VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04.03.2018
Ran by Fotogold (administrator) on P4 (09-03-2018 10:09:50)
Running from I:\Digitál\2018\03\08
Loaded Profiles: Fotogold (Available Profiles: Fotogold & Administrator & Guest)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C. Ghisler & Co.) C:\totalcmd\TOTALCMD.EXE

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Matrox PowerDesk SE] => c:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe [3907328 2008-09-19] (Matrox Graphics Inc.)
HKLM\...\Run: [HPDJ Taskbar Utility] => C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe [188416 2004-09-14] (HP)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456 2014-10-01] (ESET)
HKLM\...\Run: [CmUCRRun] => C:\WINDOWS\system32\CmUCReye.exe [233472 2004-11-19] ()
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2014-01-07] (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7814600 2017-11-08] (Piriform Ltd)
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DisplayCAL Profile Loader.lnk [2017-12-06]
ShortcutTarget: DisplayCAL Profile Loader.lnk -> C:\Program Files\DisplayCAL\DisplayCAL-apply-profiles.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\i1Profiler Tray.lnk [2016-07-26]
ShortcutTarget: i1Profiler Tray.lnk -> C:\Program Files\X-Rite\i1Profiler\i1ProfilerTray.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk [2017-11-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicyScripts: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [152864 2010-05-18] (Apple Inc.)
Tcpip\..\Interfaces\{AA502CB2-E28B-45BF-B7DA-7FEA0374CF9D}: [NameServer] 193.179.144.2,212.47.0.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-29] (Oracle Corporation)
BHO: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-29] (Oracle Corporation)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1292428093-616249376-1801674531-1003 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1292428093-616249376-1801674531-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Fotogold\Data aplikací\Mozilla\Firefox\Profiles\kazreyyd.default-1470816331562 [2018-03-08]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-19] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-01-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-01-29] (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\Google\Chrome\User Data\Default [2018-01-10]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-31]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2018-02-07] (Adobe Systems Incorporated) [File not signed]
S2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [643072 2014-01-07] (ATI Technologies Inc.) [File not signed]
S4 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1349576 2014-10-01] (ESET)
S2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-01-27] (Macrovision Europe Ltd.) [File not signed]
S2 hasplms; C:\WINDOWS\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
S2 Matrox Centering Service; c:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe [1262336 2008-09-19] (Matrox Graphics Inc.)
S2 Matrox.Pdesk.ServicesHost; c:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe [343296 2008-09-19] (Matrox Graphics Inc)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 SATARaid5 Config Service; C:\Program Files\Silicon Image\3124-W-I32-R SATARAID5\SATARaid5ConfigService.exe [131072 2005-10-05] () [File not signed]
S2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10803440 2017-12-18] (TeamViewer GmbH)
S2 xrdd.exe; C:\Program Files\X-Rite\Devices\Services\xrdd.exe [83312 2014-06-23] (X-Rite Inc.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\WINDOWS\System32\DRIVERS\61883.sys [48128 2008-04-14] (Microsoft Corporation)
S2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [358400 2010-04-13] (SafeNet Inc.)
S3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [7875072 2014-01-07] (ATI Technologies Inc.) [File not signed]
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
S1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
S2 epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [176448 2014-10-10] (ESET)
R3 Epfwndis; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [39464 2014-10-10] (ESET)
R1 epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [63160 2014-10-10] (ESET)
S3 F235usb2; C:\WINDOWS\System32\drivers\F235usb2.sys [12928 2002-11-21] () [File not signed]
R3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [63464 2013-02-13] (FTDI Ltd.)
S3 G400; C:\WINDOWS\System32\DRIVERS\G400m.sys [322432 2001-10-24] (Matrox Graphics Inc.)
S3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation)
S2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [588800 2009-12-09] (SafeNet Inc.)
S1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2016-08-18] (REALiX(tm))
S3 i1; C:\WINDOWS\System32\Drivers\i1.sys [26045 2013-06-21] (GretagMacbeth) [File not signed]
S3 libusb0; C:\WINDOWS\System32\DRIVERS\libusb0.sys [42592 2015-10-26] (hxxp://libusb-win32.sourceforge.net)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MTXPAR; C:\WINDOWS\System32\DRIVERS\MTXPARM.sys [1485824 2008-08-12] (Matrox Graphics Inc.)
S3 MTXPARH; C:\WINDOWS\System32\DRIVERS\MTXPARHM.sys [452736 2008-04-13] (Matrox Graphics Inc.)
S1 Mtxparmx; C:\WINDOWS\System32\DRIVERS\Mtxparmx.sys [5504 2008-08-12] (Matrox Graphics Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R0 Si3124r5; C:\WINDOWS\System32\DRIVERS\Si3124r5.sys [207152 2006-09-20] (Silicon Image, Inc)
R0 SiFilter; C:\WINDOWS\System32\DRIVERS\SiWinAcc.sys [17328 2006-07-13] (Silicon Image, Inc.)
S3 UMSSSTOR; C:\WINDOWS\System32\DRIVERS\cmiucr.SYS [65792 2004-11-25] (C-Media Corporation) [File not signed]
S3 WDGTLDR; C:\WINDOWS\System32\drivers\F235Ldr.sys [16000 2002-11-21] (anchor chips) [File not signed]
S2 WinI2C-DDC; C:\WINDOWS\system32\drivers\DDCDrv.sys [10240 2014-07-11] (Nicomsoft Ltd.) [File not signed]
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [250496 2006-11-22] (Marvell)
U0 aswVmm; no ImagePath
S4 IntelIde; no ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-09 10:00 - 2018-03-09 09:58 - 008222496 _____ (Malwarebytes) C:\Documents and Settings\Fotogold\Plocha\adwcleaner_7.0.8.0(1).exe
2018-03-09 09:41 - 2018-03-09 09:41 - 000074914 _____ C:\WINDOWS\ntbtlog.txt
2018-03-06 15:37 - 2018-03-06 15:35 - 357869640 _____ C:\Documents and Settings\Fotogold\Plocha\Kopie - Track No01.nrg
2018-03-06 15:34 - 2018-03-06 15:35 - 357869640 _____ C:\Documents and Settings\Fotogold\Plocha\Track No01.nrg
