VIRY.CZ

Dobrý den,
ntb je zpomalený a nelze napsat písmena s diakritikou jako je d s háčkem, t s háčkem apod.

Vkládám log.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 03.03.2019 01
Ran by SMS (administrator) on SMS-PC (04-03-2019 14:14:13)
Running from C:\Users\SMS\Desktop
Loaded Profiles: SMS (Available Profiles: SMS)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe
() [File not signed] C:\ProgramData\Logic Cramble\set.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(HP) [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe
(ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
() [File not signed] C:\Users\SMS\AppData\Roaming\Internet\runaservice.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
() [File not signed] C:\Users\SMS\AppData\Roaming\Internet\Console.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Pražská softwarová s.r.o.) [File not signed] C:\CPP\CppKalkulacky\CppCalcServer.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [727896 2017-11-28] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.)
HKLM\...\Run: [PrintDisp] => C:\Windows\system32\PrintDisp.exe [580744 2018-01-03] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [259976 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\RunOnce: [!MOF64] => cmd.exe /c "cd %windir%\microsoft.net\framework64\v4.0.30319 & mofcomp.exe -autorecover mof\servicemodel.mof & mofcomp.exe -autorecover mof\servicemodel35.mof & mofcomp.exe -autorecover aspnet.mof & c (the data entry has 182 more characters).
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\Run: [OfficeSyncProcess] => "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19645800 2019-01-10] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [735336 2019-02-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\Run: [Bonus.SSR.FR14] => "C:\Program Files (x86)\ABBYY FineReader 14\ScreenshotReader.exe" /autorun
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\MountPoints2: {5ade5c2c-2a10-11e9-bfd7-08edb9dd37c3} - G:\OInstall.exe
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\MountPoints2: {a08d4d07-13e5-11e9-b4cb-08edb9dd37c3} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [309248 2015-12-18] () [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [126976 2015-10-24] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.l3codecp] => C:\Windows\system32\l3codecp.acm [182272 2009-07-14] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [282112 2015-12-18] () [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.l3codecp] => C:\Windows\SysWOW64\l3codecp.acm [220672 2009-07-14] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.121\Installer\chrmstp.exe [2019-03-02] (Google LLC -> Google Inc.)
AppInit_DLLs: C:\ProgramData\Quoteex\Fixbam.dll => C:\ProgramData\Quoteex\Fixbam.dll [342528 2019-02-10] () [File not signed]
Startup: C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk [2018-04-16]
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe (Pražská softwarová s.r.o.) [File not signed]
GroupPolicy: Restriction - Windows Defender <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{33D73B75-5579-43BF-8077-086592DCB96B}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{496C1E37-6F39-4161-B27C-388D07A986C9}: [DhcpNameServer] 192.168.135.1 8.8.8.8
Tcpip\..\Interfaces\{EB448BE1-6292-45A4-8D26-5CB9FB6B70A4}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5WszJD-oZeFqyEuSOlPSKHCrUWyxfDkvMeA8ldcjS6hsp9ZwbwmmVtNXNuaGaSsKSDrWrdL94R6a6CMg9XB4IX7JYD_3ivftwlLVg8rfksgfTXxkCDhgG1vekn9Q5V2V44JxskiZ37bBIX7f4qTRwzHBXlx_Vw,,&q={searchTerms}
HKU\S-1-5-21-3520966483-694721993-3208304506-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5WszJD-oZeFqyEuSOlPSKHCrUWyxfDkvMeA8ldcjS6hsp9ZwbwmmVtNXNuaGaSsKSDrWrdL94R6a6CMg9XB4IX7JYD_3ivftwlLVg8rfksgfTXxkCDhgG1vekn9Q5V2V44JxskiZ37bBIX7f4qTRwzHBXlx_Vw,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3520966483-694721993-3208304506-1001 -> {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5WszJD-oZeFqyEuSOlPSKHCrUWyxfDkvMeA8ldcjS6hsp9ZwbwmmVtNXNuaGaSsKSDrWrdL94R6a6CMg9XB4IX7JYD_3ivftwlLVg8rfksgfTXxkCDhgG1vekn9Q5V2V44JxskiZ37bBIX7f4qTRwzHBXlx_Vw,,&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2019-01-28] (Google Inc -> Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2019-02-17] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2019-01-28] (Google Inc -> Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2019-02-17] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2019-01-28] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2019-01-28] (Google Inc -> Google Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: yeejw8z7.default-1546093295160
FF ProfilePath: C:\Users\SMS\AppData\Roaming\Mozilla\Firefox\Profiles\yeejw8z7.default-1546093295160 [2019-03-04]
FF Homepage: Mozilla\Firefox\Profiles\yeejw8z7.default-1546093295160 -> file:///C:/ProgramData/Quoteexs/ff.HP
FF NewTab: Mozilla\Firefox\Profiles\yeejw8z7.default-1546093295160 -> file:///C:/ProgramData/Quoteexs/ff.NT
FF SearchPlugin: C:\Users\SMS\AppData\Roaming\Mozilla\Firefox\Profiles\yeejw8z7.default-1546093295160\searchplugins\findit.xml [2019-02-10]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5WszJD-oZeFqyEuSOlPSKHCrUWyxfDkvMeA8ldcjS6hsp9ZwbwmmVtNXNuaGaSsKSDrWtsZoBJ08hizqwPKRF6mlEj_hllqm--TI7UpBDItKq6TwopuiB1MtfhL1SmAJgqLVKjv3tcVKqwKB4zJS7Z9twbVV4w,,
CHR Profile: C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default [2019-03-04]
CHR Extension: (Prezentace) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-23]
CHR Extension: (Dokumenty) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-23]
CHR Extension: (Disk Google) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (YouTube) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-23]
CHR Extension: (Tipli do prohlížeče) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbnfnbehhjknomdbfhcobpgpphnlnikp [2019-01-23]
CHR Extension: (chrome_filter) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif [2019-02-10]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-02-04]
CHR Extension: (Tabulky) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-23]
CHR Extension: (Dokumenty Google offline) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-16]
CHR Extension: (Avast Online Security) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-02-19]
CHR Extension: (Bazz Search) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmeinlfojlcegblpogpjbhipmonclejh [2019-02-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-12]
CHR Extension: (Gmail) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-12-23]
CHR Extension: (Chrome Media Router) - C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-11]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [87384 2017-11-28] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6758976 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [357304 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R2 backlh; C:\ProgramData\Logic Cramble\set.exe [3780096 2019-02-07] () [File not signed] <==== ATTENTION
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11013280 2019-02-07] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4132456 2019-02-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP) [File not signed]
R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [127800 2010-04-29] (Hewlett-Packard Company -> HP)
R2 runaservice; C:\Users\SMS\AppData\Roaming\Internet\runaservice.exe [98304 2014-03-04] () [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11665240 2019-02-26] (TeamViewer GmbH -> TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-08-17] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 A7CF6C34A616; C:\Windows\A7CF6C34A616.sys [621928 2019-02-10] (韵羽健康管理咨询（上海）有限公司 -> VxDriver)
S3 amdhub30; C:\Windows\system32\drivers\amdhub30.sys [108768 2016-01-14] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, INC.)
S3 amdxhc; C:\Windows\system32\drivers\amdxhc.sys [229088 2016-01-14] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, INC.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37104 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205400 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [225680 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196072 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320696 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [57960 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [249672 2019-02-13] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [167304 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112312 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87944 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1034432 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [474456 2019-02-15] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [216784 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [379952 2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
S3 ausb3hub; C:\Windows\system32\drivers\ausb3hub.sys [403520 2016-04-12] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
S3 ausb3xhc; C:\Windows\system32\drivers\ausb3xhc.sys [816712 2016-04-12] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [50912 2014-10-16] (Broadcom Corp -> Broadcom Corporation)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [42256 2019-02-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [59360 2019-02-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 ETDSMBus; C:\Windows\System32\DRIVERS\ETDSMBus.sys [32840 2016-12-07] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronic Corp.)
S3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [65408 2014-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [39296 2014-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
S3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [94208 2014-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77944 2015-07-30] (Fresco Logic Inc -> Fresco Logic)
S3 IaNVMe; C:\Windows\system32\drivers\IaNVMe.sys [101872 2016-01-26] (Intel(R) NVMe Windows Driver -> Intel Corporation)
R0 IaNVMeF; C:\Windows\System32\drivers\IaNVMeF.sys [27120 2016-01-26] (Intel(R) NVMe Windows Driver -> Intel Corporation)
S3 IaRNVMe; C:\Windows\system32\drivers\IaRNVMe.sys [592408 2016-01-22] (Intel(R) Rapid Storage Technology Enterprise -> Intel Corporation)
R0 IaRNVMeF; C:\Windows\System32\drivers\IaRNVMeF.sys [36888 2016-01-22] (Intel(R) Rapid Storage Technology Enterprise -> Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [181304 2017-03-02] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2018-05-04] (Apple Inc.) [File not signed]
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11471872 2012-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
S3 nvme; C:\Windows\system32\drivers\nvme.sys [83784 2015-12-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd)
R0 nvmeF; C:\Windows\System32\drivers\nvmeF.sys [30776 2015-12-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd)
S3 ocznvme; C:\Windows\system32\drivers\ocznvme.sys [99584 2016-04-06] (Toshiba America Electronic Components, Inc. -> TOSHIBA CORPORATION)
R0 ocztrimfilter; C:\Windows\System32\drivers\ocztrimfilter.sys [29056 2016-04-06] (Toshiba America Electronic Components, Inc. -> TOSHIBA CORPORATION)
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [23216 2015-01-09] (STMicroelectronics -> ST Microelectronics)
R3 ST_Accel; C:\Windows\System32\DRIVERS\ST_Accel.sys [103088 2017-11-28] (STMicroelectronics -> STMicroelectronics)
S3 tilfilter; C:\Windows\system32\drivers\TIxHCIlfilter.sys [17672 2015-02-11] (Texas Instruments, Inc. -> Texas Instruments, Inc.)
S3 tiufilter; C:\Windows\system32\drivers\TIxHCIufilter.sys [23304 2015-02-11] (Texas Instruments, Inc. -> Texas Instruments, Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2018-05-04] (Apple, Inc.) [File not signed]
S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [227840 2014-10-31] (Microsoft Windows Hardware Compatibility Publisher -> VIA Technologies, Inc.)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
S3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [305664 2014-10-31] (Microsoft Windows Hardware Compatibility Publisher -> VIA Technologies, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-04 14:14 - 2019-03-04 14:15 - 000029268 _____ C:\Users\SMS\Desktop\FRST.txt
2019-03-04 14:14 - 2019-03-04 14:14 - 000000000 ____D C:\FRST
2019-03-04 14:12 - 2019-03-04 14:12 - 002434560 _____ (Farbar) C:\Users\SMS\Desktop\FRST64.exe
2019-03-04 14:09 - 2019-03-04 14:09 - 000000165 ____H C:\Users\SMS\Desktop\~$seznam.xlsx
2019-03-04 14:03 - 2019-03-04 14:09 - 000010444 _____ C:\Users\SMS\Desktop\seznam.xlsx
2019-03-04 13:07 - 2019-03-04 13:08 - 190311750 _____ C:\Users\SMS\Downloads\Nero 7 (Premium 7.8.5.0) cz.rar
2019-03-03 22:34 - 2019-03-03 22:40 - 2107237620 _____ C:\Users\SMS\Downloads\- Komedie TOHLE JE RAJ Jenifer Anistton CZ DABING Top komedie.avi
2019-03-03 22:34 - 2019-03-03 22:40 - 000000000 ____D C:\Users\SMS\Desktop\tisk
2019-03-03 18:41 - 2019-03-03 18:41 - 001549969 _____ C:\Users\SMS\Desktop\IL.Pobořilová_Karla.751627240.20190303184139.pdf
2019-03-03 15:58 - 2019-03-03 15:58 - 002927301 _____ C:\Users\SMS\Downloads\751498650-1 (2).pdf
2019-03-02 17:46 - 2019-03-02 17:46 - 000258480 _____ C:\Users\SMS\Desktop\PDFNEW_KA_2015_ZKPP_PODPISEM_1.PDF
2019-03-02 17:46 - 2019-03-02 17:46 - 000217545 _____ C:\Users\SMS\Desktop\zk.PDF
2019-03-02 16:24 - 2019-03-02 16:24 - 006215889 _____ C:\Users\SMS\Downloads\7315055312-1 (2).pdf
2019-03-02 16:19 - 2019-03-02 16:19 - 001067304 _____ C:\Users\SMS\Downloads\1579-informace-pro-zajemce-o-sjednani-pojisteni-na-dalku-3-gdpr.zip
2019-03-02 14:36 - 2019-03-02 14:36 - 003204936 _____ C:\Users\SMS\Downloads\bat V.ncd
2019-03-02 13:40 - 2019-03-02 15:15 - 000000000 ____D C:\Users\SMS\AppData\Local\eModel
2019-03-02 13:38 - 2019-03-02 13:40 - 000002129 _____ C:\Users\SMS\Desktop\eModel - MetLife.lnk
2019-03-02 13:38 - 2019-03-02 13:40 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetLife
2019-03-02 13:37 - 2019-02-28 15:47 - 061265112 _____ (MetLife) C:\Users\SMS\Desktop\Metlife.exe
2019-03-02 10:58 - 2019-03-02 10:58 - 006215889 _____ C:\Users\SMS\Downloads\7315055312-1 (1).pdf
2019-03-01 11:27 - 2019-03-01 11:27 - 001241821 _____ C:\Users\SMS\Downloads\document (49).pdf
