Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-06-2017 01
Ran by micha (09-06-2017 21:06:31)
Running from C:\Users\micha\Desktop
Windows 10 Home Version 1607 (X64) (2017-01-03 05:49:02)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-435010139-1116817143-633309206-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-435010139-1116817143-633309206-503 - Limited - Disabled)
Guest (S-1-5-21-435010139-1116817143-633309206-501 - Limited - Disabled)
micha (S-1-5-21-435010139-1116817143-633309206-1001 - Administrator - Enabled) => C:\Users\micha

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
AirDroid 3.3.5.3 (HKLM-x32\...\AirDroid) (Version: 3.3.5.3 - Sand Studio)
Anki (HKLM-x32\...\Anki) (Version:  - )
Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{60a1bcb7-34f6-4ebb-887b-ba4ea0a58ace}) (Version: 18.12.2 - Intel Corporation)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.33.1 - Asmedia Technology)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
Borg (HKLM-x32\...\com.gautamji.borg) (Version: 0.11.3 - UNKNOWN)
Borg (x32 Version: 0.11.3 - UNKNOWN) Hidden
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)
Cold Turkey (HKLM-x32\...\{6498E673-B9C2-4544-A722-1E854B5B573E}_is1) (Version: 2.1.5 - Cold Turkey Software Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.0.0222 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
Dell Command | Power Manager (HKLM\...\{DDDAF4A7-8B7D-4088-AECC-6F50E594B4F5}) (Version: 2.1.0 - Dell Inc.)
Dell Customer Connect (HKLM-x32\...\{4FA72FF9-DD64-43A8-8704-6380A11F11D5}) (Version: 1.4.15.0 - Dell Inc.)
Dell Digital Delivery (HKLM-x32\...\{AB7F2792-2ED1-4C5C-9F28-680E5110BF72}) (Version: 3.1.1018.0 - Dell Products, LP)
Dell Dock Update (HKLM-x32\...\{6C4547B7-084A-4992-BFBF-9F6C6E2DC3EA}) (Version: 1.0.115.0 - Dell Inc.)
Dell Foundation Services (HKLM\...\{BDB50421-E961-42F3-B803-6DAC6F173834}) (Version: 3.4.16100.0 - Dell Inc.)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.2.6745.47 - Dell)
Dell Update - SupportAssist Update Plugin (HKLM\...\{EEA45885-F3E3-4E7D-8435-E9C21D36C141}) (Version: 3.0.0.2840 - Dell Inc.)
Dell Update (HKLM-x32\...\{2BE9948C-FD9C-40B0-AC04-EE2AAB4C19D4}) (Version: 1.8.1114.0 - Dell Inc.)
Deluge 1.3.15 (HKLM-x32\...\Deluge) (Version:  - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 27.4.22 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
DSC/AA Factory Installer (Version: 1.2.6745.47 - PC-Doctor, Inc.) Hidden
Evernote v. 6.5.4 (HKLM-x32\...\{D47E7D82-0D98-11E7-A6D6-005056951CAD}) (Version: 6.5.4.4720 - Evernote Corp.)
f.lux (HKU\S-1-5-21-435010139-1116817143-633309206-1001\...\Flux) (Version:  - )
Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 1.1.0.310 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1167 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4627 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.2.1088 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{C7CD6D54-26AF-4D93-B06F-D81ACE8624CB}) (Version: 6.0.40.0 - Intel Corporation)
Intel(R) WiDi Software Asset Manager (x32 Version: 1.1.347 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{6C56AA43-56EA-45D4-ADCC-69C3DF1AE5C9}) (Version: 18.1.1527.1551 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Maxx Audio Installer (x64) (Version: 2.6.8006.3 - Waves Audio Ltd.) Hidden
