001d92b0b61d} - E:\Lenovo_Suite.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {530cf070-ce4d-11e5-9c41-001d92b0b61d} - E:\Lenovo_Suite.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {7152d082-28d1-11e6-8656-001d92b0b61d} - H:\autorun.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {82883353-4b27-11e5-8e22-806e6f6e6963} - E:\setup.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {a2d0ed06-3d25-11e6-a75d-001d92b0b61d} - H:\Lenovo_Suite.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {c8765dc3-0ab4-11e6-9049-001d92b0b61d} - H:\Startme.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {c8a3129e-245a-11e7-9156-001d92b0b61d} - G:\Lenovo_Suite.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {d6aa0715-530f-11e5-a2b6-001d92b0b61d} - G:\autorun.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {d6aa0765-530f-11e5-a2b6-001d92b0b61d} - H:\autorun.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {d6aa079e-530f-11e5-a2b6-001d92b0b61d} - H:\autorun.exe
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\...\MountPoints2: {d6aa08be-530f-11e5-a2b6-001d92b0b61d} - I:\autorun.exe
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-11] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-11] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.exe.lnk [2015-08-25]
ShortcutTarget: GammaTray.exe.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{0A8603A5-96B8-4F87-A2E2-2A2963212C9A}: [DhcpNameServer] 192.168.167.254
Internet Explorer:
==================
HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131340751061688264&GUID=CE205241-8ECB-4B54-93B6-583E8B83EF83
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-04] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-18] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-04] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-18] (Oracle Corporation)
FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-07-19] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://
www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://
www.google.com/"
CHR Profile: C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default [2017-06-13]
CHR Extension: (Prezentace Google) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-25]
CHR Extension: (Dokumenty Google) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-25]
CHR Extension: (Disk Google) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Vyhledávání Google) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Adobe Acrobat) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-13]
CHR Extension: (Avast Online Security) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-06-07]
CHR Extension: (Flash [FVD]) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbmfkaljbdamohclaegdbplnjnfjaiin [2016-08-10]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-01-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-25]
CHR Extension: (Chrome Media Router) - C:\Users\KUBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12]
CHR HKU\S-1-5-21-2242963336-4014336834-1946317445-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-11] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-11] (AVAST Software)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
R2 HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [138544 2015-05-20] ()
R2 HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [192304 2015-05-20] ()
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2006-11-10] (Nero AG) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2017-05-01] ()
R2 RealtekCU; C:\Program Files (x86)\Edimax\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 SIMUL8Parallel; C:\Program Files (x86)\SIMUL8Student\SIMUL8_ParallelSVC.exe [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-11] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-11] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-11] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-11] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-11-10] (AVAST Software)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-11] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-11] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-11] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-11] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-11] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-11] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-11] (AVAST Software)
S3 AtiDCM; C:\Users\KUBA\AppData\Local\Temp\atdcm64a.sys [32000 2013-04-30] (Advanced Micro Devices, Inc.) <==== ATTENTION
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2015-11-18] ()
S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [677632 2010-03-16] (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
S2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [296448 2005-06-14] (Aladdin Knowledge Systems Ltd.) [File not signed]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2015-05-07] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2015-11-18] ()
R1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [23096 2008-11-04] (Samsung Electronics, Inc. )
S3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1047144 2011-09-06] (Realtek Semiconductor Corporation )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2015-08-25] () [File not signed]
R3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52592 2016-02-18] (Cisco Systems, Inc.)
