API tools faq
paste
Advertisement
Guest User

Vyskakování nechtěných oken

a guest
Jul 27th, 2015
445
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 48.72 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
  2. Ran by Kateřina (administrator) on KATEŘINA-LAPTOP (27-07-2015 08:51:15)
  3. Running from C:\Users\Kateřina\Downloads
  4. Loaded Profiles: Kateřina (Available Profiles: Kateřina)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  15. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
  16. () C:\Program Files (x86)\Harebrained Action\Harebrained Action.exe
  17. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  18. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  19. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  20. (Alibaba (China) Co., Ltd.) C:\Program Files (x86)\trademanager\AliIM.exe
  21. (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
  22. (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
  23. (Microsoft Corporation) C:\Windows\System32\StikyNot.exe
  24. (YTDownloader) C:\Program Files (x86)\YTDownloader\YTDownloader.exe
  25. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
  26. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
  27. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  28. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  29. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  30. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  31. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  32. (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
  33. (Cinema PlusV15.06) C:\Program Files (x86)\CinemaP-1.9cV15.06\fc7777a6-1514-4d68-ad2f-31153bee47b1-6.exe
  34. (Cinema PlusV15.06) C:\Program Files (x86)\CinemaP-1.9cV15.06\fc7777a6-1514-4d68-ad2f-31153bee47b1-1-6.exe
  35. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  36. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  37. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  38. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  39. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  40.  
  41.  
  42. ==================== Registry (Whitelisted) ==================
  43.  
  44. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  45.  
  46. HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
  47. HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-06-18] (YTDownloader)
  48. HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3745744 2015-05-18] (AVG Technologies CZ, s.r.o.)
  49. HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-26] (AVAST Software)
  50. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  51. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\...\Run: [aliim] => C:\Program Files (x86)\trademanager\AliIM.exe [295416 2015-04-07] (Alibaba (China) Co., Ltd.)
  52. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28785280 2015-06-02] (Skype Technologies S.A.)
  53. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
  54. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988528 2015-06-18] (YTDownloader)
  55. HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-08-24] (Microsoft Corporation)
  56. Startup: C:\Users\Kateřina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Private Downloader.lnk [2015-04-25]
  57. ShortcutTarget: Private Downloader.lnk -> C:\ProgramData\{ddf58e23-7398-ca08-ddf5-58e23739388d}\Private Downloader.exe (No File)
  58. ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-26] (AVAST Software)
  59. GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  60. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  61.  
  62. ==================== Internet (Whitelisted) ====================
  63.  
  64. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  65.  
  66. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1433397267&z=c4058c779cb522a38776e6fg3z4c1c4cet8m7ofq6e&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF
  67. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
  68. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1433397249&z=2caebd1b63545b3f76cb27egdzdcdc7c6t6m8o5z6g&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&q={searchTerms}
  69. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  70. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1433397267&z=c4058c779cb522a38776e6fg3z4c1c4cet8m7ofq6e&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF
  71. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
  72. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1433397249&z=2caebd1b63545b3f76cb27egdzdcdc7c6t6m8o5z6g&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&q={searchTerms}
  73. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
  74. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  75. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
  76. HKU\S-1-5-21-3993512991-415750257-3600758414-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
  77. SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1433397249&z=2caebd1b63545b3f76cb27egdzdcdc7c6t6m8o5z6g&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&q={searchTerms}
  78. SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1433397249&z=2caebd1b63545b3f76cb27egdzdcdc7c6t6m8o5z6g&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&q={searchTerms}
  79. SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  80. SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1433397249&z=2caebd1b63545b3f76cb27egdzdcdc7c6t6m8o5z6g&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&q={searchTerms}
  81. SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=22147&r=2015/04/25&hid=14199396800048292512&lg=EN&cc=CZ&unqvl=86