2018-03-06 14:43 - 2018-03-06 14:12 - 000065536 ____H C:\WINDOWS\Minidump\Mini030618-01.dmp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-09 10:10 - 2008-10-07 14:51 - 000000000 ____D C:\Documents and Settings\Fotogold\Local Settings\Temp
2018-03-09 10:09 - 2016-07-25 14:25 - 000000000 ____D C:\FRST
2018-03-09 10:04 - 2008-10-08 11:35 - 000006130 _____ C:\WINDOWS\wincmd.ini
2018-03-09 10:00 - 2008-10-07 14:51 - 000000000 ____D C:\Documents and Settings\Fotogold\Plocha
2018-03-09 09:41 - 2002-09-23 13:00 - 000011936 _____ C:\WINDOWS\system32\wpa.dbl
2018-03-08 17:22 - 2008-10-07 14:51 - 000000178 ___SH C:\Documents and Settings\Fotogold\ntuser.ini
2018-03-08 17:22 - 2008-10-07 14:50 - 000032636 _____ C:\WINDOWS\SchedLgU.Txt
2018-03-08 17:22 - 2008-10-07 14:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-03-08 17:10 - 2010-04-08 22:32 - 000000472 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{98699783-46B2-4230-8C28-2FA2FDFB2AFE}.job
2018-03-08 17:00 - 2012-05-03 16:25 - 000000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2018-03-08 16:53 - 2014-05-10 07:23 - 000000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2018-03-08 15:00 - 2014-03-28 08:33 - 000000222 _____ C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
2018-03-08 12:52 - 2016-02-02 10:15 - 000003268 _____ C:\WINDOWS\system32\d3d9caps.dat
2018-03-08 12:50 - 2017-10-30 10:36 - 000000334 ____H C:\WINDOWS\Tasks\CCleaner Update.job
2018-03-08 12:50 - 2016-07-26 08:30 - 000001446 ____H C:\WINDOWS\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job
2018-03-08 12:50 - 2016-05-11 05:28 - 000000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2018-03-08 12:50 - 2014-12-03 09:38 - 000000404 _____ C:\WINDOWS\Tasks\Wise Care 365.job
2018-03-08 08:00 - 2015-04-02 15:18 - 000000376 _____ C:\WINDOWS\Tasks\X-Rite Device Services Software Updater.job
2018-03-08 07:53 - 2008-10-07 14:51 - 000000000 ___HD C:\Documents and Settings\Fotogold\Local Settings\Data aplikací
2018-03-08 07:12 - 2016-07-20 13:35 - 000000000 ____D C:\Documents and Settings\Fotogold\Data aplikací\DisplayCAL
2018-03-07 17:10 - 2014-01-28 07:06 - 000000605 ____H C:\WINDOWS\system32\GelSprinter GX e3300N.CAC
2018-03-07 12:37 - 2017-07-18 17:39 - 000000000 ____D C:\Program Files\TeamViewer
2018-03-07 12:22 - 2008-10-30 08:51 - 000000000 ____D C:\Documents and Settings\Fotogold\Data aplikací\Adobe
2018-03-07 06:34 - 2008-11-15 09:14 - 000000202 _____ C:\WINDOWS\NeroDigital.ini
2018-03-06 14:43 - 2008-10-20 18:51 - 000000000 ____D C:\WINDOWS\Minidump
2018-03-05 14:22 - 2008-10-07 14:51 - 000000000 ___HD C:\Documents and Settings\Fotogold\Okolní síť
2018-02-28 18:33 - 2014-02-05 13:12 - 000000702 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000701 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000701 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r3000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000701 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r2880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000700 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000700 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000700 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9910.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9908.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9900.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9890.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9710.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9700.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9600.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7910.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7908.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7900.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7890.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7710.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7700.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7600.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4910.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4900.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4450.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3890.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000695 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_illustrator.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000691 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t7000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000691 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t5000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000691 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t3000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000690 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_photoshop.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000690 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_indesign.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000680 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.loading_pdf.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000679 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_15.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000678 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_20.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000684 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_all.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_all.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_rgb_measurement.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_proofing.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_cmyk_measurement.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.droprgb.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.control4.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.cmykick.lic
2018-02-15 13:00 - 2010-10-26 10:14 - 000000000 ____D C:\Program Files\CCleaner
2018-02-08 11:30 - 2016-07-20 05:26 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2018-02-08 10:24 - 2017-01-27 16:46 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-02-07 11:00 - 2012-05-03 16:24 - 000803328 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2018-02-07 11:00 - 2012-05-03 16:24 - 000144896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2018-02-07 11:00 - 2008-10-07 14:45 - 000000000 ____D C:\WINDOWS\system32\Macromed