2019-03-01 10:34 - 2019-03-01 10:34 - 000139896 _____ C:\Users\SMS\Downloads\document (48).pdf
2019-03-01 10:33 - 2019-03-01 10:33 - 000236453 _____ C:\Users\SMS\Downloads\document (47).pdf
2019-03-01 10:21 - 2019-03-01 10:21 - 000849129 _____ C:\Users\SMS\Downloads\z4022_01_2019_web.pdf
2019-02-28 22:24 - 2019-02-28 22:24 - 000903837 _____ C:\Users\SMS\Downloads\z5024_01_2019_web.pdf
2019-02-28 21:02 - 2019-02-28 21:02 - 007871545 _____ C:\Users\SMS\Downloads\9200407717-1 (2).pdf
2019-02-28 19:55 - 2019-02-28 19:55 - 005414096 _____ C:\Users\SMS\Downloads\0112111992-1 (6).pdf
2019-02-28 15:52 - 2019-02-28 15:52 - 000000000 ____D C:\Users\SMS\AppData\Local\MetLife
2019-02-28 15:50 - 2019-03-02 13:40 - 000000000 ____D C:\Users\SMS\AppData\Local\SquirrelTemp
2019-02-28 15:46 - 2019-02-28 15:47 - 061265112 _____ (MetLife) C:\Users\SMS\Downloads\setup_eModel.exe
2019-02-28 15:43 - 2019-02-28 15:43 - 007871545 _____ C:\Users\SMS\Downloads\9200407717-1 (1).pdf
2019-02-28 15:38 - 2019-02-28 15:38 - 000010798 _____ C:\Users\SMS\Downloads\kis-smlouvy-export-2019-02-28-03-38.csv
2019-02-28 11:28 - 2019-02-28 11:28 - 000003159 _____ C:\Users\SMS\Downloads\kis-smlouvy-export-2019-02-28-10-59 (1) (3).csv
2019-02-28 11:28 - 2019-02-28 11:28 - 000003159 _____ C:\Users\SMS\Downloads\kis-smlouvy-export-2019-02-28-10-59 (1) (2).csv
2019-02-28 11:17 - 2019-02-28 11:17 - 000003159 _____ C:\Users\SMS\Downloads\kis-smlouvy-export-2019-02-28-10-59 (1) (1).csv
2019-02-28 11:16 - 2019-02-28 11:16 - 000003159 _____ C:\Users\SMS\Downloads\kis-smlouvy-export-2019-02-28-10-59 (1).csv
2019-02-28 10:03 - 2019-02-28 10:03 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (3) (3).xls
2019-02-28 09:38 - 2019-02-28 09:38 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (3) (2).xls
2019-02-28 09:34 - 2019-02-28 09:34 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (3) (1).xls
2019-02-27 15:54 - 2019-02-27 15:54 - 007871545 _____ C:\Users\SMS\Downloads\9200407717-1.pdf
2019-02-27 15:51 - 2019-02-27 15:51 - 000144322 _____ C:\Users\SMS\Downloads\HCP KodisScan (7).tif
2019-02-27 15:51 - 2019-02-27 15:51 - 000031914 _____ C:\Users\SMS\Downloads\HCP A0445 7009778179 160727095848 0000389995 W3389167 X000006448450.tif
2019-02-27 15:11 - 2019-02-27 15:11 - 001136176 _____ (Google Inc.) C:\Users\SMS\Downloads\ChromeSetup (1).exe
2019-02-27 15:05 - 2019-02-27 15:05 - 000897714 _____ C:\Users\SMS\Downloads\HCP KodisSkenPage (10).tif
2019-02-27 15:00 - 2019-02-27 15:00 - 002927301 _____ C:\Users\SMS\Downloads\751498650-1 (1).pdf
2019-02-27 14:36 - 2019-02-27 14:36 - 006215889 _____ C:\Users\SMS\Downloads\7315055312-1.pdf
2019-02-27 14:20 - 2019-02-27 14:20 - 003950646 _____ C:\Users\SMS\Downloads\4700273402-1.pdf
2019-02-27 13:55 - 2019-02-27 13:55 - 000109722 _____ C:\Users\SMS\Downloads\10200821_85032.pdf
2019-02-27 13:54 - 2019-02-27 13:54 - 000081852 _____ C:\Users\SMS\Downloads\10200821_77636.pdf
2019-02-27 13:53 - 2019-02-27 13:53 - 000081855 _____ C:\Users\SMS\Downloads\10200821_76764.pdf
2019-02-27 13:48 - 2019-02-27 13:48 - 000398228 _____ C:\Users\SMS\Downloads\10200821_33763.pdf
2019-02-27 13:31 - 2019-02-27 13:31 - 002132356 _____ C:\Users\SMS\Downloads\3228276414-1 (2).pdf
2019-02-25 17:56 - 2019-02-25 17:59 - 733935616 _____ C:\Users\SMS\Downloads\Sirotcinec-horor-2009-cz-dabing-supr-velmi-dobra-kvalita-mam-vyskouseno-dj.avi
2019-02-25 16:51 - 2019-02-25 16:55 - 838351610 _____ C:\Users\SMS\Downloads\Kosti a skalp-hororo-cz dab.-2015-jad.avi
2019-02-24 12:26 - 2019-02-24 12:26 - 010995815 _____ C:\Users\SMS\Downloads\0113297626p-1 (3).pdf
2019-02-24 12:07 - 2019-02-24 12:07 - 010995815 _____ C:\Users\SMS\Downloads\0113297626p-1 (2).pdf
2019-02-24 11:42 - 2019-02-24 11:42 - 000751093 _____ C:\Users\SMS\Downloads\HCP G7078 (6).pdf
2019-02-24 11:42 - 2019-02-24 11:42 - 000751093 _____ C:\Users\SMS\Downloads\HCP G7078 (5).pdf
2019-02-24 11:37 - 2019-02-24 11:37 - 000594187 _____ C:\Users\SMS\Downloads\7000087025-1 (1).pdf
2019-02-22 12:47 - 2019-02-22 12:47 - 000309671 _____ C:\Users\SMS\Downloads\2019596569_1459770_sml.pdf
2019-02-22 12:47 - 2019-02-22 12:47 - 000235527 _____ C:\Users\SMS\Downloads\2019596569_1459771_zk_barevna_docasna.pdf
2019-02-22 09:38 - 2019-02-22 09:38 - 000300846 _____ C:\Users\SMS\Downloads\HCP C0006 7000196708 190124183449 (1).tiff
2019-02-22 09:35 - 2019-02-22 09:35 - 000300846 _____ C:\Users\SMS\Downloads\HCP C0006 7000196708 190124183449.tiff
2019-02-21 15:10 - 2019-02-21 15:10 - 000088854 _____ C:\Users\SMS\Downloads\558-equa-bank-0119 (4).xlsx
2019-02-21 15:09 - 2019-02-21 15:09 - 000088854 _____ C:\Users\SMS\Downloads\558-equa-bank-0119 (3).xlsx
2019-02-21 14:53 - 2019-02-21 14:53 - 000897714 _____ C:\Users\SMS\Downloads\HCP KodisSkenPage (9).tif
2019-02-21 14:47 - 2019-02-21 14:47 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (4).xls
2019-02-21 14:36 - 2019-02-21 14:36 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (3).xls
2019-02-21 13:26 - 2019-02-21 13:26 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (2).xls
2019-02-21 12:38 - 2019-02-21 12:38 - 000058080 _____ C:\Users\SMS\Downloads\559-wustenrot-hypotecni-banka-0119.xlsx
2019-02-21 12:37 - 2019-02-21 12:37 - 000095584 _____ C:\Users\SMS\Downloads\35-unicredit-bank-0119.xlsx
2019-02-21 12:36 - 2019-02-21 12:36 - 000093187 _____ C:\Users\SMS\Downloads\34-raiffeisenbank-1018.xlsx
2019-02-21 12:36 - 2019-02-21 12:36 - 000069059 _____ C:\Users\SMS\Downloads\767-sberbank-0818b.xlsx
2019-02-21 12:35 - 2019-02-21 12:35 - 000060416 _____ C:\Users\SMS\Downloads\1382-oberbank-0316.xls
2019-02-21 12:34 - 2019-02-21 12:34 - 000070321 _____ C:\Users\SMS\Downloads\604-moneta-money-bank-0618.xlsx
2019-02-21 12:33 - 2019-02-21 12:33 - 000091354 _____ C:\Users\SMS\Downloads\30-komercni-banka-0119.xlsx
2019-02-21 12:33 - 2019-02-21 12:33 - 000056158 _____ C:\Users\SMS\Downloads\1054-mbank-0119.xlsx
2019-02-21 12:32 - 2019-02-21 12:32 - 000081512 _____ C:\Users\SMS\Downloads\28-hypotecni-banka-0119.xlsx
2019-02-21 12:31 - 2019-02-21 12:31 - 000088854 _____ C:\Users\SMS\Downloads\558-equa-bank-0119 (2).xlsx
2019-02-21 12:31 - 2019-02-21 12:31 - 000088854 _____ C:\Users\SMS\Downloads\558-equa-bank-0119 (1).xlsx
2019-02-21 11:07 - 2019-02-21 11:07 - 000088854 _____ C:\Users\SMS\Downloads\558-equa-bank-0119.xlsx
2019-02-21 11:06 - 2019-02-21 11:06 - 000069836 _____ C:\Users\SMS\Downloads\1106-csob-0119.xlsx
2019-02-21 11:03 - 2019-02-21 11:03 - 000092488 _____ C:\Users\SMS\Downloads\25-ceska-sporitelna-0217.xlsx
2019-02-21 10:51 - 2019-02-21 10:51 - 000044774 _____ C:\Users\SMS\Downloads\Regionální porada 4.pptx
2019-02-21 10:41 - 2019-02-21 10:42 - 008490829 _____ C:\Users\SMS\Downloads\9200404246-1 (8).pdf
2019-02-21 10:26 - 2019-02-21 10:26 - 000298280 _____ C:\Users\SMS\Downloads\Flexi - Král (1).tiff
2019-02-21 10:25 - 2019-02-21 10:25 - 000298280 _____ C:\Users\SMS\Downloads\Flexi - Král.tiff
2019-02-20 11:06 - 2019-02-20 11:06 - 010995815 _____ C:\Users\SMS\Downloads\0113297626p-1 (1).pdf
2019-02-18 20:40 - 2019-02-18 20:40 - 010086942 _____ C:\Users\SMS\Downloads\0112308341-1 (4).pdf
2019-02-18 20:34 - 2019-02-18 20:35 - 010086942 _____ C:\Users\SMS\Downloads\0112308341-1 (3).pdf
2019-02-18 20:30 - 2019-02-18 20:30 - 010995815 _____ C:\Users\SMS\Downloads\0113297626p-1.pdf
2019-02-18 20:01 - 2019-02-18 20:01 - 002132356 _____ C:\Users\SMS\Downloads\3228276414-1 (1).pdf
2019-02-18 15:04 - 2019-02-18 15:04 - 005414096 _____ C:\Users\SMS\Downloads\0112111992-1 (5).pdf
2019-02-17 21:15 - 2019-02-17 21:15 - 000190098 _____ C:\Users\SMS\Downloads\Objednavka_OBJ19028233.pdf
2019-02-17 21:05 - 2019-02-17 21:05 - 000013357 _____ C:\Users\SMS\Downloads\Investice, penze, hypotéky (2).xlsx
2019-02-17 21:04 - 2019-02-17 21:04 - 000013357 _____ C:\Users\SMS\Downloads\Investice, penze, hypotéky (1).xlsx
2019-02-17 20:51 - 2019-02-17 21:04 - 000014335 _____ C:\Users\SMS\Downloads\Investice, penze, hypotéky.xlsx
2019-02-17 19:03 - 2019-02-17 19:03 - 000002468 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visio 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002420 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002410 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000002332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2019-02-17 19:03 - 2019-02-17 19:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2019-02-15 21:32 - 2019-02-15 21:32 - 000353399 _____ C:\Users\SMS\Downloads\33786252.pdf
2019-02-15 16:29 - 2019-02-15 16:29 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka (1).xls
2019-02-14 22:24 - 2019-02-14 22:24 - 001184966 _____ C:\Users\SMS\Downloads\document (46).pdf
2019-02-14 22:23 - 2019-02-14 22:23 - 000168123 _____ C:\Users\SMS\Downloads\document (45).pdf
2019-02-14 22:22 - 2019-02-14 22:22 - 000609733 _____ C:\Users\SMS\Downloads\document (44).pdf
2019-02-14 14:15 - 2019-03-02 15:06 - 000000000 ____D C:\Users\SMS\Desktop\Insolvence
2019-02-13 10:36 - 2019-02-13 10:37 - 004804730 _____ C:\Users\SMS\Downloads\224235561-1.pdf
2019-02-13 09:29 - 2019-02-13 09:29 - 000931790 _____ C:\Users\SMS\Downloads\Jurca_KNZ_7BN_zmena_190213_092923.pdf
2019-02-13 08:15 - 2019-02-13 08:15 - 000249672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2019-02-13 02:00 - 2019-01-27 16:23 - 000396888 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2019-02-13 02:00 - 2019-01-27 15:32 - 000348760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2019-02-13 02:00 - 2019-01-26 02:02 - 025736192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-02-13 02:00 - 2019-01-26 01:50 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2019-02-13 02:00 - 2019-01-26 01:50 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2019-02-13 02:00 - 2019-01-26 01:38 - 002902528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-02-13 02:00 - 2019-01-26 01:37 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2019-02-13 02:00 - 2019-01-26 01:36 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-02-13 02:00 - 2019-01-26 01:36 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2019-02-13 02:00 - 2019-01-26 01:36 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2019-02-13 02:00 - 2019-01-26 01:35 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2019-02-13 02:00 - 2019-01-26 01:32 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-02-13 02:00 - 2019-01-26 01:29 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2019-02-13 02:00 - 2019-01-26 01:28 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2019-02-13 02:00 - 2019-01-26 01:27 - 020279808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-02-13 02:00 - 2019-01-26 01:25 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2019-02-13 02:00 - 2019-01-26 01:24 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-02-13 02:00 - 2019-01-26 01:24 - 000790016 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-02-13 02:00 - 2019-01-26 01:24 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2019-02-13 02:00 - 2019-01-26 01:24 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2019-02-13 02:00 - 2019-01-26 01:18 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2019-02-13 02:00 - 2019-01-26 01:17 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2019-02-13 02:00 - 2019-01-26 01:14 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2019-02-13 02:00 - 2019-01-26 01:07 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2019-02-13 02:00 - 2019-01-26 01:07 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2019-02-13 02:00 - 2019-01-26 01:06 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-02-13 02:00 - 2019-01-26 01:06 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2019-02-13 02:00 - 2019-01-26 01:06 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2019-02-13 02:00 - 2019-01-26 01:06 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2019-02-13 02:00 - 2019-01-26 01:05 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2019-02-13 02:00 - 2019-01-26 01:05 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2019-02-13 02:00 - 2019-01-26 01:03 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-02-13 02:00 - 2019-01-26 01:03 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2019-02-13 02:00 - 2019-01-26 01:03 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2019-02-13 02:00 - 2019-01-26 01:01 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2019-02-13 02:00 - 2019-01-26 01:00 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2019-02-13 02:00 - 2019-01-26 00:59 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2019-02-13 02:00 - 2019-01-26 00:59 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2019-02-13 02:00 - 2019-01-26 00:58 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2019-02-13 02:00 - 2019-01-26 00:57 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-02-13 02:00 - 2019-01-26 00:56 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2019-02-13 02:00 - 2019-01-26 00:56 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2019-02-13 02:00 - 2019-01-26 00:50 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2019-02-13 02:00 - 2019-01-26 00:48 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2019-02-13 02:00 - 2019-01-26 00:48 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2019-02-13 02:00 - 2019-01-26 00:48 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2019-02-13 02:00 - 2019-01-26 00:46 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-02-13 02:00 - 2019-01-26 00:46 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-02-13 02:00 - 2019-01-26 00:46 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2019-02-13 02:00 - 2019-01-26 00:44 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2019-02-13 02:00 - 2019-01-26 00:43 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2019-02-13 02:00 - 2019-01-26 00:43 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2019-02-13 02:00 - 2019-01-26 00:40 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2019-02-13 02:00 - 2019-01-26 00:40 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2019-02-13 02:00 - 2019-01-26 00:39 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2019-02-13 02:00 - 2019-01-26 00:37 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2019-02-13 02:00 - 2019-01-26 00:34 - 004858880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-13 02:00 - 2019-01-26 00:34 - 004494336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-02-13 