  82. SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  83. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  84. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=sien&utm_campaign=install_ie&utm_content=ds&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&ts=1433398672&type=default&q={searchTerms}
  85. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=sien&utm_campaign=install_ie&utm_content=ds&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&ts=1433398672&type=default&q={searchTerms}
  86. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1433397267&z=c4058c779cb522a38776e6fg3z4c1c4cet8m7ofq6e&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&q={searchTerms}
  87. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=sien&utm_campaign=install_ie&utm_content=ds&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&ts=1433398672&type=default&q={searchTerms}
  88. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=sien&utm_campaign=install_ie&utm_content=ds&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF&ts=1433398672&type=default&q={searchTerms}
  89. SearchScopes: HKU\S-1-5-21-3993512991-415750257-3600758414-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  90. BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-26] (AVAST Software)
  91. BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-26] (AVAST Software)
  92. DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  93. Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\3.2.1\ViProtocol.dll [2015-05-18] (AVG Secure Search)
  94. Winsock: Catalog9-x64 01 C:\Windows\system32\Oaiomeb64.dll [359424 2015-06-19] ()
  95. Winsock: Catalog9-x64 02 C:\Windows\system32\Oaiomeb64.dll [359424 2015-06-19] ()
  96. Winsock: Catalog9-x64 03 C:\Windows\system32\Oaiomeb64.dll [359424 2015-06-19] ()
  97. Winsock: Catalog9-x64 04 C:\Windows\system32\Oaiomeb64.dll [359424 2015-06-19] ()
  98. Winsock: Catalog9-x64 15 C:\Windows\system32\Oaiomeb64.dll [359424 2015-06-19] ()
  99. Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
  100. Tcpip\..\Interfaces\{2081B9F6-2EFA-427B-A876-61CF10ABDC2D}: [DhcpNameServer] 10.0.0.138
  101. StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1433397249&z=2caebd1b63545b3f76cb27egdzdcdc7c6t6m8o5z6g&from=sien&uid=ST9500325AS_S2W7X4QFXXXXS2W7X4QF
  102.  
  103. FireFox:
  104. ========
  105. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
  106. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  107. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
  108. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
  109. FF Plugin-x32: @alibaba.com/nptrademanager;version=1.0 -> C:\Program Files (x86)\trademanager\nptrademanager.dll [2015-03-31] ( )
  110. FF Plugin-x32: @alibaba.com/npwangwang;version=1.0 -> C:\Program Files (x86)\trademanager\npwangwang.dll [2015-03-31] ( )
  111. FF Plugin-x32: @alipay.com/NPComBrg701,version=1.0.2011.701 -> C:\Windows\system32\itruscert\NPComBrg701.dll No File
  112. FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\3.2.1\\npsitesafety.dll No File
  113. FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-04] (Oracle Corporation)
  114. FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-04] (Oracle Corporation)
  115. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  116. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
  117. FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File
  118. FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File
  119. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
  120. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
  121. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
  122. FF Plugin HKU\S-1-5-21-3993512991-415750257-3600758414-1000: @alibaba.com/npAliSSOLogin;version=1.0 -> C:\Program Files (x86)\trademanager\npAliSSOLogin.dll [2014-04-29] (Alibaba software (Shanghai) Corporation.)
  123. FF Plugin HKU\S-1-5-21-3993512991-415750257-3600758414-1000: @alibaba.com/nptrademanager;version=1.0 -> "C:\Program Files (x86)\trademanager\nptrademanager.dll" No File
  124. FF Plugin HKU\S-1-5-21-3993512991-415750257-3600758414-1000: @alibaba.com/npwangwang;version=1.0 -> "C:\Program Files (x86)\trademanager\npwangwang.dll" No File
  125. FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
  126. FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-06-19]
  127.  
  128. Chrome:
  129. =======
  130. CHR dev: Chrome dev build detected! <======= ATTENTION
  131. CHR Profile: C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default
  132. CHR Extension: (Google Slides) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-02]
  133. CHR Extension: (Google Docs) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-22]
  134. CHR Extension: (Google Drive) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-22]
  135. CHR Extension: (YouTube) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-22]
  136. CHR Extension: (Google Search) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-22]
  137. CHR Extension: (Google Sheets) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-02]
  138. CHR Extension: (Avast Online Security) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-06-19]
  139. CHR Extension: (CinemaP-1.9cV15.06) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-07-16]
  140. CHR Extension: (Gmail) - C:\Users\Kateřina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-22]
  141. CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-06-19]
  142. CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-19]
  143.  