Microsoft OneDrive (HKU\S-1-5-21-435010139-1116817143-633309206-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 53.0.3 (x64 cs) (HKLM\...\Mozilla Firefox 53.0.3 (x64 cs)) (Version: 53.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)
MySQL Connector C++ 1.1.8 (HKLM\...\{4BFAEC5F-9E57-467F-A19F-2FF716DDC9E6}) (Version: 1.1.8 - Oracle and/or its affiliates)
MySQL Connector J (HKLM-x32\...\{C681B554-3461-4030-9D6B-5C3420009CD3}) (Version: 5.1.40 - Oracle Corporation)
MySQL Connector Net 6.9.9 (HKLM-x32\...\{E09F82E9-3EB3-4725-BDC8-3C77F83E262C}) (Version: 6.9.9 - Oracle)
MySQL Connector/C 6.1 (HKLM\...\{C59B92D2-9D0F-4F4E-9C38-021754CD2890}) (Version: 6.1.9 - Oracle Corporation)
MySQL Connector/ODBC 5.3 (HKLM\...\{D7CA0D95-8559-4B3F-A40E-7437E532BC9F}) (Version: 5.3.7 - Oracle Corporation)
MySQL Documents 5.7 (HKLM-x32\...\{0A0D2C15-D682-4036-BC8C-6E382E656CBB}) (Version: 5.7.17 - Oracle Corporation)
MySQL Examples and Samples 5.7 (HKLM-x32\...\{074B4410-68CF-4B12-A02D-888384F51615}) (Version: 5.7.17 - Oracle Corporation)
MySQL For Excel 1.3.6 (HKLM-x32\...\{DC8733F3-63A6-43F4-8C38-637071FB6D5F}) (Version: 1.3.6 - Oracle)
MySQL Installer - Community (HKLM-x32\...\{06E96932-2E3F-43E5-A7AD-E49C10037C51}) (Version: 1.4.18.0 - Oracle Corporation)
MySQL Notifier 1.1.7 (HKLM-x32\...\{724CDD73-430E-47DA-8F4E-7DF2000BA268}) (Version: 1.1.7 - Oracle)
MySQL Server 5.7 (HKLM\...\{CA2A0F6F-15DF-4BBC-AA8F-85EA1758B399}) (Version: 5.7.17 - Oracle Corporation)
MySQL Utilities (HKLM\...\{7FC39694-83D7-4CBD-88D6-15D1DD698075}) (Version: 1.6.4 - Oracle Corporation)
MySQL Workbench 6.3 CE (HKLM\...\{85664F8E-BFC5-46DE-AB5C-1EA6536AACBE}) (Version: 6.3.8 - Oracle Corporation)
Python 2.7.13 (HKLM-x32\...\{4A656C6C-D24A-473F-9747-3A8D00907A03}) (Version: 2.7.13150 - Python Software Foundation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.21277 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7829 - Realtek Semiconductor Corp.)
Realtek USB Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 10.1.506.2015 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Registrace produktu (Version: 3.0.127.0 - Název společnosti:) Hidden
Registrace produktu Dell (HKLM-x32\...\InstallShield_{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Název společnosti:)
RescueTime 2.12.5.1500 (HKLM-x32\...\{2505571C-03B3-4F9F-AC35-33F1CB4B5E9E}_is1) (Version:  - RescueTime.com)
SafeZone Stable 3.55.2393.607 (x32 Version: 3.55.2393.607 - Avast Software) Hidden
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-435010139-1116817143-633309206-1001\...\Spotify) (Version: 1.0.56.451.gb2f539fc - Spotify AB)
Thunderbolt(TM) Software (HKLM-x32\...\{B0E8A8CA-5A40-49C3-BE5E-9076664DB9AA}) (Version: 15.3.39.250 - Intel Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {051A94E8-E74C-47A0-84B3-47B7705A112F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-26] (Google Inc.)
Task: {0604E91C-7C6A-4589-A99C-B263455FCB01} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2015-12-17] (PC-Doctor, Inc.)
Task: {0CC9B9E0-1E9D-46F6-8FE8-DB088B6D2C28} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-06-16] (Intel Corporation)
Task: {1C1CD793-B281-4566-9116-A01BE9CEF16E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-10] (Adobe Systems Incorporated)
