VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Problémy s myší asi nějaká havěť

https://forum.viry.cz:443/viewtopic.php?t=154285

Stránka 1 z 1

Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 16:51
od mirzur
Dobrý den,
prosím o pomoc,mám nějaké problémy s myší a určitě se jedná o nějakou havěť protože na jiném PC funguje bez problémů.
Přikládám log níže,děkuji:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01
Ran by zurek_000 (administrator) on M (23-05-2018 17:36:13)
Running from D:\
Loaded Profiles: zurek_000 (Available Profiles: zurek_000)
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-17] (AVAST Software)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-08-28] (Qualcomm®Atheros®)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [MailStylerWarmup] => C:\Program Files (x86)\Delivery Tech Corp\MailStyler 1\MailStyler.exe [3985456 2015-03-18] (Delivery Tech Corp.)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\zurek_000\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] ()
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-04-24] (Piriform Ltd)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [KalkulackaDph] => C:\Program Files (x86)\Kalkulacka DPH\KalkulackaDph.exe [61440 2013-01-01] (Trunky)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5915776 2016-03-21] (Safer-Networking Ltd.)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2102112 2017-11-09] (Sony)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {09e27ed6-fcae-11e4-826d-3065ec69d8cf} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {49059a45-4935-11e6-82b8-3065ec69d8cf} - "D:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {58338138-c813-11e7-82e8-3065ec69d8cf} - "D:\startme.exe"
Startup: C:\Users\zurek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-08-08]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\zurek_000\AppData\Local\Facebook\Games\FacebookGameroom.exe (No File)
Startup: C:\Users\zurek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZenMate.bat [2017-11-26] ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7E261E07-2218-44FE-AC8B-2AF23435F0D4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8FE298FD-01F4-4ED3-A3E8-0F931966E924}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://seznam.cz/
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> DefaultScope {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150418__yaie&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> {47404728-C166-48BA-B479-7AE41A989FCB} URL =
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150418__yaie&p={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-05-17] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-24] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-05-17] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-24] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 74suqeoh.default
FF ProfilePath: C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default [2018-05-23]
FF Homepage: Mozilla\Firefox\Profiles\74suqeoh.default -> hxxps://seznam.cz/
FF NewTab: Mozilla\Firefox\Profiles\74suqeoh.default -> hxxps://seznam.cz/
FF Extension: (AdBlock) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2018-05-23]
FF Extension: (MyJDownloader Browser Extension) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2018-04-21]
FF Extension: (Avast SafePrice) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\sp@avast.com.xpi [2018-05-18]
FF Extension: (Avast Online Security) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\wrc@avast.com.xpi [2017-10-06]
FF Extension: (Adblock Plus) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-05-18]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-08] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-08] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default [2018-05-23]
CHR Extension: (Dokumenty) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-31]
CHR Extension: (Disk Google) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-07]
CHR Extension: (YouTube) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-07]
CHR Extension: (Tabulky) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-07]
CHR Extension: (Avast Online Security) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-07]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2017-10-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-25]
CHR Extension: (Gmail) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-07]
CHR Extension: (Chrome Media Router) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-07]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-17] (AVAST Software)
S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [322176 2014-08-28] (Windows (R) Win 7 DDK provider) [File not signed]
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-17] (AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278688 2017-09-26] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-16] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-02-01] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-02-20] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-20] (Intel Corporation)
S2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
S3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-10-17] (Acer Incorporate)
S3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-10-17] (Acer Incorporate)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.1.1\WsAppService.exe [437392 2016-10-10] (Wondershare)
S2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2201440 2017-11-09] (Sony)
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
S2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
S2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [196640 2018-05-17] (AVAST Software)
S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [227504 2018-03-14] (AVAST Software)
S0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199440 2018-03-14] (AVAST Software)
S0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343752 2018-03-14] (AVAST Software)
S0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57680 2018-03-14] (AVAST Software)
S1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [234560 2018-05-17] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-05-17] (AVAST Software)
S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159120 2018-05-17] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111360 2018-05-17] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-05-17] (AVAST Software)
S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-05-17] (AVAST Software)
S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460520 2018-05-17] (AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205976 2018-05-17] (AVAST Software)
S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381552 2018-05-17] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3905536 2014-08-11] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-08-28] (Qualcomm Atheros)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [116736 2014-02-20] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-08-22] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48248 2017-08-22] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-08-22] (NVIDIA Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42736 2014-07-10] (Synaptics Incorporated)
S3 tapexpressvpn; C:\Windows\system32\DRIVERS\tapexpressvpn.sys [35696 2017-11-21] (The OpenVPN Project)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2015-04-25] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-23 17:35 - 2018-05-23 17:36 - 000000000 ____D C:\FRST
