VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Vyčištění notebooku od havěti

https://forum.viry.cz:443/viewtopic.php?t=152338

Stránka 1 z 1

Vyčištění notebooku od havěti

Napsal: 15 čer 2017 16:33
od brdic
Zdravím všechny pomocníky.
Chtěl bych Vás poprosit o pomoc při "rozhýbání" mého notebooku. Myslím si, že výbavou to ještě není takový lazar na vyhození, ale poslední dobou se tak chová :-) Notebok jse strašně pomalý, na vše musím dlouhou dobu čekat.
Předem moc děkuji za každou radu

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-06-2017
Ran by Brdíci (administrator) on BRDÍCI-PC (15-06-2017 17:24:38)
Running from C:\Users\Brdíci\Desktop
Loaded Profiles: Brdíci (Available Profiles: Brdíci & zdenk & DefaultAppPool)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\stacsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\AEstSrv.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [483428 2009-03-16] (IDT, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [200704 2008-08-01] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2016-07-26] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <====== ATTENTION
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [NokiaSuite.exe] => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1086376 2012-08-03] (Nokia)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Brdíci\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Brdíci\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-05-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.237.128.2 77.237.128.1
Tcpip\..\Interfaces\{2213107e-f9a7-4c52-bd47-1967af1ac80f}: [DhcpNameServer] 176.107.120.35 176.107.120.42
Tcpip\..\Interfaces\{f047863a-1889-4446-81d2-bf07641e6f4e}: [DhcpNameServer] 77.237.128.2 77.237.128.1

Internet Explorer:
==================
HKU\S-1-5-21-529510219-857933644-3456723339-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {068E70B5-42CB-421B-AEC1-774902ABFE57} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {1879FF1C-F09E-458F-AD59-EDE77CBB52F7} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {1A543F3B-2703-4229-9883-2530ECB5F8BA} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {30891B69-791C-48F3-A895-222E11D2B26D} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {40E1742A-2ECB-478A-9338-BE2BF0ABC09A} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {52607051-57A0-43D0-ABCD-EE06819BDFA0} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {A4A218D6-CE39-4339-B3F2-3CB4115783DD} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {A74A5B07-8082-44C2-8D34-FCDBA933623B} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {E06A9E9C-BCBC-4CE8-9385-BF8A10596C06} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13415
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-17] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-17] (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default [2017-06-15]
FF user.js: detected! => C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\user.js [2014-09-20]
FF Homepage: Mozilla\Firefox\Profiles\budn51vn.default -> hxxp://www.seznam.cz/
FF NetworkProxy: Mozilla\Firefox\Profiles\budn51vn.default -> type", 0
FF Extension: (Widevine Media Optimizer) - C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2016-01-13] [not signed]
FF Extension: (Seznam lištička) - C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2017-05-18]
FF SearchPlugin: C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\searchplugins\firmycz.xml [2015-10-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_126.dll [2017-06-13] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-17] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-05] ( Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2012-08-03] ( )
FF Plugin: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2012-12-04] (RocketLife, LLP)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @nsroblox.roblox.com/launcher -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Brdíci\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-11-16]

Chrome:
=======
CHR Profile: C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default [2016-10-27]
CHR Extension: (Prezentace Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-25]
CHR Extension: (Dokumenty Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-25]
CHR Extension: (Disk Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-25]
CHR Extension: (YouTube) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-25]
CHR Extension: (Avast SafePrice) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-25]
CHR Extension: (Tabulky Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-25]
CHR Extension: (Avast Online Security) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-25]
CHR Extension: (Gmail) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\aestsrv.exe [81920 2009-03-16] (Andrea Electronics Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5732136 2017-05-10] (AVAST Software s.r.o.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1668344 2008-10-16] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
R2 HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [116032 2013-07-11] ()
R2 HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [155336 2016-05-25] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-10-12] (Microsoft Corporation)
R2 STacSV; C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\STacSV.exe [254042 2009-03-16] (IDT, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271488 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84920 2017-04-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [258288 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [148696 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [268016 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [41664 2017-05-10] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [65344 2016-12-20] (AVAST Software)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34136 2017-05-10] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [31064 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [107928 2017-05-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [90336 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [62152 2017-05-10] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [764576 2017-05-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [482608 2017-05-10] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [115152 2017-05-16] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [279800 2017-05-10] (AVAST Software)
R3 BTDriver; C:\WINDOWS\system32\DRIVERS\btport.sys [37160 2008-02-05] (Broadcom Corporation.)
R3 btkrnl; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [990632 2008-04-15] (Broadcom Corporation.)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [243128 2013-11-23] (Disc Soft Ltd)
R3 itecir; C:\WINDOWS\system32\DRIVERS\itecir.sys [84600 2015-11-24] (ITE Tech. Inc. )
R3 ITECIRfilter; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [34000 2015-11-24] (ITE Tech. Inc. )
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 NETwNs32; C:\WINDOWS\System32\drivers\NETwNs32.sys [7518208 2016-07-16] (Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 17:24 - 2017-06-15 17:24 - 00000000 ____D C:\Users\Brdíci\Desktop\FRST-OlderVersion
2017-06-15 11:24 - 2017-06-15 11:23 - 00043011 _____ C:\Users\zdenk\Desktop\předpis - kopie.pdf
2017-06-15 11:23 - 2017-06-15 11:23 - 00043011 _____ C:\Users\zdenk\Desktop\předpis.pdf
2017-06-15 11:18 - 2017-06-15 11:18 - 00036712 _____ C:\Users\zdenk\Desktop\575242495.pdf
2017-06-15 11:18 - 2017-06-15 11:18 - 00036712 _____ C:\Users\zdenk\Desktop\575242495 - kopie.pdf
2017-06-15 10:58 - 2017-06-15 10:57 - 00246608 _____ C:\Users\zdenk\Desktop\DAGetDocument - kopie.pdf
2017-06-15 10:57 - 2017-06-15 10:57 - 00246608 _____ C:\Users\zdenk\Desktop\DAGetDocument.pdf
2017-06-15 10:34 - 2017-06-15 10:34 - 00246608 _____ C:\Users\zdenk\Desktop\pan Horáček.pdf
2017-06-15 10:29 - 2017-06-15 10:30 - 03396071 _____ C:\Users\zdenk\Desktop\kmen 2017 terka.xlsx
2017-06-14 22:38 - 2017-06-15 00:06 - 00041048 _____ C:\Users\Brdíci\Desktop\Addition.txt
2017-06-14 22:36 - 2017-06-15 17:25 - 00016440 _____ C:\Users\Brdíci\Desktop\FRST.txt
2017-06-14 22:34 - 2017-06-14 22:34 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-14 22:16 - 2017-06-14 22:16 - 00001450 _____ C:\AdwCleaner[R3].txt
2017-06-14 22:14 - 2017-06-14 22:15 - 00001390 _____ C:\AdwCleaner[R2].txt
2017-06-14 22:00 - 2017-06-14 22:01 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-14 21:29 - 2017-06-03 12:22 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-14 21:29 - 2017-06-03 12:03 - 00094560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-14 21:29 - 2017-06-03 11:58 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-14 21:29 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-14 21:29 - 2017-06-03 11:54 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-14 21:29 - 2017-06-03 11:43 - 01964384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-14 21:29 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-14 21:29 - 2017-06-03 11:32 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-14 21:29 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-06-14 21:29 - 2017-06-03 11:30 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-14 21:29 - 2017-06-03 11:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-14 21:29 - 2017-06-03 11:25 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-14 21:29 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-14 21:29 - 2017-06-03 11:06 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-14 21:29 - 2017-06-03 11:04 - 01889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-14 21:29 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-14 21:29 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-14 21:29 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 01336160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00514400 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00455000 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00284000 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00083296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-14 21:28 - 2017-06-03 12:50 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-14 21:28 - 2017-06-03 12:15 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-14 21:28 - 2017-06-03 12:13 - 05996384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-14 21:28 - 2017-06-03 12:13 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-14 21:28 - 2017-06-03 12:03 - 00950112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-14 21:28 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-14 21:28 - 2017-06-03 11:55 - 01896288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-14 21:28 - 2017-06-03 11:55 - 00342368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-14 21:28 - 2017-06-03 11:53 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-14 21:28 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-14 21:28 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-14 21:28 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-14 21:28 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-14 21:28 - 2017-06-03 11:48 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-14 21:28 - 2017-06-03 11:44 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-14 21:28 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-14 21:28 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-14 21:28 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-14 21:28 - 2017-06-03 11:31 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-14 21:28 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-14 21:28 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-14 21:28 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-14 21:28 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2017-06-14 21:28 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-14 21:28 - 2017-06-03 11:20 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-14 21:28 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-14 21:28 - 2017-06-03 11:16 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-14 21:28 - 2017-06-03 11:16 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-14 21:28 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-14 21:28 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-14 21:28 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-14 21:28 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-14 21:28 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 01236480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-14 21:28 - 2017-06-03 11:05 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-14 21:28 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-14 21:28 - 2017-06-02 09:35 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-14 21:28 - 2017-05-25 08:56 - 00034144 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-14 21:28 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-06-14 21:28 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-06-14 11:50 - 2017-06-14 11:50 - 00000000 ____D C:\Users\zdenk\AppData\Roaming\Corel
2017-06-14 11:30 - 2017-06-14 11:30 - 00067825 _____ C:\Users\zdenk\Desktop\20170614112316730.pdf
2017-06-13 10:37 - 2017-06-13 11:34 - 00027841 _____ C:\Users\zdenk\Desktop\MA 08.xlsx
2017-06-07 11:47 - 2017-06-07 11:19 - 00012384 _____ C:\Users\zdenk\Desktop\POV přepočty 7-14 do 9-14 - kopie.xlsx
2017-06-07 11:19 - 2017-06-07 12:11 - 00012444 _____ C:\Users\zdenk\Desktop\POV přepočty 7-14 do 9-14.xlsx
2017-06-07 11:14 - 2017-06-07 11:14 - 00000000 ____D C:\Users\zdenk\Desktop\přepočty
2017-06-07 09:23 - 2017-06-07 09:23 - 00055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-06-06 10:39 - 2017-06-06 10:40 - 00000000 ____D C:\Users\zdenk\Desktop\FOTKY
2017-05-31 10:01 - 2017-05-31 10:01 - 00280070 _____ C:\Users\zdenk\Documents\Scan0003.pdf
2017-05-16 17:45 - 2017-06-03 08:36 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-05-16 17:45 - 2017-06-03 08:36 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 17:24 - 2016-10-26 18:51 - 00000000 ____D C:\FRST
2017-06-15 17:24 - 2016-10-26 18:49 - 01777152 _____ (Farbar) C:\Users\Brdíci\Desktop\FRST.exe
2017-06-15 17:01 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-15 17:01 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-15 15:05 - 2016-06-22 21:12 - 00000000 ___RD C:\Users\zdenk\Desktop\OneDrive
2017-06-15 10:24 - 2016-02-13 14:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-15 00:40 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\rescache
2017-06-14 22:39 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF
2017-06-14 22:27 - 2016-11-20 14:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-14 22:22 - 2016-11-22 18:45 - 00000000 ____D C:\Users\Brdíci\AppData\LocalLow\Mozilla
2017-06-14 22:22 - 2012-07-08 10:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-14 22:10 - 2016-10-12 17:47 - 02723876 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-06-14 22:10 - 2016-07-16 19:01 - 01069202 _____ C:\WINDOWS\system32\perfh005.dat
2017-06-14 22:10 - 2016-07-16 19:01 - 00278412 _____ C:\WINDOWS\system32\perfc005.dat
2017-06-14 22:03 - 2016-10-12 18:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-14 22:03 - 2016-10-12 17:39 - 00422176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-14 22:02 - 2016-07-16 04:22 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-06-14 22:01 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-14 22:00 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-14 21:53 - 2016-10-12 17:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-06-14 21:47 - 2013-08-14 23:49 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-06-14 21:36 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-14 21:36 - 2012-07-08 01:53 - 130903960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-06-14 11:49 - 2016-10-20 09:36 - 00000000 ____D C:\Users\zdenk\AppData\Local\Google
2017-06-14 08:01 - 2016-06-22 20:56 - 00002387 _____ C:\Users\zdenk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-13 20:32 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-06-07 11:15 - 2016-06-27 10:28 - 00000000 ____D C:\Users\zdenk\Desktop\Generali
2017-06-06 10:40 - 2016-10-04 08:58 - 00000000 ____D C:\Users\zdenk\Desktop\mamka
2017-06-02 07:34 - 2016-05-22 23:09 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-05-18 23:06 - 2016-10-12 17:48 - 00000000 ____D C:\Users\Brdíci
2017-05-18 14:33 - 2017-02-18 12:51 - 00852024 _____ (ROBLOX Corporation) C:\Users\Brdíci\Desktop\RobloxPlayerLauncher.exe
2017-05-18 14:28 - 2017-01-15 14:53 - 00000000 ____D C:\Users\Brdíci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2017-05-18 14:26 - 2016-05-17 23:39 - 00000000 ____D C:\Users\Brdíci\AppData\Local\Packages
2017-05-16 17:46 - 2012-07-07 20:52 - 00430248 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-16 17:44 - 2016-07-16 04:22 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___RD C:\Program Files\Windows Defender
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-16 17:39 - 2016-07-16 04:22 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-16 14:25 - 2016-10-20 09:40 - 00002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-16 09:20 - 2014-08-01 16:01 - 00115152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys

==================== Files in the root of some directories =======

2014-01-20 22:19 - 2014-01-20 22:23 - 0004608 _____ () C:\Users\Brdíci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-12-22 23:43 - 2012-12-22 23:43 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
2016-10-25 23:19 - 2016-10-25 23:19 - 0001536 _____ () C:\Users\Brdíci\AppData\Local\Temp\NOSEventMessages.dll
2017-04-17 18:52 - 2017-04-17 18:52 - 0739904 _____ (Oracle Corporation) C:\Users\zdenk\AppData\Local\Temp\jre-8u121-windows-au.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-07 09:48

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-06-2017
Ran by Brdíci (15-06-2017 17:26:05)
Running from C:\Users\Brdíci\Desktop
Microsoft Windows 10 Pro Version 1607 (X86) (2016-10-12 16:27:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-529510219-857933644-3456723339-500 - Administrator - Disabled)
Brdíci (S-1-5-21-529510219-857933644-3456723339-1000 - Administrator - Enabled) => C:\Users\Brdíci
DefaultAccount (S-1-5-21-529510219-857933644-3456723339-503 - Limited - Disabled)
Guest (S-1-5-21-529510219-857933644-3456723339-501 - Limited - Disabled)
vladu (S-1-5-21-529510219-857933644-3456723339-1206 - Limited - Enabled)
zdenk (S-1-5-21-529510219-857933644-3456723339-1204 - Limited - Enabled) => C:\Users\zdenk

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.126 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{15A0A9A6-6CF0-4EEE-8E12-096B33F92CA7}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Audacity 2.1.0 (HKLM\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
Balíček ovladače systému Windows - AuthenTec Inc. (ATSwpWDF) Biometric (10/02/2008 8.1.2.37) (HKLM\...\A4680BD43717441189C52EBF2C4FD6B182EE1101) (Version: 10/02/2008 8.1.2.37 - AuthenTec Inc.)
Balíček ovladače systému Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{FD417077-C2FE-46DB-942A-228179B308D5}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 18.0.448 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CS (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CT (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CZ (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - DE (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - EN (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - ES (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - FR (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IT (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - JP (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - NL (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PL (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - RU (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - TR (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (HKLM\...\_{86F23E59-06B3-432A-9D16-B6A4DF379571}) (Version: 18.1.0.661 - Corel Corporation)
CorelDRAW Graphics Suite X8 (Version: 18.1 - Corel Corporation) Hidden
CSGO WaRzOnE Launcher (HKLM\...\CSGO WaRzOnE Launcher 1.0) (Version: 1.0 - Warzone)
CSGO WaRzOnE Launcher (Version: 1.0 - Warzone) Hidden
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.2.101.211 - Alps Electric)
DLL-Files.com Client (HKLM\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.1.1000.4462 - DLL-Files.com Client)
Doplněk Microsoft Save as PDF or XPS pro aplikace sady Microsoft Office 2007 (HKLM\...\{90120000-00B2-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (Version: 1.3.33.5 - Google Inc.) Hidden
HiSuite (HKLM\...\Hi Suite) (Version: 1.0 - Huawei Technologies Co.,Ltd)
IPM_Common_x86 (Version: 2.2 - Your Company Name) Hidden
iTunes (HKLM\...\{558C7B3E-84D0-4215-96EA-29282037F69D}) (Version: 12.4.3.1 - Apple Inc.)
Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
KA15 (HKLM\...\{778BD16C-83B0-418C-8972-068A56E74C5C}) (Version: 4.5.1 - Allianz pojišťovna, a.s.)
Microsoft Office Small Business 2007 (HKLM\...\SMALLBUSINESS) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Mozilla Firefox 53.0.2 (x86 cs) (HKLM\...\Mozilla Firefox 53.0.2 (x86 cs)) (Version: 53.0.2 - Mozilla)
Podpora aplikací Apple (32bitová) (HKLM\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)
Poradce, verze 1.55/1 (HKLM\...\Hledik - Poradce) (Version: 1.55/1 - )
ROBLOX Player for Brdíci (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
SafeZone Stable 3.55.2393.607 (Version: 3.55.2393.607 - Avast Software) Hidden
Seznam Software (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\SeznamInstall) (Version: - Seznam.cz)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
Unity Web Player (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Brdíci\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{76D50904-6780-4c8b-8986-1A7EE0B1716D}\InprocServer32 -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\RobloxProxy.dll (ROBLOX Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\RobloxProxy64.dll (ROBLOX Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04D833C3-9F3F-46CE-BB53-3CD1E0231E76} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {086FDF3D-2035-481A-9A9D-EBB5B052547A} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-10] (AVAST Software)
Task: {19E1D0D5-C5B1-4585-978B-BD03678F2191} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {1AF04B77-F171-430D-9DD6-45FA57E863E2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {216B0741-D6D7-4486-A5AA-03CAC613907A} - System32\Tasks\{B67EABC5-D390-47CF-B439-94EDDC13C140} => pcalua.exe -a E:\setup.exe -d E:\
Task: {2438DECE-1A8E-4B60-8B0B-E34057E4977E} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {24FDBB51-0A2E-4B8E-961F-097BBF9E019A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {26BAF881-497A-4239-BF92-CA166EB2277B} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {2B1E3A50-EEF9-48F9-AFAF-5123583046EB} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files\Corel\CUH\v2\CUH.exe [2016-06-24] (Corel Corporation)
Task: {356BABCF-CFF1-414E-82BD-EB555F70F408} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {421F7F45-DB6B-4C52-A1F8-ECDAF1B3F825} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4D79A09A-E903-4931-8980-F8A6CE77D2B8} - System32\Tasks\SafeZone scheduled Autoupdate 1463951370 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {4F111BFA-A476-41C2-8A70-31B806F89441} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {4F72520E-814E-48E1-B2A3-0C9E19D3600A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {56B9261D-90F5-4E5B-ADCC-795CEEF634ED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5707B345-1367-42F1-8CD4-6D8CF31743EB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {5885F589-4F84-4371-9D2A-CDD7F75F1A80} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {5D664E87-3E37-4DAF-A2CD-79C5207CD279} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {619D1F45-335F-492A-94A4-B5C30E62056D} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Brdíci\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {63BE0184-F699-421F-85A7-B1A3699C5FE7} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {67603696-7AE7-405B-AC19-189E5A51BFA3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-20] (Google Inc.)
Task: {6F024134-D9C1-41F7-A532-E53F89B5FE9C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {778E1DC6-7265-4F89-AAA9-0BA0168F5663} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-20] (Google Inc.)
Task: {7D72C818-E49B-4C2A-91AF-05020DE734B7} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2012-12-23] ()
Task: {8752391E-0575-4E69-883F-D6876CB04274} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {8AEB8D8B-A054-4431-8FD4-5626EB965C92} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {8DAD2D38-D9AF-407E-A6F9-CDCB8EA6C5EA} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8E63FC62-B9DA-42CC-8F83-C29468F53FAD} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {931F7CCB-BAAE-4185-BCA0-BD69548C454C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {98E02F38-685F-49EB-9B7F-D6DD1797DAEB} - System32\Tasks\{6D850D9F-34E4-4046-9204-7E11582C138C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A0E41695-4A49-44A3-A365-6A831AC7B30E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {A18DDA29-3B39-434F-A513-60D604CA7A51} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A6FE1FAB-0CC0-46ED-B120-FB944AB8C97E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {ABA2904B-4FD2-4111-8CE1-8BF1FD9678C1} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {B07D1E58-7D2B-477B-BA24-BF9767128D2D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {B1374992-5CB9-4406-A011-58F3AC1E888B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {B2B00700-9804-4151-8DE8-DE8E930F0817} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {B5C990B1-0AD8-462F-83C8-B6C966599C40} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B69A5D65-A726-454C-85B8-8A280D9A03EF} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B868DEAC-C12F-4160-8E6E-FA6844A58239} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-17] (AVAST Software)
Task: {C224BCED-C350-4C88-A8E8-B6A9C445595C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C7C52BEA-FC0A-4F52-AEF1-15C3E550BE8D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-13] (Adobe Systems Incorporated)
Task: {D778BB83-C085-4EB2-82E3-5C082135E826} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D7F9B4E4-105E-4F29-B4D8-1243D9F1204A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB6BCA33-95D1-46AF-A593-5742B3611ECE} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB753457-8587-4390-997D-BD32AB07E365} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\zdenk\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {E0D9661C-874D-460C-BC51-01B98CC6787A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {ED748C2F-1047-40E2-B70F-F44A54C507BA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {EDD2304E-7F03-4585-94DD-47EA8E2B7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {EE49BAC7-696B-4930-98C0-600D308620AC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {F952660F-1B0C-4C54-B019-6095FD97BD77} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {FAF5EB2B-B91B-40F3-9B19-4E83F6B911A6} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {FF7BDD5A-8E07-48C2-B053-67AB7F7E0153} - System32\Tasks\AVAST Software\Avast upgrade utility => C:\Program Files\Common Files\AV\avast! Antivirus\upgrade.exe [2017-04-17] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2016-07-03 20:06 - 2016-05-25 12:53 - 00155336 _____ () C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
2016-07-05 15:24 - 2016-07-05 15:24 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-07-05 15:23 - 2016-07-05 15:23 - 01041208 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-07-18 22:12 - 2013-07-11 16:50 - 00116032 _____ () C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
2016-07-16 10:25 - 2016-07-16 10:25 - 00190976 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-05-12 11:41 - 2017-04-28 02:56 - 02048488 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-10-12 18:33 - 2016-10-12 18:33 - 01383616 _____ () C:\Users\Brdíci\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-16 10:15 - 2017-03-04 08:24 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-16 10:08 - 2017-03-04 08:04 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-16 10:08 - 2017-03-04 07:58 - 01150464 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-12 18:30 - 2016-10-12 18:30 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-12 11:40 - 2017-04-28 01:52 - 01724928 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-12 11:40 - 2017-04-28 01:55 - 03158016 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2017-01-18 19:07 - 00000144 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost
0.0.0.0 apps.corel.com
0.0.0.0 mc.corel.com
0.0.0.0 origin-mc.corel.com
0.0.0.0 iws.corel.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-529510219-857933644-3456723339-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
DNS Servers: 77.237.128.2 - 77.237.128.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "NokiaSuite.exe"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{799A1B5B-C5BA-48A1-AAC8-4209F70A1BE0}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{906F1BC2-0848-44C1-B676-F543F6EA28B5}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{7E02E881-5ED4-4E1D-8528-E1DB2FF03C3C}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{FBC1F048-E0A1-4F8E-80A2-8648B6DB587E}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{FC79D89D-2C4C-44E3-A051-5CE82E0626BA}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{71421373-41DA-4DB0-9109-76FB5B83E5B9}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{7D31EBC3-23EC-41AA-8E59-97C38DEAFD9E}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{A373BE1E-5EF0-4C2D-A3B7-9E02497DD14E}] => (Allow) C:\Program Files\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{44D81A39-87A9-4759-984C-198D7B9EB866}] => (Allow) C:\Program Files\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{53883B0D-B5B1-42B8-BFAB-DCE13E60B272}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\DeviceSetup.exe
FirewallRules: [{E8612321-EE37-4A50-8C11-A3D82A625ECE}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{B3C2AA0D-67F7-4142-91FE-E553ADC2564A}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{506E4AB0-3D34-41B8-9A2A-3BE8B70DBA25}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8C507C59-9891-4269-B9EA-3FC25D3F3F88}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{278150C5-9246-4C7D-970F-799D41FDC2A1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4DB8A8EA-8E23-415B-9CED-96019D5DC8E5}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{118B5341-3C75-4293-83C0-E999EFCC7EF0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{2DE46224-B302-4CFB-B534-A3C9D701EB49}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{65E8BFF8-AA88-4F0D-A376-281A796E8BF6}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{432F9B75-B021-4D92-952D-CCCAC4935ECA}] => (Allow) C:\Program Files\Farming Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{710862C5-E85E-4B9E-A4B7-689C0349421B}] => (Allow) C:\Program Files\Farming Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{C8EB7BD3-0E8E-40AC-9498-00D0431911E7}] => (Allow) C:\Program Files\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{47899385-FF89-454C-AB11-876321ACE5A3}] => (Allow) C:\Program Files\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{D593A321-ED1C-4793-B06B-78A5BD52A2F9}] => (Allow) C:\Program Files\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{82E70941-89F8-43AA-92FA-8E476D80CDA8}] => (Allow) C:\Program Files\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{14D07646-774A-4D0D-81ED-7B5896589252}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{63B3ABD0-647C-4B1D-BDE5-D5CB7A048EBB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{B9CF2BF4-B8D1-4B02-A1BF-D5475992C6D2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2E964E6B-5CF8-475F-AA6B-108D2FF84655}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C1B07F66-887E-45B9-8FFE-2F3A84102DF2}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{A627FEA5-6C1A-42B1-9253-684356433B78}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{376AC19F-4217-4A79-8DE6-C7D03D3D5D55}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{522C2DB2-C5D1-4FBB-B379-267F9F2ED7AC}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{D44F7B79-8D01-4EAD-A125-A04D9EE43255}] => (Block) C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs\CorelDrw.exe
FirewallRules: [{2AFF3020-96DB-411C-A1CC-BECEF1699B5F}] => (Block) C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs\CorelPP.exe
FirewallRules: [TCP Query User{B9BACD1D-5D34-4B4E-8C32-04F9402D0470}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [UDP Query User{52790459-7071-4324-8602-9DFD0415BAEA}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [{AB569ADC-7845-4DE1-BC6F-E10316A1BDC8}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{714D5343-90E9-46A9-8CA3-FEF25A9B1B41}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{E1B06853-8A1F-4844-9415-D59DD0C1D037}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe

==================== Restore Points =========================

30-05-2017 08:45:49 Windows Update
02-06-2017 10:51:55 Windows Update
06-06-2017 10:06:05 Windows Update
12-06-2017 20:36:30 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2017 05:00:23 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 05:00:23 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 05:00:23 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 03:05:23 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15468

Error: (06/15/2017 03:05:23 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15468

Error: (06/15/2017 03:05:23 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/15/2017 11:19:10 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.14393.1198 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 1878

Čas spuštění: 01d2e5b7d41331a5

Čas ukončení: 0

Cesta k aplikaci: C:\Windows\explorer.exe

ID hlášení: 97b8d6f8-51ab-11e7-a6da-002219def3ba

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:

Error: (06/15/2017 11:15:26 AM) (Source: COM) (EventID: 10031) (User: )
Description: Při zrušení zařazení vlastního zařazeného objektu byla provedena kontrola zásad zrušení zařazení a třída {2CD39202-3A2F-4935-9A86-65B919919A7F} byla odmítnuta.

Error: (06/15/2017 11:15:24 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.14393.1198 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 2d4c

Čas spuštění: 01d2e5b4a7564554

Čas ukončení: 11802

Cesta k aplikaci: C:\Windows\explorer.exe

ID hlášení: 0f932783-51ab-11e7-a6da-002219def3ba

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:

Error: (06/15/2017 10:53:50 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.14393.1198 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 1cc4

Čas spuštění: 01d2e5b0cc4af914

Čas ukončení: 60000

Cesta k aplikaci: C:\Windows\explorer.exe

ID hlášení: e28e41cf-51a7-11e7-a6da-002219def3ba

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:


System errors:
=============
Error: (06/15/2017 05:00:52 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba CDPUserSvc_139e050 byla ukončena s následující chybou:
Nespecifikovaná chyba

Error: (06/15/2017 03:05:01 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:05:00 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:05:00 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:05:00 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:05:00 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:05:00 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:05:00 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:04:59 PM) (Source: DCOM) (EventID: 10010) (User: Brdíci-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/15/2017 03:04:59 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Server {995C996E-D918-4A8C-A302-45719A6F4EA7} se v daném časovém limitu neregistroval u služby DCOM.


CodeIntegrity:
===================================
Date: 2017-06-15 08:51:54.460
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.415
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.324
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.140
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.093
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.054
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:51.110
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:49.844
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2017-05-16 19:52:21.291
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-05-16 19:52:21.246
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 40%
Total physical RAM: 3032.85 MB
Available physical RAM: 1806.71 MB
Total Virtual: 6104.85 MB
Available Virtual: 4770.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.04 GB) (Free:70.15 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:151.6 GB) (Free:133.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 00000080)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)
Partition 3: (Not Active) - (Size=151.6 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================

Re: Vyčištění notebooku od havěti

Napsal: 15 čer 2017 17:03
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Vyčištění notebooku od havěti

Napsal: 15 čer 2017 19:10
od brdic
Udělal jsem to, našlo to 5 hrozeb, ale bohužel log se mi nezobrazil, protože je nějaký problém s adobe. Log jsem následně našel i ve výpisu logů, ale opět nelze otevřít.

Re: Vyčištění notebooku od havěti

Napsal: 15 čer 2017 20:00
od Rudy
Pokud jste je smazal, dejte nový log FRST.

Re: Vyčištění notebooku od havěti

Napsal: 15 čer 2017 20:39
od brdic
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-06-2017 01
Ran by Brdíci (15-06-2017 21:37:11)
Running from C:\Users\Brdíci\Desktop
Microsoft Windows 10 Pro Version 1607 (X86) (2016-10-12 16:27:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-529510219-857933644-3456723339-500 - Administrator - Disabled)
Brdíci (S-1-5-21-529510219-857933644-3456723339-1000 - Administrator - Enabled) => C:\Users\Brdíci
DefaultAccount (S-1-5-21-529510219-857933644-3456723339-503 - Limited - Disabled)
Guest (S-1-5-21-529510219-857933644-3456723339-501 - Limited - Disabled)
vladu (S-1-5-21-529510219-857933644-3456723339-1206 - Limited - Enabled)
zdenk (S-1-5-21-529510219-857933644-3456723339-1204 - Limited - Enabled) => C:\Users\zdenk