Task: {319619B7-57F2-45B2-B8A0-883EBA3CA341} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {35770B25-F6CA-4205-85C8-CCBC74672D81} - System32\Tasks\CTServiceInstaller => C:\Program Files (x86)\Cold Turkey\\CTServiceInstaller.exe [2016-04-07] (Felix Belzile)
Task: {489A77BE-7E7D-4AA2-9BA6-3CB6AA649FA1} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2015-06-05] (Intel Corporation)
Task: {5736FDA1-D24D-43C7-A3F4-D0A597E013F7} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {5A62BF38-8EF3-46A7-B47D-340F4211A660} - System32\Tasks\MySQLNotifierTask => C:\Program Files (x86)\MySQL\MySQL Notifier 1.1\MySQLNotifier.exe [2016-07-29] (Oracle Corporation)
Task: {60043B50-1609-40E1-91DB-92603EC1D8B4} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => tbtsvc.exe
Task: {6947F3FC-913C-4AD4-A604-8C39A34ACB8B} - System32\Tasks\Microsoft Office 15 Sync Maintenance for DESKTOP-73FH5QT-micha DESKTOP-73FH5QT => C:\Program Files\Microsoft Office\Office15\MsoSync.exe
Task: {7005E0BB-38C3-4D40-AEAA-078305B70ED1} - System32\Tasks\AutoPico Daily Restart => C:\Users\micha\Downloads\KMSpico [Argument = 10.1.8 FINAL + Portable (Office a Windows 10 Aktivator)\KMSpico 10.1.8 FINAL + Portable (Office and Windows 10 Activator) [TechTools.net]\Portable\AutoPico.exe /silent]
Task: {76A1D67C-88A0-4D22-9D32-F1A3E1E83BDF} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-12-12] (Dropbox, Inc.)
Task: {7AE30B52-69EC-4AD0-9242-AEDD935EBA93} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2015-12-17] (PC-Doctor, Inc.)
Task: {7D485061-5AE2-44D2-A0F6-0C653E04B90A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-12-12] (Dropbox, Inc.)
Task: {7F50D731-9840-4969-83B6-03338BEAA919} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {80553E48-AD55-43FC-AB40-640812CFF3CF} - System32\Tasks\MySQL\Installer\ManifestUpdate => C:\Program Files (x86)\MySQL\MySQL Installer for Windows\MySQLInstallerConsole.exe [2016-11-01] (Oracle Corporation)
Task: {8DB21679-A8B0-4D9E-A81F-8B92B5CE61B4} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => Thunderbolt.exe
Task: {9A5A107A-5396-4AE3-AF97-8B683AB41113} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService
Task: {A28B4207-9385-4D74-84CE-A667201EC64E} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => Thunderbolt.exe
Task: {A90391AE-9CFE-4786-B185-2FC51D4C5A39} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-17] (AVAST Software)
Task: {B329FF5C-233F-4FCE-B349-4F3FFCE1182C} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-06-16] (Intel Corporation)
Task: {B7392797-6125-49BF-885B-040C894B8FC8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-26] (Google Inc.)
Task: {B7A51CEC-B312-4813-A25E-2CDC909F28C8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)
Task: {CFC24335-1D56-4C0A-9080-2CB4FB90B94B} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {D8A998D1-007C-4F49-A3C5-20ED30749432} - System32\Tasks\SafeZone scheduled Autoupdate 1481564755 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {E980429B-1457-4D34-8611-FC97BC267E2C} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-05-25] (Realtek Semiconductor)
Task: {F9093985-3510-4729-8DEE-33D3FD75C489} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-10] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