2018-05-23 17:34 - 2018-05-23 17:35 - 000182282 _____ C:\Windows\ntbtlog.txt
2018-05-23 17:20 - 2018-05-23 17:20 - 002413056 _____ (Farbar) C:\Users\zurek_000\Downloads\FRST64.exe
2018-05-17 23:44 - 2018-05-17 23:45 - 075827512 _____ (Exodus Movement Inc) C:\Users\zurek_000\Downloads\exodus-windows-x64-1.51.3.exe
2018-05-17 18:45 - 2018-05-17 18:44 - 000376536 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-05-09 09:35 - 2017-08-09 21:17 - 000454496 ____R C:\Windows\system32\Drivers\etc\hosts.20180509-093502.backup
2018-05-09 09:01 - 2018-04-22 11:02 - 000803696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-05-09 09:01 - 2018-04-22 10:06 - 000612600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-05-09 09:01 - 2018-04-22 10:04 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-05-09 09:01 - 2018-04-22 09:40 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-05-09 09:01 - 2018-04-22 09:38 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-05-09 09:01 - 2018-04-22 09:32 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-05-09 09:01 - 2018-04-22 09:26 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-05-09 09:01 - 2018-04-22 09:26 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-05-09 09:01 - 2018-04-22 09:24 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-05-09 09:01 - 2018-04-22 09:04 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-05-09 09:01 - 2018-04-22 09:00 - 002295296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-05-09 09:01 - 2018-04-22 08:57 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-05-09 09:01 - 2018-04-22 08:54 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-05-09 09:01 - 2018-04-22 08:53 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-05-09 09:01 - 2018-04-22 08:51 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-05-09 09:01 - 2018-04-22 08:49 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-05-09 09:01 - 2018-04-22 08:48 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-05-09 09:01 - 2018-04-22 08:46 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-05-09 09:01 - 2018-04-22 08:33 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-05-09 09:01 - 2018-04-22 08:32 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-05-09 09:01 - 2018-04-22 08:31 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-05-09 09:01 - 2018-04-22 08:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-05-09 09:01 - 2018-04-22 08:27 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-05-09 09:01 - 2018-04-22 08:27 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-05-09 09:01 - 2018-04-22 08:26 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-05-09 09:01 - 2018-04-22 08:26 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-05-09 09:01 - 2018-04-22 08:22 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-05-09 09:01 - 2018-04-22 08:11 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-05-09 09:01 - 2018-04-22 08:08 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-05-09 09:01 - 2018-04-22 08:04 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-05-09 09:01 - 2018-04-22 08:03 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-05-09 09:01 - 2018-04-15 18:55 - 000669696 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-05-09 09:01 - 2018-04-15 18:16 - 000536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-05-09 09:01 - 2018-04-11 03:03 - 007406936 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-05-09 09:01 - 2018-04-11 03:02 - 001676056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-05-09 09:01 - 2018-04-11 03:02 - 001536112 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-05-09 09:01 - 2018-04-10 20:51 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-05-09 09:01 - 2018-04-10 20:27 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-05-09 09:01 - 2018-04-10 20:13 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-05-09 09:01 - 2018-04-10 19:01 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-05-09 09:01 - 2018-04-10 18:50 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-05-09 09:01 - 2018-04-07 18:17 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-05-09 09:01 - 2018-04-07 17:49 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-05-09 09:01 - 2018-04-07 17:41 - 000109056 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-05-09 09:01 - 2018-04-07 17:23 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-05-09 09:01 - 2018-04-07 17:20 - 001707008 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-05-09 09:01 - 2018-04-07 17:10 - 001344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-05-09 09:01 - 2018-04-07 17:06 - 000522752 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-05-09 09:01 - 2018-04-07 17:01 - 000414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-05-09 09:01 - 2018-04-06 23:27 - 000376656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2018-05-09 09:01 - 2018-03-24 17:57 - 001101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2018-05-09 09:01 - 2018-03-24 17:40 - 001171456 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2018-05-09 09:01 - 2018-03-24 17:34 - 000856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2018-05-09 09:01 - 2018-03-24 17:22 - 001086976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2018-05-09 09:01 - 2018-03-24 16:56 - 007033344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2018-05-09 09:01 - 2018-03-24 16:54 - 006214144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2018-05-09 09:01 - 2018-03-16 00:29 - 000136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-05-09 09:01 - 2018-03-10 22:55 - 000137968 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-05-09 09:01 - 2018-03-10 21:04 - 000120376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-05-09 09:01 - 2018-03-10 19:51 - 000685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-05-09 09:01 - 2018-03-10 19:47 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-05-09 09:01 - 2018-03-10 19:47 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-05-09 09:01 - 2018-03-10 19:43 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-05-09 09:01 - 2018-03-10 18:46 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2018-05-09 09:01 - 2018-03-10 18:44 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-05-09 09:01 - 2018-03-10 18:35 - 000696832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2018-05-09 09:01 - 2018-03-10 18:35 - 000359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-05-09 09:01 - 2018-03-10 18:33 - 003717632 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-05-09 09:01 - 2018-03-10 18:22 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-05-09 09:01 - 2018-03-10 18:21 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-05-09 09:01 - 2018-03-10 18:21 - 000029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-05-09 09:01 - 2018-03-10 18:20 - 000124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-05-09 09:01 - 2018-03-10 18:17 - 002240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-05-09 09:01 - 2018-03-10 18:17 - 000897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-05-09 09:01 - 2018-03-09 20:57 - 000276816 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2018-05-09 09:01 - 2018-03-03 18:24 - 001725952 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2018-05-09 09:01 - 2018-03-03 18:18 - 000894976 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2018-05-09 09:01 - 2018-03-03 18:18 - 000322048 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2018-05-09 09:01 - 2018-03-03 18:15 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2018-05-09 09:01 - 2018-03-03 18:04 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2018-05-09 09:01 - 2018-03-03 18:04 - 000265728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2018-05-09 09:01 - 2018-02-14 23:45 - 001308336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-05-09 09:01 - 2018-02-14 16:47 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-05-09 08:43 - 2018-05-11 11:12 - 000000000 ____D C:\Users\zurek_000\AppData\Local\CareCenter