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.126 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{15A0A9A6-6CF0-4EEE-8E12-096B33F92CA7}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Audacity 2.1.0 (HKLM\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
Balíček ovladače systému Windows - AuthenTec Inc. (ATSwpWDF) Biometric (10/02/2008 8.1.2.37) (HKLM\...\A4680BD43717441189C52EBF2C4FD6B182EE1101) (Version: 10/02/2008 8.1.2.37 - AuthenTec Inc.)
Balíček ovladače systému Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{FD417077-C2FE-46DB-942A-228179B308D5}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 18.0.448 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CS (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CT (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CZ (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - DE (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - EN (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - ES (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - FR (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IT (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - JP (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - NL (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PL (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - RU (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - TR (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (Version: 18.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (HKLM\...\_{86F23E59-06B3-432A-9D16-B6A4DF379571}) (Version: 18.1.0.661 - Corel Corporation)
CorelDRAW Graphics Suite X8 (Version: 18.1 - Corel Corporation) Hidden
CSGO WaRzOnE Launcher (HKLM\...\CSGO WaRzOnE Launcher 1.0) (Version: 1.0 - Warzone)
CSGO WaRzOnE Launcher (Version: 1.0 - Warzone) Hidden
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.2.101.211 - Alps Electric)
DLL-Files.com Client (HKLM\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.1.1000.4462 - DLL-Files.com Client)
Doplněk Microsoft Save as PDF or XPS pro aplikace sady Microsoft Office 2007 (HKLM\...\{90120000-00B2-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (Version: 1.3.33.5 - Google Inc.) Hidden
HiSuite (HKLM\...\Hi Suite) (Version: 1.0 - Huawei Technologies Co.,Ltd)
IPM_Common_x86 (Version: 2.2 - Your Company Name) Hidden
iTunes (HKLM\...\{558C7B3E-84D0-4215-96EA-29282037F69D}) (Version: 12.4.3.1 - Apple Inc.)
Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
KA15 (HKLM\...\{778BD16C-83B0-418C-8972-068A56E74C5C}) (Version: 4.5.1 - Allianz pojišťovna, a.s.)
Microsoft Office Small Business 2007 (HKLM\...\SMALLBUSINESS) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Mozilla Firefox 53.0.3 (x86 cs) (HKLM\...\Mozilla Firefox 53.0.3 (x86 cs)) (Version: 53.0.3 - Mozilla)
Podpora aplikací Apple (32bitová) (HKLM\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)
Poradce, verze 1.55/1 (HKLM\...\Hledik - Poradce) (Version: 1.55/1 - )
ROBLOX Player for Brdíci (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
SafeZone Stable 3.55.2393.607 (Version: 3.55.2393.607 - Avast Software) Hidden
Seznam Software (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\SeznamInstall) (Version: - Seznam.cz)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
Unity Web Player (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Brdíci\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{76D50904-6780-4c8b-8986-1A7EE0B1716D}\InprocServer32 -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\RobloxProxy.dll (ROBLOX Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\RobloxProxy64.dll (ROBLOX Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04D833C3-9F3F-46CE-BB53-3CD1E0231E76} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {086FDF3D-2035-481A-9A9D-EBB5B052547A} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-10] (AVAST Software)
Task: {19E1D0D5-C5B1-4585-978B-BD03678F2191} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {1AF04B77-F171-430D-9DD6-45FA57E863E2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B487F18-D971-4EF6-8C32-2100A7F393D1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {216B0741-D6D7-4486-A5AA-03CAC613907A} - System32\Tasks\{B67EABC5-D390-47CF-B439-94EDDC13C140} => pcalua.exe -a E:\setup.exe -d E:\
Task: {2438DECE-1A8E-4B60-8B0B-E34057E4977E} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {24FDBB51-0A2E-4B8E-961F-097BBF9E019A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {26BAF881-497A-4239-BF92-CA166EB2277B} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {2B1E3A50-EEF9-48F9-AFAF-5123583046EB} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files\Corel\CUH\v2\CUH.exe [2016-06-24] (Corel Corporation)
Task: {356BABCF-CFF1-414E-82BD-EB555F70F408} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {421F7F45-DB6B-4C52-A1F8-ECDAF1B3F825} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4D79A09A-E903-4931-8980-F8A6CE77D2B8} - System32\Tasks\SafeZone scheduled Autoupdate 1463951370 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {4F111BFA-A476-41C2-8A70-31B806F89441} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {4F72520E-814E-48E1-B2A3-0C9E19D3600A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {56B9261D-90F5-4E5B-ADCC-795CEEF634ED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5707B345-1367-42F1-8CD4-6D8CF31743EB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {5885F589-4F84-4371-9D2A-CDD7F75F1A80} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {5D664E87-3E37-4DAF-A2CD-79C5207CD279} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {619D1F45-335F-492A-94A4-B5C30E62056D} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Brdíci\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {63BE0184-F699-421F-85A7-B1A3699C5FE7} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {67603696-7AE7-405B-AC19-189E5A51BFA3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-20] (Google Inc.)
Task: {6F024134-D9C1-41F7-A532-E53F89B5FE9C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {778E1DC6-7265-4F89-AAA9-0BA0168F5663} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-20] (Google Inc.)
Task: {7D72C818-E49B-4C2A-91AF-05020DE734B7} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2012-12-23] ()
Task: {8752391E-0575-4E69-883F-D6876CB04274} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {8AEB8D8B-A054-4431-8FD4-5626EB965C92} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {8DAD2D38-D9AF-407E-A6F9-CDCB8EA6C5EA} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8E63FC62-B9DA-42CC-8F83-C29468F53FAD} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {931F7CCB-BAAE-4185-BCA0-BD69548C454C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {98E02F38-685F-49EB-9B7F-D6DD1797DAEB} - System32\Tasks\{6D850D9F-34E4-4046-9204-7E11582C138C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A0E41695-4A49-44A3-A365-6A831AC7B30E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {A18DDA29-3B39-434F-A513-60D604CA7A51} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A6FE1FAB-0CC0-46ED-B120-FB944AB8C97E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {ABA2904B-4FD2-4111-8CE1-8BF1FD9678C1} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {B1374992-5CB9-4406-A011-58F3AC1E888B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {B2B00700-9804-4151-8DE8-DE8E930F0817} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {B5C990B1-0AD8-462F-83C8-B6C966599C40} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B69A5D65-A726-454C-85B8-8A280D9A03EF} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B868DEAC-C12F-4160-8E6E-FA6844A58239} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-17] (AVAST Software)
Task: {C224BCED-C350-4C88-A8E8-B6A9C445595C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C7C52BEA-FC0A-4F52-AEF1-15C3E550BE8D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-13] (Adobe Systems Incorporated)
Task: {D778BB83-C085-4EB2-82E3-5C082135E826} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D7F9B4E4-105E-4F29-B4D8-1243D9F1204A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB6BCA33-95D1-46AF-A593-5742B3611ECE} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB753457-8587-4390-997D-BD32AB07E365} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\zdenk\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {E0D9661C-874D-460C-BC51-01B98CC6787A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {ED748C2F-1047-40E2-B70F-F44A54C507BA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {EDD2304E-7F03-4585-94DD-47EA8E2B7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {EE49BAC7-696B-4930-98C0-600D308620AC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {F952660F-1B0C-4C54-B019-6095FD97BD77} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {FAF5EB2B-B91B-40F3-9B19-4E83F6B911A6} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {FF7BDD5A-8E07-48C2-B053-67AB7F7E0153} - System32\Tasks\AVAST Software\Avast upgrade utility => C:\Program Files\Common Files\AV\avast! Antivirus\upgrade.exe [2017-04-17] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2016-07-16 10:25 - 2016-07-16 10:25 - 00190976 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-05-12 11:41 - 2017-04-28 02:56 - 02048488 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-03 20:06 - 2016-05-25 12:53 - 00155336 _____ () C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
2013-07-18 22:12 - 2013-07-11 16:50 - 00116032 _____ () C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
2016-07-05 15:24 - 2016-07-05 15:24 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-07-05 15:23 - 2016-07-05 15:23 - 01041208 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-12 18:33 - 2016-10-12 18:33 - 01383616 _____ () C:\Users\Brdíci\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-16 10:15 - 2017-03-04 08:24 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-16 10:08 - 2017-03-04 08:04 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-16 10:08 - 2017-03-04 07:58 - 01150464 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-12 18:30 - 2016-10-12 18:30 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-12 11:40 - 2017-04-28 01:52 - 01724928 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-12 11:40 - 2017-04-28 01:55 - 03158016 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-10 07:32 - 2017-05-10 07:32 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-04-05 02:38 - 2017-04-05 02:38 - 23772240 _____ () C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroRd32.dll
2016-12-23 20:10 - 2016-12-23 20:10 - 00323152 _____ () C:\Program Files\Adobe\Acrobat Reader DC\Reader\sqlite.dll
2017-04-05 02:38 - 2017-04-05 02:38 - 69743184 _____ () C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2017-01-18 19:07 - 00000144 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost
0.0.0.0 apps.corel.com
0.0.0.0 mc.corel.com
0.0.0.0 origin-mc.corel.com
0.0.0.0 iws.corel.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-529510219-857933644-3456723339-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
DNS Servers: 77.237.128.2 - 77.237.128.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "NokiaSuite.exe"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{799A1B5B-C5BA-48A1-AAC8-4209F70A1BE0}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{906F1BC2-0848-44C1-B676-F543F6EA28B5}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{7E02E881-5ED4-4E1D-8528-E1DB2FF03C3C}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{FBC1F048-E0A1-4F8E-80A2-8648B6DB587E}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{FC79D89D-2C4C-44E3-A051-5CE82E0626BA}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{71421373-41DA-4DB0-9109-76FB5B83E5B9}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{7D31EBC3-23EC-41AA-8E59-97C38DEAFD9E}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{A373BE1E-5EF0-4C2D-A3B7-9E02497DD14E}] => (Allow) C:\Program Files\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{44D81A39-87A9-4759-984C-198D7B9EB866}] => (Allow) C:\Program Files\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{53883B0D-B5B1-42B8-BFAB-DCE13E60B272}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\DeviceSetup.exe
FirewallRules: [{E8612321-EE37-4A50-8C11-A3D82A625ECE}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{B3C2AA0D-67F7-4142-91FE-E553ADC2564A}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{506E4AB0-3D34-41B8-9A2A-3BE8B70DBA25}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8C507C59-9891-4269-B9EA-3FC25D3F3F88}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{278150C5-9246-4C7D-970F-799D41FDC2A1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4DB8A8EA-8E23-415B-9CED-96019D5DC8E5}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{118B5341-3C75-4293-83C0-E999EFCC7EF0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{2DE46224-B302-4CFB-B534-A3C9D701EB49}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{65E8BFF8-AA88-4F0D-A376-281A796E8BF6}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{432F9B75-B021-4D92-952D-CCCAC4935ECA}] => (Allow) C:\Program Files\Farming Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{710862C5-E85E-4B9E-A4B7-689C0349421B}] => (Allow) C:\Program Files\Farming Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{C8EB7BD3-0E8E-40AC-9498-00D0431911E7}] => (Allow) C:\Program Files\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{47899385-FF89-454C-AB11-876321ACE5A3}] => (Allow) C:\Program Files\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{D593A321-ED1C-4793-B06B-78A5BD52A2F9}] => (Allow) C:\Program Files\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{82E70941-89F8-43AA-92FA-8E476D80CDA8}] => (Allow) C:\Program Files\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{14D07646-774A-4D0D-81ED-7B5896589252}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{63B3ABD0-647C-4B1D-BDE5-D5CB7A048EBB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{B9CF2BF4-B8D1-4B02-A1BF-D5475992C6D2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2E964E6B-5CF8-475F-AA6B-108D2FF84655}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C1B07F66-887E-45B9-8FFE-2F3A84102DF2}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{A627FEA5-6C1A-42B1-9253-684356433B78}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{376AC19F-4217-4A79-8DE6-C7D03D3D5D55}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{522C2DB2-C5D1-4FBB-B379-267F9F2ED7AC}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{D44F7B79-8D01-4EAD-A125-A04D9EE43255}] => (Block) C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs\CorelDrw.exe
FirewallRules: [{2AFF3020-96DB-411C-A1CC-BECEF1699B5F}] => (Block) C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs\CorelPP.exe
FirewallRules: [TCP Query User{B9BACD1D-5D34-4B4E-8C32-04F9402D0470}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [UDP Query User{52790459-7071-4324-8602-9DFD0415BAEA}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [{AB569ADC-7845-4DE1-BC6F-E10316A1BDC8}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{714D5343-90E9-46A9-8CA3-FEF25A9B1B41}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{E1B06853-8A1F-4844-9415-D59DD0C1D037}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe

==================== Restore Points =========================

30-05-2017 08:45:49 Windows Update
02-06-2017 10:51:55 Windows Update
06-06-2017 10:06:05 Windows Update
12-06-2017 20:36:30 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:34 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)


System errors:
=============
Error: (06/15/2017 08:56:35 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Hlavní prohledávač přijal oznámení serveru od počítače VLAĎUS,
který se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{F047863A-1889-4446-81D2-BF07641E6F4.
Hlavní prohledávač bude ukončen nebo bude vyvolána volba.

Error: (06/15/2017 08:15:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x8024200b): Hewlett-Packard - Imaging - Null Print - HP Deskjet 3520 series.

Error: (06/15/2017 07:41:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba CDPUserSvc_21428 byla ukončena s následující chybou:
Nespecifikovaná chyba

Error: (06/15/2017 07:40:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba NetTcpActivator závisí na službě NetTcpPortSharing, která neuspěla při spuštění v důsledku následující chyby:
%%1058 = Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.

Error: (06/15/2017 07:39:26 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056 = Instance této služby je již spuštěna.

Error: (06/15/2017 07:38:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (06/15/2017 07:38:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Řízení front zpráv byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (06/15/2017 07:38:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba HiSuiteOuc.exe byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (06/15/2017 07:38:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (06/15/2017 07:38:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.


