VIRY.CZ

Dobrý večer mohl bych poprosit o pomoc. NTB se nepřipojí k WiFi. Jen s omezeným přístupem. Služba DPS zakázana a nelze povolit. Přiložen LOG z RSIT. Předem děkuji za pomoc.



Logfile of random's system information tool 1.10 (written by random/random)
Run by HPi3 at 2018-12-10 22:00:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 15 GB (5%) free of 288 GB
Total RAM: 2991 MB (64% free)

HijackThis download failed

=========Mozilla firefox=========

ProfilePath - C:\Users\HPi3\AppData\Roaming\Mozilla\Firefox\Profiles\526ty7nm.default

prefs.js - "browser.startup.homepage" - "google.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.101 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32_32_0_0_101.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\system32\Adobe\Director\np32dsw_1224194.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.101.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Web Components]
"Description"=
"Path"=C:\Program Files\Web Components\npWebVideoPlugin.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-29 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-29 186944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0}
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-01-05 254520]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-25 186904]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2009-12-16 1690680]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-01-04 1594664]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2009-12-16 8192]
"File Sanitizer"=C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe []
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-09 98304]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-12-03 495711]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-11-21 242392]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2016-06-22 598552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"VIDC.VP80"=vp8vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-12-10 22:00:13 ----D---- C:\rsit
2018-12-10 22:00:13 ----D---- C:\Program Files\trend micro
2018-12-10 21:55:11 ----A---- C:\windows\ntbtlog.txt
2018-12-10 12:28:30 ----A---- C:\windows\system32\drivers\athr.sys
2018-11-21 21:03:49 ----A---- C:\windows\system32\aswBoot.exe
2018-11-15 21:51:04 ----A---- C:\windows\system32\mshtml.dll
2018-11-15 21:51:01 ----A---- C:\windows\system32\ieframe.dll
2018-11-15 21:50:58 ----A---- C:\windows\system32\wininet.dll
2018-11-15 21:50:57 ----A---- C:\windows\system32\tquery.dll
2018-11-15 21:50:57 ----A---- C:\windows\system32\ole32.dll
2018-11-15 21:50:57 ----A---- C:\windows\system32\mssrch.dll
2018-11-15 21:50:56 ----A---- C:\windows\system32\iertutil.dll
2018-11-15 21:50:55 ----A---- C:\windows\system32\vbscript.dll
2018-11-15 21:50:55 ----A---- C:\windows\system32\rpcss.dll
2018-11-15 21:50:54 ----A---- C:\windows\system32\win32k.sys
2018-11-15 21:50:54 ----A---- C:\windows\system32\SearchIndexer.exe
2018-11-15 21:50:54 ----A---- C:\windows\system32\mssph.dll
2018-11-15 21:50:53 ----A---- C:\windows\system32\SearchProtocolHost.exe
2018-11-15 21:50:53 ----A---- C:\windows\system32\scrobj.dll
2018-11-15 21:50:53 ----A---- C:\windows\system32\rpcrt4.dll
2018-11-15 21:50:53 ----A---- C:\windows\system32\ntkrnlpa.exe
2018-11-15 21:50:53 ----A---- C:\windows\system32\KernelBase.dll
2018-11-15 21:50:52 ----A---- C:\windows\system32\SearchFilterHost.exe
2018-11-15 21:50:52 ----A---- C:\windows\system32\ntoskrnl.exe
2018-11-15 21:50:52 ----A---- C:\windows\system32\ntdll.dll
2018-11-15 21:50:52 ----A---- C:\windows\system32\iedkcs32.dll
2018-11-15 21:50:51 ----A---- C:\windows\system32\mshtmlmedia.dll
2018-11-15 21:50:51 ----A---- C:\windows\system32\drivers\msrpc.sys
2018-11-15 21:50:51 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2018-11-15 21:50:50 ----A---- C:\windows\system32\halmacpi.dll
2018-11-15 21:50:50 ----A---- C:\windows\system32\halacpi.dll
2018-11-15 21:50:50 ----A---- C:\windows\system32\hal.dll
2018-11-15 21:50:50 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2018-11-15 21:50:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2018-11-15 21:50:49 ----A---- C:\windows\system32\wscript.exe
2018-11-15 21:50:49 ----A---- C:\windows\system32\scrrun.dll
2018-11-15 21:50:49 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2018-11-15 21:50:48 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2018-11-15 21:50:47 ----A---- C:\windows\system32\wshcon.dll
2018-11-15 21:50:47 ----A---- C:\windows\system32\d3d10warp.dll
2018-11-15 21:50:47 ----A---- C:\windows\system32\cscript.exe
2018-11-15 21:50:46 ----A---- C:\windows\system32\dispex.dll
2018-11-15 21:50:45 ----A---- C:\windows\system32\urlmon.dll
2018-11-15 21:50:45 ----A---- C:\windows\system32\rstrui.exe
2018-11-15 21:50:45 ----A---- C:\windows\system32\conhost.exe
2018-11-15 21:50:44 ----A---- C:\windows\system32\winsrv.dll
2018-11-15 21:50:44 ----A---- C:\windows\system32\lsasrv.dll
2018-11-15 21:50:44 ----A---- C:\windows\system32\kerberos.dll
2018-11-15 21:50:44 ----A---- C:\windows\system32\advapi32.dll
2018-11-15 21:50:43 ----A---- C:\windows\system32\wdigest.dll
2018-11-15 21:50:43 ----A---- C:\windows\system32\TSpkg.dll
2018-11-15 21:50:43 ----A---- C:\windows\system32\srcore.dll
2018-11-15 21:50:43 ----A---- C:\windows\system32\schannel.dll
2018-11-15 21:50:42 ----A---- C:\windows\system32\smss.exe
2018-11-15 21:50:42 ----A---- C:\windows\system32\rpchttp.dll
2018-11-15 21:50:42 ----A---- C:\windows\system32\ncrypt.dll
2018-11-15 21:50:42 ----A---- C:\windows\system32\msv1_0.dll
2018-11-15 21:50:42 ----A---- C:\windows\system32\drivers\processr.sys
2018-11-15 21:50:42 ----A---- C:\windows\system32\drivers\intelppm.sys
2018-11-15 21:50:41 ----A---- C:\windows\system32\drivers\viac7.sys
2018-11-15 21:50:41 ----A---- C:\windows\system32\drivers\amdppm.sys
2018-11-15 21:50:41 ----A---- C:\windows\system32\drivers\amdk8.sys
2018-11-15 21:50:41 ----A---- C:\windows\system32\auditpol.exe
2018-11-15 21:50:40 ----A---- C:\windows\system32\kernel32.dll
2018-11-15 21:50:40 ----A---- C:\windows\system32\jscript9.dll
2018-11-15 21:50:40 ----A---- C:\windows\system32\drivers\videoprt.sys
2018-11-15 21:50:40 ----A---- C:\windows\system32\csrsrv.dll
2018-11-15 21:50:40 ----A---- C:\windows\system32\appidsvc.dll
2018-11-15 21:50:40 ----A---- C:\windows\system32\appidapi.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\sspisrv.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\sspicli.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\srclient.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\setbcdlocale.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\secur32.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\lsass.exe
2018-11-15 21:50:39 ----A---- C:\windows\system32\jscript.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2018-11-15 21:50:39 ----A---- C:\windows\system32\drivers\appid.sys
2018-11-15 21:50:39 ----A---- C:\windows\system32\cryptbase.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\credssp.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\bcrypt.dll
2018-11-15 21:50:39 ----A---- C:\windows\system32\appidpolicyconverter.exe
2018-11-15 21:50:39 ----A---- C:\windows\system32\apisetschema.dll
2018-11-15 21:50:38 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-11-15 21:50:38 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-11-15 21:50:38 ----A---- C:\windows\system32\webcheck.dll
2018-11-15 21:50:38 ----A---- C:\windows\system32\msfeeds.dll
2018-11-15 21:50:38 ----A---- C:\windows\system32\msaudite.dll
2018-11-15 21:50:38 ----A---- C:\windows\system32\comcat.dll
2018-11-15 21:50:38 ----A---- C:\windows\system32\appidcertstorecheck.exe
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-11-15 21:50:37 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-11-15 21:50:37 ----A---- C:\windows\system32\msobjs.dll
2018-11-15 21:50:36 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-11-15 21:50:36 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-11-15 21:50:36 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-11-15 21:50:35 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-11-15 21:50:34 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-11-15 21:50:34 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-11-15 21:50:33 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-11-15 21:50:33 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-11-15 21:50:33 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-11-15 21:50:33 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-11-15 21:50:33 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-11-15 21:50:33 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-11-15 21:50:32 ----A---- C:\windows\system32\mssvp.dll
2018-11-15 21:50:32 ----A---- C:\windows\system32\adtschema.dll
2018-11-15 21:50:31 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-11-15 21:50:31 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-11-15 21:50:30 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-11-15 21:50:28 ----A---- C:\windows\system32\ieapfltr.dll
2018-11-15 21:50:26 ----A---- C:\windows\system32\ieui.dll
2018-11-15 21:50:24 ----A---- C:\windows\system32\oleres.dll
2018-11-15 21:50:23 ----A---- C:\windows\system32\jscript9diag.dll
2018-11-15 21:50:22 ----A---- C:\windows\system32\dxtrans.dll
2018-11-15 21:50:21 ----A---- C:\windows\system32\msrating.dll
2018-11-15 21:50:21 ----A---- C:\windows\system32\dxtmsft.dll
2018-11-15 21:50:20 ----A---- C:\windows\system32\mshtmled.dll
2018-11-15 21:50:19 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-11-15 21:50:19 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-11-15 21:50:18 ----A---- C:\windows\system32\occache.dll
2018-11-15 21:50:18 ----A---- C:\windows\system32\mssphtb.dll
2018-11-15 21:50:18 ----A---- C:\windows\system32\mssitlb.dll
2018-11-15 21:50:18 ----A---- C:\windows\system32\jsproxy.dll
2018-11-15 21:50:16 ----A---- C:\windows\system32\MshtmlDac.dll
2018-11-15 21:50:16 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2018-11-15 21:50:16 ----A---- C:\windows\system32\inseng.dll
2018-11-15 21:50:16 ----A---- C:\windows\system32\ieUnatt.exe
2018-11-15 21:50:16 ----A---- C:\windows\system32\ieetwproxystub.dll
2018-11-15 21:50:15 ----A---- C:\windows\system32\mssprxy.dll
2018-11-15 21:50:15 ----A---- C:\windows\system32\msshooks.dll
2018-11-15 21:50:15 ----A---- C:\windows\system32\msscntrs.dll
2018-11-15 21:50:15 ----A---- C:\windows\system32\iesetup.dll
2018-11-15 21:50:15 ----A---- C:\windows\system32\iernonce.dll
2018-11-15 21:50:15 ----A---- C:\windows\system32\ieetwcollector.exe
2018-11-15 21:50:15 ----A---- C:\windows\system32\ie4uinit.exe
2018-11-15 21:50:13 ----A---- C:\windows\system32\ieetwcollectorres.dll