U5 WfpLwf; C:\Windows\System32\Drivers\WfpLwf.sys [12800 2009-07-14] (Microsoft Corporation)
U3 a0t65q8a; no ImagePath
S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-13 21:36 - 2017-06-13 21:36 - 00019415 _____ C:\Users\KUBA\Desktop\FRST.txt
2017-06-13 21:34 - 2017-06-13 21:34 - 00029696 _____ C:\Users\KUBA\AppData\Local\MSGBOX.EXE
2017-06-13 21:34 - 2017-06-13 21:34 - 00015327 _____ C:\Users\KUBA\Desktop\LM.bat
2017-06-13 21:34 - 2017-06-13 21:31 - 00112640 _____ (forum.viry.cz) C:\Users\KUBA\Desktop\FRSTLauncher.exe
2017-06-13 21:27 - 2017-06-13 21:36 - 00000000 ____D C:\FRST
2017-06-13 21:25 - 2017-06-13 21:24 - 02438656 _____ (Farbar) C:\Users\KUBA\Desktop\FRST64.exe
2017-06-13 21:20 - 2017-06-13 21:19 - 00000402 _____ C:\Users\KUBA\Desktop\Repair.bat
2017-06-13 20:43 - 2017-06-13 20:42 - 138094872 _____ (Microsoft Corporation) C:\Users\KUBA\Desktop\msert.exe
2017-06-13 20:33 - 2017-06-13 20:33 - 00000000 ____D C:\rsit
2017-06-13 20:33 - 2017-06-13 20:33 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-13 20:33 - 2017-06-13 20:33 - 00000000 ____D C:\Program Files\trend micro
2017-06-13 20:33 - 2017-06-13 20:32 - 01222144 _____ C:\Users\KUBA\Desktop\RSITx64.exe
2017-06-13 19:40 - 2017-06-13 19:40 - 00000000 ____D C:\Windows\pss
2017-06-13 18:36 - 2017-06-13 17:37 - 00000402 _____ C:\Users\KUBA\Desktop\Kuba P oprava 2.txt
2017-06-13 18:36 - 2017-06-13 17:32 - 00000216 _____ C:\Users\KUBA\Desktop\Kuba PC oprava.txt
2017-06-13 18:27 - 2017-06-13 18:27 - 00003688 ____N C:\bootsqm.dat
2017-06-13 17:21 - 2017-06-13 17:22 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2017-06-11 11:49 - 2017-06-11 11:49 - 00275456 _____ C:\Windows\Minidump\061117-32853-01.dmp
2017-06-06 18:10 - 2017-06-06 18:11 - 00275456 _____ C:\Windows\Minidump\060617-42822-01.dmp
2017-05-20 11:26 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-05-20 11:26 - 2017-04-17 17:37 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-05-20 11:26 - 2017-04-17 17:37 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-05-20 11:26 - 2017-04-17 17:37 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-05-20 11:26 - 2017-04-17 17:35 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-05-20 11:26 - 2017-04-17 17:23 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-05-20 11:26 - 2017-04-17 17:22 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-05-20 11:26 - 2017-04-17 17:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-05-20 11:26 - 2017-04-17 17:21 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-05-20 11:26 - 2017-04-17 17:21 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-05-20 11:26 - 2017-04-17 17:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-05-20 11:26 - 2017-04-17 17:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-05-20 11:26 - 2017-04-17 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-05-20 11:26 - 2017-04-17 17:01 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-05-20 11:26 - 2017-04-17 17:01 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-05-20 11:26 - 2017-04-17 17:01 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-05-20 11:26 - 2017-04-17 17:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-05-20 11:26 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-13 21:29 - 2017-03-18 09:25 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-06-13 21:21 - 2009-07-14 17:18 - 14399268 _____ C:\Windows\system32\perfh005.dat