2018-05-09 08:42 - 2018-05-11 17:57 - 000003736 _____ C:\Windows\System32\Tasks\ACC
2018-05-09 08:42 - 2018-05-09 08:42 - 000002976 _____ C:\Windows\System32\Tasks\ACCBackgroundApplication
2018-05-09 08:42 - 2018-05-09 08:42 - 000001810 _____ C:\Users\Public\Desktop\Acer Care Center.lnk
2018-05-03 13:28 - 2018-05-05 11:31 - 000000000 ____D C:\Users\zurek_000\Desktop\Hesla
2018-05-02 06:35 - 2018-05-02 06:35 - 075786552 _____ (Exodus Movement Inc) C:\Users\zurek_000\Downloads\exodus-windows-x64-1.50.1.exe
2018-05-01 18:24 - 2018-05-01 18:33 - 000013490 _____ C:\Users\zurek_000\Desktop\Karel.odt
2018-05-01 14:23 - 2018-05-03 00:19 - 000000000 ____D C:\Users\zurek_000\Downloads\Marvels.The.Punisher.S01.1080p.NF.WEB-DL.DD5.1.x264-NTb
2018-04-25 15:33 - 2018-04-25 15:33 - 000007334 _____ C:\Users\zurek_000\Desktop\Nový Textový dokument OpenDocument (3).odt
2018-04-25 15:25 - 2018-04-25 15:25 - 000091829 _____ C:\Users\zurek_000\Downloads\mKonto_Business_07771071_180301_180425.pdf
2018-04-24 14:21 - 2018-04-24 14:21 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-23 17:35 - 2015-01-28 06:05 - 000733268 _____ C:\Windows\system32\perfh005.dat
2018-05-23 17:35 - 2015-01-28 06:05 - 000148614 _____ C:\Windows\system32\perfc005.dat
2018-05-23 17:35 - 2014-03-18 12:03 - 001739092 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-23 17:35 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2018-05-23 17:33 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-23 17:31 - 2016-11-16 16:59 - 000000000 ____D C:\Users\zurek_000\AppData\LocalLow\Mozilla
2018-05-23 17:31 - 2015-04-03 14:28 - 000000000 ___RD C:\Users\zurek_000\OneDrive
2018-05-23 17:30 - 2015-11-07 12:08 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-23 17:24 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2018-05-23 17:22 - 2016-11-16 13:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-05-23 17:02 - 2015-04-17 15:34 - 000000000 ____D C:\Program Files (x86)\Steam
2018-05-23 17:01 - 2015-04-03 15:16 - 000000000 ____D C:\Users\zurek_000\AppData\Local\CrashDumps
2018-05-23 12:35 - 2017-12-19 20:28 - 000000000 ____D C:\Users\zurek_000\AppData\Roaming\Exodus
2018-05-23 11:44 - 2015-04-03 13:40 - 000003958 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{6947DA02-0E39-494B-843F-153252F75C51}
2018-05-22 21:16 - 2015-11-05 17:05 - 000000000 ____D C:\Users\zurek_000\AppData\Local\JDownloader v2.0
2018-05-22 21:15 - 2017-12-06 01:15 - 000000000 ____D C:\Users\zurek_000\Desktop\sony 2
2018-05-18 23:57 - 2017-02-09 10:03 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-05-18 12:37 - 2015-04-03 13:37 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3080191038-1326817752-3620413983-1001
2018-05-18 12:30 - 2015-04-03 13:48 - 000001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-05-18 12:30 - 2015-04-03 13:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-18 12:28 - 2015-04-27 15:19 - 000000000 ____D C:\Users\zurek_000\Desktop\MF
2018-05-18 00:40 - 2017-07-20 14:35 - 000002167 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-05-18 00:40 - 2016-06-30 05:57 - 000002208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-17 23:45 - 2018-04-03 00:30 - 000000000 ____D C:\Users\zurek_000\AppData\Local\exodus
2018-05-17 23:45 - 2018-01-03 09:57 - 000002248 _____ C:\Users\zurek_000\Desktop\Exodus.lnk
2018-05-17 23:45 - 2017-12-19 20:28 - 000000000 ____D C:\Users\zurek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exodus Movement Inc
2018-05-17 23:45 - 2017-11-26 23:09 - 000000000 ____D C:\Users\zurek_000\AppData\Local\SquirrelTemp
2018-05-17 19:34 - 2016-06-30 05:56 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 19:34 - 2016-06-30 05:56 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-17 18:44 - 2018-01-05 19:44 - 000234560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-05-17 18:44 - 2017-11-17 23:40 - 000196640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 001027720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000460520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000381552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000205976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000159120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000111360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000085968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-05-17 12:57 - 2016-09-27 18:21 - 000000000 ____D C:\Users\zurek_000\Desktop\Adas
2018-05-16 09:54 - 2015-11-30 22:39 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-16 09:54 - 2015-06-26 15:39 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-05-13 09:23 - 2017-10-09 19:35 - 000000000 ____D C:\Users\zurek_000\Desktop\nové aukce
2018-05-11 18:51 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2018-05-11 17:57 - 2014-10-27 19:04 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2018-05-11 12:07 - 2016-04-26 17:09 - 000000000 ____D C:\Users\zurek_000\Desktop\Oxyd 29.8
2018-05-09 13:37 - 2014-10-27 19:21 - 000000000 ___HD C:\OEM
2018-05-09 13:17 - 2013-08-22 16:44 - 000371328 _____ C:\Windows\system32\FNTCACHE.DAT
2018-05-09 11:33 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2018-05-09 11:23 - 2017-10-11 10:05 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-05-09 11:23 - 2015-04-03 14:00 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-05-09 11:23 - 2015-04-03 14:00 - 000000000 ____D C:\Windows\system32\MRT
2018-05-09 08:42 - 2014-10-27 19:04 - 000005314 _____ C:\Windows\System32\Tasks\Software Update Application
2018-05-09 08:42 - 2014-10-27 19:04 - 000004562 _____ C:\Windows\System32\Tasks\ACCAgent
2018-05-09 08:42 - 2014-10-27 19:04 - 000000000 ____D C:\ProgramData\Acer
2018-05-09 08:42 - 2014-10-27 19:04 - 000000000 ____D C:\Program Files (x86)\Acer
2018-05-09 00:35 - 2015-04-03 13:29 - 000000000 ____D C:\Users\zurek_000
2018-05-08 22:17 - 2018-03-13 17:17 - 000004522 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-05-08 22:17 - 2015-04-17 22:11 - 000004372 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-05-08 22:17 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-05-08 22:17 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2018-05-08 19:05 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2018-05-08 14:28 - 2015-10-06 21:19 - 000000000 ____D C:\Program Files\CCleaner
2018-05-06 20:29 - 2015-04-14 08:32 - 000000000 ____D C:\Users\zurek_000\Desktop\Oxyd.cz
2018-05-03 13:50 - 2016-03-14 14:37 - 000003356 _____ C:\Users\zurek_000\Desktop\Nový textový dokument (2).txt
2018-05-03 05:10 - 2015-04-03 16:10 - 000000000 ____D C:\Users\zurek_000\AppData\Roaming\uTorrent
2018-05-01 00:39 - 2018-03-15 09:35 - 000835064 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-05-01 00:39 - 2018-03-15 09:35 - 000179704 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-04-25 00:36 - 2017-03-25 18:08 - 000000000 ____D C:\Users\zurek_000\Desktop\Nové filmy
2018-04-24 18:11 - 2015-04-15 16:45 - 000098760 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-04-24 18:11 - 2015-04-15 16:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-04-24 18:11 - 2015-04-15 16:45 - 000000000 ____D C:\Program Files (x86)\Java