==================== Files in the root of some directories =======

2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.cmykick.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.control4.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.droprgb.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_cmyk_measurement.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_proofing.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_rgb_measurement.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000680 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.loading_pdf.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000684 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000679 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_15.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000678 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_20.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000695 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_illustrator.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000690 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_indesign.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000690 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_photoshop.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_all.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_all.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000691 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t3000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000691 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t5000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000691 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t7000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000701 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r2880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000701 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r3000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000701 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000702 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3890.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4450.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000700 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4900.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4910.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7600.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7700.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7710.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000700 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7890.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7900.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7908.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7910.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9600.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9700.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9710.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000700 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9890.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9900.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9908.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9910.lic
2016-12-21 08:51 - 2017-11-08 12:26 - 000014513 _____ () C:\Documents and Settings\Fotogold\Data aplikací\mdbu.bin
2013-05-14 16:09 - 2017-11-08 12:03 - 000002048 _____ () C:\Documents and Settings\Fotogold\Data aplikací\PhotoBook Software Prefs
2008-11-15 09:14 - 2017-10-05 10:24 - 000053248 _____ () C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-16 10:09 - 2014-09-16 10:09 - 000000128 _____ () C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\fusioncache.dat

Files to move or delete:
====================
C:\Windows\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job


Some files in TEMP:
====================
2016-06-30 20:52 - 2016-06-30 20:52 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Documents and Settings\Administrator\Local Settings\Temp\libeay32.dll
2016-06-30 20:52 - 2016-06-30 20:52 - 000970912 _____ (Microsoft Corporation) C:\Documents and Settings\Administrator\Local Settings\Temp\msvcr120.dll
2016-06-30 20:52 - 2016-06-30 20:52 - 000772672 _____ () C:\Documents and Settings\Administrator\Local Settings\Temp\sqlite3.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Ahoj

Stiahni AdwCleaner 6.046 (posledna verzia kompatibilna s WinXP): https://filehippo.com/download_adwcleaner/74895/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Scan (Skenovanie) a pockaj na dokoncenie
• Klikni na Clean (Cistenie) a potvrd kliknutim na OK
• AdwCleaner si vyziada restart PC, potvrd kliknutim na OK
• Po dokonceni a restartovani PC vyskoci log, jeho obsah sem skopiruj

Stiahni Junkware Removal Tool (JRT): https://downloads.malwarebytes.com/file/JRT-EOL/

• Uloz na plochu a ukonci vsetky programy
• Spusti JRT ako spravca
• Stlac lubovolnu klavesu cim sa spusti cistenie
• Po dokonceni sa otvori log, jeho obsah sem skopiruj

Nastavoval si nieco v skupinovej politike - Group Policy (gpedit.msc)?

děkuji, vkládám logy a Group Policy (gpedit.msc) jsem nic nedělal

# AdwCleaner v6.046 - Log vytvořen 12/03/2018 v 09:17:21
# Aktualizováno dne 24/04/2017 z Malwarebytes
# Databáze : 2017-04-24.1 [Místní]
# Operační systém : Microsoft Windows XP Service Pack 3 (X86)
# Uživatelské jméno : Fotogold - P4
# Spuštěno z : \\P4\Digitál\2018\03\08\adwcleaner_6.046.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKLM\SOFTWARE\WISECLEANER


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [422 Bajty] - [25/07/2016 08:10:18]
C:\AdwCleaner\AdwCleaner[C2].txt - [449 Bajty] - [25/07/2016 08:20:28]
C:\AdwCleaner\AdwCleaner[C3].txt - [2109 Bajty] - [25/07/2016 08:32:21]
C:\AdwCleaner\AdwCleaner[C4].txt - [632 Bajty] - [25/07/2016 08:39:07]
C:\AdwCleaner\AdwCleaner[C5].txt - [1612 Bajty] - [25/07/2016 08:51:02]
C:\AdwCleaner\AdwCleaner[C6].txt - [632 Bajty] - [25/07/2016 08:59:47]
C:\AdwCleaner\AdwCleaner[C7].txt - [2058 Bajty] - [25/07/2016 16:04:24]
C:\AdwCleaner\AdwCleaner[C8].txt - [1366 Bajty] - [12/03/2018 09:17:21]
C:\AdwCleaner\AdwCleaner[S10].txt - [2594 Bajty] - [30/11/2016 11:30:37]
C:\AdwCleaner\AdwCleaner[S11].txt - [2625 Bajty] - [28/12/2016 11:09:37]
C:\AdwCleaner\AdwCleaner[S12].txt - [2699 Bajty] - [03/01/2017 08:34:27]
C:\AdwCleaner\AdwCleaner[S13].txt - [2749 Bajty] - [27/01/2017 14:13:15]
C:\AdwCleaner\AdwCleaner[S14].txt - [2829 Bajty] - [04/10/2017 20:38:21]
C:\AdwCleaner\AdwCleaner[S15].txt - [2904 Bajty] - [09/03/2018 16:17:55]
C:\AdwCleaner\AdwCleaner[S16].txt - [2997 Bajty] - [12/03/2018 09:09:49]
C:\AdwCleaner\AdwCleaner[S17].txt - [3054 Bajty] - [12/03/2018 09:17:15]
C:\AdwCleaner\AdwCleaner[S1].txt - [2000 Bajty] - [25/07/2016 08:07:28]
C:\AdwCleaner\AdwCleaner[S2].txt - [2172 Bajty] - [25/07/2016 08:18:47]
C:\AdwCleaner\AdwCleaner[S3].txt - [1886 Bajty] - [25/07/2016 08:31:07]
C:\AdwCleaner\AdwCleaner[S4].txt - [1719 Bajty] - [25/07/2016 08:37:13]
C:\AdwCleaner\AdwCleaner[S5].txt - [1433 Bajty] - [25/07/2016 08:49:38]
C:\AdwCleaner\AdwCleaner[S6].txt - [2010 Bajty] - [25/07/2016 08:56:48]
C:\AdwCleaner\AdwCleaner[S7].txt - [2155 Bajty] - [25/07/2016 15:44:37]
C:\AdwCleaner\AdwCleaner[S8].txt - [1860 Bajty] - [26/07/2016 08:24:14]
C:\AdwCleaner\AdwCleaner[S9].txt - [2517 Bajty] - [07/09/2016 08:17:08]