======List of files/folders modified in the last 1 month======

2018-12-10 22:00:13 ----SHD---- C:\windows\Installer
2018-12-10 22:00:13 ----RD---- C:\Program Files
2018-12-10 22:00:13 ----D---- C:\windows\Temp
2018-12-10 21:58:42 ----D---- C:\windows\system32\config
2018-12-10 21:58:18 ----A---- C:\windows\system32\log.txt
2018-12-10 21:55:11 ----D---- C:\Windows
2018-12-10 21:36:44 ----D---- C:\windows\System32
2018-12-10 21:36:44 ----A---- C:\windows\system32\PerfStringBackup.INI
2018-12-10 21:31:34 ----D---- C:\Program Files\TeamViewer
2018-12-10 21:29:47 ----D---- C:\windows\system32\drivers
2018-12-10 12:28:53 ----D---- C:\windows\inf
2018-12-10 12:28:50 ----D---- C:\windows\system32\DriverStore
2018-12-10 12:14:20 ----D---- C:\windows\Prefetch
2018-12-06 21:43:13 ----A---- C:\windows\system32\FlashPlayerApp.exe
2018-12-06 21:43:10 ----D---- C:\windows\system32\Macromed
2018-12-03 23:35:04 ----SHD---- C:\System Volume Information
2018-11-23 22:37:27 ----HD---- C:\ProgramData
2018-11-21 21:04:35 ----D---- C:\windows\system32\Tasks
2018-11-19 16:32:19 ----D---- C:\windows\rescache
2018-11-18 21:31:38 ----D---- C:\windows\winsxs
2018-11-18 21:27:29 ----D---- C:\windows\system32\migration
2018-11-18 21:27:29 ----D---- C:\windows\system32\cs-CZ
2018-11-18 21:27:29 ----D---- C:\Program Files\Internet Explorer
2018-11-18 21:27:28 ----D---- C:\windows\system32\en-US
2018-11-15 22:11:01 ----D---- C:\windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\windows\system32\drivers\aswbidshx.sys [2018-11-21 165384]
R0 aswblog;aswblog; C:\windows\system32\drivers\aswblogx.sys [2018-11-21 284256]
R0 aswRvrt;aswRvrt; C:\windows\system32\drivers\aswRvrt.sys [2018-11-21 72800]
R0 aswVmm;aswVmm; C:\windows\system32\drivers\aswVmm.sys [2018-11-21 310200]
R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R0 iaStor;Intel RAID Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 330264]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R1 aswArPot;aswArPot; C:\windows\system32\drivers\aswArPot.sys [2018-11-21 167480]
R1 aswbidsdriver;aswbidsdriver; C:\windows\system32\drivers\aswbidsdriverx.sys [2018-11-21 188976]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2018-11-21 40688]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2018-11-21 100984]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2018-11-21 784560]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2018-11-21 397992]
R1 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
R1 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2018-11-21 135200]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2018-11-21 156936]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 Afc;PPdus ASPI Shell; C:\windows\system32\drivers\Afc.sys [2006-11-10 18688]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2009-11-02 1163328]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2009-12-04 29824]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2015-09-08 3356672]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\windows\system32\drivers\AtiHdmi.sys [2009-11-18 100352]
R3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-12-08 5092864]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 94208]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-09-17 86056]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\DRIVERS\btwavdt.sys [2009-09-17 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-09-17 18472]
R3 HECI;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-07-16 15872]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-12-18 1763968]
R3 STHDA;IDT High Definition Audio CODEC; C:\windows\system32\DRIVERS\stwrt.sys [2009-12-03 423424]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-01-04 231600]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2018-02-10 52928]
S3 aswHwid;aswHwid; C:\windows\system32\drivers\aswHwid.sys [2018-11-21 42736]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 cpuz141;cpuz141; \??\C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys [2017-03-21 46144]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2014-12-03 90008]
S3 CH341SER;CH341SER; C:\windows\System32\Drivers\CH341SER.SYS [2011-11-05 39696]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-11-11 181792]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-12-20 249888]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2018-02-10 51904]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2014-12-03 184216]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2018-02-10 52928]
S3 ViaC7;Ovladač procesoru VIA C7; C:\windows\system32\drivers\viac7.sys [2018-11-11 53248]
S3 WinUsb;SAMSUNG Android USB Driver; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 AESTFilters;Andrea ST Filters Service; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\aestsrv.exe [2009-03-03 81920]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-11-02 14336]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2009-12-08 172032]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-11-21 324000]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 595232]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-01-05 264248]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-25 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 STacSV;Audio Service; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\STacSV.exe [2009-12-03 229461]
R2 TeamViewer;TeamViewer 12; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2018-03-01 10803440]
R2 uArcCapture;ArcCapture; C:\windows\system32\uArcCapture.exe [2009-12-04 506472]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2018-11-21 6799632]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-12-18 230968]
S2 avast;Služba %1!s! Update (avast); C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-06 164984]
S2 DroidExplorerService;DroidExplorer Service; C:\Program Files\Droid Explorer\DroidExplorer.Service.exe [2013-08-25 255488]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-14 152216]
S2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2009-12-16 102968]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2009-12-16 102968]
S2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-06 335872]
S3 avastm;Služba %1!s! Update (avastm); C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-06 164984]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-14 152216]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2018-10-12 104960]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2018-10-14 178128]