02:00 - 2019-01-26 00:32 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2019-02-13 02:00 - 2019-01-26 00:31 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2019-02-13 02:00 - 2019-01-26 00:30 - 002060288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-02-13 02:00 - 2019-01-26 00:29 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-02-13 02:00 - 2019-01-26 00:29 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2019-02-13 02:00 - 2019-01-26 00:22 - 001556480 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-02-13 02:00 - 2019-01-26 00:12 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2019-02-13 02:00 - 2019-01-26 00:11 - 004386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-13 02:00 - 2019-01-26 00:08 - 001331200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-02-13 02:00 - 2019-01-26 00:06 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2019-02-13 02:00 - 2019-01-15 08:06 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-02-13 02:00 - 2019-01-15 08:06 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2019-02-13 02:00 - 2019-01-15 08:03 - 001472512 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2019-02-13 02:00 - 2019-01-15 08:03 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2019-02-13 02:00 - 2019-01-15 08:02 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2019-02-13 02:00 - 2019-01-15 08:02 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2019-02-13 02:00 - 2019-01-15 08:02 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2019-02-13 02:00 - 2019-01-15 08:02 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2019-02-13 02:00 - 2019-01-15 08:02 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2019-02-13 02:00 - 2019-01-15 07:52 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2019-02-13 02:00 - 2019-01-15 07:51 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2019-02-13 02:00 - 2019-01-15 07:51 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2019-02-13 02:00 - 2019-01-15 07:38 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2019-02-13 02:00 - 2019-01-15 07:33 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2019-02-13 02:00 - 2019-01-15 07:32 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2019-02-13 02:00 - 2019-01-15 07:32 - 000161280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2019-02-13 02:00 - 2019-01-15 07:32 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2019-02-13 02:00 - 2019-01-15 07:31 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2019-02-13 02:00 - 2019-01-15 07:29 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2019-02-13 02:00 - 2019-01-12 04:08 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-02-13 02:00 - 2019-01-12 04:08 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2019-02-13 02:00 - 2019-01-12 03:55 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-02-13 02:00 - 2019-01-12 03:55 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2019-02-13 02:00 - 2019-01-12 03:36 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-13 02:00 - 2019-01-12 03:36 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-13 02:00 - 2019-01-12 03:36 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-02-13 02:00 - 2019-01-09 04:10 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-02-13 02:00 - 2019-01-09 04:09 - 005552360 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-02-13 02:00 - 2019-01-09 04:09 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-02-13 02:00 - 2019-01-09 04:09 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-02-13 02:00 - 2019-01-09 04:08 - 001664352 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2019-02-13 02:00 - 2019-01-09 04:07 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 001162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 04:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:58 - 004055784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2019-02-13 02:00 - 2019-01-09 03:58 - 003960552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2019-02-13 02:00 - 2019-01-09 03:57 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:45 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2019-02-13 02:00 - 2019-01-09 03:45 - 000033408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-02-13 02:00 - 2019-01-09 03:45 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2019-02-13 02:00 - 2019-01-09 03:41 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2019-02-13 02:00 - 2019-01-09 03:41 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-02-13 02:00 - 2019-01-09 03:41 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2019-02-13 02:00 - 2019-01-09 03:38 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2019-02-13 02:00 - 2019-01-09 03:38 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2019-02-13 02:00 - 2019-01-09 03:38 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2019-02-13 02:00 - 2019-01-09 03:37 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2019-02-13 02:00 - 2019-01-09 03:35 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2019-02-13 02:00 - 2019-01-09 03:35 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-02-13 02:00 - 2019-01-09 03:35 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-02-13 02:00 - 2019-01-09 03:34 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2019-02-13 02:00 - 2019-01-09 03:34 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2019-02-13 02:00 - 2019-01-09 03:34 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2019-02-13 02:00 - 2019-01-09 03:34 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2019-02-13 02:00 - 2019-01-09 03:34 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2019-02-13 02:00 - 2019-01-09 03:34 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2019-02-13 02:00 - 2019-01-09 03:34 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2019-02-13 02:00 - 2019-01-09 03:34 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2019-02-13 02:00 - 2019-01-09 03:34 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2019-02-13 02:00 - 2019-01-09 03:33 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:33 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:33 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2019-02-13 02:00 - 2019-01-09 03:33 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2019-02-13 02:00 - 2019-01-07 18:19 - 003228160 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-02-13 02:00 - 2019-01-01 17:08 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2019-02-13 02:00 - 2019-01-01 17:05 - 003247104 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-02-13 02:00 - 2019-01-01 17:05 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2019-02-13 02:00 - 2019-01-01 17:05 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2019-02-13 02:00 - 2019-01-01 17:04 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2019-02-13 02:00 - 2019-01-01 17:04 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2019-02-13 02:00 - 2019-01-01 16:58 - 002368000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-02-13 02:00 - 2019-01-01 16:58 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2019-02-13 02:00 - 2019-01-01 16:58 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2019-02-13 02:00 - 2019-01-01 16:57 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2019-02-13 02:00 - 2019-01-01 16:39 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2019-02-13 02:00 - 2019-01-01 16:39 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2019-02-13 02:00 - 2018-12-28 20:59 - 002072576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2019-02-13 02:00 - 2018-12-28 20:59 - 000876032 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-02-13 02:00 - 2018-12-28 20:59 - 000516608 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-02-13 02:00 - 2018-12-28 20:59 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2019-02-13 02:00 - 2018-12-28 20:59 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2019-02-13 02:00 - 2018-12-28 20:48 - 001425920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2019-02-13 02:00 - 2018-12-28 20:48 - 000582144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-02-13 02:00 - 2018-12-28 20:48 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2019-02-13 02:00 - 2018-12-28 20:32 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2019-02-13 02:00 - 2018-12-04 17:07 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2019-02-13 02:00 - 2018-12-04 17:07 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2019-02-13 02:00 - 2018-12-04 16:55 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2019-02-13 02:00 - 2018-12-04 16:55 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2019-02-13 02:00 - 2018-12-02 17:06 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000998480 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000918408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000066000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000063936 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000021968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000020944 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000019408 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000017872 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000017856 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000017360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000017352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000016336 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000015824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000015808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000015296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000014312 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000014272 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000013768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000013760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000013760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000013264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012736 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012240 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012240 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012232 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000012024 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011728 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011512 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2019-02-13 02:00 - 2018-10-12 14:05 - 000011200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2019-02-12 23:32 - 2019-02-13 03:31 - 2634164204 _____ C:\Users\SMS\Downloads\Nepotvrzeno 267308.crdownload
2019-02-12 19:37 - 2019-02-12 20:56 - 000000000 ____D C:\Users\SMS\Desktop\zaloha dokumenty
2019-02-12 19:22 - 2019-02-12 19:37 - 000000000 ___RD C:\Users\SMS\Desktop\záloha
2019-02-12 19:19 - 2019-02-12 19:19 - 000037176 _____ C:\Users\SMS\Desktop\záložky + hesla.txt
2019-02-12 19:18 - 2019-02-12 19:18 - 000017436 _____ C:\Users\SMS\Desktop\záložky_12.02.19.html
2019-02-12 19:13 - 2019-02-12 19:13 - 000000301 _____ C:\Users\SMS\Desktop\hesla.csv
2019-02-12 19:06 - 2019-02-12 19:06 - 000037176 _____ C:\Users\SMS\Desktop\hesla sms.txt
2019-02-12 19:04 - 2019-02-18 09:56 - 000000000 ____D C:\Program Files (x86)\NirSoft
2019-02-12 19:04 - 2019-02-12 19:04 - 000296384 _____ C:\Users\SMS\Downloads\webbrowserpassview_setup.exe
2019-02-12 18:50 - 2019-02-12 20:52 - 000000000 ____D C:\Users\SMS\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2019-02-12 18:50 - 2019-02-12 18:50 - 000002506 _____ C:\Users\SMS\Desktop\Windows 7 USB DVD Download Tool.lnk
2019-02-12 18:50 - 2019-02-12 18:50 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2019-02-12 18:49 - 2019-02-12 18:49 - 002721168 _____ (Microsoft Corporation) C:\Users\SMS\Downloads\Windows7-USB-DVD-Download-Tool-Installer-en-GB.exe
2019-02-12 18:45 - 2019-02-12 20:04 - 2323175424 _____ C:\Users\SMS\Downloads\Windows_7_SP2_x32_x64_cervenec_2017_USB3_cz_sk.iso
2019-02-12 13:13 - 2019-02-12 13:13 - 000042756 _____ C:\Users\SMS\Downloads\HCP 500509932 3318039 137 20190108190057611.tif
2019-02-12 11:40 - 2019-02-12 11:40 - 005077153 _____ C:\Users\SMS\Downloads\0112962485-1 (2).pdf
2019-02-12 11:36 - 2019-02-12 12:03 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl Perutka.xls
2019-02-12 10:54 - 2019-02-12 10:54 - 000546816 _____ C:\Users\SMS\Downloads\INFOLIST_ prumysl PPZ 2014.xls
2019-02-12 08:54 - 2019-02-12 08:54 - 003667479 _____ C:\Users\SMS\Downloads\1422532986-1.pdf
2019-02-11 19:03 - 2019-02-11 19:03 - 000197143 _____ C:\Users\SMS\Downloads\Smlouva o převodu majetku.pdf
2019-02-11 18:53 - 2019-02-11 18:53 - 000560546 _____ C:\Users\SMS\Downloads\32_8_2016 (2).pdf
2019-02-11 17:16 - 2019-02-11 17:16 - 000560546 _____ C:\Users\SMS\Downloads\32_8_2016 (1).pdf
2019-02-11 17:14 - 2019-02-11 17:14 - 000560546 _____ C:\Users\SMS\Downloads\32_8_2016.pdf
2019-02-10 16:15 - 2019-02-10 16:14 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-02-10 13:20 - 2019-03-02 10:49 - 000002234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-02-10 13:20 - 2019-03-02 10:49 - 000002193 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-10 13:07 - 2019-02-10 13:07 - 000000270 __RSH C:\Users\SMS\ntuser.pol
2019-02-10 12:29 - 2019-02-10 12:29 - 000000000 _____ C:\Windows\system32\last.dump
2019-02-10 12:15 - 2019-02-10 12:15 - 000000000 ____D C:\ProgramData\hem
2019-02-10 12:11 - 2019-02-10 12:11 - 000000000 ____D C:\Users\SMS\AppData\Local\Iceni
2019-02-10 12:11 - 2019-02-10 12:11 - 000000000 ____D C:\ProgramData\Temp
2019-02-10 12:11 - 2018-01-03 12:42 - 000580744 _____ (ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
2019-02-10 12:11 - 2016-04-12 13:13 - 000129672 _____ (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
2019-02-10 12:11 - 2015-07-16 13:35 - 000929792 _____ (ActMask hxxp://www.all2pdf.com) C:\Windows\SysWOW64\SaveTo.dll
2019-02-10 12:11 - 2013-12-07 21:25 - 004454128 _____ (DynaForms GmbH) C:\Windows\SysWOW64\CPDF4.dll
2019-02-10 12:11 - 2008-01-19 07:36 - 001391616 _____ C:\Windows\SysWOW64\ActPDF.dll
2019-02-10 12:10 - 2019-02-10 13:14 - 000000000 ____D C:\ProgramData\Aspell
2019-02-10 12:10 - 2019-02-10 13:07 - 000000000 ____D C:\Users\SMS\AppData\Roaming\ykdabhokcbl