  144. Opera:
  145. =======
  146. OPR Extension: (SavePass 1.1) - C:\Users\Kateřina\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh [2015-06-19]
  147. OPR Extension: (Flying Deals) - C:\Users\Kateřina\AppData\Roaming\Opera Software\Opera Stable\Extensions\iemdabljdhobemmobmboefopihnicbmb [2015-06-02]
  148. OPR Extension: (CinemaP-1.9cV15.06) - C:\Users\Kateřina\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-06-19]
  149.  
  150. ==================== Services (Whitelisted) =================
  151.  
  152. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  153.  
  154. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-26] (AVAST Software)
  155. R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768 2015-07-26] (Avast Software)
  156. S2 avgfws; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [1522664 2015-05-18] (AVG Technologies CZ, s.r.o.)
  157. S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3438544 2015-05-18] (AVG Technologies CZ, s.r.o.)
  158. R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [311792 2015-05-18] (AVG Technologies CZ, s.r.o.)
  159. S2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [112560 2015-06-18] ()
  160. S2 dheikaf; C:\ProgramData\MujduPuu\ewoano.exe [501224 2015-06-19] () [File not signed]
  161. S4 fiufnihba; C:\ProgramData\MujduPuu\ewowno.exe [188392 2015-06-19] () [File not signed]
  162. R2 Harebrained Action; C:\Program Files (x86)\Harebrained Action\Harebrained Action.exe [8016661 2015-07-25] () [File not signed] <==== ATTENTION
  163. S2 IasaOnui; C:\ProgramData\MujduPuu\QujpKiann.exe [255464 2015-06-19] () [File not signed]
  164. S4 Oaiomeb; C:\ProgramData\MujduPuu\Oaiomeb.exe [2075136 2015-06-26] () [File not signed]
  165. S2 Update Flying Deals; C:\Program Files (x86)\Flying Deals\updateFlyingDeals.exe [467696 2015-06-19] ()
  166. S2 Util Flying Deals; C:\Program Files (x86)\Flying Deals\bin\utilFlyingDeals.exe [467696 2015-06-19] ()
  167. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  168. S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
  169. S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
  170.  
  171. ==================== Drivers (Whitelisted) ====================
  172.  
  173. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  174.  
  175. R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-07-26] (AVAST Software)
  176. R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-07-26] (AVAST Software)
  177. R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-26] (AVAST Software)
  178. R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-07-26] (AVAST Software)
  179. R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-07-26] (AVAST Software)
  180. R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-07-26] (AVAST Software)
  181. R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150160 2015-07-26] (AVAST Software)
  182. R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-07-26] (AVAST Software)
  183. R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
  184. R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [67040 2015-03-20] (AVG Technologies CZ, s.r.o.)
  185. R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [284128 2015-04-27] (AVG Technologies CZ, s.r.o.)
  186. R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253920 2015-05-07] (AVG Technologies CZ, s.r.o.)
  187. R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [256992 2015-04-15] (AVG Technologies CZ, s.r.o.)
  188. R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
  189. R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [220128 2015-05-07] (AVG Technologies CZ, s.r.o.)
  190. R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
  191. R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [291296 2015-05-04] (AVG Technologies CZ, s.r.o.)
  192. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-07] (Disc Soft Ltd)
  193. R1 Kehkajmi120; C:\Windows\system32\Drivers\Kehkajmi120.sys [24184 2015-06-19] ()
  194. R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [115152 2015-07-26] (AVAST Software)
  195. S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
  196. S2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58528 2015-06-18] (YTDownloader)
  197. S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
  198. R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-07-26] (Avast Software)
  199. R1 {400c1806-5ad6-46b7-966c-d0b02a8025c9}Gw64; C:\Windows\System32\drivers\{400c1806-5ad6-46b7-966c-d0b02a8025c9}Gw64.sys [48784 2015-06-18] (StdLib)
  200. R1 {44ba46cb-181e-450c-858c-d0e1df27fdca}Gw64; C:\Windows\System32\drivers\{44ba46cb-181e-450c-858c-d0e1df27fdca}Gw64.sys [48784 2015-06-01] (StdLib)
  201. S3 cpuz134; \??\C:\Users\KATEIN~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
  202.  