WMI_ActiveScriptEventConsumer_DellCommandPowerManagerAlertEventConsumer: 

WMI_ActiveScriptEventConsumer_DellCommandPowerManagerPolicyChangeEventConsumer: 

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-05-10 14:57 - 2017-04-28 02:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-10 18:59 - 2017-01-10 18:59 - 00125808 _____ () C:\Program Files (x86)\Dell Dock Update\DUWrapperService.exe
2016-11-28 21:41 - 2016-11-28 21:41 - 39918080 _____ () C:\Program Files\MySQL\MySQL Server 5.7\bin\mysqld.exe
2017-01-06 19:13 - 2015-02-27 18:38 - 00721263 _____ () C:\WINDOWS\SysWoW64\WSCM64.dll
2017-01-03 15:36 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 22:30 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 22:30 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 22:30 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 22:30 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-10 14:57 - 2017-04-28 01:36 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-10 14:57 - 2017-04-28 01:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-06-08 13:03 - 2017-06-08 13:05 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-06-08 13:03 - 2017-06-08 13:05 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-06-08 13:03 - 2017-06-08 13:05 - 43318784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-06-08 13:03 - 2017-06-08 13:05 - 02427904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\skypert.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 00020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-05-08 21:42 - 2017-05-08 22:16 - 26322944 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 00441856 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 02139648 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 02901928 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 00046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2016-12-12 19:57 - 2016-12-12 19:58 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 00641024 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-05-08 21:42 - 2017-05-08 22:16 - 01062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2017-05-23 21:49 - 2017-05-23 21:49 - 03918848 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
2017-06-01 19:19 - 2014-03-02 21:35 - 00075776 _____ () C:\Program Files (x86)\Cold Turkey\PcapDotNet.Core.dll
2017-05-10 03:49 - 2017-05-10 03:49 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-10 03:49 - 2017-05-10 03:49 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-10 03:49 - 2017-05-10 03:49 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-10 03:49 - 2017-05-10 03:49 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-10 03:49 - 2017-05-10 03:49 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-05-10 03:48 - 2017-05-10 03:48 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-10 03:49 - 2017-05-10 03:49 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-06-09 19:57 - 2017-06-09 19:57 - 00098816 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32api.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00110080 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\pywintypes27.dll
2017-06-09 19:57 - 2017-06-09 19:57 - 00364544 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\pythoncom27.dll
2017-06-09 19:57 - 2017-06-09 19:57 - 00320512 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32com.shell.shell.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00914432 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_hashlib.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 01176576 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._core_.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00806400 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._gdi_.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00816128 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._windows_.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 01067008 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._controls_.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00733184 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._misc_.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00682496 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\pysqlite2._sqlite.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00088064 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_ctypes.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00686080 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\unicodedata.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00119808 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32file.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00108544 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32security.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00007168 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\hashobjs_ext.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00017920 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\thumbnails_ext.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00088064 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\usb_ext.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00012800 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\common.time34.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00018432 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32event.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00167936 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32gui.