-----------------EOF-----------------

Ahoj

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

Ahoj





# -------------------------------
# Malwarebytes AdwCleaner 7.2.5.0
# -------------------------------
# Build: 11-26-2018
# Database: 2018-11-14.2 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-11-2018
# Duration: 00:00:05
# OS: Windows 7 Home Premium
# Cleaned: 9
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{21FA44EF-376D-4D53-9B0F-8A89D3229068}
Deleted HKLM\Software\Microsoft\Internet Explorer\Toolbar|{21FA44EF-376D-4D53-9B0F-8A89D3229068}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21FA44EF-376D-4D53-9B0F-8A89D3229068}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21FA44EF-376D-4D53-9B0F-8A89D3229068}
Deleted HKLM\Software\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}

***** [ Chromium (and derivatives) ] *****

Deleted ainbkicbloikcngphmjfpjdemblcojdd

***** [ Chromium URLs ] *****

Deleted slunecnice.cz
Deleted Softonic EN
Deleted Softonic EN

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1965 octets] - [11/12/2018 00:13:55]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Poprosim o obidva logy z FRST (FRST.txt a Addition.txt) podla tohto navodu: https://forum.viry.cz/viewtopic.php?f=13&t=154679

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09.12.2018
Ran by HPi3 (administrator) on HPI3-HP (11-12-2018 21:02:40)
Running from C:\Users\HPi3\Desktop
Loaded Profiles: HPi3 (Available Profiles: HPi3)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: "C:\Program Files\Safari\Safari.exe" -url "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\stacsv.exe
(Hewlett-Packard) C:\Windows\System32\hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\AEstSrv.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(ArcSoft, Inc.) C:\Windows\System32\uArcCapture.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [QLBController] => C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [254520 2010-01-05] (Hewlett-Packard Company)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-25] (Intel Corporation)
HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [1690680 2009-12-16] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-01-04] (Synaptics Incorporated)
HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2009-12-16] (Hewlett-Packard)
HKLM\...\Run: [File Sanitizer] => C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-12-09] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [495711 2009-12-03] (IDT, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-21] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\Run: [Skype] => C:\Program Files\Skype\\Phone\Skype.exe [25623336 2009-10-09] (Skype Technologies S.A.)
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company)
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: D - D:\autorun.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {013512bf-94fb-11e6-b4ac-002713a5cbd8} - D:\HPLauncher.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {1f847871-6e95-11e6-81cd-002713a5cbd8} - D:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {f2bbe482-af1f-11e7-9d51-002713a5cbd8} - D:\autorun.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {f9a03c3a-55a2-11e7-808d-002713a5cbd8} - D:\MotoCastSetup.exe -a
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {ff8da02a-abfa-11e6-b707-002713a5cbd8} - D:\autorun.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {ff8da06e-abfa-11e6-b707-002713a5cbd8} - D:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\System32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2016-04-14]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com
SearchScopes: HKLM -> DefaultScope {6537C524-DDDB-4964-B1C7-A9C977A0B269} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {6537C524-DDDB-4964-B1C7-A9C977A0B269} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-1486617282-2496559130-575599334-1002 -> DefaultScope {6537C524-DDDB-4964-B1C7-A9C977A0B269} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-1486617282-2496559130-575599334-1002 -> {6537C524-DDDB-4964-B1C7-A9C977A0B269} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14] (Microsoft Corp.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-29] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-29] (Oracle Corporation)
BHO: Windows Live Toolbar Helper -> {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -> C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06] (Microsoft Corporation)
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2009-10-09] (Skype Technologies)

FireFox:
========
FF DefaultProfile: 526ty7nm.default
FF ProfilePath: C:\Users\HPi3\AppData\Roaming\Mozilla\Firefox\Profiles\526ty7nm.default [2018-10-14]
FF Homepage: Mozilla\Firefox\Profiles\526ty7nm.default -> google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_32_0_0_101.dll [2018-12-06] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\windows\system32\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-29] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-22] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-22] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
FF Plugin: Web Components -> C:\Program Files\Web Components\npWebVideoPlugin.dll [2016-11-10] ()