  203. ==================== NetSvcs (Whitelisted) ===================
  204.  
  205. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  206.  
  207.  
  208. ==================== One Month Created files and folders ========
  209.  
  210. (If an entry is included in the fixlist, the file/folder will be moved.)
  211.  
  212. 2015-07-27 08:51 - 2015-07-27 08:51 - 00021578 _____ C:\Users\Kateřina\Downloads\FRST.txt
  213. 2015-07-27 08:50 - 2015-07-27 08:51 - 00000000 ____D C:\FRST
  214. 2015-07-27 08:50 - 2015-07-27 08:50 - 02146816 _____ (Farbar) C:\Users\Kateřina\Downloads\FRST64.exe
  215. 2015-07-26 19:06 - 2015-07-26 19:06 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
  216. 2015-07-26 19:06 - 2015-07-26 19:05 - 00115152 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
  217. 2015-07-26 19:05 - 2015-07-26 19:05 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
  218. 2015-07-25 14:24 - 2015-07-25 14:24 - 03274752 _____ C:\Users\Kateřina\Desktop\Hypo kalkulátor.xls
  219. 2015-07-25 14:16 - 2015-07-25 14:16 - 00000000 ____D C:\Program Files (x86)\Harebrained Action
  220. 2015-07-24 18:19 - 2015-07-24 18:19 - 00000165 ____H C:\Users\Kateřina\Desktop\~$Výpočet provizí.xlsx
  221. 2015-07-24 14:17 - 2015-07-24 14:17 - 03273728 _____ C:\Users\Kateřina\Downloads\c%3a%2fISPK%2finformator%2f%2fMetWHB%2fKalkulátory a simulace%2fVšeobecný kalkulátor WHB 20150709.xls
  222. 2015-07-24 13:50 - 2015-07-25 14:27 - 02534912 _____ C:\Users\Kateřina\Downloads\c%3a%2fISPK%2finformator%2f%2fMetWSS%2fKalkulátory a simulace%2fWSS úvěrový kalkulátor k 9.7.2015 (1).xls
  223. 2015-07-22 03:23 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
  224. 2015-07-22 03:23 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
  225. 2015-07-22 03:23 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
  226. 2015-07-22 03:23 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
  227. 2015-07-22 03:23 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
  228. 2015-07-22 03:23 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
  229. 2015-07-22 03:23 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
  230. 2015-07-22 03:23 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
  231. 2015-07-22 03:23 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
  232. 2015-07-22 03:23 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
  233. 2015-07-21 21:23 - 2015-07-21 21:23 - 00788902 _____ C:\Users\Kateřina\Downloads\scan Návrh č. 3146563332 pí. Kučerová (2).tif
  234. 2015-07-21 21:21 - 2015-07-21 21:22 - 00788902 _____ C:\Users\Kateřina\Downloads\scan Návrh č. 3146563332 pí. Kučerová (1).tif
  235. 2015-07-21 21:17 - 2015-07-21 21:21 - 00788902 _____ C:\Users\Kateřina\Downloads\scan Návrh č. 3146563332 pí. Kučerová.tif
  236. 2015-07-20 10:16 - 2015-07-20 10:16 - 00000000 ____D C:\Users\Kateřina\Desktop\Wüstenrot
  237. 2015-07-17 10:28 - 2015-07-17 10:29 - 02548224 _____ C:\Users\Kateřina\Downloads\c%3a%2fISPK%2finformator%2f%2fMetWSS%2fKalkulátory a simulace%2fWSS úvěrový kalkulátor k 9.7.2015.xls
  238. 2015-07-15 03:49 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  239. 2015-07-15 03:49 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  240. 2015-07-15 03:49 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  241. 2015-07-15 03:49 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  242. 2015-07-15 03:48 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
  243. 2015-07-15 03:48 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  244. 2015-07-15 03:48 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  245. 2015-07-15 03:48 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
  246. 2015-07-15 03:48 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  247. 2015-07-15 03:48 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
  248. 2015-07-15 03:48 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
  249. 2015-07-15 03:48 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
  250. 2015-07-15 03:48 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
  251. 2015-07-15 03:48 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
  252. 2015-07-15 03:48 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
  253. 2015-07-15 03:48 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  254. 2015-07-15 03:48 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
  255. 2015-07-15 03:48 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
  256. 2015-07-15 03:48 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
  257. 2015-07-15 03:48 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