==================== Files in the root of some directories =======

2017-11-14 16:02 - 2017-11-14 16:03 - 049979264 _____ (Sony) C:\Users\zurek_000\AppData\Local\pcc.exe
2017-08-16 11:10 - 2017-08-16 11:10 - 000002838 _____ () C:\Users\zurek_000\AppData\Local\recently-used.xbel
2017-04-04 19:49 - 2017-04-04 19:49 - 000000552 _____ () C:\Users\zurek_000\AppData\Local\TroubleshooterConfig.json

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-12 09:56

==================== End of FRST.txt ============================

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 17:01
od Rudy
Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 17:08
od mirzur
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build: 04-27-2018
# Database: 2018-05-22.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-23-2018
# Duration: 00:00:04
# OS: Windows 8.1
# Cleaned: 17
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files\Booking.com
Deleted C:\Users\zurek_000\AppData\Local\MessengerTime
Deleted C:\ProgramData\Pokki
Deleted C:\Users\Public\Pokki
Deleted C:\Users\zurek_000\AppData\Local\vghd

***** [ Files ] *****

Deleted C:\Windows\System32\LavasoftTcpService64.dll
Deleted C:\Windows\SysWOW64\lavasofttcpservice.dll

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\AppDataLow\Software\MessengerTime
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\Classes\AppID\OverlayIcon.DLL
Deleted HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
Deleted HKLM\Software\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
Deleted HKLM\Software\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
Deleted HKCU\Software\Classes\pokki
Deleted HKCU\Software\PRODUCTSETUP

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************


########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 18:01
od Rudy
Dejte nový log FRST.