Chrome:
=======
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default [2018-12-09]
CHR Extension: (Dokumenty) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-16]
CHR Extension: (Disk Google) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-15]
CHR Extension: (Adblock Plus) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-12-04]
CHR Extension: (Search by Image (by Google)) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2018-07-01]
CHR Extension: (Adobe Acrobat) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-15]
CHR Extension: (Chrome Media Router) - C:\Users\HPi3\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-22]
CHR HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-11-02] (LSI Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-21] (AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-06] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-21] (AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-06] (AVAST Software)
S2 DroidExplorerService; C:\Program Files\Droid Explorer\DroidExplorer.Service.exe [255488 2013-08-25] (Ryan Conrad) [File not signed]
R2 HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [102968 2009-12-16] (Hewlett-Packard)
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [102968 2009-12-16] (Hewlett-Packard)
R2 hpHotkeyMonitor; C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [264248 2010-01-05] (Hewlett-Packard Company)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed]
R2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\STacSV.exe [229461 2009-12-03] (IDT, Inc.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10803440 2018-03-01] (TeamViewer GmbH)
R2 uArcCapture; C:\windows\system32\uArcCapture.exe [506472 2009-12-04] (ArcSoft, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Afc; C:\windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
R3 ARCVCAM; C:\windows\System32\DRIVERS\ArcSoftVCapture.sys [29824 2009-12-04] (ArcSoft, Inc.)
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [167480 2018-11-21] (AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriverx.sys [188976 2018-11-21] (AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidshx.sys [165384 2018-11-21] (AVAST Software)
R0 aswblog; C:\windows\System32\drivers\aswblogx.sys [284256 2018-11-21] (AVAST Software)
S3 aswHwid; C:\windows\System32\drivers\aswHwid.sys [42736 2018-11-21] (AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [40688 2018-11-21] (AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [135200 2018-11-21] (AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [100984 2018-11-21] (AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [72800 2018-11-21] (AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [784560 2018-11-21] (AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [397992 2018-11-21] (AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [156936 2018-11-21] (AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [310200 2018-11-21] (AVAST Software)
R3 athr; C:\windows\System32\DRIVERS\athr.sys [3356672 2015-09-08] (Qualcomm Atheros Communications, Inc.)
S3 CH341SER; C:\windows\System32\Drivers\CH341SER.SYS [39696 2011-11-05] (www.winchiphead.com)
S3 cpuz141; C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys [46144 2017-03-21] (CPUID) <==== ATTENTION
S3 MfeAVFK; C:\windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
R3 SNP2UVC; C:\windows\System32\DRIVERS\snp2uvc.sys [1763968 2009-12-18] ()
U5 lltdio; C:\Windows\System32\Drivers\lltdio.sys [48128 2009-07-14] (Microsoft Corporation)
U5 rspndr; C:\Windows\System32\Drivers\rspndr.sys [60928 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-12-11 21:02 - 2018-12-11 21:03 - 000017646 _____ C:\Users\HPi3\Desktop\FRST.txt
2018-12-11 21:02 - 2018-12-11 21:02 - 000000000 ____D C:\FRST
2018-12-11 21:01 - 2018-12-11 21:00 - 001776640 _____ (Farbar) C:\Users\HPi3\Desktop\FRST.exe
2018-12-11 00:13 - 2018-12-11 00:14 - 000000000 ____D C:\AdwCleaner
2018-12-10 23:05 - 2018-12-10 23:04 - 007321808 _____ (Malwarebytes) C:\Users\HPi3\Desktop\adwcleaner_7.2.5.0.exe
2018-12-10 22:00 - 2018-12-10 22:00 - 000000000 ____D C:\rsit
2018-12-10 22:00 - 2018-12-10 22:00 - 000000000 ____D C:\Program Files\trend micro
2018-12-10 21:59 - 2018-12-10 21:52 - 001107968 _____ C:\Users\HPi3\Desktop\RSIT.exe
2018-12-10 21:55 - 2018-12-10 21:55 - 000100478 _____ C:\windows\ntbtlog.txt
2018-12-10 12:28 - 2015-09-08 08:00 - 003356672 _____ (Qualcomm Atheros Communications, Inc.) C:\windows\system32\Drivers\athr.sys
2018-12-10 12:27 - 2018-12-10 12:28 - 000000000 ____D C:\Users\HPi3\Desktop\Win7ar9285
2018-12-10 12:26 - 2018-12-10 12:17 - 002655420 _____ C:\Users\HPi3\Desktop\win7-10.0.0.328-whql.zip
2018-12-10 12:10 - 2018-12-10 12:10 - 000000000 ____D C:\Users\HPi3\AppData\Local\ElevatedDiagnostics
2018-11-23 23:17 - 2018-11-23 23:17 - 047314205 _____ C:\Users\HPi3\Downloads\ME400CL-DriverPackage-600.zip
2018-11-23 23:12 - 2018-11-23 23:12 - 019217002 _____ C:\Users\HPi3\Downloads\Modem_image.zip
2018-11-21 21:03 - 2018-11-21 21:02 - 000323288 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2018-11-15 21:51 - 2018-10-18 03:17 - 020281344 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2018-11-15 21:51 - 2018-10-12 20:59 - 013680640 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2018-11-15 21:50 - 2018-11-11 02:14 - 004054248 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2018-11-15 21:50 - 2018-11-11 02:14 - 003960040 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2018-11-15 21:50 - 2018-11-11 02:14 - 000136424 _____ (Microsoft Corporation) C:\windows\system32\halacpi.dll
2018-11-15 21:50 - 2018-11-11 02:13 - 000189672 _____ (Microsoft Corporation) C:\windows\system32\halmacpi.dll
2018-11-15 21:50 - 2018-11-11 02:13 - 000189672 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2018-11-15 21:50 - 2018-11-11 02:13 - 000137960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2018-11-15 21:50 - 2018-11-11 02:13 - 000067304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2018-11-15 21:50 - 2018-11-11 02:12 - 001310528 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000070144 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2018-11-15 21:50 - 2018-11-11 02:11 - 000043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 001425920 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 001063424 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000380928 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\oleres.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2018-11-15 21:50 - 2018-11-11 02:10 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 01:47 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\comcat.dll
2018-11-15 21:50 - 2018-11-11 01:46 - 000097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2018-11-15 21:50 - 2018-11-11 01:46 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2018-11-15 21:50 - 2018-11-11 01:46 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2018-11-15 21:50 - 2018-11-11 01:46 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2018-11-15 21:50 - 2018-11-11 01:45 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2018-11-15 21:50 - 2018-11-11 01:43 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2018-11-15 21:50 - 2018-11-11 01:43 - 000262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2018-11-15 21:50 - 2018-11-11 01:43 - 000107520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys
2018-11-15 21:50 - 2018-11-11 01:41 - 000226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2018-11-15 21:50 - 2018-11-11 01:41 - 000098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2018-11-15 21:50 - 2018-11-11 01:40 - 000055296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000053760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000053248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\viac7.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdppm.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000052224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys
2018-11-15 21:50 - 2018-11-11 01:40 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2018-11-15 21:50 - 2018-11-11 01:40 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2018-11-15 21:50 - 2018-11-11 01:40 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2018-11-15 21:50 - 2018-11-11 01:40 - 000006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 01:40 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 01:40 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-11-15 21:50 - 2018-11-11 01:40 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-11-15 21:50 - 2018-10-27 04:27 - 000173568 _____ (Microsoft Corporation) C:\windows\system32\scrobj.dll
2018-11-15 21:50 - 2018-10-27 04:27 - 000164352 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2018-11-15 21:50 - 2018-10-27 04:27 - 000121856 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2018-11-15 21:50 - 2018-10-27 04:04 - 000141824 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2018-11-15 21:50 - 2018-10-27 04:04 - 000126976 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2018-11-15 21:50 - 2018-10-27 04:04 - 000025088 _____ (Microsoft Corporation) C:\windows\system32\wshcon.dll
2018-11-15 21:50 - 2018-10-27 04:04 - 000015360 _____ (Microsoft Corporation) C:\windows\system32\dispex.dll
2018-11-15 21:50 - 2018-10-27 04:00 - 002404864 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2018-11-15 21:50 - 2018-10-18 19:51 - 000348760 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2018-11-15 21:50 - 2018-10-12 21:36 - 002724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2018-11-15 21:50 - 2018-10-12 21:35 - 000004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2018-11-15 21:50 - 2018-10-12 21:26 - 000498176 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2018-11-15 21:50 - 2018-10-12 21:25 - 000341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2018-11-15 21:50 - 2018-10-12 21:25 - 000062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2018-11-15 21:50 - 2018-10-12 21:25 - 000047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2018-11-15 21:50 - 2018-10-12 21:24 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2018-11-15 21:50 - 2018-10-12 21:22 - 002295808 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2018-11-15 21:50 - 2018-10-12 21:20 - 000047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2018-11-15 21:50 - 2018-10-12 21:20 - 000030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2018-11-15 21:50 - 2018-10-12 21:18 - 000476160 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2018-11-15 21:50 - 2018-10-12 21:17 - 000662016 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2018-11-15 21:50 - 2018-10-12 21:17 - 000620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2018-11-15 21:50 - 2018-10-12 21:17 - 000115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2018-11-15 21:50 - 2018-10-12 21:17 - 000104960 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2018-11-15 21:50 - 2018-10-12 21:13 - 000668160 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2018-11-15 21:50 - 2018-10-12 21:11 - 000416256 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2018-11-15 21:50 - 2018-10-12 21:07 - 000091136 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2018-11-15 21:50 - 2018-10-12 21:07 - 000073216 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2018-11-15 21:50 - 2018-10-12 21:07 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2018-11-15 21:50 - 2018-10-12 21:05 - 000168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2018-11-15 21:50 - 2018-10-12 21:04 - 000076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2018-11-15 21:50 - 2018-10-12 21:03 - 004494848 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2018-11-15 21:50 - 2018-10-12 21:03 - 000279040 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2018-11-15 21:50 - 2018-10-12 21:02 - 000130048 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2018-11-15 21:50 - 2018-10-12 20:57 - 000230400 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2018-11-15 21:50 - 2018-10-12 20:56 - 000696320 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2018-11-15 21:50 - 2018-10-12 20:56 - 000692224 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2018-11-15 21:50 - 2018-10-12 20:55 - 002059776 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2018-11-15 21:50 - 2018-10-12 20:55 - 001155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2018-11-15 21:50 - 2018-10-12 20:42 - 004386816 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2018-11-15 21:50 - 2018-10-12 20:38 - 001330176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2018-11-15 21:50 - 2018-10-12 20:36 - 000710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2018-11-15 21:50 - 2018-10-06 16:47 - 000162536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys
2018-11-15 21:50 - 2018-10-06 14:42 - 001988096 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 001549312 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 001400320 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 000666624 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 000337408 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 000197120 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 000104448 _____ (Microsoft Corporation) C:\windows\system32\mssitlb.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 000059392 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll
2018-11-15 21:50 - 2018-09-23 03:37 - 000034816 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll
2018-11-15 21:50 - 2018-09-23 03:22 - 000427520 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2018-11-15 21:50 - 2018-09-23 03:22 - 000164352 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2018-11-15 21:50 - 2018-09-23 03:21 - 000086528 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe
2018-11-15 21:50 - 2018-09-23 03:21 - 000009728 _____ (Microsoft Corporation) C:\windows\system32\msshooks.dll
2018-11-15 21:50 - 2018-08-28 04:48 - 000419608 _____ C:\windows\system32\locale.nls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-12-11 21:01 - 2010-02-02 06:01 - 000746960 _____ C:\windows\system32\perfh005.dat
2018-12-11 21:01 - 2010-02-02 06:01 - 000160970 _____ C:\windows\system32\perfc005.dat
2018-12-11 21:01 - 2010-02-02 05:26 - 000004382 _____ C:\windows\system32\PerfStringBackup.INI
2018-12-11 20:57 - 2018-04-06 08:54 - 000000000 ____D C:\Users\HPi3\AppData\Local\AVAST Software
2018-12-11 20:56 - 2009-07-14 05:53 - 000000006 ____H C:\windows\Tasks\SA.DAT
2018-12-11 00:43 - 2016-12-04 19:14 - 000000000 ____D C:\Program Files\TeamViewer
2018-12-11 00:24 - 2009-07-14 05:34 - 000019536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-12-11 00:24 - 2009-07-14 05:34 - 000019536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-12-10 22:04 - 2017-11-09 13:11 - 000000000 ____D C:\Users\HPi3\Desktop\arduino-1.8.5
2018-12-10 21:33 - 2016-12-27 22:15 - 000001204 _____ C:\Users\HPi3\advanced_ip_scanner_MAC.bin
2018-12-10 21:23 - 2009-07-14 05:53 - 000032550 _____ C:\windows\Tasks\SCHEDLGU.TXT
2018-12-10 12:28 - 2009-07-14 03:37 - 000000000 ____D C:\windows\inf
2018-12-06 21:43 - 2016-04-18 14:45 - 000842240 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2018-12-06 21:43 - 2016-04-18 14:45 - 000175104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2018-12-06 21:43 - 2010-02-02 05:43 - 000000000 ____D C:\windows\system32\Macromed
2018-11-27 21:16 - 2016-06-14 16:07 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-27 21:16 - 2016-06-14 16:07 - 000002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-23 22:37 - 2017-02-04 20:56 - 000000270 __RSH C:\ProgramData\ntuser.pol
2018-11-23 22:06 - 2017-02-04 12:30 - 000000000 __RHD C:\ESD
2018-11-23 09:20 - 2018-04-06 08:56 - 000002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2018-11-21 21:03 - 2017-11-20 21:52 - 000167480 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000397992 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000310200 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000156936 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000135200 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000100984 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000072800 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2018-11-21 21:03 - 2016-04-18 14:51 - 000042736 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2018-11-21 21:02 - 2018-10-22 19:53 - 000040688 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2018-11-21 21:02 - 2017-03-19 20:23 - 000284256 _____ (AVAST Software) C:\windows\system32\Drivers\aswblogx.sys
2018-11-21 21:02 - 2017-03-19 20:23 - 000188976 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriverx.sys
2018-11-21 21:02 - 2017-03-19 20:23 - 000165384 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidshx.sys
2018-11-21 21:02 - 2017-03-19 20:23 - 000057904 _____ (AVAST Software) C:\windows\system32\Drivers\aswbunivx.sys
2018-11-21 21:02 - 2016-04-18 14:51 - 000784560 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2018-11-19 16:32 - 2018-10-23 12:26 - 000000000 ____D C:\windows\rescache
2018-11-18 21:30 - 2009-07-14 05:33 - 000434016 _____ C:\windows\system32\FNTCACHE.DAT
2018-11-15 21:49 - 2016-04-18 14:43 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