CodeIntegrity:
===================================
Date: 2017-06-15 08:51:54.460
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.415
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.324
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.140
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.093
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.054
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:51.110
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:49.844
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2017-05-16 19:52:21.291
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-05-16 19:52:21.246
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 50%
Total physical RAM: 3032.85 MB
Available physical RAM: 1492.93 MB
Total Virtual: 6104.85 MB
Available Virtual: 4458.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.04 GB) (Free:70.03 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:151.6 GB) (Free:133.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 00000080)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)
Partition 3: (Not Active) - (Size=151.6 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-06-2017 01
Ran by Brdíci (administrator) on BRDÍCI-PC (15-06-2017 21:35:51)
Running from C:\Users\Brdíci\Desktop
Loaded Profiles: Brdíci (Available Profiles: Brdíci & zdenk & DefaultAppPool)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\stacsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\AEstSrv.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [483428 2009-03-16] (IDT, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [200704 2008-08-01] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2016-07-26] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <====== ATTENTION
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [NokiaSuite.exe] => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1086376 2012-08-03] (Nokia)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Brdíci\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Brdíci\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-05-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.237.128.2 77.237.128.1
Tcpip\..\Interfaces\{2213107e-f9a7-4c52-bd47-1967af1ac80f}: [DhcpNameServer] 176.107.120.35 176.107.120.42
Tcpip\..\Interfaces\{f047863a-1889-4446-81d2-bf07641e6f4e}: [DhcpNameServer] 77.237.128.2 77.237.128.1

Internet Explorer:
==================
HKU\S-1-5-21-529510219-857933644-3456723339-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {068E70B5-42CB-421B-AEC1-774902ABFE57} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {1879FF1C-F09E-458F-AD59-EDE77CBB52F7} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {1A543F3B-2703-4229-9883-2530ECB5F8BA} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {30891B69-791C-48F3-A895-222E11D2B26D} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {40E1742A-2ECB-478A-9338-BE2BF0ABC09A} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {52607051-57A0-43D0-ABCD-EE06819BDFA0} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {A4A218D6-CE39-4339-B3F2-3CB4115783DD} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {A74A5B07-8082-44C2-8D34-FCDBA933623B} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {E06A9E9C-BCBC-4CE8-9385-BF8A10596C06} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13415
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-17] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-17] (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default [2017-06-15]
FF user.js: detected! => C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\user.js [2014-09-20]
FF Homepage: Mozilla\Firefox\Profiles\budn51vn.default -> hxxp://www.seznam.cz/
FF NetworkProxy: Mozilla\Firefox\Profiles\budn51vn.default -> type", 0
FF Extension: (Widevine Media Optimizer) - C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2016-01-13] [not signed]
FF Extension: (Seznam lištička) - C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2017-05-18]
FF SearchPlugin: C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\searchplugins\firmycz.xml [2015-10-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_126.dll [2017-06-13] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-17] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-05] ( Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2012-08-03] ( )
FF Plugin: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2012-12-04] (RocketLife, LLP)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @nsroblox.roblox.com/launcher -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Brdíci\AppData\Local\Roblox\Versions\version-b5da7e35345f4359\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Brdíci\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-11-16]

Chrome:
=======
CHR Profile: C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default [2016-10-27]
CHR Extension: (Prezentace Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-25]
CHR Extension: (Dokumenty Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-25]
CHR Extension: (Disk Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-25]
CHR Extension: (YouTube) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-25]
CHR Extension: (Avast SafePrice) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-25]
CHR Extension: (Tabulky Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-25]
CHR Extension: (Avast Online Security) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-25]
CHR Extension: (Gmail) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\aestsrv.exe [81920 2009-03-16] (Andrea Electronics Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5732136 2017-05-10] (AVAST Software s.r.o.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1668344 2008-10-16] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
R2 HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [116032 2013-07-11] ()
R2 HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [155336 2016-05-25] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-10-12] (Microsoft Corporation)
R2 STacSV; C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\STacSV.exe [254042 2009-03-16] (IDT, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271488 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84920 2017-04-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [258288 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [148696 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [268016 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [41664 2017-05-10] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [65344 2016-12-20] (AVAST Software)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34136 2017-05-10] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [31064 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [107928 2017-05-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [90336 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [62152 2017-05-10] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [764576 2017-05-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [482608 2017-05-10] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [115152 2017-05-16] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [279800 2017-05-10] (AVAST Software)
R3 BTDriver; C:\WINDOWS\system32\DRIVERS\btport.sys [37160 2008-02-05] (Broadcom Corporation.)
R3 btkrnl; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [990632 2008-04-15] (Broadcom Corporation.)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [243128 2013-11-23] (Disc Soft Ltd)
R3 itecir; C:\WINDOWS\system32\DRIVERS\itecir.sys [84600 2015-11-24] (ITE Tech. Inc. )
R3 ITECIRfilter; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [34000 2015-11-24] (ITE Tech. Inc. )
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 NETwNs32; C:\WINDOWS\System32\drivers\NETwNs32.sys [7518208 2016-07-16] (Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 20:05 - 2017-06-15 20:05 - 38624400 _____ (Adobe Systems Incorporated) C:\Users\Brdíci\Desktop\AdbeRdr11000_cs_CZ.exe
2017-06-15 20:05 - 2017-06-15 20:05 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-15 19:48 - 2017-06-15 19:48 - 00002094 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2017-06-15 19:35 - 2017-06-15 19:35 - 04110280 _____ C:\Users\Brdíci\Desktop\adwcleaner_6.047.exe
2017-06-15 17:24 - 2017-06-15 21:35 - 00000000 ____D C:\Users\Brdíci\Desktop\FRST-OlderVersion
2017-06-15 11:24 - 2017-06-15 11:23 - 00043011 _____ C:\Users\zdenk\Desktop\předpis - kopie.pdf
2017-06-15 11:23 - 2017-06-15 11:23 - 00043011 _____ C:\Users\zdenk\Desktop\předpis.pdf
2017-06-15 11:18 - 2017-06-15 11:18 - 00036712 _____ C:\Users\zdenk\Desktop\575242495.pdf
2017-06-15 11:18 - 2017-06-15 11:18 - 00036712 _____ C:\Users\zdenk\Desktop\575242495 - kopie.pdf
2017-06-15 10:58 - 2017-06-15 10:57 - 00246608 _____ C:\Users\zdenk\Desktop\DAGetDocument - kopie.pdf
2017-06-15 10:57 - 2017-06-15 10:57 - 00246608 _____ C:\Users\zdenk\Desktop\DAGetDocument.pdf
2017-06-15 10:34 - 2017-06-15 10:34 - 00246608 _____ C:\Users\zdenk\Desktop\pan Horáček.pdf
2017-06-15 10:29 - 2017-06-15 10:30 - 03396071 _____ C:\Users\zdenk\Desktop\kmen 2017 terka.xlsx
2017-06-14 22:38 - 2017-06-15 17:26 - 00041155 _____ C:\Users\Brdíci\Desktop\Addition.txt
2017-06-14 22:36 - 2017-06-15 21:36 - 00017081 _____ C:\Users\Brdíci\Desktop\FRST.txt
2017-06-14 22:16 - 2017-06-14 22:16 - 00001450 _____ C:\AdwCleaner[R3].txt
2017-06-14 22:14 - 2017-06-14 22:15 - 00001390 _____ C:\AdwCleaner[R2].txt
2017-06-14 22:00 - 2017-06-14 22:01 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-14 21:29 - 2017-06-03 12:22 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-14 21:29 - 2017-06-03 12:03 - 00094560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-14 21:29 - 2017-06-03 11:58 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-14 21:29 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-14 21:29 - 2017-06-03 11:54 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-14 21:29 - 2017-06-03 11:43 - 01964384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-14 21:29 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-14 21:29 - 2017-06-03 11:32 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-14 21:29 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-06-14 21:29 - 2017-06-03 11:30 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-14 21:29 - 2017-06-03 11:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-14 21:29 - 2017-06-03 11:25 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-14 21:29 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-14 21:29 - 2017-06-03 11:06 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-14 21:29 - 2017-06-03 11:04 - 01889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-14 21:29 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-14 21:29 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-14 21:29 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 01336160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00514400 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00455000 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00284000 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00083296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-14 21:28 - 2017-06-03 12:50 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-14 21:28 - 2017-06-03 12:15 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-14 21:28 - 2017-06-03 12:13 - 05996384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-14 21:28 - 2017-06-03 12:13 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-14 21:28 - 2017-06-03 12:03 - 00950112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-14 21:28 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-14 21:28 - 2017-06-03 11:55 - 01896288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-14 21:28 - 2017-06-03 11:55 - 00342368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-14 21:28 - 2017-06-03 11:53 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-14 21:28 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-14 21:28 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-14 21:28 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-14 21:28 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-14 21:28 - 2017-06-03 11:48 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-14 21:28 - 2017-06-03 11:44 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-14 21:28 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-14 21:28 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-14 21:28 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-14 21:28 - 2017-06-03 11:31 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-14 21:28 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-14 21:28 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-14 21:28 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-14 21:28 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2017-06-14 21:28 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-14 21:28 - 2017-06-03 11:20 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-14 21:28 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-14 21:28 - 2017-06-03 11:16 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-14 21:28 - 2017-06-03 11:16 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-14 21:28 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-14 21:28 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-14 21:28 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-14 21:28 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-14 21:28 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 01236480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-14 21:28 - 2017-06-03 11:05 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-14 21:28 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-14 21:28 - 2017-06-02 09:35 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-14 21:28 - 2017-05-25 08:56 - 00034144 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-14 21:28 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-06-14 21:28 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-06-14 11:50 - 2017-06-14 11:50 - 00000000 ____D C:\Users\zdenk\AppData\Roaming\Corel
2017-06-14 11:30 - 2017-06-14 11:30 - 00067825 _____ C:\Users\zdenk\Desktop\20170614112316730.pdf
2017-06-13 10:37 - 2017-06-13 11:34 - 00027841 _____ C:\Users\zdenk\Desktop\MA 08.xlsx
2017-06-07 11:47 - 2017-06-07 11:19 - 00012384 _____ C:\Users\zdenk\Desktop\POV přepočty 7-14 do 9-14 - kopie.xlsx
2017-06-07 11:19 - 2017-06-07 12:11 - 00012444 _____ C:\Users\zdenk\Desktop\POV přepočty 7-14 do 9-14.xlsx
2017-06-07 11:14 - 2017-06-07 11:14 - 00000000 ____D C:\Users\zdenk\Desktop\přepočty
2017-06-07 09:23 - 2017-06-07 09:23 - 00055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-06-06 10:39 - 2017-06-06 10:40 - 00000000 ____D C:\Users\zdenk\Desktop\FOTKY
2017-05-31 10:01 - 2017-05-31 10:01 - 00280070 _____ C:\Users\zdenk\Documents\Scan0003.pdf
2017-05-16 17:45 - 2017-06-03 08:36 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-05-16 17:45 - 2017-06-03 08:36 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 21:35 - 2016-10-26 18:51 - 00000000 ____D C:\FRST
2017-06-15 21:35 - 2016-10-26 18:49 - 01777152 _____ (Farbar) C:\Users\Brdíci\Desktop\FRST.exe
2017-06-15 20:08 - 2016-11-22 18:45 - 00000000 ____D C:\Users\Brdíci\AppData\LocalLow\Mozilla
2017-06-15 19:54 - 2016-10-26 20:17 - 00000000 ____D C:\AdwCleaner
2017-06-15 19:48 - 2016-03-18 23:24 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-06-15 19:45 - 2016-10-12 17:47 - 02752526 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-06-15 19:45 - 2016-07-16 19:01 - 01084000 _____ C:\WINDOWS\system32\perfh005.dat
2017-06-15 19:45 - 2016-07-16 19:01 - 00282812 _____ C:\WINDOWS\system32\perfc005.dat
2017-06-15 19:40 - 2016-11-20 14:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-15 19:40 - 2016-10-12 18:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-15 19:40 - 2012-07-08 10:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-15 19:39 - 2016-07-16 04:22 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-06-15 19:38 - 2012-07-07 23:37 - 00000000 ____D C:\ProgramData\ICQ
2017-06-15 17:01 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-15 17:01 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-15 15:05 - 2016-06-22 21:12 - 00000000 ___RD C:\Users\zdenk\Desktop\OneDrive
2017-06-15 10:24 - 2016-02-13 14:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-15 00:40 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\rescache
2017-06-14 22:39 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF
2017-06-14 22:03 - 2016-10-12 17:39 - 00422176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-14 22:01 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-14 22:00 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-14 21:53 - 2016-10-12 17:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-06-14 21:47 - 2013-08-14 23:49 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-06-14 21:36 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-14 21:36 - 2012-07-08 01:53 - 130903960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-06-14 11:49 - 2016-10-20 09:36 - 00000000 ____D C:\Users\zdenk\AppData\Local\Google
2017-06-14 08:01 - 2016-06-22 20:56 - 00002387 _____ C:\Users\zdenk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-13 20:32 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-06-07 11:15 - 2016-06-27 10:28 - 00000000 ____D C:\Users\zdenk\Desktop\Generali
2017-06-06 10:40 - 2016-10-04 08:58 - 00000000 ____D C:\Users\zdenk\Desktop\mamka
2017-06-02 07:34 - 2016-05-22 23:09 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-05-18 23:06 - 2016-10-12 17:48 - 00000000 ____D C:\Users\Brdíci
2017-05-18 14:33 - 2017-02-18 12:51 - 00852024 _____ (ROBLOX Corporation) C:\Users\Brdíci\Desktop\RobloxPlayerLauncher.exe
2017-05-18 14:28 - 2017-01-15 14:53 - 00000000 ____D C:\Users\Brdíci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2017-05-18 14:26 - 2016-05-17 23:39 - 00000000 ____D C:\Users\Brdíci\AppData\Local\Packages
2017-05-16 17:46 - 2012-07-07 20:52 - 00430248 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-16 17:44 - 2016-07-16 04:22 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___RD C:\Program Files\Windows Defender
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-16 17:39 - 2016-07-16 04:22 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-16 14:25 - 2016-10-20 09:40 - 00002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-16 09:20 - 2014-08-01 16:01 - 00115152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys

==================== Files in the root of some directories =======

2014-01-20 22:19 - 2014-01-20 22:23 - 0004608 _____ () C:\Users\Brdíci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-12-22 23:43 - 2012-12-22 23:43 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
2016-10-25 23:19 - 2016-10-25 23:19 - 0001536 _____ () C:\Users\Brdíci\AppData\Local\Temp\NOSEventMessages.dll
2017-04-17 18:52 - 2017-04-17 18:52 - 0739904 _____ (Oracle Corporation) C:\Users\zdenk\AppData\Local\Temp\jre-8u121-windows-au.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-07 09:48

==================== End of FRST.txt ============================

Re: Vyčištění notebooku od havěti

Napsal: 15 čer 2017 21:08
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
Task: {04D833C3-9F3F-46CE-BB53-3CD1E0231E76} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {19E1D0D5-C5B1-4585-978B-BD03678F2191} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {216B0741-D6D7-4486-A5AA-03CAC613907A} - System32\Tasks\{B67EABC5-D390-47CF-B439-94EDDC13C140} => pcalua.exe -a E:\setup.exe -d E:\
ask: {24FDBB51-0A2E-4B8E-961F-097BBF9E019A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {26BAF881-497A-4239-BF92-CA166EB2277B} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
ask: {4F111BFA-A476-41C2-8A70-31B806F89441} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {5707B345-1367-42F1-8CD4-6D8CF31743EB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {5885F589-4F84-4371-9D2A-CDD7F75F1A80} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {8752391E-0575-4E69-883F-D6876CB04274} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {98E02F38-685F-49EB-9B7F-D6DD1797DAEB} - System32\Tasks\{6D850D9F-34E4-4046-9204-7E11582C138C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A0E41695-4A49-44A3-A365-6A831AC7B30E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
ask: {A6FE1FAB-0CC0-46ED-B120-FB944AB8C97E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {ABA2904B-4FD2-4111-8CE1-8BF1FD9678C1} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {B1374992-5CB9-4406-A011-58F3AC1E888B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {EDD2304E-7F03-4585-94DD-47EA8E2B7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {EE49BAC7-696B-4930-98C0-600D308620AC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <====== ATTENTION
U3 idsvc; no ImagePath
C:\Users\Brdíci\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\ProgramData\Ament.ini

EmptyTemp:
ResetHosts:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Vyčištění notebooku od havěti

Napsal: 15 čer 2017 21:35
od brdic
Log mi bohužel nevyskočil, restaroval se PC a nic nevyskočilo. Udělal jsem tedy znovu nový log

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-06-2017 01
Ran by Brdíci (15-06-2017 22:32:28)
Running from C:\Users\Brdíci\Desktop
Microsoft Windows 10 Pro Version 1607 (X86) (2016-10-12 16:27:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-529510219-857933644-3456723339-500 - Administrator - Disabled)
Brdíci (S-1-5-21-529510219-857933644-3456723339-1000 - Administrator - Enabled) => C:\Users\Brdíci
DefaultAccount (S-1-5-21-529510219-857933644-3456723339-503 - Limited - Disabled)
Guest (S-1-5-21-529510219-857933644-3456723339-501 - Limited - Disabled)
zdenk (S-1-5-21-529510219-857933644-3456723339-1204 - Limited - Enabled) => C:\Users\zdenk

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.126 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{15A0A9A6-6CF0-4EEE-8E12-096B33F92CA7}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Audacity 2.1.0 (HKLM\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
Balíček ovladače systému Windows - AuthenTec Inc. (ATSwpWDF) Biometric (10/02/2008 8.1.2.37) (HKLM\...\A4680BD43717441189C52EBF2C4FD6B182EE1101) (Version: 10/02/2008 8.1.2.37 - AuthenTec Inc.)
Balíček ovladače systému Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
CSGO WaRzOnE Launcher (HKLM\...\CSGO WaRzOnE Launcher 1.0) (Version: 1.0 - Warzone)
CSGO WaRzOnE Launcher (Version: 1.0 - Warzone) Hidden
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.2.101.211 - Alps Electric)
DLL-Files.com Client (HKLM\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.1.1000.4462 - DLL-Files.com Client)
Doplněk Microsoft Save as PDF or XPS pro aplikace sady Microsoft Office 2007 (HKLM\...\{90120000-00B2-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (Version: 1.3.33.5 - Google Inc.) Hidden
iTunes (HKLM\...\{558C7B3E-84D0-4215-96EA-29282037F69D}) (Version: 12.4.3.1 - Apple Inc.)
Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
KA15 (HKLM\...\{778BD16C-83B0-418C-8972-068A56E74C5C}) (Version: 4.5.1 - Allianz pojišťovna, a.s.)
Microsoft Office Small Business 2007 (HKLM\...\SMALLBUSINESS) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Mozilla Firefox 53.0.3 (x86 cs) (HKLM\...\Mozilla Firefox 53.0.3 (x86 cs)) (Version: 53.0.3 - Mozilla)
Podpora aplikací Apple (32bitová) (HKLM\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)
Poradce, verze 1.55/1 (HKLM\...\Hledik - Poradce) (Version: 1.55/1 - )
SafeZone Stable 3.55.2393.607 (Version: 3.55.2393.607 - Avast Software) Hidden
Seznam Software (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\SeznamInstall) (Version: - Seznam.cz)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
Unity Web Player (HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Brdíci\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-529510219-857933644-3456723339-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {086FDF3D-2035-481A-9A9D-EBB5B052547A} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-10] (AVAST Software)
Task: {1AF04B77-F171-430D-9DD6-45FA57E863E2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B487F18-D971-4EF6-8C32-2100A7F393D1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {2438DECE-1A8E-4B60-8B0B-E34057E4977E} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {24FDBB51-0A2E-4B8E-961F-097BBF9E019A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {356BABCF-CFF1-414E-82BD-EB555F70F408} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {421F7F45-DB6B-4C52-A1F8-ECDAF1B3F825} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4D79A09A-E903-4931-8980-F8A6CE77D2B8} - System32\Tasks\SafeZone scheduled Autoupdate 1463951370 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {4F111BFA-A476-41C2-8A70-31B806F89441} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {4F72520E-814E-48E1-B2A3-0C9E19D3600A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {56B9261D-90F5-4E5B-ADCC-795CEEF634ED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5D664E87-3E37-4DAF-A2CD-79C5207CD279} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {619D1F45-335F-492A-94A4-B5C30E62056D} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Brdíci\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {63BE0184-F699-421F-85A7-B1A3699C5FE7} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {67603696-7AE7-405B-AC19-189E5A51BFA3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-20] (Google Inc.)
Task: {6F024134-D9C1-41F7-A532-E53F89B5FE9C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {778E1DC6-7265-4F89-AAA9-0BA0168F5663} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-20] (Google Inc.)
Task: {7D72C818-E49B-4C2A-91AF-05020DE734B7} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2012-12-23] ()
Task: {8AEB8D8B-A054-4431-8FD4-5626EB965C92} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {8DAD2D38-D9AF-407E-A6F9-CDCB8EA6C5EA} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8E63FC62-B9DA-42CC-8F83-C29468F53FAD} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {931F7CCB-BAAE-4185-BCA0-BD69548C454C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A18DDA29-3B39-434F-A513-60D604CA7A51} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A6FE1FAB-0CC0-46ED-B120-FB944AB8C97E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {B2B00700-9804-4151-8DE8-DE8E930F0817} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {B5C990B1-0AD8-462F-83C8-B6C966599C40} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B69A5D65-A726-454C-85B8-8A280D9A03EF} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B868DEAC-C12F-4160-8E6E-FA6844A58239} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-17] (AVAST Software)
Task: {C224BCED-C350-4C88-A8E8-B6A9C445595C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C7C52BEA-FC0A-4F52-AEF1-15C3E550BE8D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-13] (Adobe Systems Incorporated)
Task: {D778BB83-C085-4EB2-82E3-5C082135E826} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D7F9B4E4-105E-4F29-B4D8-1243D9F1204A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB6BCA33-95D1-46AF-A593-5742B3611ECE} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB753457-8587-4390-997D-BD32AB07E365} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\zdenk\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {E0D9661C-874D-460C-BC51-01B98CC6787A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {ED748C2F-1047-40E2-B70F-F44A54C507BA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {F952660F-1B0C-4C54-B019-6095FD97BD77} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {FAF5EB2B-B91B-40F3-9B19-4E83F6B911A6} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {FF7BDD5A-8E07-48C2-B053-67AB7F7E0153} - System32\Tasks\AVAST Software\Avast upgrade utility => C:\Program Files\Common Files\AV\avast! Antivirus\upgrade.exe [2017-04-17] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2016-07-16 10:25 - 2016-07-16 10:25 - 00190976 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-05-12 11:41 - 2017-04-28 02:56 - 02048488 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-05 15:24 - 2016-07-05 15:24 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-07-05 15:23 - 2016-07-05 15:23 - 01041208 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-07-18 22:12 - 2013-07-11 16:50 - 00116032 _____ () C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
2016-10-12 18:33 - 2016-10-12 18:33 - 01383616 _____ () C:\Users\Brdíci\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-16 10:15 - 2017-03-04 08:24 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-16 10:08 - 2017-03-04 08:04 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-16 10:08 - 2017-03-04 07:58 - 01150464 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-12 18:30 - 2016-10-12 18:30 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-12 11:40 - 2017-04-28 01:52 - 01724928 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-12 11:40 - 2017-04-28 01:55 - 03158016 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2017-01-18 19:07 - 00000144 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost
0.0.0.0 apps.corel.com
0.0.0.0 mc.corel.com
0.0.0.0 origin-mc.corel.com
0.0.0.0 iws.corel.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-529510219-857933644-3456723339-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
DNS Servers: 77.237.128.2 - 77.237.128.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "NokiaSuite.exe"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{799A1B5B-C5BA-48A1-AAC8-4209F70A1BE0}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{906F1BC2-0848-44C1-B676-F543F6EA28B5}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{7E02E881-5ED4-4E1D-8528-E1DB2FF03C3C}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{FBC1F048-E0A1-4F8E-80A2-8648B6DB587E}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{FC79D89D-2C4C-44E3-A051-5CE82E0626BA}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{71421373-41DA-4DB0-9109-76FB5B83E5B9}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{7D31EBC3-23EC-41AA-8E59-97C38DEAFD9E}] => (Allow) C:\Program Files\ICQ7M\ICQ.exe
FirewallRules: [{A373BE1E-5EF0-4C2D-A3B7-9E02497DD14E}] => (Allow) C:\Program Files\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{44D81A39-87A9-4759-984C-198D7B9EB866}] => (Allow) C:\Program Files\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{53883B0D-B5B1-42B8-BFAB-DCE13E60B272}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\DeviceSetup.exe
FirewallRules: [{E8612321-EE37-4A50-8C11-A3D82A625ECE}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{B3C2AA0D-67F7-4142-91FE-E553ADC2564A}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{506E4AB0-3D34-41B8-9A2A-3BE8B70DBA25}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8C507C59-9891-4269-B9EA-3FC25D3F3F88}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{278150C5-9246-4C7D-970F-799D41FDC2A1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4DB8A8EA-8E23-415B-9CED-96019D5DC8E5}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{118B5341-3C75-4293-83C0-E999EFCC7EF0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{2DE46224-B302-4CFB-B534-A3C9D701EB49}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{65E8BFF8-AA88-4F0D-A376-281A796E8BF6}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{432F9B75-B021-4D92-952D-CCCAC4935ECA}] => (Allow) C:\Program Files\Farming Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{710862C5-E85E-4B9E-A4B7-689C0349421B}] => (Allow) C:\Program Files\Farming Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{C8EB7BD3-0E8E-40AC-9498-00D0431911E7}] => (Allow) C:\Program Files\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{47899385-FF89-454C-AB11-876321ACE5A3}] => (Allow) C:\Program Files\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{D593A321-ED1C-4793-B06B-78A5BD52A2F9}] => (Allow) C:\Program Files\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{82E70941-89F8-43AA-92FA-8E476D80CDA8}] => (Allow) C:\Program Files\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{14D07646-774A-4D0D-81ED-7B5896589252}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{63B3ABD0-647C-4B1D-BDE5-D5CB7A048EBB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{B9CF2BF4-B8D1-4B02-A1BF-D5475992C6D2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2E964E6B-5CF8-475F-AA6B-108D2FF84655}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C1B07F66-887E-45B9-8FFE-2F3A84102DF2}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{A627FEA5-6C1A-42B1-9253-684356433B78}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{376AC19F-4217-4A79-8DE6-C7D03D3D5D55}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{522C2DB2-C5D1-4FBB-B379-267F9F2ED7AC}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [TCP Query User{B9BACD1D-5D34-4B4E-8C32-04F9402D0470}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [UDP Query User{52790459-7071-4324-8602-9DFD0415BAEA}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [{AB569ADC-7845-4DE1-BC6F-E10316A1BDC8}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{714D5343-90E9-46A9-8CA3-FEF25A9B1B41}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{E1B06853-8A1F-4844-9415-D59DD0C1D037}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe

==================== Restore Points =========================

30-05-2017 08:45:49 Windows Update
02-06-2017 10:51:55 Windows Update
06-06-2017 10:06:05 Windows Update
12-06-2017 20:36:30 Windows Update
15-06-2017 22:16:07 Removed Corel Graphics - Windows Shell Extension.

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2017 10:27:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 10.0.14393.1198, časové razítko: 0x5902853c
Název chybujícího modulu: windows.immersiveshell.serviceprovider.dll, verze: 10.0.14393.0, časové razítko: 0x57898fb4
Kód výjimky: 0x80270233
Posun chyby: 0x0003aead
ID chybujícího procesu: 0x10b4
Čas spuštění chybující aplikace: 0x01d2e615a41f9518
Cesta k chybující aplikaci: C:\WINDOWS\Explorer.EXE
Cesta k chybujícímu modulu: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
ID zprávy: b108c33e-af04-48e9-8919-8b76fa712e1c
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (06/15/2017 10:16:20 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (06/15/2017 10:16:07 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny ConvertStringSidToSid(S-1-5-21-529510219-857933644-3456723339-1206.bak) došlo k neočekávané chybě. hr= 0x80070539, Struktura ID zabezpečení není platná.
.


Operace:
Událost OnIdentify
Shromažďování dat modulu pro zápis

Kontext:
Kontext spuštění: Shadow Copy Optimization Writer
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {6bc5b9d7-0208-435b-ba3b-13f5e355f6a6}

Error: (06/15/2017 10:09:44 PM) (Source: MsiInstaller) (EventID: 11706) (User: Brdíci-PC)
Description: Product: CorelDRAW Graphics Suite X8 -- Error 1706.No valid source could be found for product CorelDRAW Graphics Suite X8. The Windows Installer cannot continue.

Error: (06/15/2017 10:09:44 PM) (Source: MsiInstaller) (EventID: 11706) (User: Brdíci-PC)
Description: Product: CorelDRAW Graphics Suite X8 -- Error 1706.No valid source could be found for product CorelDRAW Graphics Suite X8. The Windows Installer cannot continue.

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:41 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)

Error: (06/15/2017 08:41:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Vytvoření výčtu relací uživatelů pro generování fondů filtrů se nezdařilo.

Podrobnosti:
(HRESULT : 0x80040210) (0x80040210)


System errors:
=============
Error: (06/15/2017 10:26:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba CDPUserSvc_422de byla ukončena s následující chybou:
Nespecifikovaná chyba

Error: (06/15/2017 10:26:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba FontCache3.0.0.0 neuspěla při spuštění v důsledku následující chyby:
%%1053 = Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (06/15/2017 10:26:06 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby FontCache3.0.0.0 bylo dosaženo časového limitu (30000 ms).

Error: (06/15/2017 10:25:36 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba NetTcpActivator závisí na službě NetTcpPortSharing, která neuspěla při spuštění v důsledku následující chyby:
%%1058 = Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.

Error: (06/15/2017 10:25:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba HuaweiHiSuiteService.exe neuspěla při spuštění v důsledku následující chyby:
%%2 = Systém nemůže nalézt uvedený soubor.

Error: (06/15/2017 10:17:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba HuaweiHiSuiteService.exe byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (06/15/2017 10:08:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba CDPUserSvc_7b5316 byla ukončena s následující chybou:
%%2147500037 = Nespecifikovaná chyba

Error: (06/15/2017 09:44:14 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
a APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/15/2017 08:56:35 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Hlavní prohledávač přijal oznámení serveru od počítače VLAĎUS,
který se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{F047863A-1889-4446-81D2-BF07641E6F4.
Hlavní prohledávač bude ukončen nebo bude vyvolána volba.

Error: (06/15/2017 08:15:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x8024200b): Hewlett-Packard - Imaging - Null Print - HP Deskjet 3520 series.


CodeIntegrity:
===================================
Date: 2017-06-15 08:51:54.460
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.415
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.324
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.140
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.093
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:54.054
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:51.110
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-15 08:51:49.844
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2017-05-16 19:52:21.291
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2017-05-16 19:52:21.246
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 46%
Total physical RAM: 3032.85 MB
Available physical RAM: 1624.24 MB
Total Virtual: 6104.85 MB
Available Virtual: 4701.94 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.04 GB) (Free:76.49 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:151.6 GB) (Free:133.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 00000080)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)
Partition 3: (Not Active) - (Size=151.6 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-06-2017 01
Ran by Brdíci (administrator) on BRDÍCI-PC (15-06-2017 22:30:14)
Running from C:\Users\Brdíci\Desktop
Loaded Profiles: Brdíci (Available Profiles: Brdíci & zdenk & DefaultAppPool)
Platform: Microsoft Windows 10 Pro Version 1607 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\stacsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\AEstSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
Failed to access process -> explorer.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1439_none_22df65e269979a9a\TiWorker.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [483428 2009-03-16] (IDT, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [200704 2008-08-01] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2016-07-26] (Apple Inc.)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [NokiaSuite.exe] => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1086376 2012-08-03] (Nokia)
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Brdíci\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-529510219-857933644-3456723339-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Brdíci\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-05-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.237.128.2 77.237.128.1
Tcpip\..\Interfaces\{2213107e-f9a7-4c52-bd47-1967af1ac80f}: [DhcpNameServer] 176.107.120.35 176.107.120.42
Tcpip\..\Interfaces\{f047863a-1889-4446-81d2-bf07641e6f4e}: [DhcpNameServer] 77.237.128.2 77.237.128.1

Internet Explorer:
==================
HKU\S-1-5-21-529510219-857933644-3456723339-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {068E70B5-42CB-421B-AEC1-774902ABFE57} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {1879FF1C-F09E-458F-AD59-EDE77CBB52F7} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {1A543F3B-2703-4229-9883-2530ECB5F8BA} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {30891B69-791C-48F3-A895-222E11D2B26D} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {40E1742A-2ECB-478A-9338-BE2BF0ABC09A} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {52607051-57A0-43D0-ABCD-EE06819BDFA0} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {A4A218D6-CE39-4339-B3F2-3CB4115783DD} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {A74A5B07-8082-44C2-8D34-FCDBA933623B} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13415
SearchScopes: HKU\S-1-5-21-529510219-857933644-3456723339-1000 -> {E06A9E9C-BCBC-4CE8-9385-BF8A10596C06} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13415
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-17] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-17] (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default [2017-06-15]
FF user.js: detected! => C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\user.js [2014-09-20]
FF Homepage: Mozilla\Firefox\Profiles\budn51vn.default -> hxxp://www.seznam.cz/
FF NetworkProxy: Mozilla\Firefox\Profiles\budn51vn.default -> type", 0
FF Extension: (Widevine Media Optimizer) - C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2016-01-13] [not signed]
FF Extension: (Seznam lištička) - C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2017-05-18]
FF SearchPlugin: C:\Users\Brdíci\AppData\Roaming\Mozilla\Firefox\Profiles\budn51vn.default\searchplugins\firmycz.xml [2015-10-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_126.dll [2017-06-13] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-17] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-05] ( Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2012-08-03] ( )
FF Plugin: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2012-12-04] (RocketLife, LLP)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-529510219-857933644-3456723339-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Brdíci\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-11-16]