########## EOF - C:\AdwCleaner\AdwCleaner[C8].txt - [2688 Bajty] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Microsoft Windows XP x86
Ran by Fotogold (Administrator) on po 12.03.2018 at 9:32:00,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 17

Successfully deleted: C:\WINDOWS\Tasks\Wise Care 365.job (Task)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\6326MER3 (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\7113E6G9 (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CN0VSJMX (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F177FGAO (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\H2TUPSWJ (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SV8RYBI3 (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\V76D9B32 (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y3MJAP85 (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\6326MER3 (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\7113E6G9 (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CN0VSJMX (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\F177FGAO (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\H2TUPSWJ (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SV8RYBI3 (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\V76D9B32 (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\Y3MJAP85 (Temporary Internet Files Folder)



Registry: 1

Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 12.03.2018 at 9:32:55,42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Poprosim o nove logy z FRST - vloz sem obidva logy (FRST.txt a Addition.txt)

logy v nouzovem režimu, jinak to zlobí

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11.03.2018 01
Ran by Fotogold (administrator) on P4 (12-03-2018 17:25:06)
Running from C:\Documents and Settings\Fotogold\Plocha
Loaded Profiles: Fotogold (Available Profiles: Fotogold & Administrator & Guest)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Matrox PowerDesk SE] => c:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe [3907328 2008-09-19] (Matrox Graphics Inc.)
HKLM\...\Run: [HPDJ Taskbar Utility] => C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe [188416 2004-09-14] (HP)
HKLM\...\Run: [CmUCRRun] => C:\WINDOWS\system32\CmUCReye.exe [233472 2004-11-19] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [245608 2018-03-12] (AVAST Software)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2014-01-07] (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7814600 2017-11-08] (Piriform Ltd)
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DisplayCAL Profile Loader.lnk [2017-12-06]
ShortcutTarget: DisplayCAL Profile Loader.lnk -> C:\Program Files\DisplayCAL\DisplayCAL-apply-profiles.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\i1Profiler Tray.lnk [2016-07-26]
ShortcutTarget: i1Profiler Tray.lnk -> C:\Program Files\X-Rite\i1Profiler\i1ProfilerTray.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk [2017-11-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicyScripts: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [152864 2010-05-18] (Apple Inc.)
Tcpip\..\Interfaces\{AA502CB2-E28B-45BF-B7DA-7FEA0374CF9D}: [NameServer] 193.179.144.2,212.47.0.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1292428093-616249376-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-29] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-03-12] (AVAST Software)
BHO: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-29] (Oracle Corporation)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1292428093-616249376-1801674531-1003 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1292428093-616249376-1801674531-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Fotogold\Data aplikací\Mozilla\Firefox\Profiles\kazreyyd.default-1470816331562 [2018-03-12]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-19] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-01-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-01-29] (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\Google\Chrome\User Data\Default [2018-01-10]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-31]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2018-02-07] (Adobe Systems Incorporated) [File not signed]
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5909888 2018-03-12] (AVAST Software)
S2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [643072 2014-01-07] (ATI Technologies Inc.) [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [303728 2018-03-12] (AVAST Software)
S2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-01-27] (Macrovision Europe Ltd.) [File not signed]
S2 hasplms; C:\WINDOWS\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
S2 Matrox Centering Service; c:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe [1262336 2008-09-19] (Matrox Graphics Inc.)
S2 Matrox.Pdesk.ServicesHost; c:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe [343296 2008-09-19] (Matrox Graphics Inc)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 SATARaid5 Config Service; C:\Program Files\Silicon Image\3124-W-I32-R SATARAID5\SATARaid5ConfigService.exe [131072 2005-10-05] () [File not signed]
S2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10803440 2017-12-18] (TeamViewer GmbH)
S2 xrdd.exe; C:\Program Files\X-Rite\Devices\Services\xrdd.exe [83312 2014-06-23] (X-Rite Inc.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\WINDOWS\System32\DRIVERS\61883.sys [48128 2008-04-14] (Microsoft Corporation)
S2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [358400 2010-04-13] (SafeNet Inc.)
S1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [167040 2018-03-12] (AVAST Software)
S1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriverx.sys [185432 2018-03-12] (AVAST Software)
S0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidshx.sys [157368 2018-03-12] (AVAST Software)
S0 aswblog; C:\WINDOWS\System32\drivers\aswblogx.sys [276688 2018-03-12] (AVAST Software)
S0 aswbuniv; C:\WINDOWS\System32\drivers\aswbunivx.sys [50336 2018-03-12] (AVAST Software)
S1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [169536 2018-03-12] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [42808 2018-03-12] (AVAST Software)
S2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [124392 2018-03-12] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr.sys [70576 2018-03-12] (AVAST Software)
S0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [70816 2018-03-12] (AVAST Software)
S1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [783608 2018-03-12] (AVAST Software)
S1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [391856 2018-03-12] (AVAST Software)
S3 aswStmXP; C:\WINDOWS\System32\drivers\aswStmXP.sys [205344 2018-03-12] (AVAST Software)
S0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [310784 2018-03-12] (AVAST Software)
S3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [7875072 2014-01-07] (ATI Technologies Inc.) [File not signed]
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 F235usb2; C:\WINDOWS\System32\drivers\F235usb2.sys [12928 2002-11-21] () [File not signed]
R3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [63464 2013-02-13] (FTDI Ltd.)
S3 G400; C:\WINDOWS\System32\DRIVERS\G400m.sys [322432 2001-10-24] (Matrox Graphics Inc.)
S3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation)
S2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [588800 2009-12-09] (SafeNet Inc.)
S1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2016-08-18] (REALiX(tm))
S3 i1; C:\WINDOWS\System32\Drivers\i1.sys [26045 2013-06-21] (GretagMacbeth) [File not signed]
S3 libusb0; C:\WINDOWS\System32\DRIVERS\libusb0.sys [42592 2015-10-26] (hxxp://libusb-win32.sourceforge.net)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MTXPAR; C:\WINDOWS\System32\DRIVERS\MTXPARM.sys [1485824 2008-08-12] (Matrox Graphics Inc.)
S3 MTXPARH; C:\WINDOWS\System32\DRIVERS\MTXPARHM.sys [452736 2008-04-13] (Matrox Graphics Inc.)
S1 Mtxparmx; C:\WINDOWS\System32\DRIVERS\Mtxparmx.sys [5504 2008-08-12] (Matrox Graphics Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R0 Si3124r5; C:\WINDOWS\System32\DRIVERS\Si3124r5.sys [207152 2006-09-20] (Silicon Image, Inc)
R0 SiFilter; C:\WINDOWS\System32\DRIVERS\SiWinAcc.sys [17328 2006-07-13] (Silicon Image, Inc.)
S3 UMSSSTOR; C:\WINDOWS\System32\DRIVERS\cmiucr.SYS [65792 2004-11-25] (C-Media Corporation) [File not signed]
S3 WDGTLDR; C:\WINDOWS\System32\drivers\F235Ldr.sys [16000 2002-11-21] (anchor chips) [File not signed]
S2 WinI2C-DDC; C:\WINDOWS\system32\drivers\DDCDrv.sys [10240 2014-07-11] (Nicomsoft Ltd.) [File not signed]
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [250496 2006-11-22] (Marvell)
S4 IntelIde; no ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-12 17:24 - 2018-03-12 17:24 - 000000000 ____D C:\Documents and Settings\Fotogold\Plocha\FRST-OlderVersion
2018-03-12 09:56 - 2018-03-12 09:56 - 000001697 _____ C:\Documents and Settings\All Users\Plocha\Avast Free Antivirus.lnk
2018-03-12 09:56 - 2018-03-12 09:56 - 000000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\AVAST Software
2018-03-12 09:55 - 2008-11-07 18:55 - 000016928 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsgXP_2k3.dll
2018-03-12 09:54 - 2018-03-12 10:00 - 000000314 ____H C:\WINDOWS\Tasks\Avast Emergency Update.job