2017-06-13 21:21 - 2009-07-14 17:18 - 04845118 _____ C:\Windows\system32\perfc005.dat
2017-06-13 21:21 - 2009-07-14 07:13 - 00006456 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-13 21:10 - 2015-08-29 17:28 - 00000000 ____D C:\Users\KUBA\AppData\Local\ElevatedDiagnostics
2017-06-13 20:32 - 2009-07-14 06:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-13 20:32 - 2009-07-14 06:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-13 20:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-13 18:54 - 2015-08-25 17:41 - 00000000 ____D C:\Users\KUBA\AppData\Roaming\vlc
2017-06-13 18:54 - 2015-08-25 15:26 - 00000000 ___RD C:\Users\KUBA\Desktop\Kuba
2017-06-12 17:53 - 2017-03-15 19:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-06-12 17:53 - 2016-09-02 20:17 - 00000000 ____D C:\ProgramData\Skype
2017-06-11 21:19 - 2015-08-25 15:28 - 00000000 ___RD C:\Users\KUBA\Desktop\Alča
2017-06-11 11:49 - 2015-08-26 13:20 - 463490494 _____ C:\Windows\MEMORY.DMP
2017-06-11 11:49 - 2015-08-26 13:20 - 00000000 ____D C:\Windows\Minidump
2017-06-07 22:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-06 23:14 - 2015-09-04 09:52 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2017-06-04 14:01 - 2015-08-25 15:29 - 00061707 _____ C:\Users\KUBA\Desktop\Seznam MKV.xlsm
2017-05-31 17:59 - 2016-09-08 19:12 - 00003890 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1473354739
2017-05-30 12:40 - 2015-08-25 15:29 - 00019393 _____ C:\Users\KUBA\Desktop\Filmy ke stažení.xlsx
2017-05-29 17:40 - 2017-05-04 23:02 - 00000667 _____ C:\Users\KUBA\Desktop\AssassinsCreedII.lnk
2017-05-28 21:35 - 2015-08-25 16:25 - 00000000 ___RD C:\Users\KUBA\Desktop\Hry
2017-05-28 19:42 - 2017-05-01 21:04 - 00000000 ____D C:\Users\KUBA\AppData\Roaming\Ubisoft
2017-05-28 19:42 - 2015-08-25 15:08 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-05-28 19:42 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-28 15:34 - 2015-08-25 15:29 - 00175773 _____ C:\Users\KUBA\Desktop\Seznam filmů a her.xlsm
2017-05-28 15:31 - 2015-08-25 15:29 - 00457696 _____ C:\Users\KUBA\Desktop\Filmy - Aplikace.xlsm
2017-05-23 17:30 - 2015-11-27 16:56 - 00000000 ____D C:\Windows\system32\MRT
2017-05-23 17:26 - 2015-11-27 16:56 - 132223576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-05-20 13:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2017-05-19 22:48 - 2015-08-25 21:47 - 00000000 ____D C:\Users\KUBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-15 16:31 - 2016-09-06 20:39 - 00002236 ____H C:\Users\KUBA\Documents\Default.rdp
2017-05-15 12:46 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-05-15 10:36 - 2009-07-14 07:08 - 00032630 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-15 10:23 - 2017-03-15 20:20 - 00000000 ____D C:\Users\KUBA\AppData\Local\VirtualStore
==================== Files in the root of some directories =======
2017-05-04 22:38 - 2007-09-29 16:48 - 0103424 _____ () C:\Program Files\Default.SFX
2017-05-04 22:38 - 2007-03-20 14:46 - 0001431 _____ () C:\Program Files\Descript.ion