Some files in TEMP:
====================
2017-06-14 01:12 - 2017-06-14 08:35 - 000003584 _____ () C:\Users\HPi3\AppData\Local\Temp\2aqufzpg.dll
2016-04-14 17:09 - 2016-04-14 16:27 - 000426044 _____ (Hewlett-Packard Company) C:\Users\HPi3\AppData\Local\Temp\CpqMC.dll
2016-04-18 14:04 - 2016-04-18 14:04 - 000007968 _____ (Corel Corporation) C:\Users\HPi3\AppData\Local\Temp\CWPCUNLR.dll
2016-04-14 16:29 - 2008-01-15 00:28 - 000069632 _____ (Hewlett-Packard Company) C:\Users\HPi3\AppData\Local\Temp\HPQSi.exe
2016-07-21 22:12 - 2016-07-21 22:12 - 000741440 _____ (Oracle Corporation) C:\Users\HPi3\AppData\Local\Temp\jre-8u101-windows-au.exe
2017-01-22 12:41 - 2017-01-22 12:42 - 000739904 _____ (Oracle Corporation) C:\Users\HPi3\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-04-19 06:01 - 2017-04-19 06:01 - 000739904 _____ (Oracle Corporation) C:\Users\HPi3\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-10-22 01:06 - 2017-10-22 01:06 - 001856576 _____ (Oracle Corporation) C:\Users\HPi3\AppData\Local\Temp\jre-8u151-windows-au.exe
2016-07-01 09:57 - 2016-07-01 09:57 - 000739904 _____ (Oracle Corporation) C:\Users\HPi3\AppData\Local\Temp\jre-8u91-windows-au.exe
2016-04-18 14:00 - 2009-10-23 20:52 - 001446920 _____ (PDF Complete Inc) C:\Users\HPi3\AppData\Local\Temp\uninstall.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-12-10 12:52

==================== End of FRST.txt ============================











Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09.12.2018
Ran by HPi3 (11-12-2018 21:03:57)
Running from C:\Users\HPi3\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-04-14 16:08:48)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1486617282-2496559130-575599334-500 - Administrator - Disabled)
Guest (S-1-5-21-1486617282-2496559130-575599334-501 - Limited - Disabled)
HPi3 (S-1-5-21-1486617282-2496559130-575599334-1002 - Administrator - Enabled) => C:\Users\HPi3