2018-03-12 09:54 - 2018-03-12 09:53 - 000391856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000310784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000205344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000167040 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000124392 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000070816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000070576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2018-03-12 09:54 - 2018-03-12 09:53 - 000042808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-03-12 09:54 - 2018-03-12 09:52 - 000783608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-03-12 09:54 - 2018-03-12 09:52 - 000050336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbunivx.sys
2018-03-12 09:53 - 2018-03-12 09:53 - 000319392 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-03-12 09:53 - 2018-03-12 09:52 - 000276688 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblogx.sys
2018-03-12 09:53 - 2018-03-12 09:52 - 000185432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriverx.sys
2018-03-12 09:53 - 2018-03-12 09:52 - 000169536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-03-12 09:53 - 2018-03-12 09:52 - 000157368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidshx.sys
2018-03-12 09:50 - 2018-03-12 09:50 - 000000000 ____D C:\Program Files\AVAST Software
2018-03-12 09:08 - 2018-03-12 09:08 - 004102600 _____ C:\Documents and Settings\Fotogold\Plocha\adwcleaner_6.046.exe
2018-03-09 16:53 - 2018-03-09 16:53 - 000860792 _____ (ESET) C:\WINDOWS\esetuninstaller(1).exe
2018-03-09 16:53 - 2018-03-09 16:53 - 000663552 _____ (ESET) C:\Documents and Settings\Fotogold\Plocha\ESETUninstaller-old.exe
2018-03-09 16:50 - 2018-03-09 16:50 - 000860792 _____ (ESET) C:\WINDOWS\ESETU.exe
2018-03-09 16:49 - 2018-03-09 16:49 - 001090168 _____ (ESET) C:\Documents and Settings\Fotogold\Plocha\ESETU.exe
2018-03-09 10:00 - 2018-03-09 09:58 - 008222496 _____ (Malwarebytes) C:\Documents and Settings\Fotogold\Plocha\adwcleaner_7.0.8.0(1).exe
2018-03-09 09:41 - 2018-03-12 17:24 - 000543150 _____ C:\WINDOWS\ntbtlog.txt
2018-03-06 15:37 - 2018-03-06 15:35 - 357869640 _____ C:\Documents and Settings\Fotogold\Plocha\Kopie - Track No01.nrg
2018-03-06 15:34 - 2018-03-06 15:35 - 357869640 _____ C:\Documents and Settings\Fotogold\Plocha\Track No01.nrg
2018-03-06 14:43 - 2018-03-06 14:12 - 000065536 ____H C:\WINDOWS\Minidump\Mini030618-01.dmp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-12 17:25 - 2016-07-25 14:55 - 000013711 _____ C:\Documents and Settings\Fotogold\Plocha\FRST.txt
2018-03-12 17:25 - 2016-07-25 14:25 - 000000000 ____D C:\FRST
2018-03-12 17:25 - 2008-10-07 14:51 - 000000000 ____D C:\Documents and Settings\Fotogold\Local Settings\Temp
2018-03-12 17:24 - 2016-07-25 14:23 - 001763328 _____ (Farbar) C:\Documents and Settings\Fotogold\Plocha\FRST.exe
2018-03-12 17:24 - 2008-10-07 14:51 - 000000000 ____D C:\Documents and Settings\Fotogold\Plocha
2018-03-12 10:06 - 2002-09-23 13:00 - 000011936 _____ C:\WINDOWS\system32\wpa.dbl
2018-03-12 10:00 - 2017-10-30 10:36 - 000000334 ____H C:\WINDOWS\Tasks\CCleaner Update.job
2018-03-12 10:00 - 2016-07-26 08:30 - 000001446 ____H C:\WINDOWS\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job
2018-03-12 10:00 - 2016-05-11 05:28 - 000000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2018-03-12 10:00 - 2008-10-07 14:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-03-12 09:56 - 2008-10-07 16:40 - 000000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2018-03-12 09:56 - 2008-10-07 16:40 - 000000000 ____D C:\Documents and Settings\All Users\Plocha
2018-03-12 09:53 - 2014-05-10 07:23 - 000000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2018-03-12 09:53 - 2011-10-12 08:43 - 000000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2018-03-12 09:51 - 2010-04-08 22:32 - 000000472 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{98699783-46B2-4230-8C28-2FA2FDFB2AFE}.job
2018-03-12 09:49 - 2016-07-20 13:38 - 000000000 ____D C:\Documents and Settings\Fotogold\Dokumenty\Stažené soubory
2018-03-12 09:45 - 2008-10-30 08:51 - 000000000 ____D C:\Documents and Settings\Fotogold\Data aplikací\Adobe
2018-03-12 09:21 - 2016-02-02 10:15 - 000003268 _____ C:\WINDOWS\system32\d3d9caps.dat
2018-03-12 09:17 - 2016-07-25 08:07 - 000000000 ____D C:\AdwCleaner
2018-03-12 09:17 - 2008-10-07 14:51 - 000000178 ___SH C:\Documents and Settings\Fotogold\ntuser.ini
2018-03-12 09:00 - 2012-05-03 16:25 - 000000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2018-03-10 11:28 - 2008-10-07 14:50 - 000032612 _____ C:\WINDOWS\SchedLgU.Txt
2018-03-10 09:47 - 2016-07-20 13:35 - 000000000 ____D C:\Documents and Settings\Fotogold\Data aplikací\DisplayCAL
2018-03-09 16:54 - 2008-10-07 16:35 - 000000000 ___HD C:\WINDOWS\inf
2018-03-09 10:14 - 2008-10-08 11:35 - 000006037 _____ C:\WINDOWS\wincmd.ini
2018-03-08 15:00 - 2014-03-28 08:33 - 000000222 _____ C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
2018-03-08 08:00 - 2015-04-02 15:18 - 000000376 _____ C:\WINDOWS\Tasks\X-Rite Device Services Software Updater.job
2018-03-08 07:53 - 2008-10-07 14:51 - 000000000 ___HD C:\Documents and Settings\Fotogold\Local Settings\Data aplikací
2018-03-07 17:10 - 2014-01-28 07:06 - 000000605 ____H C:\WINDOWS\system32\GelSprinter GX e3300N.CAC
2018-03-07 12:37 - 2017-07-18 17:39 - 000000000 ____D C:\Program Files\TeamViewer
2018-03-07 06:34 - 2008-11-15 09:14 - 000000202 _____ C:\WINDOWS\NeroDigital.ini
2018-03-06 14:43 - 2008-10-20 18:51 - 000000000 ____D C:\WINDOWS\Minidump
2018-03-05 14:22 - 2008-10-07 14:51 - 000000000 ___HD C:\Documents and Settings\Fotogold\Okolní síť
2018-02-28 18:33 - 2014-02-05 13:12 - 000000702 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000701 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000701 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r3000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000701 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r2880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000700 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000700 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000700 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3880.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000699 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800c.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9910.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9908.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9900.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9890.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9710.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9700.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9600.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7910.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7908.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7900.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7890.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7710.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7700.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7600.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4910.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4900.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4450.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3890.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000698 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000695 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_illustrator.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000691 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t7000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000691 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t5000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000691 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t3000.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000690 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_photoshop.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000690 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_indesign.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000680 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.loading_pdf.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000679 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_15.lic
2018-02-28 18:33 - 2014-02-05 13:12 - 000000678 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_20.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000684 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_all.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_all.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_rgb_measurement.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_proofing.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_cmyk_measurement.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.droprgb.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.control4.lic
2018-02-28 18:33 - 2014-01-24 14:41 - 000000669 ____H C:\Documents and Settings\Fotogold\Data aplikací\dinax.cmykick.lic
2018-02-15 13:00 - 2010-10-26 10:14 - 000000000 ____D C:\Program Files\CCleaner

==================== Files in the root of some directories =======

2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.cmykick.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.control4.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.droprgb.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_cmyk_measurement.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_proofing.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.extra_rgb_measurement.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000680 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.loading_pdf.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000684 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000679 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_15.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000678 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.mirage_20.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000695 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_illustrator.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000690 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_indesign.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000690 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_adobe_photoshop.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.plugin_all.lic
2014-01-24 14:41 - 2018-02-28 18:33 - 000000669 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_all.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000691 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t3000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000691 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t5000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000691 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_sc-t7000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000701 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r2880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000701 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_photo_r3000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000701 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000702 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_11880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3800c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_3890.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4000.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4450.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000700 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4900.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_4910.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7600.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7700.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7710.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000700 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7890.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7900.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7908.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_7910.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9600.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9700.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9710.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9800.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000699 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000700 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9880c.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9890.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9900.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9908.lic
2014-02-05 13:12 - 2018-02-28 18:33 - 000000698 ____H () C:\Documents and Settings\Fotogold\Data aplikací\dinax.printers_epson_stylus_pro_9910.lic
2016-12-21 08:51 - 2017-11-08 12:26 - 000014513 _____ () C:\Documents and Settings\Fotogold\Data aplikací\mdbu.bin
2013-05-14 16:09 - 2017-11-08 12:03 - 000002048 _____ () C:\Documents and Settings\Fotogold\Data aplikací\PhotoBook Software Prefs
2008-11-15 09:14 - 2017-10-05 10:24 - 000053248 _____ () C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-16 10:09 - 2014-09-16 10:09 - 000000128 _____ () C:\Documents and Settings\Fotogold\Local Settings\Data aplikací\fusioncache.dat

Files to move or delete:
====================
C:\Windows\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job


Some files in TEMP:
====================
2016-06-30 20:52 - 2016-06-30 20:52 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Documents and Settings\Administrator\Local Settings\Temp\libeay32.dll
2016-06-30 20:52 - 2016-06-30 20:52 - 000970912 _____ (Microsoft Corporation) C:\Documents and Settings\Administrator\Local Settings\Temp\msvcr120.dll
2016-06-30 20:52 - 2016-06-30 20:52 - 000772672 _____ () C:\Documents and Settings\Administrator\Local Settings\Temp\sqlite3.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Odinstaluj McAfee Security Scan Plus

Odinstaluj zastaralu verziu Javy (Java 7 Update 51). Ak Javu potrebujes, nainstaluj aktualnu verziu (momentalne Java 8 Update 161) z https://java.com/en/download/

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk [2017-11-10]
  GroupPolicy: Restriction ? <==== ATTENTION
  GroupPolicyScripts: Restriction <==== ATTENTION
  Toolbar: HKU\S-1-5-21-1292428093-616249376-1801674531-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
  S4 IntelIde; no ImagePath
  C:\Windows\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job
  ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} =>  -> No File
  ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} =>  -> No File
  ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} =>  -> No File
  ContextMenuHandlers1: [VersionsPageShellExt] -> {9E42900A-85F9-4E67-9778-575FBBA0A81C} =>  -> No File
  ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> No File
  ContextMenuHandlers6: [VersionsPageShellExt] -> {9E42900A-85F9-4E67-9778-575FBBA0A81C} =>  -> No File
  Task: C:\WINDOWS\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job => C:\DOCUME~1\Fotogold\LOCALS~1\Temp\is-QANM3.tmp\XRD Manager.exeɃ/exenoupdates /exelang 1029 /noprereqs /qr   AI_RESUME=1 ADDLOCAL=MainFeature,XRDdrivers32 ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE C:\ TRANSFORMS=:1029 AI_PREREQFILES=C:\DOCUME~1\Fotogold\LOCALS~1\Temp\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}\drivers32.msi AI_PREREQDIRS=C:\DOCUME~1\Fotogold\LOCALS~1\Temp OLDPRODUCTS={541D4860-C554-49F4-B68B-05877E5EDC54} AI_SETUPEXEPATH=C:\DOCUME~1\Fotogold\LOCALS~1\Temp\is-QANM3.tmp\XRD Manager.exe SETUPEXEDIR=C:\DOCUME~1\Fotogold\LOCALS~1\Temp\is-QANM3.tmp <==== ATTENTION
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

-McAfee - odinstalovano
-Java v nouzovém režimu nejde odinstalovat mi to píše a mám tyto javy:
java 7 update 51
java (tm) 6 update 7
j2se runtime enciroment 5.0 update 5
mám odinstalovat vše?

-log:

Fix result of Farbar Recovery Scan Tool (x86) Version: 13.03.2018
Ran by Fotogold (13-03-2018 15:54:19) Run:1
Running from C:\Documents and Settings\Fotogold\Plocha
Loaded Profiles: Fotogold (Available Profiles: Fotogold & Administrator & Guest)
Boot Mode: Safe Mode (with Networking)

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk [2017-11-10]
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicyScripts: Restriction <==== ATTENTION
Toolbar: HKU\S-1-5-21-1292428093-616249376-1801674531-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
S4 IntelIde; no ImagePath
C:\Windows\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => -> No File
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => -> No File
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => -> No File
ContextMenuHandlers1: [VersionsPageShellExt] -> {9E42900A-85F9-4E67-9778-575FBBA0A81C} => -> No File
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File
ContextMenuHandlers6: [VersionsPageShellExt] -> {9E42900A-85F9-4E67-9778-575FBBA0A81C} => -> No File
Task: C:\WINDOWS\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job => C:\DOCUME~1\Fotogold\LOCALS~1\Temp\is-QANM3.tmp\XRD Manager.exeɃ/exenoupdates /exelang 1029 /noprereqs /qr AI_RESUME=1 ADDLOCAL=MainFeature,XRDdrivers32 ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE C:\ TRANSFORMS=:1029 AI_PREREQFILES=C:\DOCUME~1\Fotogold\LOCALS~1\Temp\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}\drivers32.msi AI_PREREQDIRS=C:\DOCUME~1\Fotogold\LOCALS~1\Temp OLDPRODUCTS={541D4860-C554-49F4-B68B-05877E5EDC54} AI_SETUPEXEPATH=C:\DOCUME~1\Fotogold\LOCALS~1\Temp\is-QANM3.tmp\XRD Manager.exe SETUPEXEDIR=C:\DOCUME~1\Fotogold\LOCALS~1\Temp\is-QANM3.tmp <==== ATTENTION