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 19:18
od mirzur
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01
Ran by zurek_000 (administrator) on M (23-05-2018 20:12:10)
Running from D:\
Loaded Profiles: zurek_000 (Available Profiles: zurek_000)
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-17] (AVAST Software)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-08-28] (Qualcomm®Atheros®)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [MailStylerWarmup] => C:\Program Files (x86)\Delivery Tech Corp\MailStyler 1\MailStyler.exe [3985456 2015-03-18] (Delivery Tech Corp.)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\zurek_000\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] ()
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-04-24] (Piriform Ltd)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [KalkulackaDph] => C:\Program Files (x86)\Kalkulacka DPH\KalkulackaDph.exe [61440 2013-01-01] (Trunky)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5915776 2016-03-21] (Safer-Networking Ltd.)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2102112 2017-11-09] (Sony)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {09e27ed6-fcae-11e4-826d-3065ec69d8cf} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {49059a45-4935-11e6-82b8-3065ec69d8cf} - "D:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {58338138-c813-11e7-82e8-3065ec69d8cf} - "D:\startme.exe"
Startup: C:\Users\zurek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-08-08]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\zurek_000\AppData\Local\Facebook\Games\FacebookGameroom.exe (No File)
Startup: C:\Users\zurek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZenMate.bat [2017-11-26] ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7E261E07-2218-44FE-AC8B-2AF23435F0D4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8FE298FD-01F4-4ED3-A3E8-0F931966E924}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://seznam.cz/
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> DefaultScope {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150418__yaie&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> {47404728-C166-48BA-B479-7AE41A989FCB} URL =
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150418__yaie&p={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-05-17] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-24] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-05-17] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-24] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 74suqeoh.default
FF ProfilePath: C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default [2018-05-23]
FF Homepage: Mozilla\Firefox\Profiles\74suqeoh.default -> hxxps://seznam.cz/
FF NewTab: Mozilla\Firefox\Profiles\74suqeoh.default -> hxxps://seznam.cz/
FF Extension: (AdBlock) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2018-05-23]
FF Extension: (MyJDownloader Browser Extension) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2018-04-21]
FF Extension: (Avast SafePrice) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\sp@avast.com.xpi [2018-05-18]
FF Extension: (Avast Online Security) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\wrc@avast.com.xpi [2017-10-06]
FF Extension: (Adblock Plus) - C:\Users\zurek_000\AppData\Roaming\Mozilla\Firefox\Profiles\74suqeoh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-05-18]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-08] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-08] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default [2018-05-23]
CHR Extension: (Dokumenty) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-31]
CHR Extension: (Disk Google) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-07]
CHR Extension: (YouTube) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-07]
CHR Extension: (Tabulky) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-07]
CHR Extension: (Avast Online Security) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-07]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2017-10-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-25]
CHR Extension: (Gmail) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-07]
CHR Extension: (Chrome Media Router) - C:\Users\zurek_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-07]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-17] (AVAST Software)
S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [322176 2014-08-28] (Windows (R) Win 7 DDK provider) [File not signed]
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-17] (AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278688 2017-09-26] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-16] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-02-01] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-02-20] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-20] (Intel Corporation)
S2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
S3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-10-17] (Acer Incorporate)
S3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-10-17] (Acer Incorporate)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.1.1\WsAppService.exe [437392 2016-10-10] (Wondershare)
S2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2201440 2017-11-09] (Sony)
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
S2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
S2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [196640 2018-05-17] (AVAST Software)
S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [227504 2018-03-14] (AVAST Software)
S0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199440 2018-03-14] (AVAST Software)
S0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343752 2018-03-14] (AVAST Software)
S0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57680 2018-03-14] (AVAST Software)
S1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [234560 2018-05-17] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-05-17] (AVAST Software)
S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159120 2018-05-17] (AVAST Software)
S1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111360 2018-05-17] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-05-17] (AVAST Software)
S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-05-17] (AVAST Software)
S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460520 2018-05-17] (AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205976 2018-05-17] (AVAST Software)
S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381552 2018-05-17] (AVAST Software)
S3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3905536 2014-08-11] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-08-28] (Qualcomm Atheros)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [116736 2014-02-20] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-08-22] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48248 2017-08-22] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-08-22] (NVIDIA Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42736 2014-07-10] (Synaptics Incorporated)
S3 tapexpressvpn; C:\Windows\system32\DRIVERS\tapexpressvpn.sys [35696 2017-11-21] (The OpenVPN Project)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2015-04-25] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-23 18:03 - 2018-05-23 18:04 - 000000000 ____D C:\AdwCleaner
2018-05-23 17:35 - 2018-05-23 20:12 - 000000000 ____D C:\FRST
2018-05-23 17:34 - 2018-05-23 20:11 - 000421632 _____ C:\Windows\ntbtlog.txt
2018-05-23 17:20 - 2018-05-23 17:20 - 002413056 _____ (Farbar) C:\Users\zurek_000\Downloads\FRST64.exe