  258. 2015-07-15 03:48 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  259. 2015-07-15 03:48 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  260. 2015-07-15 03:48 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  261. 2015-07-15 03:48 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
  262. 2015-07-15 03:48 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
  263. 2015-07-15 03:48 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
  264. 2015-07-15 03:48 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
  265. 2015-07-15 03:48 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
  266. 2015-07-15 03:48 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
  267. 2015-07-15 03:48 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
  268. 2015-07-15 03:48 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
  269. 2015-07-15 03:48 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
  270. 2015-07-15 03:48 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
  271. 2015-07-15 03:47 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
  272. 2015-07-15 03:47 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
  273. 2015-07-15 03:47 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
  274. 2015-07-15 03:47 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
  275. 2015-07-15 03:47 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
  276. 2015-07-15 03:47 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  277. 2015-07-15 03:47 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
  278. 2015-07-15 03:47 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  279. 2015-07-15 03:47 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  280. 2015-07-15 03:47 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  281. 2015-07-15 03:47 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  282. 2015-07-15 03:47 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  283. 2015-07-15 03:47 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  284. 2015-07-15 03:47 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  285. 2015-07-15 03:47 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  286. 2015-07-15 03:47 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  287. 2015-07-15 03:47 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  288. 2015-07-15 03:47 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  289. 2015-07-15 03:47 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  290. 2015-07-15 03:47 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  291. 2015-07-15 03:47 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  292. 2015-07-15 03:47 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  293. 2015-07-15 03:47 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  294. 2015-07-15 03:47 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  295. 2015-07-15 03:47 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  296. 2015-07-15 03:47 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  297. 2015-07-15 03:47 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  298. 2015-07-15 03:47 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  299. 2015-07-15 03:47 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  300. 2015-07-15 03:47 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  301. 2015-07-15 03:47 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  302. 2015-07-15 03:47 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  303. 2015-07-15 03:47 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  304. 2015-07-15 03:47 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
  305. 2015-07-15 03:47 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  306. 2015-07-15 03:47 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  307. 2015-07-15 03:47 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  308. 2015-07-15 03:47 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  309. 2015-07-15 03:47 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  310. 2015-07-15 03:47 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  311. 2015-07-15 03:47 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  312. 2015-07-15 03:47 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  313. 2015-07-15 03:47 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  314. 2015-07-15 03:47 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  315. 2015-07-15 03:47 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  316. 2015-07-15 03:47 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  317. 2015-07-15 03:47 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