2019-02-10 12:10 - 2019-02-10 13:07 - 000000000 ____D C:\Users\SMS\AppData\Roaming\coux15do1rh
2019-02-10 12:10 - 2019-02-10 13:07 - 000000000 ____D C:\Program Files\ZFWHTHWAA7
2019-02-10 12:10 - 2019-02-10 12:10 - 000000000 ____D C:\Users\SMS\AppData\Local\Aspell
2019-02-10 12:10 - 2019-02-10 12:10 - 000000000 ____D C:\ProgramData\Iceni
2019-02-10 12:10 - 2019-02-10 12:10 - 000000000 ____D C:\Program Files (x86)\Iceni
2019-02-10 12:10 - 2018-08-28 06:54 - 004583424 _____ (Microsoft Corporation) C:\Windows\system32\wordpad.exe
2019-02-10 12:10 - 2017-03-25 10:01 - 000411272 _____ (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\SysWOW64\SetPrinter.exe
2019-02-10 12:10 - 2017-03-25 10:01 - 000411272 _____ (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\system32\SetPrinter.exe
2019-02-10 12:10 - 2013-11-03 19:18 - 001181152 _____ (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\system32\PrtClient.exe
2019-02-10 12:10 - 2013-11-03 19:00 - 000532448 _____ (ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrtPass.exe
2019-02-10 12:10 - 2001-09-06 03:00 - 001700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2019-02-10 12:09 - 2019-02-10 13:07 - 000000000 ____D C:\Program Files\R3JH82YBTA
2019-02-10 12:07 - 2019-02-10 12:07 - 000000000 ____D C:\Users\SMS\AppData\Local\Master PDF Editor
2019-02-10 12:06 - 2019-02-17 20:26 - 000000000 ____D C:\ProgramData\{FAD146B3-B47E-0EDE-06A9-5D82064E04D3}
2019-02-10 12:06 - 2019-02-17 20:26 - 000000000 ____D C:\ProgramData\{5FDFECA3-1E6E-ABD0-1603-532716E40A76}
2019-02-10 12:06 - 2019-02-17 20:26 - 000000000 ____D C:\ProgramData\{378ECDF6-3F3B-C381-4322-024F43C55B1E}
2019-02-10 12:05 - 2019-02-10 13:08 - 000000000 ____D C:\Program Files (x86)\Multitimer
2019-02-10 12:05 - 2019-02-10 13:07 - 000000000 ____D C:\Users\SMS\AppData\Roaming\iivdb4eukmu
2019-02-10 12:05 - 2019-02-10 13:07 - 000000000 ____D C:\Users\SMS\AppData\Roaming\a30rhkwmpdp
2019-02-10 12:05 - 2019-02-10 13:07 - 000000000 ____D C:\Program Files\OWGTQQYDYZ
2019-02-10 12:05 - 2019-02-10 12:32 - 000000000 ____D C:\Users\SMS\AppData\Roaming\CRMSvc
2019-02-10 12:05 - 2019-02-10 12:05 - 000621928 _____ (VxDriver) C:\Windows\A7CF6C34A616.sys
2019-02-10 12:05 - 2019-02-10 12:05 - 000000000 ____D C:\Users\SMS\AppData\LocalMaster PDF Editor
2019-02-10 12:05 - 2019-02-10 12:05 - 000000000 ____D C:\Users\SMS\AppData\Local\{01801827-6513-4a10-9443-a405dbafb4d3}
2019-02-10 12:05 - 2018-05-14 22:34 - 000026112 _____ (Copyright (c) Code Industry Ltd ) C:\Windows\system32\mpelocalmon.dll
2019-02-10 12:05 - 2018-05-14 22:34 - 000016896 _____ (Copyright (c) Code Industry Ltd ) C:\Windows\system32\mpelocalui.dll
2019-02-10 12:04 - 2019-02-10 13:07 - 000000000 ____D C:\Program Files (x86)\Cta
2019-02-10 12:03 - 2019-02-10 12:03 - 001895384 _____ C:\Users\SMS\AppData\Local\U-lex.bin
2019-02-10 12:03 - 2019-02-10 12:03 - 000015606 _____ C:\Windows\SysWOW64\findit.xml
2019-02-10 12:03 - 2019-02-10 12:03 - 000003168 __RSH C:\ProgramData\ntuser.pol
2019-02-10 12:03 - 2019-02-10 12:03 - 000000000 ____D C:\ProgramData\Quoteexs
2019-02-10 12:03 - 2019-02-10 12:03 - 000000000 ____D C:\ProgramData\Logic Cramble
2019-02-10 12:02 - 2019-03-04 12:05 - 000000374 _____ C:\Windows\Tasks\Updater_Online_Application.job
2019-02-10 12:02 - 2019-02-24 11:50 - 000003318 _____ C:\Windows\System32\Tasks\Updater_Online_Application
2019-02-10 12:02 - 2019-02-10 12:33 - 000000000 ____D C:\ProgramData\Quoteex
2019-02-10 12:02 - 2019-02-10 12:04 - 000722944 _____ C:\Users\SMS\AppData\Local\sham.db
2019-02-10 12:02 - 2019-02-10 12:02 - 007881728 _____ C:\Users\SMS\AppData\Local\agent.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 002038046 _____ C:\Users\SMS\AppData\Local\VoltRon.tst
2019-02-10 12:02 - 2019-02-10 12:02 - 001632256 _____ (TODO: <Company name>) C:\Users\SMS\AppData\Local\VoltRon.exe
2019-02-10 12:02 - 2019-02-10 12:02 - 001632256 _____ (TODO: <Company name>) C:\Users\SMS\AppData\Local\DonOzeplus.exe
2019-02-10 12:02 - 2019-02-10 12:02 - 000278510 _____ C:\Users\SMS\AppData\Local\DonOzeplus.tst
2019-02-10 12:02 - 2019-02-10 12:02 - 000140800 _____ C:\Users\SMS\AppData\Local\installer.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 000126464 _____ C:\Users\SMS\AppData\Local\noah.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 000070896 _____ C:\Users\SMS\AppData\Local\Config.xml
2019-02-10 12:02 - 2019-02-10 12:02 - 000018432 _____ C:\Users\SMS\AppData\Local\Main.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 000016416 _____ C:\Users\SMS\AppData\Local\InstallationConfiguration.xml
2019-02-10 12:02 - 2019-02-10 12:02 - 000005568 _____ C:\Users\SMS\AppData\Local\md.xml
2019-02-10 12:02 - 2019-02-10 12:02 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Microleaves
2019-02-10 12:02 - 2019-02-10 12:02 - 000000000 ____D C:\Users\SMS\AppData\Local\AdvinstAnalytics
2019-02-10 12:02 - 2019-02-10 12:02 - 000000000 ____D C:\Program Files (x86)\Microleaves
2019-02-10 11:59 - 2019-02-10 11:59 - 000012741 _____ C:\Users\SMS\Downloads\master pdf editor 5 1 60 incl patch zip (1).torrent
2019-02-10 11:57 - 2019-02-10 12:01 - 095313460 _____ C:\Users\SMS\Downloads\InfixPro PDF Editor v7.3.1 incl Patch.zip
2019-02-10 11:56 - 2019-02-10 11:56 - 000009749 _____ C:\Users\SMS\Downloads\infixpro pdf editor v7 3 1 incl patch zip.torrent
2019-02-10 11:55 - 2019-02-10 11:58 - 033450602 _____ C:\Users\SMS\Downloads\Master PDF Editor 5.1.60 incl Patch.zip
2019-02-10 11:55 - 2019-02-10 11:55 - 000006318 _____ C:\Users\SMS\Downloads\PDF.Editor.Pro.v..1.6.0.pre[K]racked.torrent
2019-02-10 11:53 - 2019-02-10 12:10 - 000000000 ____D C:\Users\SMS\AppData\Roaming\uTorrent
2019-02-10 11:53 - 2019-02-10 11:53 - 001119512 _____ (emc) C:\Users\SMS\Downloads\uTorrent221.exe
2019-02-10 11:53 - 2019-02-10 11:53 - 000012741 _____ C:\Users\SMS\Downloads\master pdf editor 5 1 60 incl patch zip.torrent
2019-02-10 11:53 - 2019-02-10 11:53 - 000000942 _____ C:\Users\SMS\Desktop\µTorrent.lnk
2019-02-10 11:53 - 2019-02-10 11:53 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2019-02-09 20:42 - 2019-02-09 20:47 - 1507252160 _____ C:\Users\SMS\Downloads\Po cem muzi touzi (2018)_cz film.avi
2019-02-09 14:36 - 2019-02-09 14:36 - 036840380 _____ C:\Users\SMS\Downloads\Master.PDF.Editor.v3.5.Multilingual_bitarchive.net.rar
2019-02-09 14:13 - 2019-02-09 14:13 - 000000000 ____D C:\Users\SMS\AppData\Roaming\ABBYY
2019-02-09 14:09 - 2019-02-09 14:11 - 000000000 ____D C:\ProgramData\ABBYY
2019-02-09 14:09 - 2019-02-09 14:09 - 000000000 ____D C:\Users\SMS\AppData\Local\ABBYY
2019-02-09 13:53 - 2019-02-09 13:58 - 572990040 _____ C:\Users\SMS\Downloads\ABBYY_FineReader_14_Corporate_Trial.exe
2019-02-09 13:47 - 2019-02-09 13:47 - 005516288 _____ C:\Users\SMS\Downloads\Nepotvrzeno 723590.crdownload
2019-02-09 13:43 - 2019-02-09 13:43 - 005516288 _____ C:\Users\SMS\Downloads\PDF Editor 5.5.exe
2019-02-09 13:43 - 2019-02-09 13:43 - 000000000 ____D C:\Windows\XSxS
2019-02-09 13:43 - 2019-02-09 13:43 - 000000000 ____D C:\Windows\SysWOW64\spool
2019-02-09 13:43 - 2019-02-09 13:43 - 000000000 ____D C:\Users\SMS\AppData\Local\Xenocode
2019-02-09 13:43 - 2019-02-09 13:43 - 000000000 ____D C:\Program Files (x86)\Xenocode
2019-02-09 13:42 - 2019-02-09 13:42 - 023357432 _____ C:\Users\SMS\Downloads\eXpert-PDF-Editor-Pro-6.30.460-Portable-Software.rar
2019-02-09 13:36 - 2019-02-09 13:36 - 028503821 _____ C:\Users\SMS\Downloads\Master-PDF-Editor-1.9.25-CZ-+-SK-(x32x64)-portable.rar
2019-02-09 13:36 - 2014-04-18 17:24 - 000000000 ____D C:\Users\SMS\Desktop\Master PDF Editor 1.9.25 CZ + SK (x32x64) portable
2019-02-09 13:32 - 2019-02-09 13:34 - 056541754 _____ C:\Users\SMS\Downloads\Foxit_Advanced_PDF_Editor_3.0.5_Portable.zip
2019-02-09 13:32 - 2019-02-09 13:32 - 042480929 _____ C:\Users\SMS\Downloads\Nepotvrzeno 915104.crdownload
2019-02-09 13:29 - 2019-02-09 13:29 - 020666896 _____ (Apowersoft LIMITED ) C:\Users\SMS\Downloads\apowerpdf-light.exe
2019-02-09 13:22 - 2019-02-09 13:22 - 000061701 _____ C:\Users\SMS\Downloads\document (43).pdf
2019-02-09 12:29 - 2019-02-09 12:29 - 000176725 _____ C:\Users\SMS\Downloads\document (42).pdf
2019-02-09 11:58 - 2019-02-09 11:58 - 000931790 _____ C:\Users\SMS\Downloads\Jurca_KNZ_7BN_zmena_190209_115852.pdf
2019-02-09 11:53 - 2019-02-09 11:53 - 000009216 _____ C:\Users\SMS\Downloads\Seznam objedn.xls
2019-02-08 17:32 - 2019-02-08 17:32 - 000000000 ____D C:\Users\SMS\Documents\Vlastní šablony Office
2019-02-08 17:31 - 2019-02-08 17:31 - 000111153 _____ C:\Users\SMS\Downloads\2-allianz (3).xlsx
2019-02-08 15:29 - 2019-02-08 15:29 - 000990854 _____ C:\Users\SMS\Downloads\z3089_01_2019_web-20181231-174810.pdf
2019-02-08 15:26 - 2019-02-08 15:26 - 001667880 _____ C:\Users\SMS\Downloads\zc008_02_2019_web.pdf
2019-02-08 13:03 - 2019-02-08 13:03 - 000076729 _____ C:\Users\SMS\Downloads\7-cpp (2).xlsx
2019-02-08 12:59 - 2019-02-08 12:59 - 000125359 _____ C:\Users\SMS\Downloads\11-fexi.xlsx
2019-02-08 12:54 - 2019-02-08 12:54 - 000113525 _____ C:\Users\SMS\Downloads\10-kooperativa.xlsx
2019-02-08 12:54 - 2019-02-08 12:54 - 000111153 _____ C:\Users\SMS\Downloads\2-allianz (2).xlsx
2019-02-08 12:51 - 2019-02-08 12:51 - 000101739 _____ C:\Users\SMS\Downloads\8-generali (1).xlsx
2019-02-08 12:44 - 2019-02-08 12:44 - 000090482 _____ C:\Users\SMS\Downloads\9-nn-pojistovna.xlsx
2019-02-08 12:43 - 2019-02-08 12:43 - 000076729 _____ C:\Users\SMS\Downloads\7-cpp (1).xlsx
2019-02-08 12:42 - 2019-02-08 12:42 - 000111153 _____ C:\Users\SMS\Downloads\2-allianz (1).xlsx
2019-02-08 12:24 - 2019-02-08 12:24 - 000101739 _____ C:\Users\SMS\Downloads\8-generali.xlsx
2019-02-08 12:05 - 2019-02-08 12:05 - 000076729 _____ C:\Users\SMS\Downloads\7-cpp.xlsx
2019-02-08 12:02 - 2019-02-08 12:02 - 000111153 _____ C:\Users\SMS\Downloads\2-allianz.xlsx
2019-02-08 09:35 - 2019-02-08 09:35 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2019-02-08 09:29 - 2019-02-17 19:03 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2019-02-08 09:29 - 2019-02-17 19:03 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive pro firmy.lnk
2019-02-07 10:32 - 2019-02-07 10:32 - 000010771 _____ C:\Users\SMS\Downloads\Jirka T-Mobile 11.xlsx
2019-02-07 10:17 - 2019-02-07 10:17 - 001597824 _____ C:\Users\SMS\Downloads\0015334353-1.pdf
2019-02-06 22:05 - 2019-02-18 10:01 - 000000000 ___RD C:\Users\SMS\OneDrive
2019-02-06 22:05 - 2019-02-06 22:05 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-02-06 21:55 - 2019-03-01 08:26 - 000000981 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 14.lnk
2019-02-06 21:55 - 2019-03-01 08:26 - 000000969 _____ C:\Users\Public\Desktop\TeamViewer 14.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002468 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visio.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002420 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002410 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2019-02-06 21:41 - 2019-02-06 21:41 - 000002332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2019-02-06 21:38 - 2019-02-17 19:07 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-06 21:33 - 2019-02-17 19:03 - 000000000 ____D C:\Program Files\Microsoft Office
2019-02-06 21:33 - 2019-02-06 21:33 - 000000000 ____D C:\Program Files\Microsoft Office 15
2019-02-06 14:51 - 2019-02-06 14:51 - 000000000 ____D C:\Users\SMS\AppData\Local\Disc_Soft_Ltd
2019-02-06 14:48 - 2019-02-06 14:48 - 004368168 _____ C:\Users\SMS\Downloads\9604804537-1.pdf
2019-02-06 14:44 - 2019-02-10 13:19 - 000000000 ____D C:\Users\SMS\AppData\Local\CrashDumps
2019-02-06 14:36 - 2019-02-06 14:51 - 000000000 ____D C:\Users\SMS\AppData\Roaming\DAEMON Tools Lite
2019-02-06 14:36 - 2019-02-06 14:36 - 000000000 ____D C:\Users\Public\Documents\Catch!
2019-02-06 14:35 - 2019-02-24 11:50 - 000003236 _____ C:\Windows\System32\Tasks\SidebarExecute
2019-02-06 14:34 - 2019-02-06 14:34 - 000059360 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2019-02-06 14:34 - 2019-02-06 14:34 - 000000000 ____D C:\ProgramData\NortonInstaller
2019-02-06 14:31 - 2019-03-01 14:33 - 000001751 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2019-02-06 14:31 - 2019-02-06 14:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\DAEMON Tools Lite
2019-02-06 14:31 - 2019-02-06 14:31 - 000042256 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2019-02-06 14:30 - 2019-02-06 14:35 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2019-02-06 14:30 - 2019-02-06 14:31 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite
2019-02-06 14:28 - 2019-02-06 14:28 - 000791712 _____ (Disc Soft Ltd.) C:\Users\SMS\Downloads\DTLiteInstaller.exe
2019-02-06 14:18 - 2019-02-06 14:18 - 000000000 ____D C:\Users\Office_2016_x86_x64_CS_16.0.7571.2109\Obr.návod
2019-02-06 14:18 - 2019-02-06 14:18 - 000000000 ____D C:\Users\Office_2016_x86_x64_CS_16.0.7571.2109
2019-02-06 14:18 - 2018-11-18 16:15 - 2954364928 ____R C:\Users\Office_2016_x86_x64_CS_16.0.7571.2109\Office_2016_x86_x64_CS_16.0.7571.2109.iso
2019-02-06 14:18 - 2018-11-18 15:59 - 001104050 ____R C:\Users\Office_2016_x86_x64_CS_16.0.7571.2109\Obr.návod.rar
2019-02-06 14:00 - 2019-02-06 14:00 - 000000000 ____D C:\Soubory aplikace Outlook
2019-02-05 17:26 - 2019-02-05 17:26 - 010035416 _____ C:\Users\SMS\Downloads\9200403192-1 (1).pdf
2019-02-04 21:10 - 2019-02-04 21:11 - 800718848 _____ C:\Users\SMS\Downloads\Texaský Masakr Motorovou Pilou (2003) CZ Dabing.avi
2019-02-04 21:07 - 2019-02-04 21:07 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Mobon
2019-02-04 21:07 - 2019-02-04 21:07 - 000000000 _____ C:\end
2019-02-04 21:06 - 2019-02-04 21:11 - 000000000 ____D C:\Program Files (x86)\GRETECH
2019-02-04 21:05 - 2019-02-04 21:05 - 025127264 _____ (GOM & Company) C:\Users\SMS\Downloads\GOMPLAYERGLOBALSETUP_NEW.EXE
2019-02-04 20:57 - 2019-02-04 21:01 - 1834610902 _____ C:\Users\SMS\Downloads\Texaský.masakr.motorovou.pilou.The.Texas.Chainsaw.Massacre.CZ.ENG.2003.1080p.BrRip.x264.YIFY.(CZmicroHD).mkv
2019-02-04 11:54 - 2019-02-04 11:54 - 000000000 ____D C:\Users\SMS\Desktop\OBJ Faberlic
2019-02-04 11:37 - 2019-02-04 11:37 - 008490829 _____ C:\Users\SMS\Downloads\9200404246-1 (7).pdf
2019-02-04 11:35 - 2019-02-04 11:35 - 010655495 _____ C:\Users\SMS\Downloads\9200404951-1 (5).pdf
2019-02-04 11:34 - 2019-02-04 11:34 - 008982687 _____ C:\Users\SMS\Downloads\0112147889-1 (5).pdf