2018-05-17 23:44 - 2018-05-17 23:45 - 075827512 _____ (Exodus Movement Inc) C:\Users\zurek_000\Downloads\exodus-windows-x64-1.51.3.exe
2018-05-17 18:45 - 2018-05-17 18:44 - 000376536 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-05-09 09:35 - 2017-08-09 21:17 - 000454496 ____R C:\Windows\system32\Drivers\etc\hosts.20180509-093502.backup
2018-05-09 09:01 - 2018-04-22 11:02 - 000803696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-05-09 09:01 - 2018-04-22 10:06 - 000612600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-05-09 09:01 - 2018-04-22 10:04 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-05-09 09:01 - 2018-04-22 09:40 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-05-09 09:01 - 2018-04-22 09:38 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-05-09 09:01 - 2018-04-22 09:32 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-05-09 09:01 - 2018-04-22 09:26 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-05-09 09:01 - 2018-04-22 09:26 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-05-09 09:01 - 2018-04-22 09:24 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-05-09 09:01 - 2018-04-22 09:04 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-05-09 09:01 - 2018-04-22 09:00 - 002295296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-05-09 09:01 - 2018-04-22 08:57 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-05-09 09:01 - 2018-04-22 08:54 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-05-09 09:01 - 2018-04-22 08:53 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-05-09 09:01 - 2018-04-22 08:51 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-05-09 09:01 - 2018-04-22 08:49 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-05-09 09:01 - 2018-04-22 08:48 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-05-09 09:01 - 2018-04-22 08:46 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-05-09 09:01 - 2018-04-22 08:33 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-05-09 09:01 - 2018-04-22 08:32 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-05-09 09:01 - 2018-04-22 08:31 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-05-09 09:01 - 2018-04-22 08:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-05-09 09:01 - 2018-04-22 08:27 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-05-09 09:01 - 2018-04-22 08:27 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-05-09 09:01 - 2018-04-22 08:26 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-05-09 09:01 - 2018-04-22 08:26 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-05-09 09:01 - 2018-04-22 08:22 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-05-09 09:01 - 2018-04-22 08:11 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-05-09 09:01 - 2018-04-22 08:08 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-05-09 09:01 - 2018-04-22 08:04 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-05-09 09:01 - 2018-04-22 08:03 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-05-09 09:01 - 2018-04-15 18:55 - 000669696 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-05-09 09:01 - 2018-04-15 18:16 - 000536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-05-09 09:01 - 2018-04-11 03:03 - 007406936 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-05-09 09:01 - 2018-04-11 03:02 - 001676056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-05-09 09:01 - 2018-04-11 03:02 - 001536112 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-05-09 09:01 - 2018-04-10 20:51 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-05-09 09:01 - 2018-04-10 20:27 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-05-09 09:01 - 2018-04-10 20:13 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-05-09 09:01 - 2018-04-10 19:01 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-05-09 09:01 - 2018-04-10 18:50 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-05-09 09:01 - 2018-04-07 18:17 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-05-09 09:01 - 2018-04-07 17:49 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-05-09 09:01 - 2018-04-07 17:41 - 000109056 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-05-09 09:01 - 2018-04-07 17:23 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-05-09 09:01 - 2018-04-07 17:20 - 001707008 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-05-09 09:01 - 2018-04-07 17:10 - 001344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-05-09 09:01 - 2018-04-07 17:06 - 000522752 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-05-09 09:01 - 2018-04-07 17:01 - 000414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-05-09 09:01 - 2018-04-06 23:27 - 000376656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2018-05-09 09:01 - 2018-03-24 17:57 - 001101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2018-05-09 09:01 - 2018-03-24 17:40 - 001171456 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2018-05-09 09:01 - 2018-03-24 17:34 - 000856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2018-05-09 09:01 - 2018-03-24 17:22 - 001086976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2018-05-09 09:01 - 2018-03-24 16:56 - 007033344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2018-05-09 09:01 - 2018-03-24 16:54 - 006214144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2018-05-09 09:01 - 2018-03-16 00:29 - 000136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-05-09 09:01 - 2018-03-10 22:55 - 000137968 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-05-09 09:01 - 2018-03-10 21:04 - 000120376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-05-09 09:01 - 2018-03-10 19:51 - 000685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-05-09 09:01 - 2018-03-10 19:47 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-05-09 09:01 - 2018-03-10 19:47 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-05-09 09:01 - 2018-03-10 19:43 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-05-09 09:01 - 2018-03-10 18:46 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2018-05-09 09:01 - 2018-03-10 18:44 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-05-09 09:01 - 2018-03-10 18:35 - 000696832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2018-05-09 09:01 - 2018-03-10 18:35 - 000359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-05-09 09:01 - 2018-03-10 18:33 - 003717632 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-05-09 09:01 - 2018-03-10 18:22 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-05-09 09:01 - 2018-03-10 18:21 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-05-09 09:01 - 2018-03-10 18:21 - 000029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-05-09 09:01 - 2018-03-10 18:20 - 000124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-05-09 09:01 - 2018-03-10 18:18 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-05-09 09:01 - 2018-03-10 18:17 - 002240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-05-09 09:01 - 2018-03-10 18:17 - 000897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-05-09 09:01 - 2018-03-09 20:57 - 000276816 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2018-05-09 09:01 - 2018-03-03 18:24 - 001725952 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2018-05-09 09:01 - 2018-03-03 18:18 - 000894976 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2018-05-09 09:01 - 2018-03-03 18:18 - 000322048 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2018-05-09 09:01 - 2018-03-03 18:15 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2018-05-09 09:01 - 2018-03-03 18:04 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2018-05-09 09:01 - 2018-03-03 18:04 - 000265728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2018-05-09 09:01 - 2018-02-14 23:45 - 001308336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-05-09 09:01 - 2018-02-14 16:47 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-05-09 08:43 - 2018-05-11 11:12 - 000000000 ____D C:\Users\zurek_000\AppData\Local\CareCenter