  318. 2015-07-15 03:47 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  319. 2015-07-15 03:47 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  320. 2015-07-15 03:47 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
  321. 2015-07-15 03:47 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  322. 2015-07-15 03:47 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  323. 2015-07-15 03:47 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  324. 2015-07-15 03:47 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  325. 2015-07-15 03:47 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  326. 2015-07-15 03:47 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  327. 2015-07-15 03:47 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  328. 2015-07-15 03:47 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  329. 2015-07-15 03:45 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  330. 2015-07-15 03:45 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  331. 2015-07-15 03:45 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  332. 2015-07-15 03:45 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  333. 2015-07-15 03:45 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  334. 2015-07-15 03:45 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  335. 2015-07-15 03:45 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  336. 2015-07-15 03:45 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  337. 2015-07-15 03:45 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  338. 2015-07-15 03:45 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  339. 2015-07-15 03:45 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  340. 2015-07-15 03:45 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  341. 2015-07-15 03:45 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  342. 2015-07-15 03:45 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  343. 2015-07-15 03:45 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  344. 2015-07-15 03:45 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  345. 2015-07-15 03:45 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  346. 2015-07-15 03:45 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  347. 2015-07-15 03:45 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  348. 2015-07-15 03:45 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  349. 2015-07-15 03:45 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  350. 2015-07-15 03:45 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  351. 2015-07-15 03:45 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  352. 2015-07-15 03:45 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  353. 2015-07-15 03:45 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  354. 2015-07-15 03:45 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  355. 2015-07-15 03:45 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  356. 2015-07-15 03:45 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  357. 2015-07-15 03:45 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  358. 2015-07-15 03:45 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  359. 2015-07-15 03:45 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  360. 2015-07-15 03:45 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  361. 2015-07-15 03:45 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  362. 2015-07-15 03:45 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  363. 2015-07-15 03:45 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  364. 2015-07-15 03:45 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  365. 2015-07-15 03:45 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  366. 2015-07-15 03:45 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  367. 2015-07-15 03:45 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  368. 2015-07-15 03:45 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  369. 2015-07-15 03:45 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  370. 2015-07-15 03:45 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  371. 2015-07-15 03:45 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  372. 2015-07-15 03:45 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  373. 2015-07-15 03:42 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
  374. 2015-07-15 03:42 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
  375. 2015-07-15 03:42 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
  376. 2015-07-15 03:42 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
  377. 2015-07-15 03:42 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
  378. 2015-07-15 03:42 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