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00046080 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_socket.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 01303552 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_ssl.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00128512 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_elementtree.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00127488 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\pyexpat.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00038912 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32inet.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00036864 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_psutil_windows.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00524248 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\windows._lib_cacheinvalidation.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00011264 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32crypt.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00123392 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._wizard.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00077312 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._html2.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00027648 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_multiprocessing.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00020480 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\_yappi.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00035840 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32process.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00078848 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\wx._animate.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00024064 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32pipe.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00010240 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\select.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00025600 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32pdh.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00017408 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32profile.pyd
2017-06-09 19:57 - 2017-06-09 19:57 - 00022528 ____R () C:\Users\micha\AppData\Local\Temp\_MEI52442\win32ts.pyd
2017-03-23 14:14 - 2017-06-09 11:24 - 00120944 _____ () C:\Users\micha\AppData\Roaming\Spotify\SpotifyWinRT.dll
2017-05-31 21:46 - 2017-05-30 12:19 - 00775488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-05-31 21:46 - 2017-05-30 12:19 - 01787200 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2016-12-26 11:03 - 2017-05-12 04:25 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-12-26 11:03 - 2017-05-12 04:25 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-12-26 11:03 - 2017-05-12 04:25 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-12-26 11:03 - 2017-05-30 12:21 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00020824 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-12-26 11:03 - 2017-05-12 04:25 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-12-26 11:03 - 2017-05-12 04:25 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 01729360 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-05-31 21:46 - 2017-05-12 04:25 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-05-31 21:46 - 2017-05-12 04:25 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2017-05-31 21:46 - 2017-05-12 04:25 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-12-26 11:03 - 2017-05-12 04:27 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-12-26 11:03 - 2017-05-30 12:22 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00060736 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00038712 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-05-31 21:46 - 2017-05-12 04:25 - 00392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-05-31 21:46 - 2017-05-12 04:27 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-12-26 11:03 - 2017-05-30 12:21 - 00392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-12-26 11:03 - 2017-05-30 12:22 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-05-17 21:07 - 2017-05-30 12:22 - 00082264 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2016-12-26 11:03 - 2017-05-30 12:22 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00246608 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 03928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-12-26 11:03 - 2017-05-12 04:25 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 01826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 01972024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-02-28 18:50 - 2017-05-30 12:22 - 00054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-01-24 13:18 - 2017-05-30 12:22 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2016-12-26 11:03 - 2017-05-30 12:22 - 00069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-01-24 13:18 - 2017-05-30 12:22 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-01-24 13:18 - 2017-05-30 12:22 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-01-24 13:18 - 2017-05-30 12:22 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2016-12-26 11:03 - 2017-05-12 04:27 - 00349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00103232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2016-12-26 11:03 - 2017-05-30 12:22 - 00023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-05-31 21:46 - 2017-05-12 04:20 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-05-31 21:46 - 2017-05-30 12:21 - 00033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-05-31 21:46 - 2017-03-27 23:21 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2017-05-31 21:46 - 2017-05-30 12:21 - 00084288 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-12-26 11:03 - 2017-05-30 12:21 - 00030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-05-31 21:46 - 2017-05-12 04:30 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2017-05-31 21:46 - 2017-05-12 04:30 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-12-26 11:03 - 2017-05-30 12:22 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-04-08 03:20 - 2017-05-30 12:21 - 00023368 _____ () C:\Program Files (x86)\Dropbox\Client\wincrashpad.compiled._Crashpad.