2018-05-09 08:42 - 2018-05-11 17:57 - 000003736 _____ C:\Windows\System32\Tasks\ACC
2018-05-09 08:42 - 2018-05-09 08:42 - 000002976 _____ C:\Windows\System32\Tasks\ACCBackgroundApplication
2018-05-09 08:42 - 2018-05-09 08:42 - 000001810 _____ C:\Users\Public\Desktop\Acer Care Center.lnk
2018-05-03 13:28 - 2018-05-05 11:31 - 000000000 ____D C:\Users\zurek_000\Desktop\Hesla
2018-05-02 06:35 - 2018-05-02 06:35 - 075786552 _____ (Exodus Movement Inc) C:\Users\zurek_000\Downloads\exodus-windows-x64-1.50.1.exe
2018-05-01 18:24 - 2018-05-01 18:33 - 000013490 _____ C:\Users\zurek_000\Desktop\Karel.odt
2018-05-01 14:23 - 2018-05-03 00:19 - 000000000 ____D C:\Users\zurek_000\Downloads\Marvels.The.Punisher.S01.1080p.NF.WEB-DL.DD5.1.x264-NTb
2018-04-25 15:33 - 2018-04-25 15:33 - 000007334 _____ C:\Users\zurek_000\Desktop\Nový Textový dokument OpenDocument (3).odt
2018-04-25 15:25 - 2018-04-25 15:25 - 000091829 _____ C:\Users\zurek_000\Downloads\mKonto_Business_07771071_180301_180425.pdf
2018-04-24 14:21 - 2018-04-24 14:21 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-23 20:09 - 2016-11-16 16:59 - 000000000 ____D C:\Users\zurek_000\AppData\LocalLow\Mozilla
2018-05-23 20:09 - 2015-11-05 17:05 - 000000000 ____D C:\Users\zurek_000\AppData\Local\JDownloader v2.0
2018-05-23 18:30 - 2017-12-06 01:15 - 000000000 ____D C:\Users\zurek_000\Desktop\sony 2
2018-05-23 18:15 - 2017-12-19 20:28 - 000000000 ____D C:\Users\zurek_000\AppData\Roaming\Exodus
2018-05-23 18:13 - 2015-01-28 06:05 - 000734510 _____ C:\Windows\system32\perfh005.dat
2018-05-23 18:13 - 2015-01-28 06:05 - 000148820 _____ C:\Windows\system32\perfc005.dat
2018-05-23 18:13 - 2014-03-18 12:03 - 001739092 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-23 18:13 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2018-05-23 18:09 - 2015-04-03 13:40 - 000003958 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{6947DA02-0E39-494B-843F-153252F75C51}
2018-05-23 18:06 - 2015-11-07 12:08 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-23 18:06 - 2015-04-03 14:28 - 000000000 ___RD C:\Users\zurek_000\OneDrive
2018-05-23 18:06 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-23 17:24 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2018-05-23 17:22 - 2016-11-16 13:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-05-23 17:02 - 2015-04-17 15:34 - 000000000 ____D C:\Program Files (x86)\Steam
2018-05-23 17:01 - 2015-04-03 15:16 - 000000000 ____D C:\Users\zurek_000\AppData\Local\CrashDumps
2018-05-18 23:57 - 2017-02-09 10:03 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-05-18 12:37 - 2015-04-03 13:37 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3080191038-1326817752-3620413983-1001
2018-05-18 12:30 - 2015-04-03 13:48 - 000001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-05-18 12:30 - 2015-04-03 13:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-18 12:28 - 2015-04-27 15:19 - 000000000 ____D C:\Users\zurek_000\Desktop\MF
2018-05-18 00:40 - 2017-07-20 14:35 - 000002167 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-05-18 00:40 - 2016-06-30 05:57 - 000002208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-17 23:45 - 2018-04-03 00:30 - 000000000 ____D C:\Users\zurek_000\AppData\Local\exodus
2018-05-17 23:45 - 2018-01-03 09:57 - 000002248 _____ C:\Users\zurek_000\Desktop\Exodus.lnk
2018-05-17 23:45 - 2017-12-19 20:28 - 000000000 ____D C:\Users\zurek_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exodus Movement Inc
2018-05-17 23:45 - 2017-11-26 23:09 - 000000000 ____D C:\Users\zurek_000\AppData\Local\SquirrelTemp
2018-05-17 19:34 - 2016-06-30 05:56 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 19:34 - 2016-06-30 05:56 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-17 18:44 - 2018-01-05 19:44 - 000234560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-05-17 18:44 - 2017-11-17 23:40 - 000196640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 001027720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000460520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000381552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000205976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000159120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000111360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000085968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-05-17 18:44 - 2016-06-30 05:55 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-05-17 12:57 - 2016-09-27 18:21 - 000000000 ____D C:\Users\zurek_000\Desktop\Adas
2018-05-16 09:54 - 2015-11-30 22:39 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-16 09:54 - 2015-06-26 15:39 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-05-13 09:23 - 2017-10-09 19:35 - 000000000 ____D C:\Users\zurek_000\Desktop\nové aukce
2018-05-11 18:51 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2018-05-11 17:57 - 2014-10-27 19:04 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2018-05-11 12:07 - 2016-04-26 17:09 - 000000000 ____D C:\Users\zurek_000\Desktop\Oxyd 29.8
2018-05-09 13:37 - 2014-10-27 19:21 - 000000000 ___HD C:\OEM
2018-05-09 13:17 - 2013-08-22 16:44 - 000371328 _____ C:\Windows\system32\FNTCACHE.DAT
2018-05-09 11:33 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2018-05-09 11:23 - 2017-10-11 10:05 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-05-09 11:23 - 2015-04-03 14:00 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-05-09 11:23 - 2015-04-03 14:00 - 000000000 ____D C:\Windows\system32\MRT
2018-05-09 08:42 - 2014-10-27 19:04 - 000005314 _____ C:\Windows\System32\Tasks\Software Update Application
2018-05-09 08:42 - 2014-10-27 19:04 - 000004562 _____ C:\Windows\System32\Tasks\ACCAgent
2018-05-09 08:42 - 2014-10-27 19:04 - 000000000 ____D C:\ProgramData\Acer
2018-05-09 08:42 - 2014-10-27 19:04 - 000000000 ____D C:\Program Files (x86)\Acer
2018-05-09 00:35 - 2015-04-03 13:29 - 000000000 ____D C:\Users\zurek_000
2018-05-08 22:17 - 2018-03-13 17:17 - 000004522 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-05-08 22:17 - 2015-04-17 22:11 - 000004372 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-05-08 22:17 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-05-08 22:17 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2018-05-08 19:05 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2018-05-08 14:28 - 2015-10-06 21:19 - 000000000 ____D C:\Program Files\CCleaner
2018-05-06 20:29 - 2015-04-14 08:32 - 000000000 ____D C:\Users\zurek_000\Desktop\Oxyd.cz
2018-05-03 13:50 - 2016-03-14 14:37 - 000003356 _____ C:\Users\zurek_000\Desktop\Nový textový dokument (2).txt
2018-05-03 05:10 - 2015-04-03 16:10 - 000000000 ____D C:\Users\zurek_000\AppData\Roaming\uTorrent
2018-05-01 00:39 - 2018-03-15 09:35 - 000835064 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-05-01 00:39 - 2018-03-15 09:35 - 000179704 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-04-25 00:36 - 2017-03-25 18:08 - 000000000 ____D C:\Users\zurek_000\Desktop\Nové filmy
2018-04-24 18:11 - 2015-04-15 16:45 - 000098760 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-04-24 18:11 - 2015-04-15 16:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-04-24 18:11 - 2015-04-15 16:45 - 000000000 ____D C:\Program Files (x86)\Java