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-04 14:14 - 2018-09-17 11:06 - 000000000 ___HD C:\ProgramData\ConsoleLogs
2019-03-04 13:13 - 2018-12-06 20:27 - 000000000 ____D C:\Windows\system32\appmgmt
2019-03-04 08:28 - 2009-07-14 05:45 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-03-04 08:28 - 2009-07-14 05:45 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-03-04 08:13 - 2018-04-17 14:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2019-03-04 08:13 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-03-03 22:45 - 2016-08-17 16:58 - 001544696 _____ C:\Windows\system32\PerfStringBackup.INI
2019-03-03 22:45 - 2011-04-12 09:34 - 000656252 _____ C:\Windows\system32\perfh005.dat
2019-03-03 22:45 - 2011-04-12 09:34 - 000135354 _____ C:\Windows\system32\perfc005.dat
2019-03-03 22:45 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2019-03-03 18:41 - 2017-12-23 16:15 - 000000000 ____D C:\GALAXY
2019-03-02 15:21 - 2018-04-16 08:27 - 000000000 ____D C:\Users\SMS\Desktop\Jirka Matějičný
2019-03-02 15:13 - 2018-04-16 08:05 - 000000000 ____D C:\Users\SMS\Desktop\Formuláře, žádosti, hlášenky
2019-03-02 15:10 - 2018-08-27 23:38 - 000000000 ____D C:\Users\SMS\Desktop\Dokumenty Generali
2019-03-02 10:38 - 2017-12-23 15:18 - 000000000 ____D C:\Program Files\WinRAR
2019-03-01 16:16 - 2017-12-23 15:18 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-01 16:16 - 2017-12-23 15:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-02-28 20:35 - 2018-10-23 09:41 - 000000000 ____D C:\Users\SMS\Desktop\Pokyny k platbám
2019-02-28 17:34 - 2018-12-18 18:31 - 000000000 ____D C:\Users\SMS\AppData\Local\Ahead
2019-02-24 11:50 - 2019-01-28 16:47 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-02-24 11:50 - 2019-01-28 16:47 - 000002800 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-02-24 11:50 - 2018-03-29 12:00 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-02-24 11:50 - 2017-12-23 15:22 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2019-02-24 11:50 - 2017-12-23 15:18 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-02-24 11:50 - 2017-12-23 15:18 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-02-24 11:50 - 2017-12-23 15:11 - 000003210 _____ C:\Windows\System32\Tasks\klcp_update
2019-02-23 22:48 - 2018-12-06 20:30 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-20 13:43 - 2018-10-15 19:39 - 000000000 ____D C:\Users\SMS\Desktop\ČPP DOKUMENTY
2019-02-20 13:06 - 2018-04-06 09:45 - 000000000 ____D C:\Users\SMS\Documents\Soubory aplikace Outlook
2019-02-18 09:56 - 2017-12-23 15:02 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Opera Software
2019-02-18 09:56 - 2017-12-23 15:02 - 000000000 ____D C:\Users\SMS\AppData\Local\Opera Software
2019-02-18 09:56 - 2017-12-23 15:01 - 000000000 ____D C:\Program Files\Opera
2019-02-17 19:06 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2019-02-15 15:31 - 2019-01-28 19:22 - 000474456 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2019-02-13 20:16 - 2019-01-28 19:22 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2019-02-13 04:24 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2019-02-13 03:35 - 2009-07-14 05:45 - 000442472 _____ C:\Windows\system32\FNTCACHE.DAT
2019-02-13 03:12 - 2016-08-17 16:58 - 001511830 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2019-02-13 03:06 - 2017-03-30 08:27 - 000000000 ____D C:\Windows\system32\MRT
2019-02-13 03:01 - 2017-03-30 08:27 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-02-10 16:14 - 2019-01-28 19:22 - 000379952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2019-02-10 16:14 - 2019-01-28 19:22 - 000216784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2019-02-10 16:14 - 2019-01-28 19:22 - 000205400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2019-02-10 16:14 - 2019-01-28 19:22 - 000167304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2019-02-10 16:14 - 2019-01-28 19:22 - 000087944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 001034432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000320696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000225680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000196072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000112312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000057960 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2019-02-10 16:14 - 2019-01-28 19:21 - 000037104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2019-02-10 14:02 - 2017-12-23 16:06 - 000111560 _____ C:\Users\SMS\AppData\Local\GDIPFONTCACHEV1.DAT
2019-02-10 13:20 - 2017-12-23 15:14 - 000000000 ____D C:\Program Files (x86)\Google
2019-02-10 13:07 - 2017-12-23 14:59 - 000000000 ____D C:\Users\SMS
2019-02-10 12:04 - 2017-12-23 14:59 - 000001417 _____ C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2019-02-10 12:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\GroupPolicy
2019-02-10 11:46 - 2017-12-30 10:46 - 000000000 ____D C:\Users\SMS\AppData\Local\ElevatedDiagnostics
2019-02-09 14:13 - 2018-01-04 14:59 - 000000000 ____D C:\Users\SMS\AppData\Local\Adobe
2019-02-09 14:06 - 2018-01-04 16:02 - 000000000 ____D C:\Temp
2019-02-06 22:17 - 2018-04-17 14:32 - 000000000 ____D C:\Users\SMS\AppData\Roaming\TeamViewer
2019-02-06 14:27 - 2018-12-18 18:30 - 000000000 ____D C:\Users\SMS\AppData\Roaming\Ahead
2019-02-06 14:04 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-02-06 14:03 - 2009-07-14 03:34 - 000000387 _____ C:\Windows\win.ini
2019-02-06 13:59 - 2017-12-23 16:19 - 000000000 ____D C:\Users\SMS\AppData\Local\Deployment
2019-02-05 08:42 - 2017-12-23 15:20 - 000000000 ____D C:\Program Files\CCleaner
2019-02-04 21:05 - 2017-12-23 15:21 - 000000000 ____D C:\Users\SMS\AppData\Roaming\vlc