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ActiveCheck component for HP Active Support Library (HKLM\...\{254C37AA-6B72-4300-84F6-98A82419187E}) (Version: 3.0.0.1 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.008.20081 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)
Advanced IP Scanner 2.4 (HKLM\...\{221C4218-4414-4275-AF04-748DF4BF48D3}) (Version: 2.4.2526 - Famatech)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Webcam Sharing Manager (HKLM\...\{190A7D93-3823-439C-91B9-ADCE3EC2A6A2}) (Version: 1.0.0.26 - ArcSoft)
Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 5.0 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{A788EAC0-E8F6-C07E-DD10-2E86CF8229A1}) (Version: 3.0.750.0 - ATI Technologies, Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Secure Browser (HKLM\...\Avast Secure Browser) (Version: 70.0.917.102 - AVAST Software)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
ccc-core-static (HKLM\...\{D22F766A-47E0-62E3-0B85-40E1BC2C8D69}) (Version: 2009.1208.2236.40549 - ATI) Hidden
Disk Check 1.0 (HKLM\...\Disk Check_is1) (Version: - Puran Software)
Droid Explorer 0.8.8.11 (x86) (HKLM\...\{122E24FF-A965-44D4-8209-0D1E989B3AAB}) (Version: 0.8.8.11 - Ryan Conrad)
Google Chrome (HKLM\...\Google Chrome) (Version: 70.0.3538.110 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
HP ESU for Microsoft Windows 7 (HKLM\...\{871732B3-1EE5-4C54-8462-8BFF516880B7}) (Version: 1.0.5.1 - Hewlett-Packard Company)
HP HotKey Support (HKLM\...\{0497B553-0E3F-4CCD-BE13-E28F1A54B318}) (Version: 3.5.13.1 - Hewlett-Packard Company)
HP Integrated Module with Bluetooth wireless technology (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
HP Power Assistant (HKLM\...\{EEB023B5-8EBE-4BEB-90C8-BDA16ABEDBB4}) (Version: 1.0.3.2 - Hewlett-Packard)
HP Power Data (HKLM\...\{E366F338-BF6E-4165-BDDB-3DCCB3388F9F}) (Version: 1.0.7.77 - Hewlett-Packard)
HP Software Framework (HKLM\...\{2712DAD6-C1F7-4295-B06E-17D6DC62EC20}) (Version: 3.5.13.1 - Hewlett-Packard Company)
HP Software Setup (HKLM\...\{04801E42-B1A6-4C52-9F3D-CADB5A050433}) (Version: 7.0.1.5 - Hewlett-Packard Company)
HP Webcam Driver (HKLM\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.50012.0 - Sonix)
HP Wireless Assistant (HKLM\...\{0279C882-B150-44B6-A769-A7C8A2F31CE3}) (Version: 4.0.3.2 - Hewlett-Packard)
HPAsset component for HP Active Support Library (HKLM\...\{669D4A35-146B-4314-89F1-1AC3D7B88367}) (Version: 3.0.0.3 - Hewlett-Packard) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6261.0 - IDT)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
Java 8 Update 101 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
KMPlayer (remove only) (HKLM\...\The KMPlayer) (Version: 4.2.1.4 - PandoraTV)
LightScribe System Software (HKLM\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.98 - LSI Corporation)
Master PDF Editor 4.2 (HKLM\...\Master PDF Editor 4_is1) (Version: 4.2.63 - Code Industry Ltd.)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 62.0.2 (x86 cs) (HKLM\...\Mozilla Firefox 62.0.2 (x86 cs)) (Version: 62.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.2.6837 - Mozilla)
OCCT 4.5.0 (HKLM\...\OCCT) (Version: 4.5.0 - Ocbase.com)
OpenOffice 4.1.2 (HKLM\...\{69D27D4C-36CE-4CB2-A290-C38B0A990955}) (Version: 4.12.9782 - Apache Software Foundation)
PDF Editor 5 (HKLM\...\PDF Editor 5) (Version: - )
Realtek Ethernet Controller All-In-One Windows Driver (HKLM\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0007 - Realtek)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30109 - Realtek Semiconductor Corp.)
Realterm 2.0.0.70_SignedWrapper (HKLM\...\Realterm) (Version: 2.0.0.70_SignedWrapper - Broadcast Equipment)
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Skype™ 4.1 (HKLM\...\{D103C4BA-F905-437A-8049-DB24763BBE36}) (Version: 4.1.179 - Skype Technologies S.A.)
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.19.1 - Synaptics Incorporated)
TeamViewer 12 (HKLM\...\TeamViewer) (Version: 12.0.95388 - TeamViewer)
Theft Recovery (HKLM\...\{33C9F24B-1D92-4632-A915-81E3BB1D5D6B}) (Version: 5.1.0.18 - Hewlett-Packard) Hidden
Theft Recovery (HKLM\...\InstallShield_{33C9F24B-1D92-4632-A915-81E3BB1D5D6B}) (Version: 5.1.0.18 - Hewlett-Packard)
Web Components (HKLM\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: 3.0.6.10 - )
Windows 7 Default Setting (HKLM\...\{5BF8E079-D6E2-4323-B794-75152371122A}) (Version: 1.0.1.4 - Hewlett-Packard Company)
Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (HKLM\...\B7541EC5F72AA713F557569278EB6273725F5607) (Version: 06/15/2009 6.2.0.9000 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
WinRAR 5.40 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
WinZip 12.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B7}) (Version: 12.0.8252 - WinZip Computing, S.L. )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => c:\Program Files\WinZip\wzshlstb.dll [2009-04-03] (WinZip Computing, S.L.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => c:\Program Files\WinZip\wzshlstb.dll [2009-04-03] (WinZip Computing, S.L.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll [2009-12-09] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => c:\Program Files\WinZip\wzshlstb.dll [2009-04-03] (WinZip Computing, S.L.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1E9B8FA3-456E-46F5-8089-D6E6B46DF0D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-14] (Google Inc.)
Task: {5C25297D-1F4A-4B38-B6DA-C194BA04EBF9} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {73493D6B-15E4-4C46-B491-BB0FCA0E80AC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {767C55D9-3013-4BF8-A698-336C5AE8B2C3} - System32\Tasks\Hewlett-Packard\HP Assistant\First Boot => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe
Task: {7D18201A-158E-48CD-A7DD-078ED24D4F4A} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-06] (Adobe Systems Incorporated)
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Adobe Acrobat Update Task" /ENABLE
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\Adobe Flash Player NPAPI Notifier" /ENABLE
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\Adobe Flash Player Updater" /ENABLE
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\SidebarExecute" /ENABLE
Task: {933CC747-FEA3-4C76-9791-41F3EF14208A} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {9F7609A0-B4EB-4F3A-9678-47C6F3DC831F} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-06] (AVAST Software)
Task: {A3DF8FDA-4645-416A-84E5-6A55B0D43806} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-14] (Google Inc.)
Task: {B657B3B7-3AEC-4FBC-89B2-892A158D2233} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-11-21] (AVAST Software)
Task: {C8E0D7FC-BCC4-44E2-B72D-A1EA7AF7AE33} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-10-29] (AVAST Software)
Task: {DF2F915D-1670-4894-83AB-7B6F381EAAF6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F5EA793A-33B6-4CF1-BAE1-58E7F3B8F435} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-06] (AVAST Software)
Task: {FBC1A05E-FB31-4C44-841F-A1B40C00B6AB} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\windows\system32\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-06] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-11-21 21:02 - 2018-11-21 21:02 - 000919256 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-11-21 21:02 - 2018-11-21 21:02 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-12-10 21:34 - 2018-12-10 21:34 - 005786256 _____ () C:\Program Files\AVAST Software\Avast\defs\18121006\algo.dll
2018-11-21 21:02 - 2018-11-21 21:02 - 000496344 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-11-21 21:02 - 2018-11-21 21:02 - 001112280 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2009-12-16 23:48 - 2009-12-16 23:48 - 000052280 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HardwareAccess.dll
2009-12-16 23:48 - 2009-12-16 23:48 - 000267832 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPCommon.XmlSerializers.dll
2009-12-16 23:48 - 2009-12-16 23:48 - 000055352 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\Graphs.dll
2018-03-13 14:35 - 2018-03-13 14:35 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2009-06-17 20:40 - 2009-06-17 20:40 - 002121728 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll
2009-06-17 20:40 - 2009-06-17 20:40 - 007745536 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll
2009-06-17 20:40 - 2009-06-17 20:40 - 000135168 _____ () C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2009-09-04 11:43 - 2009-09-04 11:43 - 000132384 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2009-06-11 00:30 - 2009-06-11 00:30 - 000098304 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2016-04-15 00:43 - 2016-04-15 00:43 - 000270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-12-16 23:51 - 2009-12-16 23:51 - 000030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2009-12-16 23:51 - 2009-12-16 23:51 - 000052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2018-11-15 21:34 - 000000824 _____ C:\windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1486617282-2496559130-575599334-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\HPi3\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
MpsSvc => Firewall Service is not running.
bfe => Firewall Service is not running.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D9C9619E-0B44-4888-8B4C-2491369D4D0B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2B6C432E-3D22-441C-A9AF-6D135DFA0B9B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{FD19341E-418F-4574-82F8-5F4FFF7E3C80}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F0CBC9E1-8DF1-454C-BE1E-F476DCEEC16F}C:\users\hpi3\desktop\arduino-1.8.5\java\bin\javaw.exe] => (Allow) C:\users\hpi3\desktop\arduino-1.8.5\java\bin\javaw.exe
FirewallRules: [UDP Query User{F2AEFA3A-C2C8-4917-AE14-78E76DD0B832}C:\users\hpi3\desktop\arduino-1.8.5\java\bin\javaw.exe] => (Allow) C:\users\hpi3\desktop\arduino-1.8.5\java\bin\javaw.exe
FirewallRules: [{46BEDA31-B60D-4806-9935-CD7E6C3172FD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3652A422-5408-44A2-82FF-E0E3D2568F3C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{90AE9975-938A-4796-920A-909AE355D5E3}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{8986DBCC-738A-47A8-8461-2AE9726E27FE}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{97F14456-1737-497E-BA34-2C71C97A379A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{11F17CF3-1701-4336-9BA5-D45D60D5C542}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{769BDD94-FF26-4C3D-A903-285C9C21933D}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{CD177EA6-C27B-4BE3-B98B-B6AF46E139B6}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{E875E7DB-DA2F-4D73-B819-96757E997EF1}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C6A023B4-BD55-405D-AA11-C96492DD8B7A}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{43B5E388-C1F4-483D-8BF1-F94B03313C40}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{F394C92A-23A5-44C1-85D2-249F094819F6}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{864466A8-45C9-4E00-9BAD-7FAC3D50EEF2}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe
FirewallRules: [{882C5F65-2901-410C-B850-39FE30D2BEE3}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

03-12-2018 23:34:50 Naplánovaný kontrolní bod
11-12-2018 00:46:22 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/11/2018 09:04:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo. První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error: (12/11/2018 09:04:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (12/11/2018 09:04:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (12/11/2018 09:00:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo. První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error: (12/11/2018 09:00:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (12/11/2018 09:00:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (12/11/2018 09:00:01 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (12/11/2018 08:56:09 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...) došlo k neočekávané chybě. hr= 0x80070005, Přístup byl odepřen.
.


Operace:
Inicializace modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {e91fe0f4-1715-4db3-b643-71e6c8bd68a6}


System errors:
=============
Error: (12/11/2018 09:04:56 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:56 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.

Error: (12/11/2018 09:04:54 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Sledování umístění v síti (NLA) ukončena s chybou %%-1073741288, specifickou pro službu.


CodeIntegrity:
===================================

Date: 2016-08-10 09:06:37.755
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-10 09:06:37.506
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-14 03:33:46.270
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-14 03:33:46.036
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 43%
Total physical RAM: 2991.43 MB
Available physical RAM: 1702.24 MB
Total Virtual: 5981.22 MB
Available Virtual: 4622.08 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:280.8 GB) (Free:15.08 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (KINGSTOM) (Removable) (Total:29.29 GB) (Free:4.98 GB) FAT32
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.98 GB) FAT32

\\?\Volume{21f7e4d0-029a-11e6-bc85-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.29 GB) (Free:0.25 GB) NTFS
\\?\Volume{21f7e4d2-029a-11e6-bc85-806e6f6e6963}\ (HP_RECOVERY) (Fixed) (Total:15 GB) (Free:6.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 58054A99)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=280.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)

========================================================
Disk: 1 (Size: 29.3 GB) (Disk ID: 054A53C6)
Partition 1: (Active) - (Size=29.3 GB) - (Type=0C)

==================== End of Addition.txt ============================

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Program Files\Droid Explorer\DroidExplorer.Service.exe
  File: C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  File: C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sysC:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys
  
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: D - D:\autorun.exe
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {013512bf-94fb-11e6-b4ac-002713a5cbd8} - D:\HPLauncher.exe
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {1f847871-6e95-11e6-81cd-002713a5cbd8} - D:\HiSuiteDownLoader.exe
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {f2bbe482-af1f-11e7-9d51-002713a5cbd8} - D:\autorun.exe
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {f9a03c3a-55a2-11e7-808d-002713a5cbd8} - D:\MotoCastSetup.exe -a
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {ff8da02a-abfa-11e6-b707-002713a5cbd8} - D:\autorun.exe
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {ff8da06e-abfa-11e6-b707-002713a5cbd8} - D:\HiSuiteDownLoader.exe
  GroupPolicy: Restriction ? <==== ATTENTION
  HKU\S-1-5-21-1486617282-2496559130-575599334-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com
  SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File
  S3 cpuz141; C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys [46144 2017-03-21] (CPUID) <==== ATTENTION
  2018-12-10 22:00 - 2018-12-10 22:00 - 000000000 ____D C:\rsit
  2018-12-10 22:00 - 2018-12-10 22:00 - 000000000 ____D C:\Program Files\trend micro
  2018-12-10 21:59 - 2018-12-10 21:52 - 001107968 _____ C:\Users\HPi3\Desktop\RSIT.exe
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Fix result of Farbar Recovery Scan Tool (x86) Version: 09.12.2018
Ran by HPi3 (13-12-2018 13:13:17) Run:1
Running from C:\Users\HPi3\Desktop
Loaded Profiles: HPi3 (Available Profiles: HPi3)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files\Droid Explorer\DroidExplorer.Service.exe
File: C:\Program Files\Common Files\LightScribe\LSSrvc.exe
File: C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sysC:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys

HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: D - D:\autorun.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {013512bf-94fb-11e6-b4ac-002713a5cbd8} - D:\HPLauncher.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {1f847871-6e95-11e6-81cd-002713a5cbd8} - D:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {f2bbe482-af1f-11e7-9d51-002713a5cbd8} - D:\autorun.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {f9a03c3a-55a2-11e7-808d-002713a5cbd8} - D:\MotoCastSetup.exe -a
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {ff8da02a-abfa-11e6-b707-002713a5cbd8} - D:\autorun.exe
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\...\MountPoints2: {ff8da06e-abfa-11e6-b707-002713a5cbd8} - D:\HiSuiteDownLoader.exe
GroupPolicy: Restriction ? <==== ATTENTION
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
S3 cpuz141; C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys [46144 2017-03-21] (CPUID) <==== ATTENTION
2018-12-10 22:00 - 2018-12-10 22:00 - 000000000 ____D C:\rsit
2018-12-10 22:00 - 2018-12-10 22:00 - 000000000 ____D C:\Program Files\trend micro
2018-12-10 21:59 - 2018-12-10 21:52 - 001107968 _____ C:\Users\HPi3\Desktop\RSIT.exe

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 17105
Average :
Sum : 197241486564
Maximum :
Minimum :
Property : Length


========= End of Powershell: =========


========================= File: C:\Program Files\Droid Explorer\DroidExplorer.Service.exe ========================

C:\Program Files\Droid Explorer\DroidExplorer.Service.exe
File not signed
MD5: 75FBB8FCE72813B244288261F52E0399
Creation and modification date: 2013-08-25 01:31 - 2013-08-25 01:31
Size: 000255488
Attributes: ----A
Company Name: Ryan Conrad
Internal Name: DroidExplorer.Service.exe
Original Name: DroidExplorer.Service.exe
Product: Droid Explorer
Description: Droid Explorer Service
File Version: 0.8.8.11
Product Version: 0.8.8.11
Copyright: Copyright © Ryan Conrad 2009
VirusTotal: 0

====== End of File: ======


========================= File: C:\Program Files\Common Files\LightScribe\LSSrvc.exe ========================

C:\Program Files\Common Files\LightScribe\LSSrvc.exe
File not signed
MD5: 83D8BE94E1CBCBE2EA8372DB1A95A159
Creation and modification date: 2009-06-17 21:21 - 2009-06-17 21:21
Size: 000073728
Attributes: ----A
Company Name: Hewlett-Packard Company
Internal Name: LSSrvc.exe
Original Name: LSSrvc.exe
Product: LightScribe
Description: LightScribe Service
File Version: 1.18.6.1
Product Version:
Copyright: © Copyright 2003-2007 Hewlett-Packard Development Company, LP
VirusTotal: 0

====== End of File: ======


========================= File: C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sysC:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys ========================

"C:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sysC:\Users\HPi3\AppData\Local\Temp\cpuz141\cpuz141_x32.sys" => not found
====== End of File: ======

HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D => removed successfully.
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{013512bf-94fb-11e6-b4ac-002713a5cbd8} => removed successfully.
HKLM\Software\Classes\CLSID\{013512bf-94fb-11e6-b4ac-002713a5cbd8} => not found
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1f847871-6e95-11e6-81cd-002713a5cbd8} => removed successfully.
HKLM\Software\Classes\CLSID\{1f847871-6e95-11e6-81cd-002713a5cbd8} => not found
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f2bbe482-af1f-11e7-9d51-002713a5cbd8} => removed successfully.
HKLM\Software\Classes\CLSID\{f2bbe482-af1f-11e7-9d51-002713a5cbd8} => not found
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f9a03c3a-55a2-11e7-808d-002713a5cbd8} => removed successfully.
HKLM\Software\Classes\CLSID\{f9a03c3a-55a2-11e7-808d-002713a5cbd8} => not found
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ff8da02a-abfa-11e6-b707-002713a5cbd8} => removed successfully.
HKLM\Software\Classes\CLSID\{ff8da02a-abfa-11e6-b707-002713a5cbd8} => not found
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ff8da06e-abfa-11e6-b707-002713a5cbd8} => removed successfully.
HKLM\Software\Classes\CLSID\{ff8da06e-abfa-11e6-b707-002713a5cbd8} => not found
C:\windows\system32\GroupPolicy\Machine => moved successfully
C:\windows\system32\GroupPolicy\GPT.ini => moved successfully
HKU\S-1-5-21-1486617282-2496559130-575599334-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully.
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{0BF43445-2F28-4351-9252-17FE6E806AA0}" => removed successfully.
HKLM\Software\Classes\CLSID\{0BF43445-2F28-4351-9252-17FE6E806AA0} => not found
HKLM\System\CurrentControlSet\Services\cpuz141 => removed successfully.
cpuz141 => service removed successfully.
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
"C:\Users\HPi3\Desktop\RSIT.exe" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 195505645 B
Java, Flash, Steam htmlcache => 1107 B
Windows/system/drivers => 2321604032 B
Edge => 0 B
Chrome => 247422195 B
Firefox => 381857811 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 66228 B
Public => 0 B
ProgramData => 0 B
systemprofile => 29568199 B
LocalService => 66228 B
NetworkService => 57718 B
HPi3 => 237942268 B

RecycleBin => 3507470 B
EmptyTemp: => 3.2 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 13:16:57 ====

V PC su nejake zbytky po McAfee, precisti to este cez McAfee odinstalator: http://us.mcafee.com/apps/supporttools/mcpr/mcpr.asp

Spusti kontrolu integrity systemovych suborov:

• Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
• Skopiruj a spusti prikaz:

  Kód: Vybrat vše

  sfc /scannow

• Po dokonceni skopiruj a spusti tento prikaz:

  Kód: Vybrat vše

  findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"

• Na ploche sa vytvori subor sfcdetails.txt, zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
• Restartuj PC a napis ako sa chova PC

Bohužel stále se nejde připojit k WiFi, jen omezený přístup. Snad nebudu muset reinstalovat win

Da sa z tohto NTB pripojit k inym WiFi sietam? Da sa z inych zariadenii pripojit k tej WiFi sieti, ku ktorej sa NTB nechce pripojit?

Na síti jsem připojen s druhým NTB, internet TV a mobilama. Vše funguje bez problému, jen ten jeden NTB. Když dám "Odstranit potíže" vypíše to chybu, že není spuštěna služba DPS, která nejde spustit ani manuálně ve správci úloh. Napíše to "Operace nebyla dokončena. Přístup byl odepřen"

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  CMD: sc config DPS start= auto
  CMD: net start DPS
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Fix result of Farbar Recovery Scan Tool (x86) Version: 09.12.2018
Ran by HPi3 (16-12-2018 10:24:10) Run:2
Running from C:\Users\HPi3\Desktop
Loaded Profiles: HPi3 (Available Profiles: HPi3)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

CMD: sc config DPS start= auto
CMD: net start DPS

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= sc config DPS start= auto =========

[SC] ChangeServiceConfig ŁspŘch

========= End of CMD: =========


========= net start DPS =========

SpouçtŘnˇ slu§by Slu§ba DPS (Diagnostic Policy Service).
Slu§bu Slu§ba DPS (Diagnostic Policy Service) nelze spustit.

Doçlo k chybŘ syst‚mu.

Doçlo k syst‚mov‚ chybŘ 2.

Syst‚m nem…§e nal‚zt uvedeně soubor.


========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9007748 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 18624 B
Edge => 0 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
LocalService => 0 B
NetworkService => 0 B
HPi3 => 33942055 B

RecycleBin => 37083 B
EmptyTemp: => 49 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 10:25:49 ====

Da sa notebook pripojit k internetu aspon pomocou kabla?

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  File: C:\Windows\system32\dps.dll
  ExportKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
  ListPermissions: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
  ListPermissions: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Pockaj na dokoncenie
• Tentokrat to bude bez restartu, otvori sa Fixlog.txt (pripadne bude na ploche), jeho obsah sem skopiruj

Tak ani pomoci kabelu..




Fix result of Farbar Recovery Scan Tool (x86) Version: 09.12.2018
Ran by HPi3 (16-12-2018 21:26:29) Run:3
Running from C:\Users\HPi3\Desktop
Loaded Profiles: HPi3 (Available Profiles: HPi3)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
File: C:\Windows\system32\dps.dll
ExportKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
ListPermissions: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
ListPermissions: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters
End
*****************


========================= File: C:\Windows\system32\dps.dll ========================

C:\Windows\system32\dps.dll
File is digitally signed
MD5: 8EC04CA86F1D68DA9E11952EB85973D6
Creation and modification date: 2016-05-30 15:05 - 2010-11-20 13:18
Size: 000144384
Attributes: ----A
Company Name: Microsoft Corporation
Internal Name: dps.dll
Original Name: dps.dll
Product: Microsoft® Windows® Operating System
Description: WDI Diagnostic Policy Service
File Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
Product Version: 6.1.7601.17514
Copyright: © Microsoft Corporation. All rights reserved.
VirusTotal: 0

====== End of File: ======

================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS]
"DisplayName"="@%systemroot%\system32\dps.dll,-500"
"ImagePath"="%SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork"
"Description"="@%systemroot%\system32\dps.dll,-501"
"ObjectName"="NT AUTHORITY\LocalService"
"ErrorControl"="1"
"Start"="2"
"Type"="32"
"ServiceSidType"="3"
"RequiredPrivileges"="SeChangeNotifyPrivilege*SeCreateGlobalPrivilege*SeAssignPrimaryTokenPrivilege*SeImpersonatePrivilege"
"FailureActions"="805101000000000000000000030000001400000001000000c0d4010001000000e09304000000000000000000"
"DelayedAutoStart"="0"
[HKLM\SYSTEM\CurrentControlSet\Services\DPS\Parameters]
"ServiceDll"="%SystemRoot%\system32\dps.dll"
"ServiceMain"="ServiceMain"
"ServiceDllUnloadOnStop"="1"
[HKLM\SYSTEM\CurrentControlSet\Services\DPS\Security]
"Security"="010014808c00000098000000140000003000000002001c000100000002801400ff010f0001010000000000010000000002005c000400000000001400ff010f0001010000000000051200000000001800ff01020001020000000000052000000020020000 (the data entry has 128 more characters)."

=== End of ExportKey ===
===================================
permissions of "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS":

Owner: BUILTIN\Administrators

DACL(PAI):

BUILTIN\Users ALLOW READ (NI)
BUILTIN\Users ALLOW READ (CI-IO)
BUILTIN\Administrators ALLOW FULL (NI)
BUILTIN\Administrators ALLOW FULL (CI-IO)
NT AUTHORITY\SYSTEM ALLOW FULL (NI)
NT AUTHORITY\SYSTEM ALLOW FULL (CI-IO)
BUILTIN\Administrators ALLOW FULL (NI)
CREATOR OWNER ALLOW FULL (CI-IO)

===================================
===================================
permissions of "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters":

Owner: BUILTIN\Administrators

DACL(PAI):

BUILTIN\Users ALLOW READ (NI)
BUILTIN\Users ALLOW READ (CI-IO)
BUILTIN\Administrators ALLOW FULL (NI)
BUILTIN\Administrators ALLOW FULL (CI-IO)
NT AUTHORITY\SYSTEM ALLOW FULL (NI)
NT AUTHORITY\SYSTEM ALLOW FULL (CI-IO)
BUILTIN\Administrators ALLOW FULL (NI)
CREATOR OWNER ALLOW FULL (CI-IO)

===================================

==== End of Fixlog 21:26:29 ====