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Error: Restore point can only be created in normal mode.
"C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk" => not found
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" => not found
"HKU\S-1-5-21-1292428093-616249376-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => removed successfully.
HKLM\Software\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => not found
"HKLM\System\CurrentControlSet\Services\IntelIde" => removed successfully.
IntelIde => service removed successfully.
C:\Windows\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job => moved successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\AcronisSyncError" => removed successfully.
HKLM\Software\Classes\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\AcronisSyncInProgress" => removed successfully.
HKLM\Software\Classes\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D} => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\AcronisSyncOk" => removed successfully.
HKLM\Software\Classes\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7} => not found
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\VersionsPageShellExt" => removed successfully.
HKLM\Software\Classes\CLSID\{9E42900A-85F9-4E67-9778-575FBBA0A81C} => not found
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ACE" => removed successfully.
HKLM\Software\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000} => not found
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\VersionsPageShellExt" => removed successfully.
HKLM\Software\Classes\CLSID\{9E42900A-85F9-4E67-9778-575FBBA0A81C} => not found
"C:\WINDOWS\Tasks\{3F381D31-2080-4EC2-AA4C-0E3ED23C1B07}.job" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache => 356575 B
Java, Flash, Steam htmlcache => 8296 B
Windows/system/dllcache/drivers => 483 B
Edge => 0 B
Chrome => 212992 B
Firefox => 623586 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Documents and Settings => 0 B
Default User => 32994 B
All Users => 0 B
systemprofile => 82146 B
LocalService => 32994 B
NetworkService => 32994 B
Fotogold => 2454930 B
Administrator => 65866 B
Guest => 226 B

RecycleBin => 0 B
EmptyTemp: => 3.7 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:55:28 ====

Ano, odinstaluj vsetky, ak ich nepotrebujes.

Ako to vyzera s PC? Zasekava sa to len v normalnom rezime alebo aj v nudzovom?

jenže to nejde odinstalovat v nouzovém režimu a v normálním se to zasekne

PC běží jen v nouzovém režimu

Urob v MBAM uplny sken

• Stiahni a nainstaluj Malwarebytes (MBAM): https://www.malwarebytes.com/mwb-download/thankyou/
• Ignoruj skusobnu trial verziu
• Otvor MBAM a vlavo klikni na "Skenovat"
• Klikni na "Vlastne skenovanie" a potom na "Nakonfigurovat skenovanie" (Nastavit sken)
• Vpravo oznac vsetky disky v PC a vlavo oznac moznost "Vyhladavat rootkity"
• Klikni na Skenovat teraz a pockaj na dokoncenie
• Po dokonceni klikni na Exportovat zhrnutie -> Textovy subor, zadaj nejaky nazov suboru a uloz na plochu
• Obsah tohto suboru sem skopiruj
• Obrazkovy navod (bohuzial pre starsiu verziu): https://forum.viry.cz/viewtopic.php?f=29&t=144868

Malwarebytes
http://www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 14.03.18
Čas skenování: 7:24
Logovací soubor: 67079afe-2750-11e8-99dd-000fea5afba3.json
Správce: Ano

-Informace o softwaru-
Verze: 3.4.4.2398
Verze komponentů: 1.0.322
Aktualizovat verzi balíku komponent: 1.0.4310
Licence: Zkušební

-Systémová informace-
OS: Windows XP Service Pack 3
CPU: x86
Systém souborů: NTFS
Uživatel: P4\Fotogold

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 133228
Zjištěné hrozby: 3
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 1 hod, 29 min, 44 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 3
PUP.Optional.InstallCore, C:\DOCUMENTS AND SETTINGS\FOTOGOLD\DOKUMENTY\STAžENé SOUBORY\BITLORDSETUP.EXE, Žádná uživatelská akce, [2], [369994],1.0.4310
MachineLearning/Anomalous.100%, C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\SPZENG06.EXE, Žádná uživatelská akce, [0], [392687],1.0.4310
MachineLearning/Anomalous.100%, C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\LSK_GMBHODP_100002C\SPZENG06.EXE, Žádná uživatelská akce, [0], [392687],1.0.4310

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

soubory jsem dal ko karanteny

V MBAM vlavo klikni na Zpravy, potom na Zobrazit spravu -> Export -> Kopirovat do schranky a vloz sem (Ctrl+V) tento log.

Nastala nejaka zmena?

ano, počítač funguje v normálním režimu, vypadá stabilně
ale nejde mi odinstalovat ani jedna java, pořát to hází chybu, zkoušel jsem i javauninstaltool a taky neuspešně

log:
Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 14.03.18
Čas skenování: 7:24
Logovací soubor: 67079afe-2750-11e8-99dd-000fea5afba3.json
Správce: Ano

-Informace o softwaru-
Verze: 3.4.4.2398
Verze komponentů: 1.0.322
Aktualizovat verzi balíku komponent: 1.0.4310
Licence: Zkušební

-Systémová informace-
OS: Windows XP Service Pack 3
CPU: x86
Systém souborů: NTFS
Uživatel: P4\Fotogold

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 133228
Zjištěné hrozby: 3
Hrozby umístěné do karantény: 3
Uplynulý čas: 1 hod, 29 min, 44 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 3
PUP.Optional.InstallCore, C:\DOCUMENTS AND SETTINGS\FOTOGOLD\DOKUMENTY\STAžENé SOUBORY\BITLORDSETUP.EXE, V karanténě, [2], [369994],1.0.4310
MachineLearning/Anomalous.100%, C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\SPZENG06.EXE, V karanténě, [0], [392687],1.0.4310
MachineLearning/Anomalous.100%, C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\LSK_GMBHODP_100002C\SPZENG06.EXE, V karanténě, [0], [392687],1.0.4310

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Javu sa snazis odinstalovat v normalnom rezime?

Ano v normálním
V nouzovém taky nejde