==================== Files in the root of some directories =======

2019-02-10 12:02 - 2019-02-10 12:02 - 007881728 _____ () C:\Users\SMS\AppData\Local\agent.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 000070896 _____ () C:\Users\SMS\AppData\Local\Config.xml
2019-02-10 12:02 - 2019-02-10 12:02 - 001632256 _____ (TODO: <Company name>) C:\Users\SMS\AppData\Local\DonOzeplus.exe
2019-02-10 12:02 - 2019-02-10 12:02 - 000278510 _____ () C:\Users\SMS\AppData\Local\DonOzeplus.tst
2019-02-10 12:02 - 2019-02-10 12:02 - 000016416 _____ () C:\Users\SMS\AppData\Local\InstallationConfiguration.xml
2019-02-10 12:02 - 2019-02-10 12:02 - 000140800 _____ () C:\Users\SMS\AppData\Local\installer.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 000018432 _____ () C:\Users\SMS\AppData\Local\Main.dat
2019-02-10 12:02 - 2019-02-10 12:02 - 000005568 _____ () C:\Users\SMS\AppData\Local\md.xml
2019-02-10 12:02 - 2019-02-10 12:02 - 000126464 _____ () C:\Users\SMS\AppData\Local\noah.dat
2018-10-11 09:03 - 2018-10-11 09:03 - 000007605 _____ () C:\Users\SMS\AppData\Local\Resmon.ResmonCfg
2019-02-10 12:02 - 2019-02-10 12:04 - 000722944 _____ () C:\Users\SMS\AppData\Local\sham.db
2019-02-10 12:03 - 2019-02-10 12:03 - 001895384 _____ () C:\Users\SMS\AppData\Local\U-lex.bin
2019-02-10 12:03 - 2019-02-10 12:03 - 000032038 _____ () C:\Users\SMS\AppData\Local\uninstall_temp.ico
2019-02-10 12:02 - 2019-02-10 12:02 - 001632256 _____ (TODO: <Company name>) C:\Users\SMS\AppData\Local\VoltRon.exe
2019-02-10 12:02 - 2019-02-10 12:02 - 002038046 _____ () C:\Users\SMS\AppData\Local\VoltRon.tst

Some files in TEMP:
====================
2019-02-10 13:13 - 2019-02-10 12:12 - 000389788 _____ () C:\Users\SMS\AppData\Local\Temp\InfixPro PDF Editor v7.3.1 Patch Uninstaller.exe
2019-02-10 13:08 - 2019-02-10 12:06 - 000389786 _____ () C:\Users\SMS\AppData\Local\Temp\Master PDF Editor 5.1.60 Patch Uninstaller.exe
2019-02-10 12:05 - 2019-02-10 12:05 - 000375522 _____ ( ) C:\Users\SMS\AppData\Local\Temp\pidaeu2sel4.exe
2019-02-10 12:05 - 2019-02-10 12:05 - 000375522 _____ ( ) C:\Users\SMS\AppData\Local\Temp\so3ziz11ol0.exe
2019-02-10 13:14 - 2019-02-10 12:06 - 000099903 _____ () C:\Users\SMS\AppData\Local\Temp\Uninstall.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-03-04 09:07

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03.03.2019 01
Ran by SMS (04-03-2019 14:15:31)
Running from C:\Users\SMS\Desktop
Windows 7 Professional Service Pack 1 (X64) (2017-12-23 13:59:06)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3520966483-694721993-3208304506-500 - Administrator - Disabled)
Guest (S-1-5-21-3520966483-694721993-3208304506-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3520966483-694721993-3208304506-1005 - Limited - Enabled)
SMS (S-1-5-21-3520966483-694721993-3208304506-1001 - Administrator - Enabled) => C:\Users\SMS

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1.25534 - emc, uTorrent.CZ)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.2.2364 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.52 - Piriform)
ČSOBP Kalkulátory 1.27.0.x (HKLM-x32\...\Kalkulátory_is1) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.10.0.0770 - Disc Soft Ltd)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1206.101.112 - ALPS ELECTRIC CO., LTD.)
eModel - MetLife (HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\eModel) (Version: 3.0.0.1 - MetLife)
FLEXI SmartClient (HKU\S-1-5-21-3520966483-694721993-3208304506-1001\...\2f9c2a270a3e3b3e) (Version: 2.3.29.16496 - Kooperativa)
GALAXY (HKLM-x32\...\{438E0248-8463-4464-B42A-1F204457079D}) (Version: 2.17.1031 - SMS)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.121 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
HP LaserJet Professional M1130-M1210 MFP Series (HKLM\...\HP LaserJet Professional M1130-M1210 MFP Series) (Version: - )
hppLaserJetService (HKLM-x32\...\{D371F551-0DB9-4CEC-844B-4C90CE91EA0B}) (Version: 001.003.000145 - Hewlett-Packard) Hidden
hppM1130M1210SeriesLaserJetService (HKLM-x32\...\{0E448256-D515-4C3E-A5BE-0A7B76CED5D4}) (Version: 001.003.00073 - Hewlett-Packard) Hidden
hppusgM1130M1210Series (HKLM-x32\...\{DA6CC3A5-1F5B-4068-8BFF-C597BB6B8158}) (Version: 1.0.0.2 - Hewlett-Packard) Hidden
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
K-Lite Mega Codec Pack 13.7.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.7.5 - KLCP)
MarketResearch (HKLM-x32\...\{175F0111-2968-4935-8F70-33108C6A4DE3}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.7.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProplusRetail - cs-cz) (Version: 16.0.11231.20174 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft Project Professional 2016 - cs-cz (HKLM\...\ProjectProRetail - cs-cz) (Version: 16.0.11231.20174 - Microsoft Corporation)
Microsoft Visio Professional 2016 - cs-cz (HKLM\...\VisioProRetail - cs-cz) (Version: 16.0.11231.20174 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11231.20174 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11231.20174 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11231.20174 - Microsoft Corporation) Hidden
Online Application (HKLM-x32\...\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}) (Version: 2.7.0 - Microleaves) Hidden <==== ATTENTION
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Samsung M288x Series (HKLM-x32\...\Samsung M288x Series) (Version: 1.13 (16.12.2014) - Samsung Electronics Co., Ltd.)
Samsung Printer Diagnostics (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.1.6.02 - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP)
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.1.18533 - TeamViewer)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.10 - Ghisler Software GmbH)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{F92064F6-BDE8-46FC-A19F-4E12D311BE3A}) (Version: 1.0.30 - Microsoft Corporation)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3520966483-694721993-3208304506-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\SMS\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileCoAuthLib64.dll => No File
CustomCLSID: HKU\S-1-5-21-3520966483-694721993-3208304506-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\SMS\AppData\Local\Microsoft\OneDrive\19.002.0107.0008\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3520966483-694721993-3208304506-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\SMS\AppData\Local\Microsoft\OneDrive\19.002.0107.0008\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3520966483-694721993-3208304506-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\SMS\AppData\Local\Microsoft\OneDrive\19.002.0107.0008\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3520966483-694721993-3208304506-1001_Classes\CLSID\{D748EE95-210E-17BB-3092-71EF534E6D07}\InprocServer32 -> C:\Program Files (x86)\Common Files\System\ole32.dll => No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-02-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-02-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2015-05-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-02-10] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {228FF273-6A8B-4325-898C-C9878FBD4B53} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {2912BDA6-F918-4579-B305-1D7284DE74B9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {2AAAE486-F783-4536-8804-38AF0A7CAE00} - \Windows\Windows Fixer 9782 -> No File <==== ATTENTION
Task: {36D475B5-431D-4EDE-BDAC-B82BE0C7B199} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {3AC5CE2C-1EA8-4065-8440-9291506A457F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {3B5917D3-52A8-4EB7-85DF-B4AFA24E25F0} - \Windows\Windows Fixer 7186 -> No File <==== ATTENTION
Task: {500DF491-A98D-44B4-930C-3DFA6D24E1DD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {5C988D8E-DD32-455B-AB8C-88943AC38962} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {7E3CBA77-D34F-49C4-BE37-85B34720FA70} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {8BDEA991-A09B-4928-996E-84A47F980977} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {AC3A2F39-64A2-4FE5-807E-00A9ECAC8780} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe () [File not signed]
Task: {B149A338-D5F9-4FB7-BE04-9F8CF290D407} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Microsoft Windows -> Microsoft Corporation)
Task: {BE34D188-FF96-4171-AB93-80819870569C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BF50876A-5606-4D42-AE8B-771F3C9CDCD5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {C38B3247-A0F2-41D8-8F0D-BC44BE5AF69A} - System32\Tasks\Updater_Online_Application => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe (MICROLEAVES LTD -> Microleaves) <==== ATTENTION
Task: {CD087A30-CB40-427E-AC5F-81EC3C5F6DFA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {DC70C3AA-963D-43F2-9E18-96EF1957B8E1} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {DE44C12A-6EBC-4429-AEB0-11A70A014E5F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {E0A73EB9-82CF-4D0E-A47D-3F493860AF52} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {FFD43F48-C406-418B-8B72-74B52FCCE64C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Updater_Online_Application.job => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe <==== ATTENTION

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

ShortcutWithArgument: C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> %SNP%
ShortcutWithArgument: C:\Users\SMS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> %SNP%

==================== Loaded Modules (Whitelisted) ==============

2018-04-10 10:30 - 2013-04-22 10:27 - 000016896 _____ (KONICA MINOLTA, INC.) [File not signed] C:\Windows\System32\KOAYTJ_L.DLL
2019-02-10 12:05 - 2018-05-14 22:34 - 000026112 _____ (Copyright (c) Code Industry Ltd ) [File not signed] C:\Windows\System32\mpelocalmon.dll
2018-01-04 16:24 - 2014-10-30 13:32 - 000029184 _____ () [File not signed] C:\Windows\System32\ssa7mlm.dll
2019-02-10 12:11 - 2011-08-04 16:25 - 000043520 _____ (ActMask Co.,Ltd) [File not signed] C:\Windows\system32\spool\PRTPROCS\x64\ActPrint.dll
2018-04-10 10:30 - 2013-05-21 08:21 - 000083968 _____ (Monotype Imaging Inc.) [File not signed] C:\Windows\system32\spool\PRTPROCS\x64\KOAYTJ_P.DLL
2018-01-04 16:24 - 2014-10-30 13:32 - 000043520 _____ (Windows (R) Codename Longhorn DDK provider) [File not signed] C:\Windows\system32\spool\PRTPROCS\x64\ssa7mpc.dll
2019-02-10 12:03 - 2019-02-07 13:09 - 003780096 _____ () [File not signed] C:\ProgramData\Logic Cramble\set.exe
2009-10-15 10:13 - 2009-10-15 10:13 - 000136192 _____ (HP) [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
2014-03-04 15:38 - 2014-03-04 15:38 - 000098304 _____ () [File not signed] C:\Users\SMS\AppData\Roaming\Internet\runaservice.exe
2018-01-04 16:24 - 2014-10-30 13:31 - 001199104 _____ () [File not signed] C:\Windows\system32\spool\DRIVERS\x64\3\ssa7mdu.dll
2018-04-10 10:30 - 2014-06-12 07:15 - 000661504 _____ (KONICA MINOLTA, INC.) [File not signed] C:\Windows\system32\spool\DRIVERS\x64\3\KOAYTJ_C.DLL
2014-03-04 15:37 - 2014-03-04 15:37 - 001380352 _____ () [File not signed] C:\Users\SMS\AppData\Roaming\Internet\Console.exe
2018-04-16 09:45 - 2018-04-16 09:45 - 001103872 _____ (Pražská softwarová s.r.o.) [File not signed] C:\CPP\CppKalkulacky\CppCalcServer.exe
2019-02-10 12:03 - 2019-02-10 12:03 - 000342528 _____ () [File not signed] C:\ProgramData\Quoteex\Fixbam.dll
2019-02-06 21:34 - 2019-02-06 21:34 - 000000000 ____LMicrosoft Corporation C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2019-02-06 21:34 - 2019-02-06 21:34 - 000000000 ____LMicrosoft Corporation C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2019-02-10 12:03 - 2019-02-10 12:03 - 001008128 _____ (Robert Simpson, et al.) [File not signed] C:\ProgramData\Logic Cramble\x86\SQLite.Interop.dll
2018-03-26 11:58 - 2018-03-26 11:58 - 000112128 _____ (Microsoft Corporation) [File not signed] C:\Windows\Microsoft.Net\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
2009-10-15 10:13 - 2009-10-15 10:13 - 000061440 _____ () [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPTools.dll
2009-10-15 10:13 - 2009-10-15 10:13 - 000031744 _____ (HP) [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPServiceCommunicator.dll
2009-10-15 10:13 - 2009-10-15 10:13 - 000964096 _____ () [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\LEDMXMLObjects.dll
2009-10-15 10:13 - 2009-10-15 10:13 - 000032768 _____ (HP) [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPHTTPProxy.dll
2014-03-04 15:37 - 2014-03-04 15:37 - 002760704 _____ () [File not signed] C:\Users\SMS\AppData\Roaming\Internet\core.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 004627456 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\Qt5Core.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 004448768 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\Qt5Widgets.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 002995200 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\Qt5Gui.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 001927680 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\Qt5Network.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 000814592 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\Qt5Sql.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 000151552 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\Qt5Xml.dll
2017-12-23 16:30 - 2018-04-16 09:45 - 000915456 _____ (The Qt Company Ltd) [File not signed] C:\CPP\CppKalkulacky\platforms\qwindows.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2019-02-10 12:04 - 002097392 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1 space1.adminpressure.space
127.0.0.1 trackpressure.website
127.0.0.1 htagzdownload.pw
127.0.0.1 texttotalk.org
127.0.0.1 360devtraking.website
127.0.0.1 room1.360dev.info
127.0.0.1 djapp.info
127.0.0.1 technologievimy.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3520966483-694721993-3208304506-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 213.46.172.37 - 213.46.172.36
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{21680EDC-D506-4219-A42F-32FCC6009276}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{5A4F3CE8-C9ED-4D45-BBE1-46DE618C8EA7}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [TCP Query User{FE83E8F8-58D3-4AE7-A6C0-24E70521357C}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe () [File not signed]
FirewallRules: [UDP Query User{BC679B8E-EBC8-4D45-88FE-2BF7894FC3CF}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe () [File not signed]
FirewallRules: [{6F9F7DF7-7E88-4496-A16D-F80DEC302908}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9D7705C7-AB9D-471F-B05E-7DD5F7A953D8}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{7604E8FA-E3B9-49D1-BB5D-113CF71563D8}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{2ADD5480-FAD0-4EE2-9218-54B5070D8D9A}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{E97D2FAD-58D1-4BBF-81A5-3DD74109AF61}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{53164BF8-6BBA-408B-BAF4-3E129C621861}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{EBF8BB51-7E59-4692-825F-EC82CAAA0C96}C:\windows\temp\files\bin\kmss.exe] => (Allow) C:\windows\temp\files\bin\kmss.exe No File
FirewallRules: [UDP Query User{E25BAE3E-4E96-436E-9321-635DFB0A2C2C}C:\windows\temp\files\bin\kmss.exe] => (Allow) C:\windows\temp\files\bin\kmss.exe No File
FirewallRules: [{EF138B28-2D5D-4006-AA15-6A4A2B89E89D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EB962FC6-5A31-44E4-A581-0CBE6EBEDFE1}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{344346A8-BD07-4368-9E6A-7E04E1C7A758}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{968C596A-54BB-49DA-B507-7C86D7323BC2}] => (Allow) C:\Users\SMS\AppData\Roaming\uTorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{89758A47-27D5-4E61-B620-BFFC6962AA58}] => (Allow) C:\Users\SMS\AppData\Roaming\uTorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{F867F9C8-6789-4BA5-B57E-FD01C8D90A12}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
FirewallRules: [{4364AD04-9B21-43C2-9ADC-A431F11321F5}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
FirewallRules: [{19477E7C-DD0D-4D29-97B6-90B901595865}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{77DE9F60-6B4E-45CE-AED9-3A246C4168E4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{CBF5FCD4-15B4-4C72-8763-AA51203492B3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{CF0BAAA1-875D-424E-BA6D-038D9331F0BC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{4951A89F-0E0C-440E-902D-2569DAF3BB17}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

18-02-2019 23:14:22 Windows Update
20-02-2019 16:29:21 Removed iTunes
27-02-2019 17:14:29 Naplánovaný kontrolní bod
04-03-2019 13:07:32 Removed Nero 7 Ultra Edition. Available with Windows Installer version 1.2 and later.

==================== Faulty Device Manager Devices =============

Name: Intel(R) 82579LM Gigabit Network Connection
Description: Intel(R) 82579LM Gigabit Network Connection
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1cexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/04/2019 08:15:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (03/03/2019 10:30:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (03/02/2019 10:39:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (03/01/2019 07:53:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/28/2019 10:13:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/28/2019 07:56:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/27/2019 03:16:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/27/2019 03:16:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Google\Chrome\Application\chrome.exe se nezdařilo.
Závislé sestavení 72.0.3626.119,language="&#x2a;",type="win32",version="72.0.3626.119" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (03/04/2019 08:39:08 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby TeamViewer bylo dosaženo časového limitu (30000 ms).

Error: (03/03/2019 10:41:24 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (03/03/2019 10:41:23 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (03/03/2019 10:41:20 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (03/03/2019 10:41:19 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (03/03/2019 10:41:19 PM) (Source: Disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (03/02/2019 10:42:36 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (03/02/2019 10:41:16 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby TeamViewer bylo dosaženo časového limitu (30000 ms).


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
Percentage of memory in use: 61%
Total physical RAM: 8073.02 MB
Available physical RAM: 3100.42 MB
Total Virtual: 16144.17 MB
Available Virtual: 11201.63 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.88 GB) (Free:74.29 GB) NTFS ==>[drive with boot components (obtained from BCD)]


==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: F0C09ED3)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-03-04.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-06-2019
# Duration: 00:00:07
# OS: Windows 7 Professional
# Cleaned: 64
# Failed: 0


***** [ Services ] *****

Deleted backlh

***** [ Folders ] *****

Deleted C:\Windows\System32\config\systemprofile\AppData\Roaming\CRMSvc
Deleted C:\Users\SMS\AppData\Roaming\CRMSvc
Deleted C:\ProgramData\Quoteexs
Deleted C:\ProgramData\Logic Cramble
Deleted C:\Program Files (x86)\Microleaves
Deleted C:\Users\SMS\AppData\Roaming\Microleaves
Deleted C:\Program Files (x86)\Multitimer
Deleted C:\ProgramData\Quoteex
Deleted C:\Windows\Installer\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}
Deleted C:\Windows\Temp\Smartbar

***** [ Files ] *****

Deleted C:\Users\SMS\AppData\Roaming\Mozilla\Firefox\Profiles\yeejw8z7.default-1546093295160\searchplugins\findit.xml
Deleted C:\Users\SMS\appdata\local\installationconfiguration.xml
Deleted C:\END
Deleted C:\Users\SMS\AppData\Local\Main.dat
Deleted C:\Windows\Installer\SOURCEHASH{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}
Deleted C:\Users\SMS\Downloads\WIPERSOFT-INSTALLER.EXE
Deleted C:\Windows\SysWOW64\findit.xml

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

Deleted C:\Users\SMS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Deleted C:\Users\SMS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Tasks ] *****

Deleted C:\Windows\Tasks\Updater_Online_Application.job
Deleted C:\Windows\System32\Tasks\Updater_Online_Application

***** [ Registry ] *****

Deleted HKLM\Software\CRMSvc
Deleted HKLM\Software\MICROSOFT\TechnologyDesktopnew
Deleted HKLM\SOFTWARE\MICROSOFT\Speedycar
Deleted HKCU\Software\mtQuoteex
Deleted HKLM\Software\Wow6432Node\mtQuoteex
Deleted HKLM\Software\Wow6432Node\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\Quoteex.exe
Deleted HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\Quoteex.exe
Deleted HKLM\Software\Wow6432Node\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\Quoteex.exe
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs - "C:\ProgramData\Quoteex\Fixbam.dll"
Deleted HKLM\Software\Wow6432Node\Microleaves
Deleted HKCU\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\myway.com
Deleted HKCU\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\fromdoctopdf.dl.tb.ask.com
Deleted HKCU\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\fromdoctopdf.dl.myway.com
Deleted HKCU\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\fromdoctopdf.com
Deleted HKCU\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\free.fromdoctopdf.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\staticimgfarm.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ak.staticimgfarm.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.slunecnice.cz
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\slunecnice.cz
Deleted HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes|DefaultScope
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
Deleted HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\ielnksrch
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\search.safefinder.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\safefinder.com
Deleted HKCU\Environment|SNP
Deleted HKU\S-1-5-18\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
Deleted HKU\.DEFAULT\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\436F6625D7B77354DBCD89DDC6CFAB1A
Deleted HKLM\Software\Classes\Installer\Products\436F6625D7B77354DBCD89DDC6CFAB1A
Deleted HKLM\Software\Classes\Installer\Features\436F6625D7B77354DBCD89DDC6CFAB1A
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C38B3247-A0F2-41D8-8F0D-BC44BE5AF69A}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C38B3247-A0F2-41D8-8F0D-BC44BE5AF69A}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Updater_Online_Application
Deleted HKCU\Software\OneSystemCare
Deleted HKCU\Environment|SNF
Deleted HKCU\Software\WiperSoft

***** [ Chromium (and derivatives) ] *****

Deleted Bazz Search SafeFinder

***** [ Chromium URLs ] *****

Deleted https://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5WszJD-oZeFqyEuSOlPSKHCrUWyxfDkvMeA8ldcjS6hsp9ZwbwmmVtNXNuaGaSsKSDrWtsZoBJ08hizqwPKRF6mlEj_hllqm--TI7UpBDItKq6TwopuiB1MtfhL1SmAJgqLVKjv3tcVKqwKB4zJS7Z9twbVV4w,,
Deleted https://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5WszJD-oZeFqyEuSOlPSKHCrUWyxfDkvMeA8ldcjS6hsp9ZwbwmmVtNXNuaGaSsKSDrWtsZoBJ08hizqwPKRF6mlEj_hllqm--TI7UpBDItKq6TwopuiB1MtfhL1SmAJgqLVKjv3tcVKqwKB4zJS7Z9twbVV4w,,
Deleted WebSearch
Deleted WebSearch

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [7303 octets] - [06/03/2019 13:43:02]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Dejte nové logy FRST+Addition.

-Podrobnosti logovacího souboru-
Datum skenování: 11.03.19
Čas skenování: 20:16
Logovací soubor: 37e9d0de-4432-11e9-86c1-08edb9dd37c3.json

-Informace o softwaru-
Verze: 3.7.1.2839
Verze komponentů: 1.0.538
Aktualizovat verzi balíku komponent: 1.0.9640
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: SMS-PC\SMS

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 262526
Zjištěné hrozby: 126
Hrozby umístěné do karantény: 124
Uplynulý čas: 18 min, 4 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 12
Spyware.Socelars, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\{6D187CC8-35BD-47F6-8760-D406AA1927B1}, V karanténě, [5053], [584328],1.0.9640
Trojan.Agent, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Amazon assistant 1.0, V karanténě, [419], [533745],1.0.9640
Trojan.Agent, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Amazon assistant 2.0, V karanténě, [419], [533745],1.0.9640
Trojan.Agent.E, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Ebayssistant 1.0, V karanténě, [3721], [623237],1.0.9640
Trojan.Agent.E, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Look Picture Tool, V karanténě, [3721], [623238],1.0.9640
Trojan.Agent.E, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\telezilla, V karanténě, [3721], [623239],1.0.9640
Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\bestavicampaign563, V karanténě, [449], [584322],1.0.9640
Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\campaign9961, V karanténě, [449], [518478],1.0.9640
Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\multitimercampaign84170, V karanténě, [449], [518476],1.0.9640
Adware.Neoreklami.ChrPRST, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME, V karanténě, [2554], [-1],0.0.0
Adware.Neoreklami.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\CHROME, V karanténě, [2554], [-1],0.0.0
Rootkit.Agent.PUA, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\A7CF6C34A616, V karanténě, [420], [651863],1.0.9640

Hodnota v registru: 6
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, V karanténě, [802], [-1],0.0.0
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, V karanténě, [802], [-1],0.0.0
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|DEFAULT, V karanténě, [802], [259988],1.0.9640
Adware.Neoreklami.ChrPRST, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME\ExtensionInstallWhitelist|1, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\CHROME\ExtensionInstallWhitelist|1, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|dpjjibggmaegggohmlbfhpobmddeopif, V karanténě, [2554], [641228],1.0.9640