2017-05-04 22:38 - 2007-10-02 14:50 - 0000582 _____ () C:\Program Files\File_Id.diz
2017-05-04 22:38 - 2007-06-04 19:02 - 0007356 _____ () C:\Program Files\License.txt
2017-05-04 22:38 - 2007-03-31 20:40 - 0006428 _____ () C:\Program Files\License_US.txt
2017-05-04 22:38 - 2007-03-01 18:14 - 0003758 _____ () C:\Program Files\Order.htm
2017-05-04 22:38 - 2017-05-04 22:39 - 0317952 _____ () C:\Program Files\Rar.exe
2017-05-04 22:39 - 2007-09-20 18:34 - 0317952 _____ () C:\Program Files\RAR.exe.bak
2017-05-04 22:38 - 2007-09-02 13:46 - 0072138 _____ () C:\Program Files\Rar.txt
2017-05-04 22:38 - 2007-09-20 18:34 - 0129024 _____ () C:\Program Files\RarExt.dll
2017-05-04 22:38 - 2006-12-11 02:14 - 0043008 _____ () C:\Program Files\RarExt64.dll
2017-05-04 22:38 - 2006-12-23 17:37 - 0044032 _____ () C:\Program Files\RarExtLoader.exe
2017-05-04 22:38 - 2002-11-28 18:22 - 0001149 _____ () C:\Program Files\RarFiles.lst
2017-05-04 22:38 - 2007-10-02 15:41 - 0319488 _____ () C:\Program Files\rarlng.dll
2017-05-04 22:39 - 2017-05-04 22:39 - 0000020 _____ () C:\Program Files\rarnew.dat
2017-05-04 22:39 - 2017-05-04 22:39 - 0000471 _____ () C:\Program Files\rarreg.key
2017-05-04 22:38 - 2005-08-11 16:07 - 0001739 _____ () C:\Program Files\ReadMe.txt
2017-05-04 22:38 - 2007-09-02 13:46 - 0009232 _____ () C:\Program Files\TechNote.txt
2017-05-04 22:38 - 2007-09-20 18:35 - 0099840 _____ () C:\Program Files\Uninstall.exe
2017-05-04 22:38 - 2007-10-02 14:54 - 0000672 _____ () C:\Program Files\Uninstall.lst
2017-05-04 22:38 - 2017-05-04 22:39 - 0203776 _____ () C:\Program Files\UnRAR.exe
2017-05-04 22:39 - 2007-09-20 18:34 - 0203776 _____ () C:\Program Files\UnRAR.exe.bak
2017-05-04 22:38 - 2005-08-11 12:42 - 0000110 _____ () C:\Program Files\UnrarSrc.txt
2017-05-04 22:38 - 2007-10-02 15:33 - 0061335 _____ () C:\Program Files\WhatsNew.txt
2017-05-04 22:38 - 2007-09-20 18:33 - 0011616 _____ () C:\Program Files\WhatsNew_US.txt
2017-05-04 22:38 - 2007-09-29 16:48 - 0080896 _____ () C:\Program Files\WinCon.SFX
2017-05-04 22:38 - 2007-10-02 14:45 - 0300020 _____ () C:\Program Files\winrar.chm
2017-05-04 22:38 - 2017-05-04 22:39 - 0936960 _____ () C:\Program Files\WinRAR.exe
2017-05-04 22:39 - 2007-09-20 18:34 - 0936960 _____ () C:\Program Files\WinRAR.exe.bak
2017-05-04 22:38 - 2007-09-29 16:48 - 0067584 _____ () C:\Program Files\Zip.SFX
2017-05-04 22:39 - 2017-05-04 22:39 - 0000022 _____ () C:\Program Files\zipnew.dat
2002-08-29 18:33 - 2002-08-29 18:33 - 0319488 ____R () C:\Users\KUBA\AppData\Roaming\MafiaSetup.exe
2015-09-04 14:57 - 2017-02-14 18:10 - 0050688 _____ () C:\Users\KUBA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-06-13 21:34 - 2017-06-13 21:34 - 0029696 _____ () C:\Users\KUBA\AppData\Local\MSGBOX.EXE
2016-07-24 09:41 - 2016-07-24 09:41 - 0000000 _____ () C:\Users\KUBA\AppData\Local\{E921A473-8CD3-4D06-AE52-BE62B1D06F18}
2016-07-22 19:58 - 2016-07-22 19:58 - 0000000 _____ () C:\Users\KUBA\AppData\Local\{F2D4924C-20E0-4A59-B616-F55CB1889C6E}
2016-08-05 20:38 - 2016-08-05 20:38 - 0000016 _____ () C:\ProgramData\mntemp
Some files in TEMP:
====================
2015-11-14 13:14 - 2009-04-17 15:54 - 1132032 _____ (Moyea Software Co., LTD) C:\Users\KUBA\AppData\Local\Temp\CopyUpdate.exe