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-05-31 21:46 - 2017-05-30 12:21 - 00357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-03-20 16:57 - 2017-03-20 16:57 - 00321208 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2016-12-21 14:24 - 2016-12-21 14:24 - 00134008 _____ () C:\Program Files (x86)\Dell Customer Connect\ServiceTagPlusPlus.dll
2015-06-23 16:26 - 2015-06-23 16:26 - 00155888 _____ () C:\Program Files (x86)\Dell Digital Delivery\ServiceTagPlusPlus.dll
2015-09-04 20:34 - 2015-09-04 20:34 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-03-20 16:57 - 2017-03-20 16:57 - 00148664 _____ () C:\Program Files (x86)\Evernote\Evernote\zlibwapi.dll
2017-03-20 16:57 - 2017-03-20 16:57 - 26137272 _____ () C:\Program Files (x86)\Evernote\Evernote\libcef.dll
2017-03-20 16:57 - 2017-03-20 16:57 - 00212664 _____ () C:\Program Files (x86)\Evernote\Evernote\websockets.dll
2017-03-20 16:10 - 2017-03-20 16:10 - 00740352 _____ () C:\Program Files (x86)\Evernote\Evernote\libglesv2.dll
2017-03-20 16:10 - 2017-03-20 16:10 - 00130048 _____ () C:\Program Files (x86)\Evernote\Evernote\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 09:24 - 2017-06-01 19:11 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-435010139-1116817143-633309206-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\micha\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{3B2CF1C8-3168-4785-85C0-31BF0B1AD281}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [TCP Query User{CFEC0503-D2FC-4E88-A9BF-355BCE948424}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [UDP Query User{43752567-9E66-4EFD-9908-AEF847C1247E}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [TCP Query User{AAB49A4D-DA41-449A-91A7-F2E845917FD9}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [{F15F7043-BED1-490C-90E8-22983D55BD41}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{9899560C-0153-446C-9312-96D270337B3D}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [UDP Query User{ADA87D2F-DE6D-4569-B39C-CCA491FD6B55}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [TCP Query User{BDAA1472-9D2F-434A-8AAA-9834E4C59C3D}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [{A88383B9-A57D-4CD7-A50D-1F06D9122E62}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4BBF3CF1-8BD1-40D3-818B-8C1A1BC3E21E}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
FirewallRules: [{74AF9B58-2AFB-4549-8BEE-6FFCD125984F}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\SmartAgentTest.exe
FirewallRules: [{9A037FDC-E333-4843-864F-7FB46398ACB7}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiAppOld.exe
FirewallRules: [{A42F23D5-F988-43D5-958E-E65283D75B7A}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{01611BAC-6B74-4314-87EC-CF7C0B3B429E}] => (Allow) C:\Program Files (x86)\Anki\anki.exe
FirewallRules: [{FF98BD26-C708-45F2-9961-6CFBDF2ECFEA}] => (Allow) C:\Program Files (x86)\Anki\anki.exe
FirewallRules: [{DB98D551-C75A-4926-934E-801EDBAB1625}] => (Allow) C:\Program Files (x86)\Anki\anki.exe
FirewallRules: [{A60A2616-8C61-477D-8BE4-8DE827664FB1}] => (Allow) C:\Program Files (x86)\Anki\anki.exe
FirewallRules: [TCP Query User{F5D5CF19-9945-4865-A14B-5EA76A8ECEBF}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{821F3355-A80E-4AEC-8AF5-FFF43347B416}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{64A66DD3-3BAE-453A-B652-9D887581955D}] => (Allow) LPort=3306
FirewallRules: [TCP Query User{6369B236-F2F2-4415-9069-9212B7EB1ADF}C:\users\micha\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micha\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{676D139F-2536-4AD0-8FC5-B982623CBEC2}C:\users\micha\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micha\appdata\roaming\spotify\spotify.exe
FirewallRules: [{FA516EE2-EF05-46F4-898F-9AEFCB7F1E5E}] => (Allow) LPort=1688
FirewallRules: [TCP Query User{E1FB6F61-754C-40C8-B565-CF4DBE9EF3F2}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [UDP Query User{C2A10DC0-9CB2-42B1-B119-66B787788563}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [{10BC9113-39F8-408E-A587-C1586D25C63D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3946734D-5BB8-4918-A5C7-B6C521DD0960}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{53C36A44-FECD-4B16-BA53-933F7329B0DB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{E16269DE-BBA3-4B8E-A120-8A58C9345208}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{FD024DFB-5CB0-434C-BF3E-40E1A50FC4AE}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{3BD6013A-CBAA-40F7-BF45-9AAF0F15AE1C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5A1355FF-F460-44E6-839D-11CE7AC45752}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{712C9F30-FE65-4179-B1B6-8DFED167B004}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe

==================== Restore Points =========================

04-06-2017 20:28:10 Naplánovaný kontrolní bod
08-06-2017 15:17:43 Removed Microsoft Office Professional Plus 2013

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/09/2017 07:56:59 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR

DPTF Build Version:  8.1.10605.221
DPTF Build Date:  Oct 23 2015 12:24:15
Source File:  ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 144
Executing Function:  ConfigTdpPolicy::onBindDomain
Message:  cTDP control not found in set.
Participant:  TCPU [5]
Domain:  PKG [0]
Policy:  ConfigTDP Policy [1]

Error: (06/09/2017 07:56:59 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR

DPTF Build Version:  8.1.10605.221
DPTF Build Date:  Oct 23 2015 12:24:15
Source File:  ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 322
Executing Function:  ConfigTdpPolicy::synchronizeConfigTdpPlatformSettings
Message:  cTDP control not found in set.
Policy:  ConfigTDP Policy [1]

Error: (06/09/2017 07:21:59 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR

DPTF Build Version:  8.1.10605.221
DPTF Build Date:  Oct 23 2015 12:24:15
Source File:  ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 144
Executing Function:  ConfigTdpPolicy::onBindDomain
Message:  cTDP control not found in set.
Participant:  TCPU [5]
Domain:  PKG [0]
Policy:  ConfigTDP Policy [1]

Error: (06/09/2017 07:21:59 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR

DPTF Build Version:  8.1.10605.221
DPTF Build Date:  Oct 23 2015 12:24:15
Source File:  ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 322
Executing Function:  ConfigTdpPolicy::synchronizeConfigTdpPlatformSettings
Message:  cTDP control not found in set.
Policy:  ConfigTDP Policy [1]

Error: (06/09/2017 07:20:52 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR

DPTF Build Version:  8.1.10605.221
DPTF Build Date:  Oct 23 2015 12:24:15
Source File:  ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 144
Executing Function:  ConfigTdpPolicy::onBindDomain
Message:  cTDP control not found in set.
Participant:  TCPU [5]
Domain:  PKG [0]
Policy:  ConfigTDP Policy [1]

Error: (06/09/2017 07:20:52 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR

DPTF Build Version:  8.1.10605.221
DPTF Build Date:  Oct 23 2015 12:24:15
Source File:  ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 322
Executing Function:  ConfigTdpPolicy::synchronizeConfigTdpPlatformSettings
Message:  cTDP control not found in set.
Policy:  ConfigTDP Policy [1]

Error: (06/09/2017 07:17:53 PM) (Source: ESENT) (EventID: 454) (User: )
Description: taskhostw (5392) WebCacheLocal: Při pokusu o obnovení nebo zotavení databáze došlo k neočekávané chybě -1032.

Error: (06/09/2017 07:17:53 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhostw (5392) WebCacheLocal: Pokus o otevření souboru C:\Users\micha\AppData\Local\Microsoft\Windows\WebCache\V01.log pro čtení nebo zápis selhal. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru selže a dojde k chybě -1032 (0xfffffbf8).

Error: (06/09/2017 07:17:43 PM) (Source: ESENT) (EventID: 454) (User: )
Description: taskhostw (5392) WebCacheLocal: Při pokusu o obnovení nebo zotavení databáze došlo k neočekávané chybě -1032.

Error: (06/09/2017 07:17:43 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhostw (5392) WebCacheLocal: Pokus o otevření souboru C:\Users\micha\AppData\Local\Microsoft\Windows\WebCache\V01.log pro čtení nebo zápis selhal. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru selže a dojde k chybě -1032 (0xfffffbf8).


System errors:
=============
Error: (06/09/2017 07:57:06 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 a APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/09/2017 07:56:21 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 a APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/09/2017 07:52:33 PM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error: (06/09/2017 07:22:59 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 a APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/09/2017 07:21:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\WINDOWS\System32\IWMSSvc.dll

Error: (06/09/2017 07:21:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\WINDOWS\System32\IWMSSvc.dll

Error: (06/09/2017 07:21:19 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\WINDOWS\System32\IWMSSvc.dll

Error: (06/09/2017 07:21:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 a APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/09/2017 07:20:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Security Assist byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (06/09/2017 07:20:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Dynamic Application Loader Host Interface Service byla neočekávaně ukončena. Tento stav nastal již 1krát.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
Percentage of memory in use: 45%
Total physical RAM: 8027.39 MB
Available physical RAM: 4398.85 MB
Total Virtual: 9819.39 MB
Available Virtual: 5286.42 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:227.05 GB) (Free:93.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 9619D43B)

Partition: GPT.

==================== End of Addition.txt ============================