  379. 2015-07-15 03:41 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
  380. 2015-07-15 03:41 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
  381. 2015-07-15 03:41 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
  382. 2015-07-15 03:41 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
  383. 2015-07-15 03:41 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
  384. 2015-07-15 03:41 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
  385. 2015-07-15 03:41 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
  386. 2015-07-15 03:41 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
  387.  
  388. ==================== One Month Modified files and folders ========
  389.  
  390. (If an entry is included in the fixlist, the file/folder will be moved.)
  391.  
  392. 2015-07-27 08:49 - 2014-08-24 12:06 - 00000000 ____D C:\Users\Kateřina\AppData\Roaming\Skype
  393. 2015-07-27 08:16 - 2014-08-22 21:17 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
  394. 2015-07-27 08:09 - 2015-06-19 11:09 - 00005518 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-6.job
  395. 2015-07-27 08:09 - 2015-06-19 11:09 - 00003138 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-1-6.job
  396. 2015-07-27 08:09 - 2014-08-22 11:16 - 00000000 ____D C:\ProgramData\MFAData
  397. 2015-07-27 07:56 - 2009-07-14 06:45 - 00023376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  398. 2015-07-27 07:56 - 2009-07-14 06:45 - 00023376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  399. 2015-07-27 07:15 - 2014-08-25 06:44 - 00000000 ____D C:\Program Files (x86)\trademanager
  400. 2015-07-27 07:13 - 2015-06-19 11:10 - 00002446 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-5.job
  401. 2015-07-27 07:13 - 2015-06-19 11:09 - 00005182 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-7.job
  402. 2015-07-27 07:13 - 2015-06-19 11:09 - 00003138 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-1-7.job
  403. 2015-07-27 07:13 - 2015-06-19 11:08 - 00005184 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-11.job
  404. 2015-07-27 07:13 - 2015-06-19 11:08 - 00004158 _____ C:\Windows\Tasks\fc7777a6-1514-4d68-ad2f-31153bee47b1-3.job
  405. 2015-07-27 07:13 - 2015-04-25 13:16 - 00000356 _____ C:\Windows\Tasks\Bidaily Synchronize Task.job
  406. 2015-07-27 07:13 - 2014-08-20 15:59 - 01911659 _____ C:\Windows\WindowsUpdate.log
  407. 2015-07-26 19:38 - 2015-06-19 17:15 - 00000000 ____D C:\Windows\SysWOW64\vbox
  408. 2015-07-26 19:38 - 2015-06-19 17:15 - 00000000 ____D C:\Windows\system32\vbox
  409. 2015-07-26 19:10 - 2014-08-27 17:58 - 00000000 ____D C:\ProgramData\boost_interprocess
  410. 2015-07-26 19:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  411. 2015-07-26 19:09 - 2009-07-14 06:51 - 00040248 _____ C:\Windows\setupact.log
  412. 2015-07-26 19:08 - 2015-06-19 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
  413. 2015-07-26 19:08 - 2014-08-23 05:25 - 00303280 _____ C:\Windows\PFRO.log
  414. 2015-07-26 19:06 - 2015-06-19 17:11 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
  415. 2015-07-26 19:06 - 2015-06-19 17:10 - 00447944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
  416. 2015-07-26 19:06 - 2015-06-19 17:10 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
  417. 2015-07-26 19:06 - 2015-06-19 17:10 - 00150160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
  418. 2015-07-26 19:06 - 2015-06-19 17:10 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
  419. 2015-07-26 19:06 - 2015-06-19 17:10 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
  420. 2015-07-26 19:06 - 2015-06-19 17:10 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
  421. 2015-07-26 19:06 - 2015-06-19 17:10 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
  422. 2015-07-26 19:05 - 2015-06-19 17:10 - 01048856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
  423. 2015-07-26 19:04 - 2015-04-08 11:17 - 00000000 ___SD C:\Windows\system32\GWX
  424. 2015-07-24 18:21 - 2015-04-29 14:43 - 00013515 _____ C:\Users\Kateřina\Desktop\Týdenní časový snímek.xlsx
  425. 2015-07-24 10:58 - 2015-05-25 13:32 - 00000000 ____D C:\WZP2010
  426. 2015-07-24 07:02 - 2015-06-17 08:07 - 00000024 _____ C:\Users\Kateřina\AppData\Roaming\appdataFr25.bin
  427. 2015-07-24 07:01 - 2009-07-14 06:45 - 00436576 _____ C:\Windows\system32\FNTCACHE.DAT
  428. 2015-07-22 12:06 - 2015-06-19 12:10 - 00000000 ____D C:\ProgramData\MujduPuu
  429. 2015-07-22 12:06 - 2015-06-19 11:08 - 00000000 ____D C:\Program Files (x86)\CinemaP-1.9cV15.06
  430. 2015-07-21 11:48 - 2015-06-01 16:13 - 00000000 ___RD C:\Users\Kateřina\Desktop\Formuláře
  431. 2015-07-21 10:48 - 2015-04-08 20:22 - 00020853 _____ C:\Users\Kateřina\Desktop\Seznam obchodních příležitostí.ods
  432. 2015-07-20 10:10 - 2009-07-14 17:18 - 00668792 _____ C:\Windows\system32\perfh005.dat
  433. 2015-07-20 10:10 - 2009-07-14 17:18 - 00141420 _____ C:\Windows\system32\perfc005.dat
  434. 2015-07-20 10:10 - 2009-07-14 07:13 - 01583226 _____ C:\Windows\system32\PerfStringBackup.INI
  435. 2015-07-20 07:39 - 2014-08-22 11:09 - 00000000 ____D C:\Program Files (x86)\Opera
  436. 2015-07-17 04:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
  437. 2015-07-17 03:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
  438. 2015-07-17 03:34 - 2015-04-08 11:17 - 00000000 ___SD C:\Windows\SysWOW64\GWX
  439. 2015-07-17 03:34 - 2014-12-10 04:25 - 00000000 ____D C:\Windows\system32\appraiser
  440. 2015-07-17 03:34 - 2014-08-24 05:57 - 00000000 ___SD C:\Windows\system32\CompatTel
  441. 2015-07-17 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
  442. 2015-07-17 03:15 - 2014-09-25 12:09 - 00000000 ____D C:\ProgramData\Microsoft Help
  443. 2015-07-15 20:42 - 2014-08-22 21:17 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  444. 2015-07-15 20:42 - 2014-08-22 21:17 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  445. 2015-07-15 20:42 - 2014-08-22 21:17 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  446. 2015-07-15 20:42 - 2014-08-22 11:09 - 00003844 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1408698577
  447. 2015-07-15 11:52 - 2014-08-22 12:07 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  448. 2015-07-15 11:50 - 2014-12-25 20:12 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
  449. 2015-07-03 08:02 - 2014-10-14 19:53 - 00000000 ____D C:\Users\Kateřina\Desktop\výzva
  450. 2015-07-02 13:48 - 2014-08-24 12:06 - 00000000 ____D C:\ProgramData\Skype
  451. 2015-06-29 16:36 - 2015-05-25 13:33 - 00000566 _____ C:\Users\Kateřina\Desktop\Einstein - program pro poradce.lnk
  452. 2015-06-29 16:36 - 2015-05-25 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wüstenrot
  453. 2015-06-27 12:35 - 2014-08-27 21:12 - 00000000 ____D C:\Users\Kateřina\Downloads\mp3
  454.  
  455. ==================== Files in the root of some directories =======
  456.  
  457. 2013-10-14 04:44 - 2013-10-14 04:44 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
  458. 2015-06-17 08:07 - 2015-07-24 07:02 - 0000024 _____ () C:\Users\Kateřina\AppData\Roaming\appdataFr25.bin
  459. 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Kateřina\AppData\Roaming\qJYl2eXQ
  460. 2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Kateřina\AppData\Roaming\qJYl2eXQ.exe
  461. 2015-06-19 11:37 - 2015-06-19 11:37 - 0000000 _____ () C:\Users\Kateřina\AppData\Local\Temp.dat
  462.  
  463. Some files in TEMP:
  464. ====================
  465. C:\Users\Kateřina\AppData\Local\Temp\5459.exe
  466. C:\Users\Kateřina\AppData\Local\Temp\DC7C.exe
  467. C:\Users\Kateřina\AppData\Local\Temp\EAD582D.exe
  468. C:\Users\Kateřina\AppData\Local\Temp\mytmpinstaller.exe
  469. C:\Users\Kateřina\AppData\Local\Temp\ReimagePackage.exe
  470. C:\Users\Kateřina\AppData\Local\Temp\ReiSysUpdate.exe
  471. C:\Users\Kateřina\AppData\Local\Temp\setup_IOC_einstein_v336.exe
  472. C:\Users\Kateřina\AppData\Local\Temp\SkypeSetup.exe
  473. C:\Users\Kateřina\AppData\Local\Temp\SpOrder.dll
  474. C:\Users\Kateřina\AppData\Local\Temp\tu17p84.exe
  475.  
  476.  
  477. ==================== Bamital & volsnap Check =================
  478.  
  479. (There is no automatic fix for files that do not pass verification.)
  480.  
  481. C:\Windows\System32\winlogon.exe => File is digitally signed
  482. C:\Windows\System32\wininit.exe => File is digitally signed
  483. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  484. C:\Windows\explorer.exe => File is digitally signed
  485. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  486. C:\Windows\System32\svchost.exe => File is digitally signed
  487. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  488. C:\Windows\System32\services.exe => File is digitally signed
  489. C:\Windows\System32\User32.dll => File is digitally signed
  490. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  491. C:\Windows\System32\userinit.exe => File is digitally signed
  492. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  493. C:\Windows\System32\rpcss.dll => File is digitally signed
  494. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  495.  
  496.  
  497. LastRegBack: 2015-07-24 11:36
  498.  
  499. ==================== End of log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!