Data registrů: 4
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SEARCH PAGE, Nahrazen, [802], [293485],1.0.9640
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SEARCH BAR, Nahrazen, [802], [293485],1.0.9640
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SEARCHASSISTANT, Nahrazen, [802], [293485],1.0.9640
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3520966483-694721993-3208304506-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|DEFAULT_SEARCH_URL, Nahrazen, [802], [293486],1.0.9640

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 11
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\51992278, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\52118436, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\52438597, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\52462465, V karanténě, [438], [463480],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\_metadata, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\USERS\SMS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DPJJIBGGMAEGGGOHMLBFHPOBMDDEOPIF, V karanténě, [2554], [641228],1.0.9640
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\OWGTQQYDYZ, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\R3JH82YBTA, V karanténě, [3714], [537395],1.0.9640
Adware.Linkury.TskLnk, C:\PROGRAM FILES (X86)\COMMON FILES\HOMEEX, V karanténě, [14646], [444929],1.0.9640
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\ZFWHTHWAA7, V karanténě, [3714], [537395],1.0.9640

Soubor: 93
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\UNINSTALL_TEMP.ICO, V karanténě, [3753], [404862],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\NOAH.DAT, V karanténě, [3753], [404865],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\MD.XML, V karanténě, [3753], [404866],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\DonOzeplus.tst, V karanténě, [3753], [404871],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\VoltRon.tst, V karanténě, [3753], [404871],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\AGENT.DAT, V karanténě, [3753], [404872],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\51992278\ic-0.0d28839978be74.exe, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\Users\SMS\AppData\Local\Temp\51992278\dlreport, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\Users\SMS\AppData\Local\Temp\51992278\ic-0.acd94b8fe53bb8.exe, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\Users\SMS\AppData\Local\Temp\51992278\ic-0.b77341f56708f.exe, V karanténě, [438], [463480],1.0.9640
Adware.Linkury.Generic, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\SHAM.DB, V karanténě, [3753], [516189],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\52118436\ic-0.0773f7ffc727e8.exe, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\Users\SMS\AppData\Local\Temp\52118436\dlreport, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\52438597\ic-0.0907a627ba3048.exe, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\Users\SMS\AppData\Local\Temp\52438597\dlreport, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\USERS\SMS\APPDATA\LOCAL\TEMP\52462465\ic-0.cb5f9a3b39b4b.exe, V karanténě, [438], [463480],1.0.9640
PUP.Optional.BundleInstaller, C:\Users\SMS\AppData\Local\Temp\52462465\dlreport, V karanténě, [438], [463480],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\SHAM.DB, V karanténě, [3753], [516191],1.0.9640
Adware.Neoreklami.ChrPRST, C:\USERS\SMS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Nahrazen, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\USERS\SMS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DPJJIBGGMAEGGGOHMLBFHPOBMDDEOPIF\1.0.0.0_0\MANIFEST.JSON, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\_metadata\verified_contents.json, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\background.js, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\icon.png, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\icon48.png, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\jquery-1.8.3.min.js, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\m_inc.js, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\popup.html, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\Users\SMS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjjibggmaegggohmlbfhpobmddeopif\1.0.0.0_0\popup.js, V karanténě, [2554], [641228],1.0.9640
Adware.Neoreklami.ChrPRST, C:\DOCUMENTS AND SETTINGS\ALL USERS\NTUSER.POL, Odstranění se nezdařilo, [2554], [-1],0.0.0
Adware.Neoreklami.ChrPRST, C:\PROGRAMDATA\NTUSER.POL, Odstranění se nezdařilo, [2554], [-1],0.0.0
Adware.Neoreklami.ChrPRST, C:\USERS\SMS\NTUSER.POL, V karanténě, [2554], [-1],0.0.0
Adware.Neoreklami.ChrPRST, C:\WINDOWS\SYSTEM32\GROUPPOLICY\MACHINE\REGISTRY.POL, V karanténě, [2554], [-1],0.0.0
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\OWGTQQYDYZ\CAST.CONFIG, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\OWGTQQYDYZ\HA4AQ3ILA.exe.config, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\OWGTQQYDYZ\uninstaller.exe, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\OWGTQQYDYZ\uninstaller.exe.config, V karanténě, [3714], [537395],1.0.9640
Adware.Linkury.TskLnk, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\INSTALLATIONCONFIGURATION.XML, V karanténě, [14646], [444922],1.0.9640
MachineLearning/Anomalous.94%, C:\USERS\SMS\APPDATA\LOCAL\{01801827-6513-4A10-9443-A405DBAFB4D3}\SVCHOST.EXE, V karanténě, [0], [392687],1.0.9640
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\R3JH82YBTA\CAST.CONFIG, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\R3JH82YBTA\R3JH82YBT.exe.config, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\R3JH82YBTA\uninstaller.exe, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\R3JH82YBTA\uninstaller.exe.config, V karanténě, [3714], [537395],1.0.9640
Generic.Malware/Suspicious, C:\USERS\SMS\APPDATA\LOCAL\U-LEX.BIN, V karanténě, [0], [392686],1.0.9640
Generic.Malware/Suspicious, C:\USERS\SMS\APPDATA\LOCAL\DONOZEPLUS.EXE, V karanténě, [0], [392686],1.0.9640
Adware.Linkury.TskLnk, C:\PROGRAM FILES (X86)\COMMON FILES\HOMEEX\INSTALLATIONCONFIGURATION.XML, V karanténě, [14646], [444929],1.0.9640
Adware.Linkury.TskLnk, C:\Program Files (x86)\Common Files\Homeex\uninstall.dat, V karanténě, [14646], [444929],1.0.9640
Adware.Linkury.TskLnk, C:\Program Files (x86)\Common Files\Homeex\uninstall.ico, V karanténě, [14646], [444929],1.0.9640
Adware.Linkury, C:\USERS\SMS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YEEJW8Z7.DEFAULT-1546093295160\PREFS.JS, Nahrazen, [1174], [622072],1.0.9640
Generic.Malware/Suspicious, C:\USERS\SMS\APPDATA\LOCAL\VOLTRON.EXE, V karanténě, [0], [392686],1.0.9640
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\ZFWHTHWAA7\CAST.CONFIG, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\ZFWHTHWAA7\uninstaller.exe, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\ZFWHTHWAA7\uninstaller.exe.config, V karanténě, [3714], [537395],1.0.9640
Adware.Tuto4PC.Generic, C:\Program Files\ZFWHTHWAA7\ZFWHTHWAA.exe.config, V karanténě, [3714], [537395],1.0.9640
Adware.Linkury.Generic, C:\USERS\SMS\APPDATA\LOCAL\CONFIG.XML, V karanténě, [3753], [404859],1.0.9640
Rootkit.Agent.PUA, C:\WINDOWS\A7CF6C34A616.SYS, V karanténě, [420], [651863],1.0.9640
Trojan.FakeMS, C:\USERS\SMS\APPDATA\LOCAL\TEMP\ESVTWIGLS0Z\UDFYEW.EXE, V karanténě, [719], [631724],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-3B1KG.TMP\HOUSSEMID.EXE, V karanténě, [2904], [636075],1.0.9640
Adware.Tuto4PC, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-3EID1.TMP\TSUIMSHA.EXE, V karanténě, [2817], [551717],1.0.9640
Adware.Tuto4PC, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-JT3L6.TMP\TSUIMSHA.EXE, V karanténě, [2817], [551717],1.0.9640
Spyware.Socelars, C:\USERS\SMS\APPDATA\LOCAL\TEMP\2DPDXODTBAP\1001.EXE, V karanténě, [5053], [637864],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\5L5O44ELOWW\IRP1H3OEFYC.EXE, V karanténě, [2904], [617668],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\13UHAVPTUZQ\3J2F1W1GCUR.EXE, V karanténě, [2904], [625750],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\4XRZHWPPWQP\CIMSSBRCARR.EXE, V karanténě, [2904], [625750],1.0.9640
Trojan.FakeMS, C:\USERS\SMS\APPDATA\LOCAL\TEMP\BXABBRPKVGG\UDFYEW.EXE, V karanténě, [719], [631724],1.0.9640
Trojan.Downloader, C:\USERS\SMS\APPDATA\LOCAL\TEMP\245LNY2HEJO\QFFYTHYFU53.EXE, V karanténě, [503], [636711],1.0.9640
Trojan.Downloader, C:\USERS\SMS\APPDATA\LOCAL\TEMP\GIXYEOYBQVE\DOVC1YWQHUP.EXE, V karanténě, [503], [636711],1.0.9640
Trojan.InfoStealer.MSIL.Generic, C:\USERS\SMS\APPDATA\LOCAL\TEMP\CUEBNL3EXJP\PARSESOFTWARE.EXE, V karanténě, [10183], [595540],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\CK0E3CFTIZA\AJSZCPY1MXJ.EXE, V karanténě, [2904], [617668],1.0.9640
Trojan.InfoStealer.MSIL.Generic, C:\USERS\SMS\APPDATA\LOCAL\TEMP\BRGEYNJE1U5\PARSESOFTWARE.EXE, V karanténě, [10183], [595540],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\LNSNRHEDPT0\YFPTR5ILVMQ.EXE, V karanténě, [2904], [625750],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-3EID1.TMP\HOUSSEMID.EXE, V karanténě, [2904], [636075],1.0.9640
Adware.Tuto4PC, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-81DQ7.TMP\TSUIMSHA.EXE, V karanténě, [2817], [551717],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-JT3L6.TMP\HOUSSEMID.EXE, V karanténě, [2904], [636075],1.0.9640
Adware.Tuto4PC, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-3B1KG.TMP\TSUIMSHA.EXE, V karanténě, [2817], [551717],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\IS-81DQ7.TMP\HOUSSEMID.EXE, V karanténě, [2904], [636075],1.0.9640
Adware.Linkury, C:\USERS\SMS\APPDATA\LOCAL\TEMP\RARSFX0\LOGICHANDLER.EXE, V karanténě, [1174], [504848],1.0.9640
Adware.Adposhel, C:\USERS\SMS\APPDATA\LOCAL\TEMP\SB5RV1I4ESQ\OSC.EXE, V karanténě, [485], [635942],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\SRNT5SBTCNU\KWQTAWSILDZ.EXE, V karanténě, [2904], [617668],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\VNIW15PPOYR\RIZDPZIJ1WB.EXE, V karanténě, [2904], [625750],1.0.9640
Spyware.Socelars, C:\USERS\SMS\APPDATA\LOCAL\TEMP\PTZ40U4TQDC\1001.EXE, V karanténě, [5053], [637864],1.0.9640
Adware.Adposhel, C:\USERS\SMS\APPDATA\LOCAL\TEMP\T3JJGU15RKP\OSC.EXE, V karanténě, [485], [635942],1.0.9640
Trojan.GameThief, C:\USERS\SMS\APPDATA\LOCAL\TEMP\W3G1M3OLNZ1\A3.EXE, V karanténě, [5766], [625865],1.0.9640
Adware.Tuto4PC, C:\USERS\SMS\APPDATA\LOCAL\TEMP\PIDAEU2SEL4.EXE, V karanténě, [2817], [474076],1.0.9640
Adware.Tuto4PC, C:\USERS\SMS\APPDATA\LOCAL\TEMP\SO3ZIZ11OL0.EXE, V karanténě, [2817], [474076],1.0.9640
Adware.Csdimonetize, C:\USERS\SMS\APPDATA\LOCAL\TEMP\SF4QHF2RF1C\GDAOO4BFMQF.EXE, V karanténě, [2904], [617668],1.0.9640
RiskWare.Tool.HCK, C:\USERS\SMS\APPDATA\ROAMING\Microsoft\Windows\Recent\Master-PDF-Editor-1.9.25-CZ-+-SK-(x32x64)-portable.lnk, V karanténě, [7686], [69974],1.0.9640
RiskWare.Tool.HCK, C:\USERS\SMS\DOWNLOADS\MASTER-PDF-EDITOR-1.9.25-CZ-+-SK-(X32X64)-PORTABLE.RAR, V karanténě, [7686], [69974],1.0.9640
Trojan.Reconyc, C:\USERS\SMS\DOWNLOADS\PDF EDITOR 5.5.EXE, V karanténě, [5130], [394997],1.0.9640
PUP.Optional.Seznam, C:\USERS\SMS\DOWNLOADS\PICASA39-SETUP.EXE, V karanténě, [592], [623984],1.0.9640
Trojan.Reconyc, C:\USERS\SMS\DOWNLOADS\NEPOTVRZENO 723590.CRDOWNLOAD, V karanténě, [5130], [394997],1.0.9640
PUP.Optional.PassView, C:\USERS\SMS\DOWNLOADS\WEBBROWSERPASSVIEW_SETUP.EXE, V karanténě, [12753], [86087],1.0.9640
RiskWare.Tool.CK, C:\WINDOWS\KMSEMULATOR.EXE, V karanténě, [5773], [25649],1.0.9640
Generic.Malware/Suspicious, C:\$RECYCLE.BIN\S-1-5-21-3520966483-694721993-3208304506-1001\$RY4J00A.ZIP, V karanténě, [0], [392686],1.0.9640

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Rudy píše:Dejte nové logy FRST+Addition.

Toto nejsou uvedené logy.