2016-07-01 23:05 - 2006-05-08 09:40 - 2438813 _____ () C:\Users\KUBA\AppData\Local\Temp\Etsetup_ets_fat.EXE
2016-07-05 20:10 - 2016-07-05 20:10 - 47814912 _____ (Garmin Ltd or its subsidiaries) C:\Users\KUBA\AppData\Local\Temp\GarminExpressInstaller.exe
2016-07-01 23:26 - 2016-07-02 00:46 - 0458116 _____ (Aladdin Knowledge Systems Ltd.) C:\Users\KUBA\AppData\Local\Temp\haspdinst_x64.exe
2015-08-25 15:37 - 2014-09-08 14:44 - 1057488 _____ (Adobe) C:\Users\KUBA\AppData\Local\Temp\install_reader11_cz_mssd_aaa_aih.exe
2016-07-20 17:16 - 2016-07-20 17:16 - 0741440 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u101-windows-au.exe
2016-10-20 20:41 - 2016-10-20 20:41 - 0737856 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-01-18 19:04 - 2017-01-18 19:04 - 0739904 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-04-18 22:01 - 2017-04-18 22:01 - 0739904 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u131-windows-au.exe
2015-10-21 09:51 - 2015-10-21 09:51 - 0585824 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u65-windows-au.exe
2015-11-20 18:11 - 2015-11-20 18:11 - 0585824 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u66-windows-au.exe
2016-01-20 23:05 - 2016-01-20 23:05 - 0644704 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u71-windows-au.exe
2016-02-07 14:50 - 2016-02-07 14:50 - 0736352 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u73-windows-au.exe
2016-03-25 18:20 - 2016-03-25 18:20 - 0736320 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-04-23 11:08 - 2016-04-23 11:08 - 0739904 _____ (Oracle Corporation) C:\Users\KUBA\AppData\Local\Temp\jre-8u91-windows-au.exe
2015-08-25 18:13 - 2016-01-25 10:56 - 0000359 _____ () C:\Users\KUBA\AppData\Local\Temp\KMP_3.2.0.0.exe
2016-02-29 11:32 - 2016-10-13 21:47 - 0766840 _____ () C:\Users\KUBA\AppData\Local\Temp\KMP_4.0.5.3.exe
2015-09-04 17:14 - 2015-09-04 17:14 - 0001536 _____ () C:\Users\KUBA\AppData\Local\Temp\NEventMessages.dll
2015-09-04 17:13 - 2015-09-04 17:13 - 0001536 _____ () C:\Users\KUBA\AppData\Local\Temp\NOSEventMessages.dll
2010-01-11 18:54 - 2010-01-11 18:54 - 0149352 ____R (Microsoft Corporation) C:\Users\KUBA\AppData\Local\Temp\ose00000.exe
2015-11-24 19:21 - 2006-04-30 20:24 - 0116667 _____ () C:\Users\KUBA\AppData\Local\Temp\post_update.EXE
2015-11-24 19:21 - 2006-05-12 16:50 - 0111096 _____ () C:\Users\KUBA\AppData\Local\Temp\pre_update.EXE
2015-08-25 16:50 - 2017-03-20 22:49 - 0192512 _____ () C:\Users\KUBA\AppData\Local\Temp\sfamcc00001.dll
2012-12-16 11:55 - 2012-12-16 11:55 - 0055296 _____ () C:\Users\KUBA\AppData\Local\Temp\sfextra.dll
2017-03-15 19:28 - 2017-03-15 19:28 - 14456872 _____ (Microsoft Corporation) C:\Users\KUBA\AppData\Local\Temp\vc_redist.x86.exe
2006-05-24 14:10 - 2006-05-24 14:10 - 0455600 ____R (Macrovision Corporation) C:\Users\KUBA\AppData\Local\Temp\_isD761.exe
2016-09-25 07:00 - 2016-09-25 07:00 - 1246584 _____ (Google Inc.) C:\Users\KUBA\AppData\Local\Temp\{D60C59F2-B771-49F2-A6EC-48CF84490CE6}-53.0.2785.143_53.0.2785.116_chrome_updater.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-06-02 18:16
==================== End of FRST.txt ============================