==================== Files in the root of some directories =======

2017-11-14 16:02 - 2017-11-14 16:03 - 049979264 _____ (Sony) C:\Users\zurek_000\AppData\Local\pcc.exe
2017-08-16 11:10 - 2017-08-16 11:10 - 000002838 _____ () C:\Users\zurek_000\AppData\Local\recently-used.xbel
2017-04-04 19:49 - 2017-04-04 19:49 - 000000552 _____ () C:\Users\zurek_000\AppData\Local\TroubleshooterConfig.json

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-12 09:56

==================== End of FRST.txt ============================

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 20:02
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {09e27ed6-fcae-11e4-826d-3065ec69d8cf} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {49059a45-4935-11e6-82b8-3065ec69d8cf} - "D:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {58338138-c813-11e7-82e8-3065ec69d8cf} - "D:\startme.exe"
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> {47404728-C166-48BA-B479-7AE41A989FCB} URL =
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End
Uložte do D:\ jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 20:39
od mirzur
Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by zurek_000 (23-05-2018 21:23:42) Run:1
Running from D:\
Loaded Profiles: zurek_000 (Available Profiles: zurek_000)
Boot Mode: Safe Mode (minimal)
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {09e27ed6-fcae-11e4-826d-3065ec69d8cf} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {49059a45-4935-11e6-82b8-3065ec69d8cf} - "D:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\...\MountPoints2: {58338138-c813-11e7-82e8-3065ec69d8cf} - "D:\startme.exe"
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3080191038-1326817752-3620413983-1001 -> {47404728-C166-48BA-B479-7AE41A989FCB} URL =
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
"HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{09e27ed6-fcae-11e4-826d-3065ec69d8cf}" => removed successfully
HKLM\Software\Classes\CLSID\{09e27ed6-fcae-11e4-826d-3065ec69d8cf} => not found
"HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{49059a45-4935-11e6-82b8-3065ec69d8cf}" => removed successfully
HKLM\Software\Classes\CLSID\{49059a45-4935-11e6-82b8-3065ec69d8cf} => not found
"HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{58338138-c813-11e7-82e8-3065ec69d8cf}" => removed successfully
HKLM\Software\Classes\CLSID\{58338138-c813-11e7-82e8-3065ec69d8cf} => not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
"HKU\S-1-5-21-3080191038-1326817752-3620413983-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{47404728-C166-48BA-B479-7AE41A989FCB}" => removed successfully
HKLM\Software\Classes\CLSID\{47404728-C166-48BA-B479-7AE41A989FCB} => not found
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 31990512 B
Java, Flash, Steam htmlcache => 653979872 B
Windows/system/drivers => 356927 B
Edge => 0 B
Chrome => 269181 B
Firefox => 389456076 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 722351 B
systemprofile32 => 128 B
LocalService => 3258 B
NetworkService => 1531904 B
zurek_000 => 15585733 B

RecycleBin => 0 B
EmptyTemp: => 1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:23:58 ====

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 21:12
od Rudy
OK. Nastala nějaká změna?

Re: Problémy s myší asi nějaká havěť

Napsal: 23 kvě 2018 21:40
od mirzur
Zdá se mi že je o něco lepší,ale někdy se po jednom kliku stane že myš klikne dvakrát nebo při kopírování textu nejde celý text obtáhnout.Minule jsem to řešil bodem obnovy,ale teď bych to rád vyřešil přímo.Existuje ještě nějaká možnost?Ty problémy jsou jak u prohlížečů tak ve windows.

Re: Problémy s myší asi nějaká havěť

Napsal: 24 kvě 2018 11:37
od Rudy
Tak nevím, jestli je za vaším problém zrovna havěť. Vypadá to dost neobvykle. Udělejte ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz