Kontrola HJT Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Zamčeno
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 28 čer 2016 14:40

2016-06-22 19:17 - 2016-06-22 19:17 - 00388608 _____ (Trend Micro Inc.) C:\Users\hana.kaja\Desktop\HijackThis.exe
2016-06-22 16:58 - 2016-06-22 16:58 - 00000000 ____D C:\Users\hana.kaja\AppData\Roaming\AVG
2016-06-22 16:56 - 2016-06-22 16:56 - 00000000 ____D C:\Users\hana\AppData\Roaming\TuneUp Software
2016-06-22 16:55 - 2016-06-23 12:31 - 00000000 ___HD C:\$AVG
2016-06-22 16:50 - 2016-06-23 12:34 - 00000000 ____D C:\ProgramData\MFAData
2016-06-22 16:50 - 2016-06-22 16:50 - 00000000 ____D C:\Users\hana\AppData\Local\MFAData
2016-06-22 16:49 - 2016-06-23 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-06-22 16:48 - 2016-06-23 12:34 - 00000000 ____D C:\Users\hana.kaja\AppData\Local\Avg
2016-06-22 16:47 - 2016-06-23 12:37 - 00000000 ____D C:\Program Files (x86)\AVG
2016-06-22 16:33 - 2016-06-22 16:33 - 00000000 ____D C:\ProgramData\Simply Super Software
2016-06-22 16:31 - 2016-06-22 16:32 - 44507216 _____ C:\Users\hana\Downloads\trjsetup693.exe
2016-06-22 16:20 - 2016-06-22 16:20 - 00000000 ____H C:\asc_rdflag
2016-06-22 15:55 - 2016-06-23 12:36 - 00000000 ____D C:\Users\hana\AppData\Local\AvgSetupLog
2016-06-22 14:24 - 2016-06-27 17:34 - 00000000 ____D C:\Users\hana.kaja\Downloads\útek
2016-06-21 13:32 - 2016-06-21 13:32 - 00002848 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-06-21 13:32 - 2016-06-21 13:32 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-06-21 13:32 - 2016-06-21 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-06-21 13:32 - 2016-06-21 13:32 - 00000000 ____D C:\Program Files\CCleaner
2016-06-20 20:37 - 2016-06-20 20:37 - 00000000 ____D C:\WINDOWS\IObit
2016-06-20 20:36 - 2016-06-20 20:37 - 00002239 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2016-06-20 16:39 - 2016-06-20 17:55 - 1397151248 _____ C:\Users\hana.kaja\Downloads\Sinister 2 cz dabing.avi
2016-06-17 07:35 - 2016-06-14 20:33 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-06-17 07:35 - 2016-06-14 20:33 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-16 21:18 - 2016-06-15 17:14 - 00006148 _____ C:\Users\hana\Desktop\.DS_Store
2016-06-16 18:39 - 2016-06-16 18:39 - 09717952 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2016-06-15 22:55 - 2016-06-15 22:57 - 101903005 _____ C:\Users\hana\Downloads\ISS-TH_2016__CD_V0.7z
2016-06-15 05:46 - 2016-05-28 08:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-06-15 05:46 - 2016-05-28 08:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-06-15 05:46 - 2016-05-28 07:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-06-15 05:46 - 2016-05-28 07:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-06-15 05:46 - 2016-05-28 06:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-06-15 05:46 - 2016-05-28 06:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-06-15 05:46 - 2016-05-28 06:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-06-15 05:46 - 2016-05-28 06:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-06-15 05:46 - 2016-05-28 06:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-06-15 05:46 - 2016-05-28 06:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-06-15 05:46 - 2016-05-28 06:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-06-15 05:46 - 2016-05-28 06:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-06-15 05:46 - 2016-05-28 06:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-06-15 05:46 - 2016-05-28 06:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-06-15 05:46 - 2016-05-28 06:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-06-15 05:46 - 2016-05-28 06:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-06-15 05:46 - 2016-05-28 06:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-06-15 05:46 - 2016-05-28 06:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-06-15 05:46 - 2016-05-28 06:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-06-15 05:46 - 2016-05-28 06:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-06-15 05:46 - 2016-05-28 06:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-06-15 05:46 - 2016-05-28 06:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-06-15 05:46 - 2016-05-28 06:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-06-15 05:46 - 2016-05-28 06:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-06-15 05:46 - 2016-05-28 06:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-06-15 05:46 - 2016-05-28 06:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-06-15 05:46 - 2016-05-28 06:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-06-15 05:46 - 2016-05-28 06:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-06-15 05:46 - 2016-05-28 06:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-06-15 05:46 - 2016-05-28 06:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-06-15 05:46 - 2016-05-28 06:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-06-15 05:46 - 2016-05-28 06:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-06-15 05:46 - 2016-05-28 06:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-06-15 05:46 - 2016-05-28 06:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-06-15 05:46 - 2016-05-28 06:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-06-15 05:46 - 2016-05-28 06:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-06-15 05:46 - 2016-05-28 06:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-06-15 05:46 - 2016-05-28 06:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-06-15 05:46 - 2016-05-28 06:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-06-15 05:46 - 2016-05-28 06:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-06-15 05:46 - 2016-05-28 06:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-06-15 05:46 - 2016-05-28 06:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-06-15 05:46 - 2016-05-28 06:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-06-15 05:46 - 2016-05-28 06:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-06-15 05:46 - 2016-05-28 06:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-06-15 05:46 - 2016-05-28 06:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-06-15 05:46 - 2016-05-28 06:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-15 05:46 - 2016-05-28 06:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-06-15 05:46 - 2016-05-28 06:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-06-15 05:46 - 2016-05-28 06:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-15 05:46 - 2016-05-28 06:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-06-15 05:46 - 2016-05-28 05:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-06-15 05:46 - 2016-05-28 05:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-06-15 05:45 - 2016-05-28 08:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-06-15 05:45 - 2016-05-28 08:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-06-15 05:45 - 2016-05-28 08:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-06-15 05:45 - 2016-05-28 08:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-06-15 05:45 - 2016-05-28 07:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2016-06-15 05:45 - 2016-05-28 07:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-06-15 05:45 - 2016-05-28 07:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2016-06-15 05:45 - 2016-05-28 07:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-06-15 05:45 - 2016-05-28 07:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2016-06-15 05:45 - 2016-05-28 07:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-06-15 05:45 - 2016-05-28 07:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-06-15 05:45 - 2016-05-28 07:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-06-15 05:45 - 2016-05-28 07:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-06-15 05:45 - 2016-05-28 07:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2016-06-15 05:45 - 2016-05-28 07:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-06-15 05:45 - 2016-05-28 07:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-06-15 05:45 - 2016-05-28 07:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2016-06-15 05:45 - 2016-05-28 07:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-06-15 05:45 - 2016-05-28 07:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-06-15 05:45 - 2016-05-28 07:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-06-15 05:45 - 2016-05-28 07:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-06-15 05:45 - 2016-05-28 07:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-06-15 05:45 - 2016-05-28 07:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-06-15 05:45 - 2016-05-28 07:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-06-15 05:45 - 2016-05-28 07:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-06-15 05:45 - 2016-05-28 07:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-06-15 05:45 - 2016-05-28 07:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-06-15 05:45 - 2016-05-28 07:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-06-15 05:45 - 2016-05-28 07:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-06-15 05:45 - 2016-05-28 07:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-06-15 05:45 - 2016-05-28 07:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-06-15 05:45 - 2016-05-28 07:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-06-15 05:45 - 2016-05-28 07:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-06-15 05:45 - 2016-05-28 07:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-15 05:45 - 2016-05-28 07:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-06-15 05:45 - 2016-05-28 07:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-06-15 05:45 - 2016-05-28 07:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-06-15 05:45 - 2016-05-28 07:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2016-06-15 05:45 - 2016-05-28 07:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2016-06-15 05:45 - 2016-05-28 06:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-06-15 05:45 - 2016-05-28 06:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-06-15 05:45 - 2016-05-28 06:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-06-15 05:45 - 2016-05-28 06:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-06-15 05:45 - 2016-05-28 06:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-06-15 05:45 - 2016-05-28 06:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-06-15 05:45 - 2016-05-28 06:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
2016-06-15 05:45 - 2016-05-28 06:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-06-15 05:45 - 2016-05-28 06:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-06-15 05:45 - 2016-05-28 06:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2016-06-15 05:45 - 2016-05-28 06:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2016-06-15 05:45 - 2016-05-28 06:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-06-15 05:45 - 2016-05-28 06:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-15 05:45 - 2016-05-28 06:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-06-15 05:45 - 2016-05-28 06:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-06-15 05:45 - 2016-05-28 06:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-06-15 05:45 - 2016-05-28 06:25 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-06-15 05:45 - 2016-05-28 06:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-06-15 05:45 - 2016-05-28 06:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-06-15 05:45 - 2016-05-28 06:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
2016-06-15 05:45 - 2016-05-28 06:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-06-15 05:45 - 2016-05-28 06:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-06-15 05:45 - 2016-05-28 06:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-06-15 05:45 - 2016-05-28 06:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2016-06-15 05:45 - 2016-05-28 06:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
2016-06-15 05:45 - 2016-05-28 06:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-06-15 05:45 - 2016-05-28 06:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2016-06-15 05:45 - 2016-05-28 06:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-06-15 05:45 - 2016-05-28 06:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-06-15 05:45 - 2016-05-28 06:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2016-06-15 05:45 - 2016-05-28 06:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-06-15 05:45 - 2016-05-28 06:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-06-15 05:45 - 2016-05-28 06:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2016-06-15 05:45 - 2016-05-28 06:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-06-15 05:45 - 2016-05-28 06:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2016-06-15 05:45 - 2016-05-28 06:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-06-15 05:45 - 2016-05-28 06:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-06-15 05:45 - 2016-05-28 06:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2016-06-15 05:45 - 2016-05-28 06:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-06-15 05:45 - 2016-05-28 06:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-06-15 05:45 - 2016-05-28 06:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2016-06-15 05:45 - 2016-05-28 06:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2016-06-15 05:45 - 2016-05-28 06:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-06-15 05:45 - 2016-05-28 06:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-06-15 05:45 - 2016-05-28 06:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-15 05:45 - 2016-05-28 06:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-06-15 05:45 - 2016-05-28 06:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-06-15 05:45 - 2016-05-28 06:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-06-15 05:45 - 2016-05-28 06:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-06-15 05:45 - 2016-05-28 06:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-06-15 05:45 - 2016-05-28 06:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-06-15 05:45 - 2016-05-28 06:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-06-15 05:45 - 2016-05-28 06:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-06-15 05:45 - 2016-05-28 06:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2016-06-15 05:45 - 2016-05-28 06:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2016-06-15 05:45 - 2016-05-28 06:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-06-15 05:45 - 2016-05-28 06:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-06-15 05:45 - 2016-05-28 06:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2016-06-15 05:45 - 2016-05-28 06:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-06-15 05:45 - 2016-05-28 06:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-06-15 05:45 - 2016-05-28 06:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-06-15 05:45 - 2016-05-28 06:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-06-15 05:45 - 2016-05-28 06:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-06-15 05:45 - 2016-05-28 06:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-06-15 05:45 - 2016-05-28 06:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-06-15 05:45 - 2016-05-28 06:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-06-15 05:45 - 2016-05-28 06:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-06-15 05:45 - 2016-05-28 06:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-06-15 05:45 - 2016-05-28 06:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-06-15 05:45 - 2016-05-28 06:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-06-15 05:45 - 2016-05-28 06:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-06-15 05:45 - 2016-05-28 06:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2016-06-15 05:45 - 2016-05-28 06:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-06-15 05:45 - 2016-05-28 06:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-06-15 05:45 - 2016-05-28 06:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-06-15 05:45 - 2016-05-28 06:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-06-15 05:45 - 2016-05-28 06:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2016-06-15 05:45 - 2016-05-28 06:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-06-15 05:45 - 2016-05-28 06:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-06-15 05:45 - 2016-05-28 06:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-06-15 05:45 - 2016-05-28 06:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-06-15 05:45 - 2016-05-28 06:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-06-15 05:45 - 2016-05-28 06:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-06-15 05:45 - 2016-05-28 06:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-06-15 05:45 - 2016-05-28 06:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-06-15 05:45 - 2016-05-28 06:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-06-15 05:45 - 2016-05-28 06:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2016-06-15 05:45 - 2016-05-28 06:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-06-15 05:45 - 2016-05-28 06:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-06-15 05:45 - 2016-05-28 06:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-06-15 05:45 - 2016-05-28 06:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-06-15 05:45 - 2016-05-28 06:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-06-15 05:45 - 2016-05-28 06:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-06-15 05:45 - 2016-05-28 06:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-06-15 05:45 - 2016-05-28 06:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-06-15 05:45 - 2016-05-28 06:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-06-15 05:45 - 2016-05-28 06:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-06-15 05:45 - 2016-05-28 06:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-06-15 05:45 - 2016-05-28 05:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-06-15 05:45 - 2016-05-28 05:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-06-15 05:45 - 2016-05-28 05:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-06-15 05:45 - 2016-05-28 05:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-06-15 05:45 - 2016-05-28 05:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-06-15 05:45 - 2016-05-28 05:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-06-15 05:45 - 2016-05-28 05:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-06-15 05:06 - 2016-06-15 05:06 - 00053776 _____ (IVT Corporation.) C:\WINDOWS\system32\Drivers\btcusb.sys
2016-06-15 05:06 - 2016-06-15 05:06 - 00021496 _____ (IVT Corporation.) C:\WINDOWS\system32\btinstall.dll
2016-06-15 05:05 - 2016-06-15 05:05 - 00101368 _____ (ASUS Corporation) C:\WINDOWS\system32\Drivers\AsusTP.sys
2016-06-14 22:06 - 2016-06-14 22:06 - 00000000 ____D C:\Users\hana\AppData\Local\Macromedia
2016-06-14 15:38 - 2016-06-14 16:31 - 975388880 _____ C:\Users\hana.kaja\Downloads\1935- marysa.AVI
2016-06-11 19:50 - 2016-06-11 20:31 - 734736384 _____ C:\Users\hana\Downloads\Malý kousek nebe (2011).avi
2016-06-09 20:10 - 2016-06-26 23:04 - 552193361 _____ C:\WINDOWS\MEMORY.DMP
2016-06-03 06:58 - 2016-06-03 06:58 - 00002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2016-06-03 06:58 - 2016-06-03 06:58 - 00002118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2016-06-02 14:17 - 2016-06-02 14:17 - 00000000 ____D C:\Users\hana.kaja\Downloads\kniha 3
2016-06-01 21:46 - 2016-06-23 12:26 - 00000000 ____D C:\Users\hana\AppData\Local\tkdata

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-28 14:17 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-28 14:17 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-06-28 14:07 - 2016-05-11 05:02 - 00000978 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA.job
2016-06-28 13:54 - 2016-05-11 05:49 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7.job
2016-06-28 13:49 - 2015-07-15 20:44 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA.job
2016-06-28 13:40 - 2015-12-12 10:33 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-28 13:39 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-06-28 13:38 - 2015-12-12 10:11 - 00000000 ____D C:\Users\hana.kaja
2016-06-28 12:39 - 2016-05-20 09:22 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-06-28 12:38 - 2015-03-12 19:15 - 00000000 ____D C:\Program Files (x86)\IObit
2016-06-28 12:35 - 2015-12-12 10:11 - 00000000 ____D C:\Users\hana
2016-06-28 11:11 - 2015-02-01 16:10 - 00004188 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{959CF854-2498-4D05-979C-D4D7689B671E}
2016-06-28 08:03 - 2015-10-30 20:31 - 00751272 _____ C:\WINDOWS\system32\perfh005.dat
2016-06-28 08:03 - 2015-10-30 20:31 - 00150860 _____ C:\WINDOWS\system32\perfc005.dat
2016-06-28 08:03 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-06-28 08:03 - 2015-07-31 18:35 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-28 05:54 - 2016-05-11 05:49 - 00000864 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core.job
2016-06-28 04:44 - 2015-02-07 18:57 - 00004190 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C543A464-C454-42A2-AE2D-D1E854872809}
2016-06-27 21:49 - 2013-12-16 18:57 - 00000000 ___RD C:\Users\hana\Desktop\foto
2016-06-27 16:52 - 2014-04-23 10:22 - 00000000 ___RD C:\Users\hana\Desktop\programy
2016-06-27 16:37 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-06-27 16:37 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-06-27 15:44 - 2013-06-03 08:40 - 00000000 ____D C:\Users\hana\AppData\Local\Packages
2016-06-27 13:01 - 2016-01-06 10:38 - 00000000 ____D C:\Users\hana.kaja\AppData\Roaming\Anvsoft
2016-06-27 05:07 - 2016-05-11 05:02 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core.job
2016-06-26 23:04 - 2016-03-08 00:38 - 00000000 ____D C:\WINDOWS\Minidump
2016-06-26 22:56 - 2014-04-23 10:21 - 00000000 ____D C:\Users\hana\AppData\Roaming\vlc
2016-06-25 05:06 - 2016-05-20 09:22 - 00000000 ____D C:\Program Files\TrueKey
2016-06-24 06:31 - 2016-05-20 09:33 - 00001249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk
2016-06-23 23:43 - 2014-02-28 15:48 - 00000000 ____D C:\Users\hana\AppData\Roaming\Skype
2016-06-23 21:39 - 2014-02-28 15:48 - 00000000 ____D C:\ProgramData\Skype
2016-06-23 18:25 - 2016-02-29 22:09 - 00000000 ____D C:\Program Files (x86)\Valve
2016-06-23 17:31 - 2014-03-20 13:00 - 00000000 ____D C:\ProgramData\AVAST Software
2016-06-23 12:41 - 2015-03-12 19:16 - 00000000 ____D C:\ProgramData\IObit
2016-06-23 12:41 - 2015-03-12 19:15 - 00000000 ____D C:\Users\hana\AppData\Roaming\IObit
2016-06-23 12:31 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-06-23 12:24 - 2016-05-12 05:49 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-06-23 06:33 - 2012-10-26 08:25 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-06-22 21:06 - 2015-12-12 10:11 - 00000000 ____D C:\Users\Administrator
2016-06-22 19:14 - 2013-12-20 21:20 - 00000000 ____D C:\Users\hana.kaja\AppData\Local\VirtualStore
2016-06-22 18:23 - 2015-09-26 09:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-06-22 18:23 - 2015-06-21 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disney Interactive
2016-06-22 17:46 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-06-22 17:46 - 2012-10-26 08:40 - 00000000 ____D C:\ProgramData\Temp
2016-06-22 17:03 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-06-22 16:20 - 2016-01-08 09:53 - 74678272 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag.bak
2016-06-22 16:20 - 2016-01-08 09:53 - 00606208 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag.bak
2016-06-22 16:20 - 2016-01-08 09:53 - 00098304 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
2016-06-22 16:20 - 2016-01-08 09:53 - 00032768 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2016-06-21 16:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-06-20 20:36 - 2015-12-12 02:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-06-20 20:32 - 2013-06-02 19:25 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-20 12:38 - 2016-03-12 16:53 - 00000000 ____D C:\Users\hana.kaja\AppData\Roaming\Gyazo
2016-06-20 12:38 - 2016-01-19 17:53 - 00000000 ____D C:\ProgramData\Gyazo
2016-06-20 05:14 - 2015-12-12 10:03 - 00218928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-20 05:10 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-06-20 05:10 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-06-20 05:09 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-06-18 04:54 - 2013-12-23 22:06 - 00002454 _____ C:\Users\hana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-18 04:54 - 2013-12-23 22:06 - 00002446 _____ C:\Users\hana\Desktop\Google Chrome.lnk
2016-06-18 04:44 - 2014-06-18 04:56 - 00002479 _____ C:\Users\hana.kaja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-18 04:44 - 2014-06-18 04:56 - 00002471 _____ C:\Users\hana.kaja\Desktop\Google Chrome.lnk
2016-06-17 07:35 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-16 18:39 - 2016-05-20 09:22 - 00003900 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-06-15 22:40 - 2014-07-03 15:17 - 00484008 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-06-15 17:05 - 2013-12-26 21:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-06-15 16:51 - 2013-12-26 21:34 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-07 18:06 - 2015-10-24 19:12 - 00003500 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachineDaily
2016-06-07 18:06 - 2015-10-24 19:12 - 00003364 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine
2016-06-07 18:06 - 2015-10-24 19:12 - 00000000 ____D C:\Program Files (x86)\Gyazo
2016-06-06 18:51 - 2015-12-12 03:02 - 00000000 ____D C:\Users\hana\AppData\Roaming\Anvsoft
2016-06-04 14:25 - 2016-05-03 06:35 - 00000000 ____D C:\Users\hana.kaja\Downloads\muzika
2016-06-02 14:21 - 2012-08-04 19:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-06-02 14:20 - 2014-01-21 16:58 - 00000000 ____D C:\Program Files (x86)\MSECache
2016-05-30 20:46 - 2014-10-28 17:41 - 00000000 ____D C:\Users\hana\Desktop\hdb

==================== Files in the root of some directories =======

2013-12-16 17:28 - 2015-09-26 14:37 - 0000500 _____ () C:\Users\hana\AppData\Roaming\sp_data.sys
2015-05-17 10:10 - 2016-03-29 19:01 - 0000058 _____ () C:\Users\hana\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2014-07-15 16:46 - 2015-11-18 13:46 - 1426411 _____ () C:\Users\hana\AppData\Local\Tempmusic.ogg
2012-08-04 19:37 - 2012-07-30 08:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-04 19:37 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-06-25 13:25

==================== End of FRST.txt ============================
Nahoru
Reklama
Top
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola HJT

Příspěvekod jaro3 » 28 čer 2016 16:15

Advanced SystemCare odinstalován?

kromě nákaz smažeme i zbytky AVG , Esetu ap.

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CloseProcesses:
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
Task: {06AC8556-E752-4F0B-BE02-93BB33354D12} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {0FFB1404-AC52-4AF1-BD5F-FA9A016310BE} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {282AEC53-D13F-43AC-B2C0-4C74E20E770C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-13] (Google Inc.)
Task: {2A92397D-8F02-447E-87E5-41E953D1D3B0} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {35971B34-558E-45A7-96CA-ED5871D3036B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-13] (Google Inc.)
Task: {44BD211C-AC21-416E-AD6A-ADABBC8D80BF} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {4E948EBD-E329-45C3-AC4F-945B68745467} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {4F9C97C0-039D-46FF-94ED-4AD16D76BCAA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {6252FCF3-9DDF-413E-A028-4801EF71E736} - System32\Tasks\{37F6C8AD-AEAF-45EF-95A8-CD9BA6697109} => pcalua.exe -a E:\Detinst.exe -d E:\
Task: {72299540-42D4-4838-9833-9473DD3FCAAC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {97866DBD-4F50-4E72-B18E-67C5EE664895} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {9A83BF8F-FB72-4041-86D0-799F6224909F} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A225CE54-D0C9-48BF-AA86-1C694DC9EB94} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A226023F-9449-4F55-BBE3-2EAF3AEE5768} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {C02EC99E-68DC-482A-84D1-D9488679CBFE} - System32\Tasks\{08FF3A81-B17C-4623-892C-3942953975CB} => pcalua.exe -a E:\Setup.exe -d E:\
Task: {CD392DF2-2969-4F4A-93D5-7BC98582633F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {D4E121BB-0D15-42DD-AB90-11785AA035F1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {D8967AC7-85AF-4B37-9D0F-099849247D06} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7 => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {F29BEB09-FE8A-4585-B71E-FCF57450AC94} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F85BD57E-5100-4E6B-96CE-0001BBA1C763} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core.job => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA.job => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7.job => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core.job => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA.job => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Build-a-lot 4 - Power Source.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=648250 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Delicious Emily's Childhood Memories.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=721350 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Jewel Quest Mysteries 2.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=652850 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Snark Busters - Welcome to the Club.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=700350 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\The Treasures of Montezuma 3.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=729250 (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> hxxp://linktarget.ashampoo.com/linktarg ... os=Metro4C:\ProgramData\Ashampoo\ico_ashampoo_marketplace.ico( (No File)
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\100sexlinks.com -> 100sexlinks.com
FirewallRules: [{27E71F92-0227-4147-AD63-8025A32A00F5}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{0EFB0D9C-D893-4F80-84A7-B7266BD5597F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
C:\Program Files (x86)\AVG
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKU\S-1-5-21-3984873366-1506181999-1170441192-1031\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S2 avgsvc; "C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe" [X]
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [220232 2013-08-20] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [72400 2015-07-14] (ESET)
C:\Windows\system32\DRIVERS\epfw.sys
C:\Windows\System32\DRIVERS\epfwwfp.sys
C:\Users\hana.kaja\AppData\Roaming\AVG
C:\$AVG
C:\Users\hana.kaja\AppData\Local\Avg
C:\Program Files (x86)\AVG
C:\Users\hana\AppData\Local\AvgSetupLog
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
C:\ProgramData\SetStretch.cmd
C:\ProgramData\SetStretch.exe

EmptyTemp:
End

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt


Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.


Aktualizuj javu:
http://www.oracle.com/technetwork/java/ ... 33155.html
Java SE Runtime Environment 8

Klikni na Accept License Agreement
Vyber si OS (Windows nebo Windows x64, Offline Installation)
jre-8-windows-i586-p.exe nebo
jre-8-windows-x64.exe
Stáhni ( download) a nainstaluj.
Ostatní javy odeber v přidat/odebrat programy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 28 čer 2016 16:20

Advanced SystemCare je odinstalovaný
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola HJT

Příspěvekod jaro3 » 28 čer 2016 16:24

Tak pokračujte.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 28 čer 2016 16:55

Fix result of Farbar Recovery Scan Tool (x64) Version: 26-06-2016 02
Ran by Mikli (2016-06-28 16:47:12) Run:2
Running from C:\Users\hana.kaja\Desktop
Loaded Profiles: Mikli & hana (Available Profiles: Mikli & hana & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\hana.kaja\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
Task: {06AC8556-E752-4F0B-BE02-93BB33354D12} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {0FFB1404-AC52-4AF1-BD5F-FA9A016310BE} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {282AEC53-D13F-43AC-B2C0-4C74E20E770C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-13] (Google Inc.)
Task: {2A92397D-8F02-447E-87E5-41E953D1D3B0} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {35971B34-558E-45A7-96CA-ED5871D3036B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-13] (Google Inc.)
Task: {44BD211C-AC21-416E-AD6A-ADABBC8D80BF} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {4E948EBD-E329-45C3-AC4F-945B68745467} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {4F9C97C0-039D-46FF-94ED-4AD16D76BCAA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {6252FCF3-9DDF-413E-A028-4801EF71E736} - System32\Tasks\{37F6C8AD-AEAF-45EF-95A8-CD9BA6697109} => pcalua.exe -a E:\Detinst.exe -d E:\
Task: {72299540-42D4-4838-9833-9473DD3FCAAC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {97866DBD-4F50-4E72-B18E-67C5EE664895} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {9A83BF8F-FB72-4041-86D0-799F6224909F} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A225CE54-D0C9-48BF-AA86-1C694DC9EB94} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A226023F-9449-4F55-BBE3-2EAF3AEE5768} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {C02EC99E-68DC-482A-84D1-D9488679CBFE} - System32\Tasks\{08FF3A81-B17C-4623-892C-3942953975CB} => pcalua.exe -a E:\Setup.exe -d E:\
Task: {CD392DF2-2969-4F4A-93D5-7BC98582633F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {D4E121BB-0D15-42DD-AB90-11785AA035F1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {D8967AC7-85AF-4B37-9D0F-099849247D06} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7 => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {F29BEB09-FE8A-4585-B71E-FCF57450AC94} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F85BD57E-5100-4E6B-96CE-0001BBA1C763} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core.job => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA.job => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7.job => C:\Users\hana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core.job => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA.job => C:\Users\hana.kaja\AppData\Local\Google\Update\GoogleUpdate.exe
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Build-a-lot 4 - Power Source.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=648250 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Delicious Emily's Childhood Memories.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=721350 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Jewel Quest Mysteries 2.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=652850 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Snark Busters - Welcome to the Club.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=700350 (No File)
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\The Treasures of Montezuma 3.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=729250 (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> hxxp://linktarget.ashampoo.com/linktarg ... os=Metro4C:\ProgramData\Ashampoo\ico_ashampoo_marketplace.ico( (No File)
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\...\100sexlinks.com -> 100sexlinks.com
FirewallRules: [{27E71F92-0227-4147-AD63-8025A32A00F5}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{0EFB0D9C-D893-4F80-84A7-B7266BD5597F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
C:\Program Files (x86)\AVG
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3984873366-1506181999-1170441192-1031 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKU\S-1-5-21-3984873366-1506181999-1170441192-1031\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S2 avgsvc; "C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe" [X]
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [220232 2013-08-20] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [72400 2015-07-14] (ESET)
C:\Windows\system32\DRIVERS\epfw.sys
C:\Windows\System32\DRIVERS\epfwwfp.sys
C:\Users\hana.kaja\AppData\Roaming\AVG
C:\$AVG
C:\Users\hana.kaja\AppData\Local\Avg
C:\Program Files (x86)\AVG
C:\Users\hana\AppData\Local\AvgSetupLog
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
C:\ProgramData\SetStretch.cmd
C:\ProgramData\SetStretch.exe

EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{06AC8556-E752-4F0B-BE02-93BB33354D12} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FFB1404-AC52-4AF1-BD5F-FA9A016310BE} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{282AEC53-D13F-43AC-B2C0-4C74E20E770C} => key not found.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2A92397D-8F02-447E-87E5-41E953D1D3B0} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35971B34-558E-45A7-96CA-ED5871D3036B} => key not found.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44BD211C-AC21-416E-AD6A-ADABBC8D80BF} => key not found.
C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GyazoUpdateTaskMachine => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E948EBD-E329-45C3-AC4F-945B68745467} => key not found.
C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachineDaily => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GyazoUpdateTaskMachineDaily => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F9C97C0-039D-46FF-94ED-4AD16D76BCAA} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6252FCF3-9DDF-413E-A028-4801EF71E736} => key not found.
C:\WINDOWS\System32\Tasks\{37F6C8AD-AEAF-45EF-95A8-CD9BA6697109} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{37F6C8AD-AEAF-45EF-95A8-CD9BA6697109} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72299540-42D4-4838-9833-9473DD3FCAAC} => key not found.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97866DBD-4F50-4E72-B18E-67C5EE664895} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A83BF8F-FB72-4041-86D0-799F6224909F} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A225CE54-D0C9-48BF-AA86-1C694DC9EB94} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A226023F-9449-4F55-BBE3-2EAF3AEE5768} => key not found.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C02EC99E-68DC-482A-84D1-D9488679CBFE} => key not found.
C:\WINDOWS\System32\Tasks\{08FF3A81-B17C-4623-892C-3942953975CB} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{08FF3A81-B17C-4623-892C-3942953975CB} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD392DF2-2969-4F4A-93D5-7BC98582633F} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D4E121BB-0D15-42DD-AB90-11785AA035F1} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8967AC7-85AF-4B37-9D0F-099849247D06} => key not found.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7 => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7 => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F29BEB09-FE8A-4585-B71E-FCF57450AC94} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F85BD57E-5100-4E6B-96CE-0001BBA1C763} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key not found.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001Core.job => not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA.job => not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1001UA1d0bf2e37c379c7.job => not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031Core.job => not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3984873366-1506181999-1170441192-1031UA.job => not found.
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Build-a-lot 4 - Power Source.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=648250 (No File) => Error: No automatic fix found for this entry.
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Delicious Emily's Childhood Memories.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=721350 (No File) => Error: No automatic fix found for this entry.
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Jewel Quest Mysteries 2.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=652850 (No File) => Error: No automatic fix found for this entry.
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\Snark Busters - Welcome to the Club.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=700350 (No File) => Error: No automatic fix found for this entry.
Shortcut: C:\Users\hana\Desktop\programy\ASUS\Entertainment\The Treasures of Montezuma 3.lnk -> hxxp://dts1.freeridegames.com/freeride_ ... ame=729250 (No File) => Error: No automatic fix found for this entry.
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> hxxp://linktarget.ashampoo.com/linktarg ... os=Metro4C:\ProgramData\Ashampoo\ico_ashampoo_marketplace.ico( (No File) => Error: No automatic fix found for this entry.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008k.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\00hq.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0190-dialers.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\01i.info => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\02pmnzy5eo29bfk4.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\05p.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\07ic5do2myz3vzpk.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\08nigbmwk43i01y6.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\093qpeuqpmz6ebfa.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0calories.net => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0cj.net => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0scan.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-britney-spears-nude.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-domains-registrations.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-se.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1001movie.com => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1001night.biz => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100gal.net => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100sexlinks.com => key not found.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{27E71F92-0227-4147-AD63-8025A32A00F5} => value not found.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0EFB0D9C-D893-4F80-84A7-B7266BD5597F} => value not found.
"C:\Program Files (x86)\AVG" => not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => key not found.
HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => key not found.
HKCR\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => key not found.
HKCR\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => key not found.
HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => key not found.
HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt1 => key not found.
HKCR\Wow6432Node\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt2 => key not found.
HKCR\Wow6432Node\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt3 => key not found.
HKCR\Wow6432Node\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => key not found.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKU\S-1-5-21-3984873366-1506181999-1170441192-1031\SOFTWARE\Google\Chrome\Extensions\chfdnecihphmhljaaejmgoiahnihplgn => key not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => key not found.
avgsvc => service not found.
epfw => service not found.
epfwwfp => service not found.
"C:\Windows\system32\DRIVERS\epfw.sys" => not found.
"C:\Windows\System32\DRIVERS\epfwwfp.sys" => not found.
"C:\Users\hana.kaja\AppData\Roaming\AVG" => not found.
"C:\$AVG" => not found.
"C:\Users\hana.kaja\AppData\Local\Avg" => not found.
"C:\Program Files (x86)\AVG" => not found.
"C:\Users\hana\AppData\Local\AvgSetupLog" => not found.
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET" => not found.
"C:\ProgramData\SetStretch.cmd" => not found.
"C:\ProgramData\SetStretch.exe" => not found.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 32768 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 5678 B
Edge => 0 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 814 B
NetworkService => 0 B
hana => 7680 B
hana.kaja => 50305 B
Administrator => 0 B

RecycleBin => 0 B
EmptyTemp: => 95 KB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 16:49:34 ====
Nahoru
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 28 čer 2016 17:07

a už tam mám i tu javu
Nahoru
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Kontrola HJT

Příspěvekod Orcus » 28 čer 2016 17:57

Co problémy? Lepší?
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 28 čer 2016 18:06

jj je to o moc lepší, takhle dobře nám to snad ještě nejelo :D a mám ještě udělat znovu ten váš HijackThis ?
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola HJT

Příspěvekod jaro3 » 28 čer 2016 19:41

Nedělala jste ten script dvakrát? Protože to píše , že to už nic nenašlo..
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 29 čer 2016 04:51

jejda, no to jsem to zase zvrtala, já nemohla poprvé najít ten log, tak jsem to udělala znovu a ted mě to po ránu trvá než mě něco naběhne, takže jsem tam asi zase něco potentila.
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola HJT

Příspěvekod jaro3 » 29 čer 2016 09:02

To asi ne. Zkus znovu restartovat.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
capula
nováček
Příspěvky: 42
Registrován: červen 16
Pohlaví: Žena
Stav:
Offline

Re: Kontrola HJT

Příspěvekod capula » 29 čer 2016 11:31

po tom restartu je to lepší
Nahoru
Zamčeno

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 70 hostů