Chrome:
=======
CHR Profile: C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default [2017-06-15]
CHR Extension: (Prezentace Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-25]
CHR Extension: (Dokumenty Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-25]
CHR Extension: (Disk Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-25]
CHR Extension: (YouTube) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-25]
CHR Extension: (Avast SafePrice) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-25]
CHR Extension: (Tabulky Google) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-25]
CHR Extension: (Avast Online Security) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-25]
CHR Extension: (Gmail) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\Brdíci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\aestsrv.exe [81920 2009-03-16] (Andrea Electronics Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5732136 2017-05-10] (AVAST Software s.r.o.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1668344 2008-10-16] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
R2 HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [116032 2013-07-11] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-10-12] (Microsoft Corporation)
R2 STacSV; C:\WINDOWS\System32\DriverStore\FileRepository\stwrt.inf_x86_4c73f4a9a59a84bb\STacSV.exe [254042 2009-03-16] (IDT, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271488 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84920 2017-04-28] (Microsoft Corporation)
S2 HuaweiHiSuiteService.exe; "C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe" -/service [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [258288 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [148696 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [268016 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [41664 2017-05-10] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [65344 2016-12-20] (AVAST Software)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34136 2017-05-10] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [31064 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [107928 2017-05-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [90336 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [62152 2017-05-10] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [764576 2017-05-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [482608 2017-05-10] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [115152 2017-05-16] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [279800 2017-05-10] (AVAST Software)
R3 BTDriver; C:\WINDOWS\system32\DRIVERS\btport.sys [37160 2008-02-05] (Broadcom Corporation.)
R3 btkrnl; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [990632 2008-04-15] (Broadcom Corporation.)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [243128 2013-11-23] (Disc Soft Ltd)
R3 itecir; C:\WINDOWS\system32\DRIVERS\itecir.sys [84600 2015-11-24] (ITE Tech. Inc. )
R3 ITECIRfilter; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [34000 2015-11-24] (ITE Tech. Inc. )
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 NETwNs32; C:\WINDOWS\System32\drivers\NETwNs32.sys [7518208 2016-07-16] (Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 22:30 - 2017-06-15 22:31 - 00015435 _____ C:\Users\Brdíci\Desktop\FRST.txt
2017-06-15 22:21 - 2017-06-15 22:23 - 00010621 _____ C:\Users\Brdíci\Desktop\Fixlog.txt
2017-06-15 20:05 - 2017-06-15 20:05 - 38624400 _____ (Adobe Systems Incorporated) C:\Users\Brdíci\Desktop\AdbeRdr11000_cs_CZ.exe
2017-06-15 19:48 - 2017-06-15 19:48 - 00002094 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2017-06-15 19:35 - 2017-06-15 19:35 - 04110280 _____ C:\Users\Brdíci\Desktop\adwcleaner_6.047.exe
2017-06-15 17:24 - 2017-06-15 21:35 - 00000000 ____D C:\Users\Brdíci\Desktop\FRST-OlderVersion
2017-06-15 11:24 - 2017-06-15 11:23 - 00043011 _____ C:\Users\zdenk\Desktop\předpis - kopie.pdf
2017-06-15 11:23 - 2017-06-15 11:23 - 00043011 _____ C:\Users\zdenk\Desktop\předpis.pdf
2017-06-15 11:18 - 2017-06-15 11:18 - 00036712 _____ C:\Users\zdenk\Desktop\575242495.pdf
2017-06-15 11:18 - 2017-06-15 11:18 - 00036712 _____ C:\Users\zdenk\Desktop\575242495 - kopie.pdf
2017-06-15 10:58 - 2017-06-15 10:57 - 00246608 _____ C:\Users\zdenk\Desktop\DAGetDocument - kopie.pdf
2017-06-15 10:57 - 2017-06-15 10:57 - 00246608 _____ C:\Users\zdenk\Desktop\DAGetDocument.pdf
2017-06-15 10:34 - 2017-06-15 10:34 - 00246608 _____ C:\Users\zdenk\Desktop\pan Horáček.pdf
2017-06-15 10:29 - 2017-06-15 10:30 - 03396071 _____ C:\Users\zdenk\Desktop\kmen 2017 terka.xlsx
2017-06-14 22:16 - 2017-06-14 22:16 - 00001450 _____ C:\AdwCleaner[R3].txt
2017-06-14 22:14 - 2017-06-14 22:15 - 00001390 _____ C:\AdwCleaner[R2].txt
2017-06-14 22:00 - 2017-06-14 22:01 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-14 21:29 - 2017-06-03 12:22 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-14 21:29 - 2017-06-03 12:03 - 00094560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-14 21:29 - 2017-06-03 11:58 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-14 21:29 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-14 21:29 - 2017-06-03 11:54 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-14 21:29 - 2017-06-03 11:43 - 01964384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-14 21:29 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-14 21:29 - 2017-06-03 11:32 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-14 21:29 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-06-14 21:29 - 2017-06-03 11:30 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-14 21:29 - 2017-06-03 11:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-14 21:29 - 2017-06-03 11:25 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-14 21:29 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-14 21:29 - 2017-06-03 11:06 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-14 21:29 - 2017-06-03 11:04 - 01889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-14 21:29 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-14 21:29 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-14 21:29 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 01336160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00514400 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00455000 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00284000 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-14 21:28 - 2017-06-03 12:50 - 00083296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-14 21:28 - 2017-06-03 12:50 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-14 21:28 - 2017-06-03 12:15 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-14 21:28 - 2017-06-03 12:13 - 05996384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-14 21:28 - 2017-06-03 12:13 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-14 21:28 - 2017-06-03 12:03 - 00950112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-14 21:28 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-14 21:28 - 2017-06-03 11:55 - 01896288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-14 21:28 - 2017-06-03 11:55 - 00342368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-14 21:28 - 2017-06-03 11:53 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-14 21:28 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-14 21:28 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-14 21:28 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-14 21:28 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-14 21:28 - 2017-06-03 11:48 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-14 21:28 - 2017-06-03 11:44 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-14 21:28 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-14 21:28 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-14 21:28 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-14 21:28 - 2017-06-03 11:31 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-14 21:28 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-14 21:28 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-14 21:28 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-14 21:28 - 2017-06-03 11:25 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-14 21:28 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-14 21:28 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2017-06-14 21:28 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-14 21:28 - 2017-06-03 11:20 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-14 21:28 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-14 21:28 - 2017-06-03 11:16 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-14 21:28 - 2017-06-03 11:16 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-14 21:28 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-14 21:28 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-14 21:28 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-14 21:28 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-14 21:28 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 01236480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-14 21:28 - 2017-06-03 11:05 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-14 21:28 - 2017-06-03 11:05 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-14 21:28 - 2017-06-03 11:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-14 21:28 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-14 21:28 - 2017-06-02 09:35 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-14 21:28 - 2017-05-25 08:56 - 00034144 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-14 21:28 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-06-14 21:28 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-06-14 11:50 - 2017-06-15 22:15 - 00000000 ____D C:\Users\zdenk\AppData\Roaming\Corel
2017-06-14 11:30 - 2017-06-14 11:30 - 00067825 _____ C:\Users\zdenk\Desktop\20170614112316730.pdf
2017-06-13 10:37 - 2017-06-13 11:34 - 00027841 _____ C:\Users\zdenk\Desktop\MA 08.xlsx
2017-06-07 11:47 - 2017-06-07 11:19 - 00012384 _____ C:\Users\zdenk\Desktop\POV přepočty 7-14 do 9-14 - kopie.xlsx
2017-06-07 11:19 - 2017-06-07 12:11 - 00012444 _____ C:\Users\zdenk\Desktop\POV přepočty 7-14 do 9-14.xlsx
2017-06-07 11:14 - 2017-06-07 11:14 - 00000000 ____D C:\Users\zdenk\Desktop\přepočty
2017-06-07 09:23 - 2017-06-07 09:23 - 00055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-06-06 10:39 - 2017-06-06 10:40 - 00000000 ____D C:\Users\zdenk\Desktop\FOTKY
2017-05-31 10:01 - 2017-05-31 10:01 - 00280070 _____ C:\Users\zdenk\Documents\Scan0003.pdf
2017-05-16 17:45 - 2017-06-03 08:36 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-05-16 17:45 - 2017-06-03 08:36 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 22:30 - 2016-10-26 18:51 - 00000000 ____D C:\FRST
2017-06-15 22:29 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-15 22:28 - 2016-11-22 18:45 - 00000000 ____D C:\Users\Brdíci\AppData\LocalLow\Mozilla
2017-06-15 22:25 - 2016-10-12 18:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-15 22:24 - 2016-07-16 04:22 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-06-15 22:24 - 2016-06-22 21:12 - 00000000 ___RD C:\Users\zdenk\Desktop\OneDrive
2017-06-15 22:23 - 2016-08-09 13:51 - 00000000 ____D C:\Users\zdenk\AppData\LocalLow\Temp
2017-06-15 22:22 - 2012-07-23 21:36 - 00000000 ____D C:\Users\Brdíci\AppData\LocalLow\Temp
2017-06-15 22:17 - 2013-07-18 21:38 - 00000000 ____D C:\Users\Brdíci\AppData\Local\HiSuite
2017-06-15 22:15 - 2016-12-25 13:28 - 00000000 ____D C:\Users\Brdíci\AppData\Roaming\Corel
2017-06-15 21:35 - 2016-10-26 18:49 - 01777152 _____ (Farbar) C:\Users\Brdíci\Desktop\FRST.exe
2017-06-15 19:54 - 2016-10-26 20:17 - 00000000 ____D C:\AdwCleaner
2017-06-15 19:48 - 2016-03-18 23:24 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-06-15 19:45 - 2016-10-12 17:47 - 02752526 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-06-15 19:45 - 2016-07-16 19:01 - 01084000 _____ C:\WINDOWS\system32\perfh005.dat
2017-06-15 19:45 - 2016-07-16 19:01 - 00282812 _____ C:\WINDOWS\system32\perfc005.dat
2017-06-15 19:40 - 2016-11-20 14:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-15 19:40 - 2012-07-08 10:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-15 19:38 - 2012-07-07 23:37 - 00000000 ____D C:\ProgramData\ICQ
2017-06-15 17:01 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-15 10:24 - 2016-02-13 14:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-15 00:40 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\rescache
2017-06-14 22:39 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF
2017-06-14 22:03 - 2016-10-12 17:39 - 00422176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-14 22:01 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-14 22:00 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-14 21:53 - 2016-10-12 17:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-06-14 21:47 - 2013-08-14 23:49 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-06-14 21:36 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-14 21:36 - 2012-07-08 01:53 - 130903960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-06-14 11:49 - 2016-10-20 09:36 - 00000000 ____D C:\Users\zdenk\AppData\Local\Google
2017-06-14 08:01 - 2016-06-22 20:56 - 00002387 _____ C:\Users\zdenk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-13 20:32 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-06-07 11:15 - 2016-06-27 10:28 - 00000000 ____D C:\Users\zdenk\Desktop\Generali
2017-06-06 10:40 - 2016-10-04 08:58 - 00000000 ____D C:\Users\zdenk\Desktop\mamka
2017-06-02 07:34 - 2016-05-22 23:09 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-05-18 23:06 - 2016-10-12 17:48 - 00000000 ____D C:\Users\Brdíci
2017-05-18 14:26 - 2016-05-17 23:39 - 00000000 ____D C:\Users\Brdíci\AppData\Local\Packages
2017-05-16 17:46 - 2012-07-07 20:52 - 00430248 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-16 17:44 - 2016-07-16 04:22 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ___RD C:\Program Files\Windows Defender
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-16 17:39 - 2016-07-16 10:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-16 17:39 - 2016-07-16 04:22 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-16 14:25 - 2016-10-20 09:40 - 00002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-16 09:20 - 2014-08-01 16:01 - 00115152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-07 09:48

==================== End of FRST.txt ============================

Re: Vyčištění notebooku od havěti

Napsal: 16 čer 2017 17:26
od Rudy
OK. Změnilo se něco k lepšímu?

Re: Vyčištění notebooku od havěti

Napsal: 16 čer 2017 20:12
od brdic
Ano, je to vše mnohem lepší. Moc děkuji. Můžete mi ještě prosím notebook proklepnout co tam tak smazat atd.
Pokud už máte pocit, že je to takto v pořádku, ještě jednou moc děkuji !!!

Re: Vyčištění notebooku od havěti

Napsal: 16 čer 2017 20:54
od Rudy
Mělo by být. Pokud chcete hloubkový sken, spusťte MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic nemažte.

Re: Vyčištění notebooku od havěti

Napsal: 24 čer 2017 21:13
od brdic
Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 24.06.17
Čas skenování: 18:56
Logovací soubor:
Správce: Ano

-Informace o softwaru-
Verze: 3.1.2.1733
Verze komponentů: 1.0.141
Aktualizovat verzi balíku komponent: 1.0.2224
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x86
Systém souborů: NTFS
Uživatel: Brd\u00c3\u00adci-PC\Brd\u00c3\u00adci

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 607824
Zjištěné hrozby: 1
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 4 min, 54 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 1
PUP.Optional.Somoto, C:\USERS\BRDíCI\APPDATA\LOCAL\APPLICATION DATA\BUNDLED SOFTWARE UNINSTALLER\BI_CLIENT.EXE, Žádná uživatelská akce, [370], [301181],1.0.2224

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Re: Vyčištění notebooku od havěti

Napsal: 25 čer 2017 10:12
od Rudy
Nelezenou položku smažte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz